View Full Version : Win 7 desktop - AVG keeps flagging trojan
I would appreciate any help you can provide.
All Windows updates applied. AVG Free 2014 is installed, and keeps flagging a IDP.Trojan.xxxxxxx. Repairing "succeeds" but when I reboot AVG flags another one. I ran ERUNT, then DDS and aswMBR. DDS only generated an attach.txt file, no DDS.txt file at all. aswMBR ran for over 30 minutes, and didn't seem to be proceeding, although task manager shows it still consumes CPU cycles. I clicked Save Log anyway and got a report. It also generated an MBR.dat file, which I zipped and attach, as well.
Here they are:
aswMBR version 0.9.9.1771 Copyright(c) 2011 AVAST Software
Run date: 2014-01-30 22:04:14
-----------------------------
22:04:14.188 OS Version: Windows x64 6.1.7601 Service Pack 1
22:04:14.191 Number of processors: 4 586 0xF0B
22:04:14.197 ComputerName: GREG UserName: Greg
22:04:19.986 Initialize success
22:05:08.459 AVAST engine defs: 14013001
22:06:03.158 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0
22:06:03.176 Disk 0 Vendor: ST31000528AS CC34 Size: 953869MB BusType: 3
22:06:03.194 Disk 1 \Device\Harddisk1\DR1 -> \Device\Ide\IdeDeviceP0T1L0-2
22:06:03.232 Disk 1 Vendor: WDC_WD3200AAKS-75VYA0 12.01B02 Size: 305245MB BusType: 3
22:06:03.324 Disk 0 MBR read successfully
22:06:03.350 Disk 0 MBR scan
22:06:03.369 Disk 0 Windows 7 default MBR code
22:06:03.406 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 2048
22:06:03.458 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 953767 MB offset 206848
22:06:03.530 Disk 0 scanning C:\Windows\system32\drivers
22:06:24.247 Service scanning
22:06:58.237 Modules scanning
22:06:58.279 Disk 0 trace - called modules:
22:06:58.774 ntoskrnl.exe CLASSPNP.SYS disk.sys atapi.sys ntoskrnl.exe ataport.SYS pciide.sys
22:06:58.801 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8007ced060]
22:06:58.848 3 CLASSPNP.SYS[fffff8800145143f] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0xfffffa80076a9060]
22:07:07.080 AVAST engine scan C:\Windows
22:07:11.309 AVAST engine scan C:\Windows\system32
22:12:56.509 AVAST engine scan C:\Windows\system32\drivers
22:13:46.684 AVAST engine scan C:\Users\Greg
22:13:47.023 File: C:\Users\Greg\AppData\Local\aafeeshi.exe **INFECTED** Win32:Agent-ASSB [Trj]
22:14:04.843 File: C:\Users\Greg\AppData\Local\brmtolcu.exe **INFECTED** Win32:Dropper-gen [Drp]
22:14:06.527 File: C:\Users\Greg\AppData\Local\ejpkggut.exe **INFECTED** Win32:Dropper-gen [Drp]
22:14:23.919 File: C:\Users\Greg\AppData\Local\gwbdljrn.exe **INFECTED** Win32:Agent-ASSB [Trj]
22:14:24.034 File: C:\Users\Greg\AppData\Local\hqhwcrxs.exe **INFECTED** Win32:Agent-ASSB [Trj]
22:14:24.197 File: C:\Users\Greg\AppData\Local\ilrmfaja.exe **INFECTED** Win32:Agent-ASSB [Trj]
22:14:25.123 File: C:\Users\Greg\AppData\Local\lsstmonh.exe **INFECTED** Win32:Malware-gen
22:32:20.857 Disk 0 MBR has been saved successfully to "C:\Users\Greg\Desktop\MBR.dat"
22:32:20.933 The log file has been saved successfully to "C:\Users\Greg\Desktop\aswMBR.txt"
========================
:snwelcome:
Before we do any cleaning we need to see what else is going on, looks like aswMBR picked up some infected files
OTL by OldTimer
Download OTL (http://oldtimer.geekstogo.com/OTL.exe) to your desktop.
Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
When the window appears, underneath Output at the top change it to Minimal Output.
Click the "Scan All Users" checkbox.
Check the boxes beside LOP Check and Purity Check.
Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt.
Note:These logs can be located in the OTL. folder on you C:\ drive if they fail to open automatically.
Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply. You may need two posts to fit them both in.
Thanks for the quick reply.
Turns out that aswMBR was indeed still running - it finally finished after over 8 hours and found many more infections.
I will download and run OTL, as you requested, but may not be able to until later today, so I am enclosing the final report from aswMBR in the meantime:
==================
aswMBR version 0.9.9.1771 Copyright(c) 2011 AVAST Software
Run date: 2014-01-30 22:04:14
-----------------------------
22:04:14.188 OS Version: Windows x64 6.1.7601 Service Pack 1
22:04:14.191 Number of processors: 4 586 0xF0B
22:04:14.197 ComputerName: GREG UserName: Greg
22:04:19.986 Initialize success
22:05:08.459 AVAST engine defs: 14013001
22:06:03.158 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0
22:06:03.176 Disk 0 Vendor: ST31000528AS CC34 Size: 953869MB BusType: 3
22:06:03.194 Disk 1 \Device\Harddisk1\DR1 -> \Device\Ide\IdeDeviceP0T1L0-2
22:06:03.232 Disk 1 Vendor: WDC_WD3200AAKS-75VYA0 12.01B02 Size: 305245MB BusType: 3
22:06:03.324 Disk 0 MBR read successfully
22:06:03.350 Disk 0 MBR scan
22:06:03.369 Disk 0 Windows 7 default MBR code
22:06:03.406 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 2048
22:06:03.458 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 953767 MB offset 206848
22:06:03.530 Disk 0 scanning C:\Windows\system32\drivers
22:06:24.247 Service scanning
22:06:58.237 Modules scanning
22:06:58.279 Disk 0 trace - called modules:
22:06:58.774 ntoskrnl.exe CLASSPNP.SYS disk.sys atapi.sys ntoskrnl.exe ataport.SYS pciide.sys
22:06:58.801 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8007ced060]
22:06:58.848 3 CLASSPNP.SYS[fffff8800145143f] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0xfffffa80076a9060]
22:07:07.080 AVAST engine scan C:\Windows
22:07:11.309 AVAST engine scan C:\Windows\system32
22:12:56.509 AVAST engine scan C:\Windows\system32\drivers
22:13:46.684 AVAST engine scan C:\Users\Greg
22:13:47.023 File: C:\Users\Greg\AppData\Local\aafeeshi.exe **INFECTED** Win32:Agent-ASSB [Trj]
22:14:04.843 File: C:\Users\Greg\AppData\Local\brmtolcu.exe **INFECTED** Win32:Dropper-gen [Drp]
22:14:06.527 File: C:\Users\Greg\AppData\Local\ejpkggut.exe **INFECTED** Win32:Dropper-gen [Drp]
22:14:23.919 File: C:\Users\Greg\AppData\Local\gwbdljrn.exe **INFECTED** Win32:Agent-ASSB [Trj]
22:14:24.034 File: C:\Users\Greg\AppData\Local\hqhwcrxs.exe **INFECTED** Win32:Agent-ASSB [Trj]
22:14:24.197 File: C:\Users\Greg\AppData\Local\ilrmfaja.exe **INFECTED** Win32:Agent-ASSB [Trj]
22:14:25.123 File: C:\Users\Greg\AppData\Local\lsstmonh.exe **INFECTED** Win32:Malware-gen
22:32:20.857 Disk 0 MBR has been saved successfully to "C:\Users\Greg\Desktop\MBR.dat"
22:32:20.933 The log file has been saved successfully to "C:\Users\Greg\Desktop\aswMBR.txt"
23:50:52.480 File: C:\Users\Greg\AppData\Local\nsobckol.exe **INFECTED** Win32:Agent-ASSB [Trj]
23:50:52.579 File: C:\Users\Greg\AppData\Local\qinqagfw.exe **INFECTED** Win32:Zbot-SLI [Trj]
23:50:52.634 File: C:\Users\Greg\AppData\Local\qqpsfhrw.exe **INFECTED** Win32:Dropper-gen [Drp]
23:50:52.727 File: C:\Users\Greg\AppData\Local\rchdopoj.exe **INFECTED** Win32:Malware-gen
23:50:52.987 File: C:\Users\Greg\AppData\Local\sgegfcwq.exe **INFECTED** Win32:Agent-ASSB [Trj]
23:52:11.822 File: C:\Users\Greg\AppData\Local\Temp\UpdateFlashPlayer_02796ac4.exe **INFECTED** Win32:Dropper-gen [Drp]
23:52:11.946 File: C:\Users\Greg\AppData\Local\Temp\UpdateFlashPlayer_24cb4e3a.exe **INFECTED** Win32:Malware-gen
23:52:12.025 File: C:\Users\Greg\AppData\Local\Temp\UpdateFlashPlayer_25616b54.exe **INFECTED** Win32:Malware-gen
23:52:12.085 File: C:\Users\Greg\AppData\Local\Temp\UpdateFlashPlayer_3090b9da.exe **INFECTED** Win32:Malware-gen
23:52:12.227 File: C:\Users\Greg\AppData\Local\Temp\UpdateFlashPlayer_609cac8e.exe **INFECTED** Win32:Malware-gen
23:52:12.280 File: C:\Users\Greg\AppData\Local\Temp\UpdateFlashPlayer_64b5a752.exe **INFECTED** Win32:Malware-gen
23:52:12.343 File: C:\Users\Greg\AppData\Local\Temp\UpdateFlashPlayer_69749a9f.exe **INFECTED** Win32:Malware-gen
23:52:12.413 File: C:\Users\Greg\AppData\Local\Temp\UpdateFlashPlayer_74948894.exe **INFECTED** Win32:Dropper-gen [Drp]
23:52:12.570 File: C:\Users\Greg\AppData\Local\Temp\UpdateFlashPlayer_7c5a71db.exe **INFECTED** Win32:Malware-gen
23:52:12.638 File: C:\Users\Greg\AppData\Local\Temp\UpdateFlashPlayer_825822ea.exe **INFECTED** Win32:Malware-gen
23:52:12.709 File: C:\Users\Greg\AppData\Local\Temp\UpdateFlashPlayer_8cea7723.exe **INFECTED** Win32:Malware-gen
23:52:12.785 File: C:\Users\Greg\AppData\Local\Temp\UpdateFlashPlayer_9c35940e.exe **INFECTED** Win32:Malware-gen
23:52:12.850 File: C:\Users\Greg\AppData\Local\Temp\UpdateFlashPlayer_a83bec3c.exe **INFECTED** Win32:Dropper-gen [Drp]
23:52:12.942 File: C:\Users\Greg\AppData\Local\Temp\UpdateFlashPlayer_aa77a72a.exe **INFECTED** Win32:Malware-gen
23:52:13.046 File: C:\Users\Greg\AppData\Local\Temp\UpdateFlashPlayer_f1d10d2f.exe **INFECTED** Win32:Dropper-gen [Drp]
23:52:13.138 File: C:\Users\Greg\AppData\Local\Temp\UpdateFlashPlayer_f6d6b084.exe **INFECTED** Win32:Malware-gen
00:03:36.225 File: C:\Users\Greg\AppData\Roaming\Cuwopak\roupe.exe **INFECTED** Win32:Dropper-gen [Drp]
00:03:36.423 File: C:\Users\Greg\AppData\Roaming\Didynyd\daybw.exe **INFECTED** Win32:Dropper-gen [Drp]
00:04:38.339 File: C:\Users\Greg\AppData\Roaming\Evniwiax\esidmyl.exe **INFECTED** Win32:Malware-gen
00:04:39.448 File: C:\Users\Greg\AppData\Roaming\Hewoefv\durylu.exe **INFECTED** Win32:Malware-gen
00:04:39.530 File: C:\Users\Greg\AppData\Roaming\Hiahrey\yriduhi.exe **INFECTED** Win32:Malware-gen
00:04:39.920 File: C:\Users\Greg\AppData\Roaming\Ibkeanu\tyhouv.exe **INFECTED** Win32:Dropper-gen [Drp]
00:04:42.317 File: C:\Users\Greg\AppData\Roaming\Iviprui\boatixe.exe **INFECTED** Win32:Malware-gen
00:04:42.427 File: C:\Users\Greg\AppData\Roaming\Iwkeoh\cyebyra.exe **INFECTED** Win32:Malware-gen
00:04:42.943 File: C:\Users\Greg\AppData\Roaming\Kotopuur\arzyod.exe **INFECTED** Win32:Malware-gen
00:04:43.053 File: C:\Users\Greg\AppData\Roaming\Kowydeb\yqedi.exe **INFECTED** Win32:Malware-gen
00:08:47.154 File: C:\Users\Greg\AppData\Roaming\Myigwoc\evuleba.exe **INFECTED** Win32:Malware-gen
00:08:47.469 File: C:\Users\Greg\AppData\Roaming\Neqiqiw\cowaqy.exe **INFECTED** Win32:Malware-gen
00:08:48.296 File: C:\Users\Greg\AppData\Roaming\Orheuqi\ipolk.exe **INFECTED** Win32:Dropper-gen [Drp]
00:08:48.671 File: C:\Users\Greg\AppData\Roaming\Pegady\qaagil.exe **INFECTED** Win32:Dropper-gen [Drp]
00:08:48.810 File: C:\Users\Greg\AppData\Roaming\Punikec\dygesa.exe **INFECTED** Win32:Dropper-gen [Drp]
00:08:48.989 File: C:\Users\Greg\AppData\Roaming\Qeubagi\erukm.exe **INFECTED** Win32:Dropper-gen [Drp]
00:08:55.190 File: C:\Users\Greg\AppData\Roaming\Toreqia\vinueqd.exe **INFECTED** Win32:Dropper-gen [Drp]
00:08:55.734 File: C:\Users\Greg\AppData\Roaming\Ucimqev\ehezf.exe **INFECTED** Win32:Dropper-gen [Drp]
00:08:56.157 File: C:\Users\Greg\AppData\Roaming\Umgezout\zyxaki.exe **INFECTED** Win32:Malware-gen
00:08:56.255 File: C:\Users\Greg\AppData\Roaming\Umypimeg\qesylec.exe **INFECTED** Win32:Malware-gen
00:08:56.501 File: C:\Users\Greg\AppData\Roaming\Utegek\qibae.exe **INFECTED** Win32:Malware-gen
00:08:57.000 File: C:\Users\Greg\AppData\Roaming\Visoesto\amedzyi.exe **INFECTED** Win32:Dropper-gen [Drp]
00:08:57.584 File: C:\Users\Greg\AppData\Roaming\Winyop\xipaux.exe **INFECTED** Win32:Dropper-gen [Drp]
00:09:00.511 File: C:\Users\Greg\AppData\Roaming\Zyelpy\faahewc.exe **INFECTED** Win32:Dropper-gen [Drp]
02:56:38.022 AVAST engine scan C:\ProgramData
03:16:16.561 Scan finished successfully
06:59:18.259 Disk 0 MBR has been saved successfully to "C:\Users\Greg\Desktop\MBR.dat"
06:59:18.265 The log file has been saved successfully to "C:\Users\Greg\Desktop\aswMBR.txt"
=========================================
You may want to read this
http://www.microsoft.com/security/portal/threat/encyclopedia/Entry.aspx?Name=PWS%3AWin32%2FZbot.gen!AP
I would strongly urge you to use a known clean computer and change all your passwords for sites that you access regularly, especially sites that you may use for online banking and shopping sites that you use a credit card. You may also want to contact your bank and give them a heads up that your CC may have been compromised. You may want to close it out and have them issue you a new one
I would also advise you to stay off the internet as what I am seeing can download other garbage , so outside of posting here just do not go online until we give you the all clear
OTL Extras logfile created on: 1/31/2014 4:17:40 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Greg\Downloads
64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.16428)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
7.94 Gb Total Physical Memory | 5.87 Gb Available Physical Memory | 73.94% Memory free
8.94 Gb Paging File | 6.67 Gb Available in Paging File | 74.69% Paging File free
Paging file location(s): c:\pagefile.sys 1024 2048
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 931.41 Gb Total Space | 528.11 Gb Free Space | 56.70% Space Free | Partition Type: NTFS
Drive E: | 298.09 Gb Total Space | 152.62 Gb Free Space | 51.20% Space Free | Partition Type: NTFS
Computer Name: GREG | User Name: Greg | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[b]64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = ChromeHTML] -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = ChromeHTML] -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
[HKEY_USERS\S-1-5-21-544424465-2215569426-3739340312-1000\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found
========== Shell Spawning ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
https [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\system32\rundll32.exe" "C:\Windows\system32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
https [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.
========== Security Center Settings ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
========== Authorized Applications List ==========
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{12460E7B-DF5E-4488-8ACE-059D94EA33AF}" = rport=139 | protocol=6 | dir=out | app=system |
"{17D1016D-9DE8-4481-87A4-BC085E1950A1}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{2CC02ACE-3D80-49AA-8690-CD93B69BE399}" = rport=445 | protocol=6 | dir=out | app=system |
"{2F7A0BD2-733F-4C35-8F57-19801B8234BA}" = lport=137 | protocol=17 | dir=in | app=system |
"{35F531B6-48C2-4D4E-8059-7BBFEF35F135}" = lport=445 | protocol=6 | dir=in | app=system |
"{4FE43425-6307-43D1-B54A-BFE8D056CEE9}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{50EAE686-2031-413A-A1FA-54C7C3F398DF}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\outlook.exe |
"{5236E54B-CAD6-4E27-B998-5C36D3A93AA9}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{71541A04-700E-4564-86F9-F8E260901710}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{769E7A21-69AB-45DF-8A86-20D435F2DE3E}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{7B3FEDB5-9547-4D30-BBED-F2E8CDD4CFF6}" = rport=427 | protocol=17 | dir=in | svc=hpslpsvc | app=c:\windows\system32\svchost.exe |
"{7B787438-8A11-4A3D-A208-D5B274D97D57}" = lport=5353 | protocol=17 | dir=in | name=bonjour |
"{89B0FA61-9B08-4655-ABC5-6DD5E503366F}" = lport=138 | protocol=17 | dir=in | app=system |
"{8A511AE6-0ED1-4FB8-BFBE-54397C89A437}" = lport=54925 | protocol=17 | dir=in | name=brothernetwork scanner |
"{9244DAD4-0F5A-4DED-BACB-5C432D9B7999}" = lport=2869 | protocol=6 | dir=in | app=system |
"{A54571D0-A68E-4AA4-B254-A0FAE89A84A7}" = lport=139 | protocol=6 | dir=in | app=system |
"{A7279D4D-94E6-411A-B1C2-D70858D0E23F}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{B67458C0-5091-4B3D-9A3A-D7EAD39B436C}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{DA7B2D8B-F834-49F4-9326-ED493E576095}" = rport=137 | protocol=17 | dir=out | app=system |
"{ED2FA2B0-8B6D-4FA3-BB6B-4017E2E277CA}" = rport=138 | protocol=17 | dir=out | app=system |
"{FAE82C9C-918F-4418-89EA-6461FD9BE145}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0324AE0D-9878-4574-B6E7-441FFB4FCDA0}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{060040C2-4D49-4D31-953D-874F8A20315E}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2014\avgdiagex.exe |
"{0C13F210-DBE3-460D-85F7-D1AD249E8E6C}" = dir=in | app=c:\program files (x86)\hp\digital imaging\smart web printing\smartwebprintexe.exe |
"{17268CA4-848E-4EF8-B329-6BEAA077224E}" = dir=in | app=d:\setup\hpznui40.exe |
"{19060B29-7AB1-4F51-89C9-5F328EFD6D73}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifeenc2.exe |
"{1CD39018-1E27-4A2F-A7CC-7A729C2290FC}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{1E3039FC-F681-465F-9913-C73169421368}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\onenote.exe |
"{1F9E3FC5-1F15-4593-A4FC-13049E16F759}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2014\avgmfapx.exe |
"{29501A2D-7F3F-4457-918F-3F30CD662244}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{29C86E2E-48B6-49DE-BA5D-C7C20E116BD0}" = dir=in | app=c:\program files (x86)\windows live\mesh\moe.exe |
"{2B1850BC-587A-4A41-9A7A-C1AE295B59C1}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe |
"{2D19952C-D2B8-4EAE-B202-8EF79B6CD65C}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifetray.exe |
"{2D88A0FF-CCEC-4BA7-8BE7-8BCC2B544015}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe |
"{33C9126A-1F22-40AE-9C56-F7A7B4482D5B}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqkygrp.exe |
"{34265AF0-65E1-4AF8-BB2C-0B8799748CC8}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifeenc2.exe |
"{39D150B9-7FED-45FD-A9E7-99C0797C3A47}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2014\avgemca.exe |
"{4D37E6E4-2C83-42D1-888C-2654F14B9F60}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2014\avgemca.exe |
"{4FBC7D9C-0335-40BE-A588-720FE6B87149}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifecam.exe |
"{582B31E5-9E66-40F0-9AC5-83738E73036C}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe |
"{5B58B403-AF09-400E-9DD4-B1C4E6F9091B}" = protocol=17 | dir=in | app=c:\program files (x86)\skygolf\caddiesync express\caddiesyncexpress.exe |
"{5F3BC8AF-5196-4C5F-B4D7-3E11DAC69ABA}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifetray.exe |
"{64EDC95F-0BD0-4697-90D6-4FCF0AF25FA6}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifecam.exe |
"{65916E42-2D17-4BB2-9D7E-6D07341714B1}" = dir=in | app=c:\program files (x86)\hp\hp software update\hpwucli.exe |
"{65B8378A-EB4F-4520-8F1F-76458249BC44}" = protocol=17 | dir=in | app=c:\program files\crashplan\crashplanservice.exe |
"{6B1D0D35-532E-482C-A335-64ECE1E91F08}" = protocol=17 | dir=in | app=c:\program files (x86)\brother\brmfl08y\faxrx.exe |
"{6FEAE0A7-9E78-47D1-81C5-32FB2707F6C3}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqusgh.exe |
"{77697F5D-886F-42E6-9BA8-4713682E3A31}" = protocol=17 | dir=in | app=c:\users\greg\appdata\roaming\dropbox\bin\dropbox.exe |
"{7B274373-DD7D-4A10-8656-480D2B95FD04}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2014\avgmfapx.exe |
"{7B527B50-297F-480D-A8C3-C28FD946536F}" = protocol=6 | dir=in | app=c:\program files (x86)\brother\brmfl08y\faxrx.exe |
"{7B7FA4D2-2E9E-4504-84F2-FEFD92A6A681}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{7D469352-B372-4FEF-AAC0-8B1D359F6EDD}" = dir=in | app=c:\program files (x86)\windows live\sync\windowslivesync.exe |
"{7EB7C002-228F-48C7-9997-5AF7125DB3D9}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifeexp.exe |
"{83680BBA-2E06-4179-A2A5-BB93DB6E7AA1}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqgpc01.exe |
"{88DD2C93-3421-4AAF-A1D9-AB2450143CB3}" = protocol=6 | dir=in | app=c:\users\greg\appdata\roaming\dropbox\bin\dropbox.exe |
"{8BD120DA-5358-46B0-ABF7-17D90D77578E}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqste08.exe |
"{8CFD0C1F-236D-4A5F-934B-ABDBC92496AD}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{8D17EF8B-AADD-4FAD-AAC9-A8FB3DD83B6F}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe |
"{98B3BC4E-7B9F-4BE3-9B00-F19CEB792D68}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{A627E006-1000-4F0D-92FC-10A7C083E231}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{A84FD3C2-C3B2-4CD1-A4B3-09CB51890ADC}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe |
"{A8DC6896-50A6-4F9B-82CC-712C999828A8}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{ACB83053-8971-40F4-A3E3-2F4207541DDE}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpfccopy.exe |
"{CB878214-F8E6-4C6B-8BFC-D9DFA458A918}" = dir=in | app=c:\program files (x86)\itunes\itunes.exe |
"{CF7211B1-0BB6-4E45-BD2B-5D2BBEE9AA77}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2014\avgnsa.exe |
"{D10A91F8-F042-43C4-B79D-CF8E8A71DA60}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hposid01.exe |
"{D84F20C1-EAD8-42F8-9B61-E3AA511EB31B}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2014\avgnsa.exe |
"{DB329ACB-BBF0-4539-83BA-D9A6AF755593}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifeexp.exe |
"{E411DAAE-8CC7-44B9-B8BE-E03194BE2A49}" = protocol=6 | dir=in | app=c:\program files\crashplan\crashplanservice.exe |
"{E5184377-DB38-4485-8401-5D1B028B4EF9}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqusgm.exe |
"{EB1BEB7D-BE6D-469B-BF69-6082EF2063BD}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2014\avgdiagex.exe |
"{F06E58E4-5724-497A-89C9-E9BC7B22AA38}" = protocol=6 | dir=in | app=c:\program files (x86)\skygolf\caddiesync express\caddiesyncexpress.exe |
"{F1304953-3F93-4AEC-974E-0EEFB56C88D0}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpoews01.exe |
"{F3897EEF-BF3E-40ED-97CE-688E54B4DFBA}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqgplgtupl.exe |
"{F53E3103-1ED8-4598-92A0-C32F9F46023B}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office14\onenote.exe |
"{FA704E55-8CD9-4368-96CC-B739CAA44D83}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqtra08.exe |
"{FAE74BCE-6FC7-4FBD-B628-A7A57E560105}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{FB724589-C164-4156-B893-DB742DDAC218}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpiscnapp.exe |
"{FD6014AC-5788-4E79-881C-EAC0E5B774DE}" = dir=in | app=c:\program files (x86)\airport\apagent.exe |
"TCP Query User{3906B1E5-0BE2-44DD-94EB-801F9833ED6F}C:\windows\syswow64\ipcamera.exe" = protocol=6 | dir=in | app=c:\windows\syswow64\ipcamera.exe |
"TCP Query User{398AE393-3FCA-41C5-95B3-029F47D5FDC3}C:\program files (x86)\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files (x86)\internet explorer\iexplore.exe |
"TCP Query User{47E76A3D-F422-438E-AAD1-9548623B6E20}C:\users\greg\appdata\roaming\spotify\spotify.exe" = protocol=6 | dir=in | app=c:\users\greg\appdata\roaming\spotify\spotify.exe |
"TCP Query User{4CD48B80-58B0-4527-A678-E53D2DC3B575}C:\program files (x86)\skygolf\caddiesync express\caddiesyncexpress.exe" = protocol=6 | dir=in | app=c:\program files (x86)\skygolf\caddiesync express\caddiesyncexpress.exe |
"TCP Query User{9F4441E1-4B72-42BF-8570-A27285D5337E}C:\users\greg\appdata\roaming\spotify\spotify.exe" = protocol=6 | dir=in | app=c:\users\greg\appdata\roaming\spotify\spotify.exe |
"TCP Query User{D372E822-D2EB-4838-90F1-4D77A19BC77D}C:\program files (x86)\airport\aputil.exe" = protocol=6 | dir=in | app=c:\program files (x86)\airport\aputil.exe |
"UDP Query User{03ADD18C-AF50-4332-B45B-98B095F58618}C:\windows\syswow64\ipcamera.exe" = protocol=17 | dir=in | app=c:\windows\syswow64\ipcamera.exe |
"UDP Query User{326464CF-3AB2-4DE3-94FF-110EFB776FB3}C:\users\greg\appdata\roaming\spotify\spotify.exe" = protocol=17 | dir=in | app=c:\users\greg\appdata\roaming\spotify\spotify.exe |
"UDP Query User{897EB7F4-4EE1-457E-9E3F-66B9F6A328E2}C:\program files (x86)\skygolf\caddiesync express\caddiesyncexpress.exe" = protocol=17 | dir=in | app=c:\program files (x86)\skygolf\caddiesync express\caddiesyncexpress.exe |
"UDP Query User{8F92688E-46CB-4BFE-8734-D83D072D75D1}C:\users\greg\appdata\roaming\spotify\spotify.exe" = protocol=17 | dir=in | app=c:\users\greg\appdata\roaming\spotify\spotify.exe |
"UDP Query User{B6C53FC6-A4FE-4525-825D-11310736B123}C:\program files (x86)\airport\aputil.exe" = protocol=17 | dir=in | app=c:\program files (x86)\airport\aputil.exe |
"UDP Query User{BAF2CEB0-090F-4B9D-8872-BB7D1E316938}C:\program files (x86)\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files (x86)\internet explorer\iexplore.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{083808D6-6235-37A8-82C1-98D226EB681F}" = Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60830
"{0C826C5B-B131-423A-A229-C71B3CACCD6A}" = CDDRV_Installer
"{122B909F-9DCF-360E-91E7-0679E033FBE1}" = Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60830
"{1AAF3A3B-7B32-4DDF-8ABB-438DAEB46EEC}" = Windows Live Family Safety
"{1B8ABA62-74F0-47ED-B18C-A43128E591B8}" = Windows Live ID Sign-in Assistant
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
"{2EF5D87E-B7BD-458F-8428-E4D0B8B4E65C}" = Apple Mobile Device Support
"{34883B9C-CDFE-46F0-9C5B-935484C218C3}" = AVG 2014
"{3E061CBA-1DBB-45DD-8873-D100072ADCAD}" = Microsoft LifeCam
"{42D80340-9DEB-371A-9BF3-E20E98C98F0E}" = Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.20827
"{46A5FBE9-ADB3-4493-A1CC-B4CFFD24D26A}" = Windows Live Family Safety
"{48C0866E-57EB-444C-8371-8E4321066BC3}" = Network64
"{5783F2D7-9009-0409-0102-0060B0CE6BBA}" = AutoCAD LT 2011 - English
"{5783F2D7-9009-0409-1102-0060B0CE6BBA}" = AutoCAD LT 2011 Language Pack - English
"{5DE73CC7-A84F-30CE-AE15-16381816609D}" = Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.20827
"{5EB6F3CB-46F4-451F-A028-7F6D8D35D7D0}" = Windows Live Language Selector
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.7523
"{656DEEDE-F6AC-47CA-A568-A1B4E34B5760}" = Windows Live Remote Service Resources
"{68550918-63B5-4762-85CB-3C160AA4B213}" = HP Photosmart C4700 All-in-One Driver Software 14.0 Rel. 6
"{6BFAB6C1-6D46-46DB-A538-A269907C9F2F}" = Network64
"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
"{81E20D41-C277-4526-934D-F2380AF91B78}" = iCloud
"{847B0532-55E3-4AAF-8D7B-E3A1A7CD17E5}" = Windows Live Remote Client Resources
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8C775E70-A791-4DA8-BCC3-6AB7136F4484}" = Visual Studio 2012 x64 Redistributables
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2007
"{90120000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007
"{90140000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2010
"{90140000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2010
"{90140000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9C5A08BF-BB99-4998-81BD-F6CC32483B34}" = Microsoft Corporation
"{AA9AA7B4-08A9-4959-B930-B40C9F5C7B75}" = AVG 2014
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Driver 311.06
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Control Panel 311.06
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Graphics Driver 311.06
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NView" = NVIDIA nView 136.53
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{C578F822-36E4-4C25-824E-BD0C37008D70}" = YouSendIt Desktop App
"{D601CEAD-2E4F-4BBB-85CC-C29A4CE6A3C0}" = iTunes
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client
"{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service
"{E3047FA0-2D6B-4BD6-8CD4-599955F1CE9D}" = Microsoft Mouse and Keyboard Center
"{F3F18612-7B5D-4C05-86C9-AB50F6F71727}" = KhalInstallWrapper
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{FCE35118-DD2F-4DB8-A5B6-D857F95669E0}" = CrashPlan
"{FF21C3E6-97FD-474F-9518-8DCBE94C2854}" = 64 Bit HP CIO Components Installer
"AudioBox USB_is1" = PreSonus 1.0.9.0 Driver
"AutoCAD LT 2011 - English" = AutoCAD LT 2011 - English
"AVG" = AVG 2014
"CCleaner" = CCleaner
"HP Imaging Device Functions" = HP Imaging Device Functions 14.0
"HP LaserJet Professional P1100-P1560-P1600 Series" = HP LaserJet Professional P1100-P1560-P1600 Series
"HP Smart Web Printing" = HP Smart Web Printing 4.60
"HP Solution Center & Imaging Support Tools" = HP Solution Center 14.0
"HPExtendedCapabilities" = HP Customer Participation Program 14.0
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft Mouse and Keyboard Center" = Microsoft Mouse and Keyboard Center
"USB_AUDIO_DEusb-audio.depresonusAudioBoxUSB" = AudioBox USB driver
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{01BD4FC9-2F86-4706-A62E-774BB7E9D308}" = AVG PC TuneUp 2014
"{06A1D88C-E102-4527-AF70-29FFD7AF215A}" = Scan
"{0A80329D-1B59-4F10-8D1D-924C59B2840B}" = ShufflePlusVLOI
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0E448256-D515-4C3E-A5BE-0A7B76CED5D4}" = hppP1100P1560P1600SeriesLaserJetService
"{0F1B2A7D-3B05-4842-AF02-9BB9910D9378}" = HP Instant Printing Utility 3.5
"{1458BB78-1DC5-4BC0-B9A3-2B644F5A8105}" = DeviceDiscovery
"{150B6201-E9E6-4DFB-960E-CCBD53FBDDED}" = HPProductAssistant
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{1CAC7A41-583B-4483-9FA5-3E5465AFF8C2}" = Microsoft Default Manager
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{20E970DF-A7B2-4345-9DEB-72213A29645E}" = Brother MFL-Pro Suite MFC-6490CW
"{237CD223-1B9D-47E8-A76C-E478B83CCEA2}" = File Uploader
"{26A24AE4-039D-4CA4-87B4-2F83217040FF}" = Java 7 Update 45
"{2902F983-B4C1-44BA-B85D-5C6D52E2C441}" = Windows Live Mesh ActiveX Control for Remote Connections
"{292F0F52-B62D-4E71-921B-89A682402201}" = Toolbox
"{2E3EBFFD-951C-48D1-8BB3-DA4E26080222}" = HP System maintenance for HP Designjet 111 series
"{2FB9EA69-51D4-4913-9AD5-762C034DE811}" = Status
"{3018B943-C76C-44B0-B078-790A28CEF67E}" = Microsoft UI Engine
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{3B0F52AC-EF5C-4831-B221-06C782E41280}" = Quicken 2008
"{3C21516E-0FDA-3794-B714-B6612BA58BDF}" = Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.20827
"{404245D0-E836-4737-9C12-D4D0034540F5}_is1" = Free Countdown Timer 3.0.0
"{46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}" = Adobe AIR
"{46F044A5-CE8B-4196-984E-5BD6525E361D}" = Apple Application Support
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}" = Google Earth Plug-in
"{4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}" = Windows Live PIMT Platform
"{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}" = Google Earth
"{50120000-1105-0000-0000-0000000FF1CE}" = Microsoft Office 2007 Primary Interop Assemblies
"{50816F92-1652-4A7C-B9BC-48F682742C4B}" = Messenger Companion
"{50AF8559-F490-381F-A6E7-06A07DE227DC}" = Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60830
"{537DB9D6-1AB1-4CE9-8DE7-312256B49A98}" = PS_AIO_06_C4700_SW_Min
"{565E29BB-5863-46FD-ABF3-8074FBB5BAFF}" = QBFC 4.0
"{597E70FF-7C46-4EED-8092-91B7C2E0529D}" = Google SketchUp 7
"{598B5BFB-3491-4C9B-9D20-F6477932FFCE}" = EasyBluePrint
"{5A3F6A80-7913-475E-8B96-477A952CFA43}" = SupportSoft Assisted Service
"{5DCF0E4B-F8EA-4229-A0BD-5CA6D4AFB749}" = SolutionCenter
"{61EDBE71-5D3E-4AB7-AD95-E53FEAF68C17}" = Bing Rewards Client Installer
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6A05FEDF-662E-46BF-8A25-010E3F1C9C69}" = Windows Live UX Platform Language Pack
"{6F340107-F9AA-47C6-B54C-C3A19F11553F}" = Hewlett-Packard ACLM.NET v1.1.0.0
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{7902E313-FF0F-4493-ACB1-A8147B78DCD0}" = HPSSupply
"{795F2EA4-9798-4BA5-B31A-C8F41A124FC8}" = QBFC1
"{7D095455-D971-4D4C-9EFD-9AF6A6584F3A}" = Bing Desktop
"{7EB211F2-7D8B-4A01-887B-276A227431CA}" = HP Web Registration
"{803259ED-7A67-4CB5-B6D7-281ED371091B}" = LogMeIn
"{80956555-A512-4190-9CAD-B000C36D6B6B}" = Windows Live Messenger
"{846B5DED-DC8C-4E1A-B5B4-9F5B39A0CACE}" = HPDiagnosticAlert
"{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}" = Windows Live Sync
"{853F464A-B2B8-404E-BA3E-B98FF6862C41}" = hppusgP1100P1560P1600Series
"{85467CBC-7A39-33C9-8940-D72D9269B84F}" = Microsoft Visual F# 2.0 Runtime
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8CD86D42-C4DD-4E40-9211-164DFFBCA4DB}" = AVG PC TuneUp 2014 (en-US)
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8EE94FD8-5F52-4463-A340-185D16328158}" = WebReg
"{8FB53850-246A-3507-8ADE-0060093FFEA6}" = Visual Studio Tools for the Office system 3.0 Runtime
"{8FF6F5CA-4E30-4E3B-B951-204CAAA2716A}" = SmartWebPrinting
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_ULTIMATER_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_ULTIMATER_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_ULTIMATER_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_ULTIMATER_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_ULTIMATER_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_ULTIMATER_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_PRJSTDR_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}_ULTIMATER_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}_VISSTDR_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_PRJSTDR_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-040C-0000-0000000FF1CE}_ULTIMATER_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-040C-0000-0000000FF1CE}_VISSTDR_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_PRJSTDR_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0C0A-0000-0000000FF1CE}_ULTIMATER_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0C0A-0000-0000000FF1CE}_VISSTDR_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002A-0000-1000-0000000FF1CE}_PRJSTDR_{664655D8-B9BB-455D-8A58-7EAF7B0B2862}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002A-0000-1000-0000000FF1CE}_ULTIMATER_{664655D8-B9BB-455D-8A58-7EAF7B0B2862}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002A-0000-1000-0000000FF1CE}_VISSTDR_{664655D8-B9BB-455D-8A58-7EAF7B0B2862}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002A-0409-1000-0000000FF1CE}_PRJSTDR_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002A-0409-1000-0000000FF1CE}_ULTIMATER_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002A-0409-1000-0000000FF1CE}_VISSTDR_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}_ULTIMATER_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0054-0409-0000-0000000FF1CE}" = Microsoft Office Visio MUI (English) 2007
"{90120000-0054-0409-0000-0000000FF1CE}_VISSTDR_{7DA87C7E-E8A7-473E-ADFF-1B6BECCCADA7}" = Microsoft Office Visio 2007 Service Pack 3 (SP3)
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_PRJSTDR_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-0409-0000-0000000FF1CE}_ULTIMATER_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-0409-0000-0000000FF1CE}_VISSTDR_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}_ULTIMATER_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00B4-0409-0000-0000000FF1CE}" = Microsoft Office Project MUI (English) 2007
"{90120000-00B4-0409-0000-0000000FF1CE}_PRJSTDR_{F3CD3F3F-726C-4414-A1FE-5CD0968313EA}" = Microsoft Office Project 2007 Service Pack 3 (SP3)
"{90120000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2007
"{90120000-00BA-0409-0000-0000000FF1CE}_ULTIMATER_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00D1-0409-0000-0000000FF1CE}" = Microsoft Office Access database engine 2007 (English)
"{90120000-0114-0409-0000-0000000FF1CE}" = Microsoft Office Groove Setup Metadata MUI (English) 2007
"{90120000-0114-0409-0000-0000000FF1CE}_ULTIMATER_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_PRJSTDR_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0115-0409-0000-0000000FF1CE}_ULTIMATER_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0115-0409-0000-0000000FF1CE}_VISSTDR_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0116-0409-1000-0000000FF1CE}_PRJSTDR_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0116-0409-1000-0000000FF1CE}_ULTIMATER_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0116-0409-1000-0000000FF1CE}_VISSTDR_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_ULTIMATER_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2010
"{90140000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2010
"{90140000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2010
"{90140000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2010
"{90140000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2010
"{90140000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2010
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2010
"{90140000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2010
"{90140000-003D-0000-0000-0000000FF1CE}" = Microsoft Office Single Image 2010
"{90140000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2010
"{90140000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2010
"{90140000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2010
"{90140000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2010
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{91120000-002E-0000-0000-0000000FF1CE}" = Microsoft Office Ultimate 2007
"{91120000-002E-0000-0000-0000000FF1CE}_ULTIMATER_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{91120000-003A-0000-0000-0000000FF1CE}" = Microsoft Office Project Standard 2007
"{91120000-003A-0000-0000-0000000FF1CE}_PRJSTDR_{8446EB22-A746-46DC-B1BD-E0DFA1F3CDDA}" = Microsoft Office Project 2007 Service Pack 3 (SP3)
"{91120000-0053-0000-0000-0000000FF1CE}" = Microsoft Office Visio Standard 2007
"{91120000-0053-0000-0000-0000000FF1CE}_VISSTDR_{CE144BF4-4950-4CDB-A5F7-CCE1888F49CB}" = Microsoft Office Visio 2007 Service Pack 3 (SP3)
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{95140000-007A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook Connector
"{95140000-007D-0409-0000-0000000FF1CE}" = Microsoft Outlook Social Connector Provider for Windows Live Messenger 32-bit
"{97486FBE-A3FC-4783-8D55-EA37E9D171CC}" = HP Update
"{97D5031E-CCC0-3AA1-ADE7-6E5E7C032DD5}" = Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.20827
"{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}" = Visual Studio 2012 x86 Redistributables
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.7523
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{9DEABCB6-B759-4D52-92F8-51B34A2B4D40}" = Autodesk Material Library 2011
"{A0C91188-C88F-4E86-93E6-CD7C9A266649}" = Windows Live Mesh
"{A436F67F-687E-4736-BD2B-537121A804CF}" = HP Product Detection
"{A498D9EB-927B-459B-85D6-DD6EF8C2C564}" = erLT
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AA68AAAE-41F0-40B5-8896-5947F5FD6889}" = AirPort
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{AC76BA86-1033-0000-BA7E-000000000004}" = Adobe Acrobat 9 Standard
"{AC76BA86-1033-0000-BA7E-000000000004}_955" = Adobe Acrobat 9.5.5 - CPSID_83708
"{AC76BA86-1033-0000-BA7E-000000000004}{AC76BA86-1033-0000-BA7E-000000000004}" = Adobe Acrobat 9 Standard
"{AC76BA86-7AD7-1033-7B44-AB0000000001}" = Adobe Reader XI (11.0.06)
"{AF36CE1D-FD2C-4BA0-93FA-1196785DD610}" = Adobe Flash Player 10 Plugin
"{B3BC9DB1-0B0A-48B0-B86B-EA77CAA7F800}" = Microsoft Corporation
"{B4E96960-5F6B-48B9-A5BD-6A5A9BB4F027}" = Avery Wizard 3.1
"{B5978DF3-8A04-4F22-AF67-8CCE52E04B13}" = C4700
"{B6214EA9-7BE8-4A91-B8B3-45F42F90188F}" = Readiris Pro 12
"{B67BAFBA-4C9F-48FA-9496-933E3B255044}" = QuickTime
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{BB3447F6-9553-4AA9-960E-0DB5310C5779}" = GPBaseService2
"{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}" = Destinations
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{C779648B-410E-4BBA-B75B-5815BCEFE71D}" = Safari
"{C82185E8-C27B-4EF4-2010-4444BC2C2B6D}" = Microsoft Streets & Trips 2010
"{CAE4213F-F797-439D-BD9E-79B71D115BE3}" = HPPhotoGadget
"{CB7AF84A-1B7F-4C6B-8A58-EB7CDE48C23A}" = LogMeIn
"{CD31E63D-47FD-491C-8117-CF201D0AFAB5}" = TrayApp
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D2FCC1AE-6311-47C5-8130-C6C66D77DD71}" = Nikon Message Center
"{D360FA88-17C8-4F14-B67F-13AAF9607B12}" = MarketResearch
"{D371F551-0DB9-4CEC-844B-4C90CE91EA0B}" = hppLaserJetService
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{DBCC73BA-C69A-4BF5-B4BF-F07501EE7039}" = AnswerWorks 5.0 English Runtime
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E0A160F1-127B-43AC-AF96-EBB6319B01C7}" = Google SketchUp Pro 8
"{E1B40232-F73B-4BF9-A819-E352CCC1EDEF}" = Citrix Online Launcher
"{E517094C-06B6-419F-8FFD-EF4F57972130}" = QuickTransfer
"{E5F343DE-F5ED-4582-BAE2-C8ED548DFA46}" = Google SketchUp Viewer
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F29B21BD-CAA6-445F-8EF7-A7E2B9D8B14E}" = Logitech SetPoint
"{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}" = Microsoft Office Live Add-in 1.5
"{F68B404C-0E04-337F-A132-796508EE337A}" = Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60830
"{FA0FF682-CC70-4C57-93CD-E276F3E7537E}" = BufferChm
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"ActiveTouchMeetingClient" = WebEx
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"Advanced SystemCare 7_is1" = Advanced SystemCare 7
"AVG PC TuneUp" = AVG PC TuneUp 2014
"CaddieSync Express" = CaddieSync Express 1.5.14
"CleanUp!" = CleanUp!
"Coupon Printer for Windows5.0.0.0" = Coupon Printer for Windows
"DYMO Label v.8" = DYMO Label v.8
"ERUNT_is1" = ERUNT 1.1j
"FileZilla Client" = FileZilla Client 3.3.2.1
"FlipAlbum Vista Suite Eval" = FlipAlbum Vista Suite Eval
"Free Desktop Timer_is1" = Free Desktop Timer 1.2
"Google Chrome" = Google Chrome
"HP Designjet 111 Printer Series" = HP Designjet 111 Printer Series
"HP Photo Creations" = HP Photo Creations
"IObit Surfing Protection_is1" = Surfing Protection
"IObitUninstall" = IObit Uninstaller
"IP Camera" = IP Camera
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.75.0.1300
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"Office14.SingleImage" = Microsoft Office Professional 2010
"PRJSTDR" = Microsoft Office Project Standard 2007
"SLABCOMM&10C4&EA60" = Silicon Laboratories CP210x USB to UART Bridge (Driver Removal)
"SyncBackSE_is1" = SyncBackSE
"Tudumo_is1" = Tudumo 1.1.1.56
"ULTIMATER" = Microsoft Office Ultimate 2007
"VISSTDR" = Microsoft Office Visio Standard 2007
"Visual Studio Tools for the Office system 3.0 Runtime" = Visual Studio Tools for the Office system 3.0 Runtime
"WinLiveSuite" = Windows Live Essentials
========== HKEY_USERS Uninstall List ==========
[HKEY_USERS\S-1-5-21-544424465-2215569426-3739340312-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox
"f031ef6ac137efc5" = Dell Driver Download Manager
"GoToMeeting" = GoToMeeting 5.4.0.1082
"Spotify" = Spotify
"SyncWare" = SyncWare
"workspacedesktop" = Workspace Desktop
========== Last 20 Event Log Errors ==========
[ Application Events ]
Error - 1/30/2014 12:36:30 PM | Computer Name = Greg | Source = Microsoft-Windows-CAPI2 | ID = 257
Description = The Cryptographic Services service failed to initialize the Catalog
Database. The ESENT error was: -550.
Error - 1/30/2014 2:34:58 PM | Computer Name = Greg | Source = Winlogon | ID = 4005
Description = The Windows logon process has unexpectedly terminated.
Error - 1/30/2014 6:37:12 PM | Computer Name = Greg | Source = Winlogon | ID = 4005
Description = The Windows logon process has unexpectedly terminated.
Error - 1/31/2014 5:23:41 AM | Computer Name = Greg | Source = Winlogon | ID = 4005
Description = The Windows logon process has unexpectedly terminated.
Error - 1/31/2014 7:16:16 AM | Computer Name = Greg | Source = Winlogon | ID = 4005
Description = The Windows logon process has unexpectedly terminated.
Error - 1/31/2014 10:51:55 AM | Computer Name = Greg | Source = Winlogon | ID = 4005
Description = The Windows logon process has unexpectedly terminated.
Error - 1/31/2014 1:53:22 PM | Computer Name = Greg | Source = Microsoft-Windows-CAPI2 | ID = 257
Description = The Cryptographic Services service failed to initialize the Catalog
Database. The ESENT error was: -550.
Error - 1/31/2014 2:06:44 PM | Computer Name = Greg | Source = Application Error | ID = 1000
Description = Faulting application name: Explorer.EXE, version: 6.1.7601.17567,
time stamp: 0x4d672ee4 Faulting module name: mshtml.dll, version: 11.0.9600.16476,
time stamp: 0x52948abb Exception code: 0xc00000fd Fault offset: 0x0000000000010ec7
Faulting
process id: 0x23a0 Faulting application start time: 0x01cf1eae51e84376 Faulting application
path: C:\Windows\Explorer.EXE Faulting module path: C:\Windows\System32\mshtml.dll
Report
Id: 70cbd653-8aa2-11e3-b145-001d092c3f00
Error - 1/31/2014 5:42:49 PM | Computer Name = Greg | Source = Application Error | ID = 1000
Description = Faulting application name: Explorer.EXE, version: 6.1.7601.17567,
time stamp: 0x4d672ee4 Faulting module name: Flash64_11_9_900_170.ocx, version: 11.9.900.170,
time stamp: 0x529b76a2 Exception code: 0xc0000005 Fault offset: 0x0000000000242059
Faulting
process id: 0x11a0 Faulting application start time: 0x01cf1ecd0eabddec Faulting application
path: C:\Windows\Explorer.EXE Faulting module path: C:\Windows\system32\Macromed\Flash\Flash64_11_9_900_170.ocx
Report
Id: a0f31e78-8ac0-11e3-bcc6-001d092c3f00
Error - 1/31/2014 5:57:06 PM | Computer Name = Greg | Source = Application Hang | ID = 1002
Description = The program IEXPLORE.EXE version 11.0.9600.16428 stopped interacting
with Windows and was closed. To see if more information about the problem is available,
check the problem history in the Action Center control panel. Process ID: 20f0 Start
Time: 01cf1ecefa808ec6 Termination Time: 288 Application Path: C:\Program Files (x86)\Internet
Explorer\IEXPLORE.EXE Report Id:
[ OSession Events ]
Error - 10/28/2009 4:33:01 PM | Computer Name = Greg-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6331.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 11
seconds with 0 seconds of active time. This session ended with a crash.
Error - 7/26/2010 3:56:33 PM | Computer Name = Greg-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6535.5005, Microsoft Office Version: 12.0.6425.1000. This session lasted 3
seconds with 0 seconds of active time. This session ended with a crash.
[ System Events ]
Error - 1/31/2014 1:54:25 PM | Computer Name = Greg | Source = Service Control Manager | ID = 7034
Description = The LiveUpdate service terminated unexpectedly. It has done this
1 time(s).
Error - 1/31/2014 5:37:01 PM | Computer Name = Greg | Source = EventLog | ID = 6008
Description = The previous system shutdown at 12:50:38 PM on ?1/?31/?2014 was unexpected.
Error - 1/31/2014 5:37:03 PM | Computer Name = Greg | Source = Microsoft-Windows-TaskScheduler | ID = 413
Description = Task Scheduler service failed to load tasks at service startup. Additional
Data: Error Value: 2147549183.
Error - 1/31/2014 5:37:03 PM | Computer Name = Greg | Source = Microsoft-Windows-TaskScheduler | ID = 413
Description = Task Scheduler service failed to load tasks at service startup. Additional
Data: Error Value: 2147549183.
Error - 1/31/2014 5:38:43 PM | Computer Name = Greg | Source = Service Control Manager | ID = 7034
Description = The LiveUpdate service terminated unexpectedly. It has done this
1 time(s).
Error - 1/31/2014 6:13:16 PM | Computer Name = Greg | Source = EventLog | ID = 6008
Description = The previous system shutdown at 4:02:50 PM on ?1/?31/?2014 was unexpected.
Error - 1/31/2014 6:13:42 PM | Computer Name = Greg | Source = Microsoft-Windows-TaskScheduler | ID = 413
Description = Task Scheduler service failed to load tasks at service startup. Additional
Data: Error Value: 2147549183.
Error - 1/31/2014 6:13:48 PM | Computer Name = Greg | Source = Microsoft-Windows-TaskScheduler | ID = 413
Description = Task Scheduler service failed to load tasks at service startup. Additional
Data: Error Value: 2147549183.
Error - 1/31/2014 6:16:28 PM | Computer Name = Greg | Source = Service Control Manager | ID = 7034
Description = The LiveUpdate service terminated unexpectedly. It has done this
1 time(s).
Error - 1/31/2014 6:19:21 PM | Computer Name = Greg | Source = Service Control Manager | ID = 7022
Description = The Windows Search service hung on starting.
< End of report >
OTL logfile created on: 1/31/2014 4:17:40 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Greg\Downloads
64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.16428)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
7.94 Gb Total Physical Memory | 5.87 Gb Available Physical Memory | 73.94% Memory free
8.94 Gb Paging File | 6.67 Gb Available in Paging File | 74.69% Paging File free
Paging file location(s): c:\pagefile.sys 1024 2048
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 931.41 Gb Total Space | 528.11 Gb Free Space | 56.70% Space Free | Partition Type: NTFS
Drive E: | 298.09 Gb Total Space | 152.62 Gb Free Space | 51.20% Space Free | Partition Type: NTFS
Computer Name: GREG | User Name: Greg | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Users\Greg\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Users\Greg\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe (IObit)
PRC - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe (IObit)
PRC - C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe (Google Inc.)
PRC - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc.)
PRC - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Apple Inc.)
PRC - C:\Program Files (x86)\IObit\Advanced SystemCare 7\AutoSweep.exe (IObit)
PRC - C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files (x86)\AVG\AVG2014\avgui.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files (x86)\FreeCountdownTimer\FreeCountdownTimer.exe (Comfort Software Group)
PRC - C:\Program Files (x86)\IObit\Advanced SystemCare 7\RealTimeProtector.exe ()
PRC - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Skype Technologies S.A.)
PRC - C:\Program Files (x86)\AVG\AVG2014\avgfws.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe (Apple Inc.)
PRC - C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe (Microsoft Corp.)
PRC - C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrobat_sl.exe (Adobe Systems Incorporated)
PRC - C:\Program Files (x86)\SkyGolf\CaddieSync Express\CaddieSyncExpress.exe (SkyHawke)
PRC - C:\Program Files\CrashPlan\CrashPlanTray.exe (Code 42 Software, Inc.)
PRC - C:\Program Files (x86)\Free Desktop Timer\DesktopTimer.exe ()
PRC - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\Workspace\offSyncService.exe (Starfield Technologies)
PRC - C:\Program Files (x86)\DynDNS Updater\DynUpSvc.exe (Dyn, Inc.)
PRC - C:\Program Files (x86)\DynDNS Updater\DynTray.exe (Dyn, Inc.)
PRC - C:\Program Files (x86)\DYMO\DYMO Label Software\DLSService.exe (Sanford, L.P.)
PRC - C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe (Hewlett-Packard Company)
PRC - C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe ()
PRC - C:\Windows\vVX3000.exe (Microsoft Corporation)
PRC - C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe (HP)
========== Modules (No Company Name) ==========
MOD - C:\Users\Greg\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll ()
MOD - C:\Program Files (x86)\IObit\Advanced SystemCare 7\sqlite3.dll ()
MOD - C:\Program Files (x86)\IObit\Advanced SystemCare 7\RealTimeProtector.exe ()
MOD - C:\Users\Greg\AppData\Roaming\Dropbox\bin\libcef.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\ef0a534be135cd8f0d99d938d8b1814a\System.Windows.Forms.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\29f3ae8d313e62b4daed1107ccd29f9f\System.Configuration.ni.dll ()
MOD - C:\Program Files (x86)\Common Files\Apple\Internet Services\zlib1.dll ()
MOD - C:\Program Files (x86)\Common Files\Apple\Internet Services\libxml2.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\f4e49f5f51d2fa5e6190464468dff4d3\Microsoft.VisualBasic.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\6ebbfafc5521934f7e1c154937a2788b\System.Web.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\d473c19e69818875b9c739cad8f386a5\System.Runtime.Remoting.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\c664f44617c6a89edcc171fa8596c89d\System.ServiceProcess.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\5aa44bce7933e4de09d935848f868a4b\System.Drawing.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\09db78d6068543df01862a023aca785a\System.Xml.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System\5d22a30e587e2cac106b81fb351e7c08\System.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\9a6c1b7af18b4d5a91dc7f8d6617522f\mscorlib.ni.dll ()
MOD - C:\Program Files (x86)\SkyGolf\CaddieSync Express\conduitscripting0.dll ()
MOD - C:\Program Files (x86)\SkyGolf\CaddieSync Express\qjson0.dll ()
MOD - C:\Program Files (x86)\SkyGolf\CaddieSync Express\qextserialport1.dll ()
MOD - C:\Program Files (x86)\Free Desktop Timer\DesktopTimer.exe ()
MOD - C:\Program Files (x86)\IObit\Advanced SystemCare 7\madexcept_.bpl ()
MOD - C:\Program Files (x86)\IObit\Advanced SystemCare 7\maddisAsm_.bpl ()
MOD - C:\Program Files (x86)\IObit\Advanced SystemCare 7\madbasic_.bpl ()
MOD - C:\Program Files (x86)\IObit\Advanced SystemCare 7\webres.dll ()
MOD - C:\Program Files (x86)\HP\HP UT LEDM\bin\HPTools.dll ()
MOD - C:\Program Files (x86)\HP\HP UT LEDM\bin\HPToolkit.dll ()
MOD - C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe ()
MOD - C:\Program Files (x86)\SkyGolf\CaddieSync Express\libgcc_s_dw2-1.dll ()
MOD - C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll ()
MOD - C:\Program Files (x86)\SkyGolf\CaddieSync Express\mingwm10.dll ()
========== Services (SafeList) ==========
SRV:[b]64bit: - (IEEtwCollectorService) -- C:\Windows\SysNative\IEEtwCollector.exe (Microsoft Corporation)
SRV:64bit: - (BcmBtRSupport) -- C:\Windows\SysNative\BtwRSupportService.exe (Broadcom Corporation.)
SRV:64bit: - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV:64bit: - (CrashPlanService) -- C:\Program Files\CrashPlan\CrashPlanService.exe (CrashPlan)
SRV:64bit: - (HPSIService) -- C:\Windows\SysNative\HPSIsvc.exe (HP)
SRV:64bit: - (FLEXnet Licensing Service 64) -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe (Acresso Software Inc.)
SRV:64bit: - (wlcrasvc) -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe (Microsoft Corporation)
SRV:64bit: - (MSCamSvc) -- C:\Program Files\Microsoft LifeCam\MSCamS64.exe (Microsoft Corporation)
SRV:64bit: - (LBTServ) -- C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe (Logitech, Inc.)
SRV:64bit: - (AppMgmt) -- C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SRV:64bit: - (CISVC) -- C:\Windows\SysNative\CISVC.EXE (Microsoft Corporation)
SRV:64bit: - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD)
SRV - (LMIMaint) -- C:\Program Files (x86)\LogMeIn\x64\ramaint.exe (LogMeIn, Inc.)
SRV - (LMIGuardianSvc) -- C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe (LogMeIn, Inc.)
SRV - (AdobeARMservice) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (TuneUp.UtilitiesSvc) -- C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe (AVG)
SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (AdvancedSystemCareService7) -- C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe (IObit)
SRV - (LiveUpdateSvc) -- C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe (IObit)
SRV - (AVGIDSAgent) -- C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe (AVG Technologies CZ, s.r.o.)
SRV - (Skype C2C Service) -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Skype Technologies S.A.)
SRV - (avgfws) -- C:\Program Files (x86)\AVG\AVG2014\avgfws.exe (AVG Technologies CZ, s.r.o.)
SRV - (avgwd) -- C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
SRV - (BingDesktopUpdate) -- C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe (Microsoft Corp.)
SRV - (LogMeIn) -- C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe (LogMeIn, Inc.)
SRV - (Stereo Service) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (File Backup) -- C:\Program Files (x86)\Workspace\offSyncService.exe (Starfield Technologies)
SRV - (SkypeUpdate) -- C:\Program Files (x86)\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (Dyn Updater) -- C:\Program Files (x86)\DynDNS Updater\DynUpSvc.exe (Dyn, Inc.)
SRV - (DymoPnpService) -- C:\Program Files (x86)\DYMO\DYMO Label Software\DymoPnpService.exe (Sanford, L.P.)
SRV - (HPSLPSVC) -- C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL (Hewlett-Packard Co.)
SRV - (FLEXnet Licensing Service) -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Acresso Software Inc.)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (HP LaserJet Service) -- C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe (HP)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
========== Driver Services (SafeList) ==========
DRV:64bit: - (LMIRfsClientNP) -- C:\Windows\SysNative\LMIRfsClientNP.dll (LogMeIn, Inc.)
DRV:64bit: - (Avgdiska) -- C:\Windows\SysNative\drivers\avgdiska.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (AVGIDSDriver) -- C:\Windows\SysNative\drivers\avgidsdrivera.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (Avgldx64) -- C:\Windows\SysNative\drivers\avgldx64.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (Avgloga) -- C:\Windows\SysNative\drivers\avgloga.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (AVGIDSHA) -- C:\Windows\SysNative\drivers\avgidsha.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (btwampfl) -- C:\Windows\SysNative\drivers\btwampfl.sys (Broadcom Corporation.)
DRV:64bit: - (bcbtums) -- C:\Windows\SysNative\drivers\bcbtums.sys (Broadcom Corporation.)
DRV:64bit: - (Avgmfx64) -- C:\Windows\SysNative\drivers\avgmfx64.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (Avgfwfd) -- C:\Windows\SysNative\drivers\avgfwd6a.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (Avgrkx64) -- C:\Windows\SysNative\drivers\avgrkx64.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (Avgtdia) -- C:\Windows\SysNative\drivers\avgtdia.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (Point64) -- C:\Windows\SysNative\drivers\point64.sys (Microsoft Corporation)
DRV:64bit: - (LMIRfsDriver) -- C:\Windows\SysNative\drivers\LMIRfsDriver.sys (LogMeIn, Inc.)
DRV:64bit: - (lmimirr) -- C:\Windows\SysNative\drivers\lmimirr.sys (LogMeIn, Inc.)
DRV:64bit: - (dc3d) -- C:\Windows\SysNative\drivers\dc3d.sys (Microsoft Corporation)
DRV:64bit: - (USBAAPL64) -- C:\Windows\SysNative\drivers\usbaapl64.sys (Apple, Inc.)
DRV:64bit: - (mvusbews) -- C:\Windows\SysNative\drivers\mvusbews.sys (Marvell Semiconductor, Inc.)
DRV:64bit: - (RdpVideoMiniport) -- C:\Windows\SysNative\drivers\rdpvideominiport.sys (Microsoft Corporation)
DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (GEARAspiWDM) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (Fs_Rec) -- C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (fssfltr) -- C:\Windows\SysNative\drivers\fssfltr.sys (Microsoft Corporation)
DRV:64bit: - (SkyhawkeUSBLan) -- C:\Windows\SysNative\drivers\btblan.sys (Belcarra Technologies)
DRV:64bit: - (PRESONUS_AUDIOBOX_USB) -- C:\Windows\SysNative\drivers\psabusbu.sys (Ploytec GmbH)
DRV:64bit: - (PRESONUS_AUDIOBOX_WDM) -- C:\Windows\SysNative\drivers\psabusba.sys (Ploytec GmbH)
DRV:64bit: - (PRESONUS_AUDIOBOX_MIDI) -- C:\Windows\SysNative\drivers\psabusbm.sys (Ploytec GmbH)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (StillCam) -- C:\Windows\SysNative\drivers\serscan.sys (Microsoft Corporation)
DRV:64bit: - (VX3000) -- C:\Windows\SysNative\drivers\VX3000.sys (Microsoft Corporation)
DRV:64bit: - (LMouFilt) -- C:\Windows\SysNative\drivers\LMouFilt.Sys (Logitech, Inc.)
DRV:64bit: - (LHidFilt) -- C:\Windows\SysNative\drivers\LHidFilt.Sys (Logitech, Inc.)
DRV:64bit: - (VST64_DPV) -- C:\Windows\SysNative\drivers\VSTDPV6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (winachsf) -- C:\Windows\SysNative\drivers\VSTCNXT6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (VST64HWBS2) -- C:\Windows\SysNative\drivers\VSTBS26.SYS (Conexant Systems, Inc.)
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (e1express) -- C:\Windows\SysNative\drivers\e1e6232e.sys (Intel Corporation)
DRV:64bit: - (atikmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (silabser) -- C:\Windows\SysNative\drivers\silabser.sys (Silicon Laboratories)
DRV:64bit: - (silabenm) -- C:\Windows\SysNative\drivers\silabenm.sys (Silicon Laboratories, Inc.)
DRV:64bit: - (preSonusUsb) -- C:\Windows\SysNative\drivers\preSonusUsb.sys (PreSonus Audio Electronics)
DRV:64bit: - (ControlTransferDriver) -- C:\Windows\SysNative\drivers\PreSonusUSB_xfer.sys (PreSonus Audio Electronics)
DRV - (TuneUpUtilitiesDrv) -- C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys (TuneUp Software)
DRV - (LMIInfo) -- C:\Program Files (x86)\LogMeIn\x64\rainfo.sys (LogMeIn, Inc.)
DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE:64bit: - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.yahoo.com/?type=198484&fr=spigot-yhp-ie
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 4A 5C 73 60 1A 57 CA 01 [binary data]
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - No CLSID value found
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\..\SearchScopes,DefaultScope = {A8273032-2A44-4B51-9260-1E36A9BBC3B4}
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\..\SearchScopes\{678C32DE-279F-4E67-AFB8-37B78B72F5A5}: "URL" = https://www.google.com/search?q={searchTerms}
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\..\SearchScopes\{7A2F9203-01E3-4ED0-B627-F7BD85BE63E6}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000031&src=kw&q={searchTerms}&locale=en_US&apn_ptnrs=TV&apn_dtid=OSJ000YYUS&apn_uid=8140A633-0BA9-4F77-8487-8BF9C208F80A&apn_sauid=880C589A-978F-4EB4-9DB0-700BF77083E6&
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\..\SearchScopes\{90CAD367-7355-4EA0-88C5-EEB0659C7EC5}: "URL" = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8&rlz=1I7GGIE_en
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\..\SearchScopes\{A8273032-2A44-4B51-9260-1E36A9BBC3B4}: "URL" = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=198484&p={searchTerms}
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
========== FireFox ==========
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@dymo.com/DymoLabelFramework: C:\Program Files (x86)\DYMO\DYMO Label Software\Framework\npDYMOLabelFramework.dll ( Sanford L.P.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.45.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Acrobat: C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@citrixonline.com/appdetectorplugin: C:\Users\Greg\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
FF - HKCU\Software\MozillaPlugins\@starfield.com/off: C:\Users\Greg\AppData\Roaming\Mozilla\Plugins\npoff.dll ( Starfield Technologies, LLC.)
FF - HKCU\Software\MozillaPlugins\@starfield.com/off64: C:\Users\Greg\AppData\Roaming\Mozilla\Plugins\npoff64.dll ( Starfield Technologies, LLC.)
FF - HKCU\Software\MozillaPlugins\@starfield.com/wbe: C:\Users\Greg\AppData\Roaming\Mozilla\Plugins\npwbe.dll (Starfield Technology, LLC)
FF - HKCU\Software\MozillaPlugins\@starfield.com/wbe64: C:\Users\Greg\AppData\Roaming\Mozilla\Plugins\npwbe64.dll (Starfield Technology, LLC)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010/09/29 11:56:01 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}: C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\ [2011/01/13 03:02:09 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\quickprint@hp.com: C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension [2011/01/26 14:27:28 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010/09/29 11:56:01 | 000,000,000 | ---D | M]
[2010/08/12 14:06:34 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Greg\AppData\Roaming\Mozilla\Extensions
[2010/03/16 18:23:10 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Greg\AppData\Roaming\Mozilla\Extensions\mozswing@mozswing.org
========== Chrome ==========
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},
CHR - homepage: http://search.yahoo.com/?type=198484&fr=spigot-yhp-ch
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.89\PepperFlash\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\pdf.dll
CHR - plugin: Skype Toolbars (Enabled) = C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\npSkypeChromePlugin.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: Online Storage plug-in (Enabled) = C:\Users\Greg\AppData\Roaming\Mozilla\plugins\npoff.dll
CHR - plugin: Workspace Webmail plug-in 1.0.20.42 (Enabled) = C:\Users\Greg\AppData\Roaming\Mozilla\plugins\npwbe.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
CHR - plugin: Microsoft Office Live Plug-in for Firefox (Enabled) = C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll
CHR - plugin: DYMO Label Framework (Enabled) = C:\Program Files (x86)\DYMO\DYMO Label Software\Framework\npDYMOLabelFramework.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Picasa (Enabled) = C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll
CHR - plugin: Java(TM) Platform SE 6 U31 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll
CHR - Extension: Angry Birds = C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj\1.5.0.7_0\
CHR - Extension: 1Password = C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\aomjjhallfgjeglblehebfpbcfeobpgk\4.0.1.99_0\
CHR - Extension: ShopAtHome.com extension = C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlmebkoiahbppacaicbgncnjhbpdfkcc\7.1.0.16_0\
CHR - Extension: Ebay Shopping Assistant by Spigot = C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbcennhacfaagdopikcegfcobcadeocj\1.1_0\
CHR - Extension: Domain Error Assistant = C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj\1.3_0\
CHR - Extension: Advanced SystemCare Surfing Protection = C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfengeggddojhakldhlpjdlddgkkjkdd\1.0.0_1\
CHR - Extension: Google Wallet = C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\
CHR - Extension: Amazon Shopping Assistant by Spigot = C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfndaklgolladniicklehhancnlgocpp\1.0_0\
CHR - Extension: Google Reader = C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjjhlfkghdhmijklfnahfkpgmhcmfgcm\4.4_0\
CHR - Extension: RSS Feed Reader = C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnjaodmkngahhkoihejjehlcdlnohgmp\5.2.2_0\
O1 HOSTS File: ([2009/06/10 15:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (ExplorerWnd Helper) - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit)
O2:64bit: - BHO: (no name) - {34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5} - No CLSID value found.
O2:64bit: - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Advanced SystemCare Browser Protection) - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit)
O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3 - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [Bluetooth Connection Assistant] LBTWIZ.EXE -silent File not found
O4:64bit: - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\Windows\KHALMNPR.Exe (Logitech, Inc.)
O4:64bit: - HKLM..\Run: [LogMeIn GUI] C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe (LogMeIn, Inc.)
O4:64bit: - HKLM..\Run: [VX3000] C:\Windows\vVX3000.exe (Microsoft Corporation)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [AVG_UI] C:\Program Files (x86)\AVG\AVG2014\avgui.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [CaddieSyncConduit] C:\Program Files (x86)\SkyGolf\CaddieSync Express\CaddieSyncExpress.exe (SkyHawke)
O4 - HKLM..\Run: [ControlCenter3] C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [DLSService] C:\Program Files (x86)\DYMO\DYMO Label Software\DLSService.exe (Sanford, L.P.)
O4 - HKLM..\Run: [HPUsageTrackingLEDM] C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe (Hewlett-Packard Company)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-544424465-2215569426-3739340312-1000..\Run: [Advanced SystemCare 7] C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe (IObit)
O4 - HKU\S-1-5-21-544424465-2215569426-3739340312-1000..\Run: [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Apple Inc.)
O4 - HKU\S-1-5-21-544424465-2215569426-3739340312-1000..\Run: [FreeCT] C:\Program Files (x86)\FreeCountdownTimer\FreeCountdownTimer.exe (Comfort Software Group)
O4 - HKU\S-1-5-21-544424465-2215569426-3739340312-1000..\Run: [FreeDesktopTimer] C:\Program Files (x86)\Free Desktop Timer\DesktopTimer.exe ()
O4 - HKU\S-1-5-21-544424465-2215569426-3739340312-1000..\Run: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc.)
O4 - HKU\S-1-5-21-544424465-2215569426-3739340312-1003..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-21-544424465-2215569426-3739340312-1003..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - Startup: C:\Users\Greg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Greg\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O8:64bit: - Extra context menu item: Append Link Target to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Append to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Convert Link Target to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Convert to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Append Link Target to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Append to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert Link Target to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O9:64bit: - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\smartprintsetup.exe (Hewlett-Packard)
O9 - Extra 'Tools' menuitem : SmartPrint - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\smartprintsetup.exe (Hewlett-Packard)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000010 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000010 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} http://office.microsoft.com/_layouts/ClientBin/ieawsdc32.cab (Microsoft Office Template and Media Control)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {33415AC7-AFFA-4D55-B41C-C64C0D07DFCA} http://h50203.www5.hp.com/HPISWeb/Customer/cabs/HPISWebManager.CAB (Hewlett-Packard Printer Diagnostics)
O16 - DPF: {627C5D14-CB66-493E-B0F3-589C7E2FA833} http://s118403992.hwddns.com/template/WebClient.cab (NxWebRemoteHH)
O16 - DPF: {BC0AE9E6-E549-4554-A222-EA083A894683} http://a03-b03.mypicturetown.com/P2PwebCmdController/x/Upld_47.CAB (QuickUpload)
O16 - DPF: {C1FDEE68-98D5-4F42-A4DD-D0BECF5077EB} http://tools.ebayimg.com/eps/wl/activex/eBay_Enhanced_Picture_Control_v1-0-29-0.cab (EPUImageControl Class)
O16 - DPF: {C7DEDA04-2FFF-4B81-AE66-0A0E0EF4AD2F} http://www.ritzpix.com/net/Uploader/LPUploader57.cab (Image Uploader Control)
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} https://corecon.webex.com/client/T27L/webex/ieatgpc1.cab (GpcContainer Class)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Value error.)
O16 - DPF: {FE92D9C3-4A69-4EC7-8651-1DC8531D0075} http://68.15.12.110:8012/user/TSBnwCam.CAB (TSBnwCam Control)
O16 - DPF: Garmin Communicator Plug-In https://static.garmincdn.com/gcp/ie/4.0.4.0/GarminAxControl_32.CAB (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{ECF2B04B-5FBD-4691-A868-5A94A86C6697}: NameServer = 8.8.8.8,8.8.4.4
O18:64bit: - Protocol\Handler\grooveLocalGWS - No CLSID value found
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\ms-itss - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\LBTWlgn: DllName - (c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll) - c:\Program Files\Common Files\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O27:64bit: - HKLM IFEO\ehshell.exe: Debugger - C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe (LogMeIn, Inc.)
O27 - HKLM IFEO\ehshell.exe: Debugger - C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe (LogMeIn, Inc.)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011/03/14 11:57:12 | 000,000,000 | ---D | M] - C:\Autodesk -- [ NTFS ]
O32 - AutoRun File - [2006/09/18 15:43:36 | 000,000,024 | ---- | M] () - E:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{21a4da8d-faa4-11e2-91ce-001d092c3f00}\Shell - "" = AutoRun
O33 - MountPoints2\{21a4da8d-faa4-11e2-91ce-001d092c3f00}\Shell\AutoRun\command - "" = F:\SISetup.exe
O33 - MountPoints2\{564617f9-03d4-11df-820d-001d092c3f00}\Shell - "" = AutoRun
O33 - MountPoints2\{564617f9-03d4-11df-820d-001d092c3f00}\Shell\AutoRun\command - "" = K:\LaunchU3.exe -a
O33 - MountPoints2\{780d6f85-9ac1-11df-ba36-001d092c3f00}\Shell - "" = AutoRun
O33 - MountPoints2\{780d6f85-9ac1-11df-ba36-001d092c3f00}\Shell\AutoRun\command - "" = K:\LaunchU3.exe -a
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
========== Files/Folders - Created Within 30 Days ==========
[2014/01/30 20:25:55 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT
[2014/01/30 20:25:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ERUNT
[2014/01/30 20:25:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ERUNT
[2014/01/30 15:11:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ydyqkyt
[2014/01/30 13:08:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uvwoez
[2014/01/30 12:45:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zefuaqs
[2014/01/30 11:14:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kodyibc
[2014/01/30 10:54:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yhxyfou
[2014/01/29 16:00:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kotopuur
[2014/01/29 14:11:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kuyfdof
[2014/01/29 07:19:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hewoefv
[2014/01/29 05:08:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Toreqia
[2014/01/29 04:42:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cuwopak
[2014/01/29 03:11:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pegady
[2014/01/29 01:13:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Didynyd
[2014/01/29 00:48:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kyyzzy
[2014/01/28 23:16:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ucimqev
[2014/01/28 21:19:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Orheuqi
[2014/01/28 20:40:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Punikec
[2014/01/28 19:09:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qeubagi
[2014/01/28 17:13:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zyelpy
[2014/01/28 16:46:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Bepypek
[2014/01/28 11:20:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Alxonaip
[2014/01/28 09:07:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Edebasep
[2014/01/28 08:41:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xibanyyr
[2014/01/28 07:22:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ogolfazy
[2014/01/28 07:05:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yfehatt
[2014/01/27 19:16:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fiebniib
[2014/01/27 17:19:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Winyop
[2014/01/27 16:40:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ibkeanu
[2014/01/27 15:09:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qaseivu
[2014/01/27 14:07:57 | 000,040,248 | ---- | C] (AVG) -- C:\Windows\SysNative\TURegOpt.exe
[2014/01/27 14:07:55 | 000,029,496 | ---- | C] (AVG) -- C:\Windows\SysNative\authuitu.dll
[2014/01/27 14:07:54 | 000,025,400 | ---- | C] (AVG) -- C:\Windows\SysWow64\authuitu.dll
[2014/01/27 14:07:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2014
[2014/01/27 14:06:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\AVG
[2014/01/27 13:56:09 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG
[2014/01/27 13:55:57 | 000,000,000 | -HSD | C] -- C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
[2014/01/27 13:37:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tivyma
[2014/01/27 13:17:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Visoesto
[2014/01/27 12:38:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ywpoqiep
[2014/01/27 11:20:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Huuxkui
[2014/01/27 09:07:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Dimaotel
[2014/01/27 09:06:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Bevoape
[2014/01/27 07:38:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Umypimeg
[2014/01/27 03:08:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Akymemud
[2014/01/27 01:10:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ogdoem
[2014/01/27 00:44:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Waarxuy
[2014/01/26 23:13:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nomoveik
[2014/01/26 21:16:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Onnubiny
[2014/01/26 20:50:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ogleyku
[2014/01/26 19:19:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fyveili
[2014/01/26 17:09:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ypowwez
[2014/01/26 16:43:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Erqoalu
[2014/01/26 15:12:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Egilhuy
[2014/01/26 13:15:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qoacziwi
[2014/01/26 12:49:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Waodir
[2014/01/26 11:17:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Onpaevyb
[2014/01/26 09:09:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Lyowoww
[2014/01/26 08:43:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vegyelf
[2014/01/26 07:12:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fanylyuz
[2014/01/26 05:15:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hyfoyp
[2014/01/26 04:49:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Veodbo
[2014/01/26 03:18:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Myigwoc
[2014/01/26 01:08:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kowydeb
[2014/01/26 00:42:08 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Neqiqiw
[2014/01/25 23:11:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iviprui
[2014/01/25 21:13:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Utegek
[2014/01/25 20:47:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hiahrey
[2014/01/25 19:16:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Evniwiax
[2014/01/25 17:19:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Umgezout
[2014/01/25 16:40:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iwkeoh
[2014/01/25 15:09:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qyidyr
[2014/01/25 11:15:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Enciylm
[2014/01/25 09:18:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Opawkol
[2014/01/25 08:39:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xaaqibg
[2014/01/25 07:08:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Daumin
[2014/01/25 05:10:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ucivitxu
[2014/01/25 04:44:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yzbiero
[2014/01/25 03:13:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Efwivoi
[2014/01/25 01:16:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ywidwa
[2014/01/25 00:50:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yhnagyu
[2014/01/24 23:19:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Owniym
[2014/01/24 21:09:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Liynuxur
[2014/01/24 20:43:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Aqidce
[2014/01/24 17:14:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Rieqiz
[2014/01/24 16:48:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yhmauzna
[2014/01/24 15:17:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Askenap
[2014/01/24 13:24:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zuzyypix
[2014/01/24 12:41:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nimaoguz
[2014/01/24 11:10:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tyqifuh
[2014/01/24 09:12:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kyruqui
[2014/01/24 08:46:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ifxuyn
[2014/01/24 07:42:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Imdeyfa
[2014/01/23 16:45:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Advyze
[2014/01/23 15:13:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Evceafux
[2014/01/23 10:03:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ucgaadxy
[2014/01/23 10:03:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yqinbii
[2014/01/23 10:02:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Azikfu
[2014/01/23 10:02:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Difagiil
[2014/01/23 10:01:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fixuenc
[2014/01/23 10:00:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Agtuydru
[2014/01/23 10:00:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ebbiuc
[2014/01/23 09:59:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cyuvif
[2014/01/23 09:58:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xoegqe
[2014/01/23 09:58:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Lefequdi
[2014/01/23 09:57:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sureet
[2014/01/23 09:56:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zodadiec
[2014/01/23 09:55:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cuvoyroc
[2014/01/23 09:55:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Saozyk
[2014/01/23 09:54:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Agraha
[2014/01/23 09:54:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ymroax
[2014/01/23 09:53:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Giertok
[2014/01/23 09:52:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Asnagovo
[2014/01/23 09:51:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uctiapit
[2014/01/23 09:51:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Caynowul
[2014/01/23 09:50:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ytwekoav
[2014/01/23 09:50:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fulyasuq
[2014/01/23 09:49:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xaimfii
[2014/01/23 09:48:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cubuisku
[2014/01/23 09:47:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uroxurdo
[2014/01/23 09:47:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Usqyaq
[2014/01/23 09:46:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xuixeci
[2014/01/23 09:46:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Naygodx
[2014/01/23 09:45:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ovdeda
[2014/01/23 09:44:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Moxiby
[2014/01/23 09:44:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Saokdyu
[2014/01/23 09:43:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kyiwli
[2014/01/23 09:42:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Elorer
[2014/01/23 09:42:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ipobgoeh
[2014/01/23 09:41:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hapeeren
[2014/01/23 09:40:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Lyhoexgi
[2014/01/23 09:40:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iltuis
[2014/01/23 09:39:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Liafite
[2014/01/23 09:38:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xuaziwi
[2014/01/23 09:38:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Insomuo
[2014/01/23 09:37:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Toumuwa
[2014/01/23 09:36:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Daahfe
[2014/01/23 09:36:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xaykyf
[2014/01/23 09:36:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uzqione
[2014/01/23 09:35:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iswyuf
[2014/01/23 09:35:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xodiowwe
[2014/01/23 09:34:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uhkityuf
[2014/01/23 09:34:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xeeccyc
[2014/01/23 09:34:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ohmoah
[2014/01/23 09:34:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Naxolesy
[2014/01/23 09:33:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hoyxlix
[2014/01/23 09:33:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ewsuowa
[2014/01/23 09:33:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yxysam
[2014/01/23 09:32:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uqkeihib
[2014/01/23 09:32:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Aqqutaqe
[2014/01/23 09:32:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ivxays
[2014/01/23 09:31:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ufuxki
[2014/01/23 09:31:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Achaleky
[2014/01/23 09:30:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xuoxaty
[2014/01/23 09:30:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xyuzvi
[2014/01/23 09:30:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Rofody
[2014/01/23 09:30:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Aroxquly
[2014/01/23 09:29:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Moxiusd
[2014/01/23 09:28:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Exzysey
[2014/01/23 09:28:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ugfobika
[2014/01/23 09:28:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Odkaat
[2014/01/23 09:28:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tiviah
[2014/01/23 09:27:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ihawvu
[2014/01/23 09:27:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ezfedir
[2014/01/23 09:26:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ulonez
[2014/01/23 09:26:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Avrozupo
[2014/01/23 09:26:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Badaebn
[2014/01/23 09:26:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Axowil
[2014/01/23 09:25:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yxqule
[2014/01/23 09:25:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Awzufi
[2014/01/23 09:24:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xyotyvhe
[2014/01/23 09:24:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Orfeyz
[2014/01/23 09:24:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uchabifo
[2014/01/23 09:24:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Faupvo
[2014/01/23 09:23:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Dekeytno
[2014/01/23 09:23:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Elvyxy
[2014/01/23 09:22:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oretfyom
[2014/01/23 09:22:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Appiabac
[2014/01/23 09:22:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Roukid
[2014/01/23 09:22:08 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ovdunyxo
[2014/01/23 09:21:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wuatbeer
[2014/01/23 09:21:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ruobone
[2014/01/23 09:20:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xuliwi
[2014/01/23 09:20:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Awekysug
[2014/01/23 09:20:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qiynab
[2014/01/23 09:20:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xeweebe
[2014/01/23 09:19:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Woedipgi
[2014/01/23 09:19:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Foweqibu
[2014/01/23 09:18:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gifiovob
[2014/01/23 09:18:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uvcivoa
[2014/01/23 09:18:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Axawcia
[2014/01/23 09:18:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ylefovs
[2014/01/23 09:17:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yzybyhmu
[2014/01/23 09:17:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ysaswif
[2014/01/23 09:16:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ixgoumh
[2014/01/23 09:16:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ixevet
[2014/01/23 09:16:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Opiddo
[2014/01/23 09:16:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xyluovu
[2014/01/23 09:15:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ykizhy
[2014/01/23 09:15:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Awqaomke
[2014/01/23 09:14:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Otukryr
[2014/01/23 09:14:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wafeqyel
[2014/01/23 09:14:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ydtueco
[2014/01/23 09:14:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Azukko
[2014/01/23 09:13:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Igezqa
[2014/01/23 09:13:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Seoqeqka
[2014/01/23 09:13:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sycuehe
[2014/01/23 09:12:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pyovimy
[2014/01/23 09:12:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Dabaot
[2014/01/23 09:12:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cibiiqo
[2014/01/23 09:11:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Enkeibuc
[2014/01/23 09:11:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Duocycy
[2014/01/23 09:10:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yrtuubaz
[2014/01/23 09:10:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Otewyzo
[2014/01/23 09:09:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Epirkew
[2014/01/23 09:08:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Avgiag
[2014/01/23 09:08:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Asnigy
[2014/01/23 09:07:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Urymmae
[2014/01/23 09:06:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hoexlo
[2014/01/23 09:06:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Beuxahem
[2014/01/23 09:05:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Soryat
[2014/01/23 09:05:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oberisli
[2014/01/23 09:04:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uxobrusu
[2014/01/23 09:03:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iztiats
[2014/01/23 09:03:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pegyake
[2014/01/23 09:02:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tycyveu
[2014/01/23 09:01:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yvukut
[2014/01/23 09:01:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Loimzes
[2014/01/23 09:00:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Apepvoyz
[2014/01/23 08:59:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iktahe
[2014/01/23 08:59:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yrahizm
[2014/01/23 08:58:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oqiwecfi
[2014/01/23 08:57:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uhotywm
[2014/01/23 08:57:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ypomxe
[2014/01/23 08:56:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ebelyl
[2014/01/23 08:56:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Aknague
[2014/01/23 08:55:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Naocga
[2014/01/23 08:54:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hepera
[2014/01/23 08:53:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Essycua
[2014/01/23 08:53:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cuenty
[2014/01/23 08:52:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Daizhuif
[2014/01/23 08:52:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Akoputve
[2014/01/23 08:51:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ebcezyu
[2014/01/23 08:50:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Emurku
[2014/01/23 08:49:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ivycboy
[2014/01/23 08:49:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oniszek
[2014/01/23 08:48:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Adgypyru
[2014/01/23 08:48:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Caegfau
[2014/01/23 08:47:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Exwyxu
[2014/01/23 08:46:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oxinnaca
[2014/01/23 08:46:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qiasguc
[2014/01/23 08:45:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ruruxeb
[2014/01/23 08:44:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fyfyixy
[2014/01/23 08:44:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nayvfito
[2014/01/23 08:01:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ypyter
[2014/01/23 08:01:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vidyxuaw
[2014/01/23 08:00:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pawuim
[2014/01/23 08:00:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Myumdav
[2014/01/23 07:59:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Elagibr
[2014/01/23 07:58:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Alovqyge
[2014/01/23 07:58:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yqagiduf
[2014/01/23 07:57:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iqoxbany
[2014/01/23 07:56:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fubiys
[2014/01/23 07:56:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tyelepa
[2014/01/23 07:55:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Keufalqy
[2014/01/23 07:54:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wecuyhd
[2014/01/23 07:54:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Esmidoiz
[2014/01/23 07:53:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kemicic
[2014/01/23 07:52:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xyukry
[2014/01/23 07:52:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Akumzuyq
[2014/01/23 07:51:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ziackuul
[2014/01/23 07:51:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ywdeyksy
[2014/01/23 07:50:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hoxuovbi
[2014/01/23 07:49:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uwgiipot
[2014/01/23 07:49:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Goxutus
[2014/01/23 07:48:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Etuwoki
[2014/01/23 07:47:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zupuuz
[2014/01/23 07:47:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ewbacax
[2014/01/23 07:46:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sosutoyx
[2014/01/23 07:45:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ylerosol
[2014/01/23 07:45:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ziceul
[2014/01/23 07:44:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wybaunf
[2014/01/23 07:43:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Saweatah
[2014/01/23 07:43:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Emumvyy
[2014/01/23 07:42:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Bomyyqob
[2014/01/23 07:42:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tiaple
[2014/01/23 07:41:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yspuolu
[2014/01/23 07:40:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yqinpi
[2014/01/23 07:40:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Seanxiu
[2014/01/23 07:39:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Anriis
[2014/01/23 07:38:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ymsyihm
[2014/01/23 07:38:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Igcypyr
[2014/01/23 07:37:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Geneudi
[2014/01/23 07:36:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Soalxui
[2014/01/23 07:36:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Suylok
[2014/01/23 07:35:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Icalfop
[2014/01/23 07:34:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Faqyyw
[2014/01/23 07:34:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Omikam
[2014/01/23 07:33:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yhbuto
[2014/01/23 07:33:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Exzobubi
[2014/01/23 07:32:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Duucyka
[2014/01/23 07:31:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Keuclo
[2014/01/23 07:31:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Evnyynpu
[2014/01/23 07:30:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ukycyk
[2014/01/23 07:29:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Udogezqi
[2014/01/23 07:29:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Biigteex
[2014/01/23 07:28:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ducuic
[2014/01/23 07:27:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Arliykec
[2014/01/23 07:27:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ycogoq
[2014/01/23 07:26:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Suolyt
[2014/01/23 07:25:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qeakex
[2014/01/23 07:25:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ahzeyvoz
[2014/01/23 07:24:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vuepbuu
[2014/01/23 07:24:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Dohihiu
[2014/01/23 07:23:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ycafrio
[2014/01/23 07:22:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Medymu
[2014/01/23 07:22:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tafyoxy
[2014/01/23 07:21:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uxowro
[2014/01/23 07:20:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ygudevv
[2014/01/23 07:20:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ackanyy
[2014/01/23 07:19:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uvdoqyi
[2014/01/23 07:18:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Veqaiske
[2014/01/23 07:18:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Naadqim
[2014/01/23 07:17:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sopepo
[2014/01/23 07:16:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Itsedyry
[2014/01/23 07:16:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nayzpof
[2014/01/23 07:15:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Edaqhe
[2014/01/23 07:15:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Usynryim
[2014/01/23 07:14:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Meihduah
[2014/01/23 07:13:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ulfyus
[2014/01/23 07:13:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Asdyok
[2014/01/23 07:12:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ycetazow
[2014/01/23 07:11:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Neseku
[2014/01/23 07:11:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ubnoveok
[2014/01/23 06:04:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gunoicv
[2014/01/23 06:04:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Veerduyc
[2014/01/23 06:03:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wutyal
[2014/01/23 06:02:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kogiapab
[2014/01/23 06:02:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kytoeqy
[2014/01/23 06:01:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Caowlo
[2014/01/23 06:00:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qoyqyvas
[2014/01/23 06:00:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oqevol
[2014/01/23 05:59:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Opipel
[2014/01/23 05:59:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Umpapae
[2014/01/23 05:58:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Razaqu
[2014/01/23 05:57:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Beesnait
[2014/01/23 05:57:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Etuxrup
[2014/01/23 05:56:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ehegath
[2014/01/23 05:55:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Bezavuw
[2014/01/23 05:55:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ymdoce
[2014/01/23 05:54:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gomanoo
[2014/01/23 05:53:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Noazowco
[2014/01/23 05:53:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Osboifax
[2014/01/23 05:52:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Satoxyq
[2014/01/23 05:51:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Veubadgo
[2014/01/23 05:51:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xatuidu
[2014/01/23 05:50:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ewuqfaiq
[2014/01/23 05:50:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ukyruba
[2014/01/23 05:49:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ideqorad
[2014/01/23 05:48:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wecoyzy
[2014/01/23 05:48:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Opceinaf
[2014/01/23 05:47:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Alezhoox
[2014/01/23 05:46:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Icoteric
[2014/01/23 05:46:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tyexant
[2014/01/23 05:45:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Mygoibhu
[2014/01/23 05:44:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Liansina
[2014/01/23 05:44:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Aqixyn
[2014/01/23 05:43:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yzrebiu
[2014/01/23 05:42:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Agefodl
[2014/01/23 05:42:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uzyzevw
[2014/01/23 05:41:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Odfifymy
[2014/01/23 05:41:08 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Mualcyg
[2014/01/23 05:40:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Exemgypy
[2014/01/23 05:39:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ygxeari
[2014/01/23 05:39:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ulruapc
[2014/01/23 05:38:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fuewvux
[2014/01/23 05:38:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ixovkisa
[2014/01/23 05:38:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Faadik
[2014/01/23 05:37:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Okcevex
[2014/01/23 05:37:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fyfaug
[2014/01/23 05:37:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pepopi
[2014/01/23 05:36:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Syunheiz
[2014/01/23 05:36:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ivkuwua
[2014/01/23 05:36:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Adyzsud
[2014/01/23 05:35:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Guhurea
[2014/01/23 05:35:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qiackiqo
[2014/01/23 05:35:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ykosdara
[2014/01/23 05:34:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kenawe
[2014/01/23 05:34:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tipaufi
[2014/01/23 05:34:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ydxihiq
[2014/01/23 05:33:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nuygesvi
[2014/01/23 05:33:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fytaky
[2014/01/23 05:33:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wyemafme
[2014/01/23 05:33:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ikihes
[2014/01/23 05:32:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ogbuipun
[2014/01/23 05:32:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Itgienaq
[2014/01/23 05:32:08 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Riabxaba
[2014/01/23 05:31:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Piybyg
[2014/01/23 05:31:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wixacu
[2014/01/23 05:31:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sifugau
[2014/01/23 05:30:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wefoefan
[2014/01/23 05:30:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Itoqyc
[2014/01/23 05:30:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tynehula
[2014/01/23 05:29:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qipoizy
[2014/01/23 05:29:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Neloycl
[2014/01/23 05:29:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Edlekias
[2014/01/23 05:28:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Halios
[2014/01/23 05:28:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ucqoilv
[2014/01/23 05:28:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wunymo
[2014/01/23 05:27:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Voefuxol
[2014/01/23 05:27:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yzluti
[2014/01/23 05:27:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Suywar
[2014/01/23 05:27:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Dyufoxf
[2014/01/23 05:26:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tuofeqn
[2014/01/23 05:26:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Agyghy
[2014/01/23 05:25:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Efxovao
[2014/01/23 05:25:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ukdumezo
[2014/01/23 05:25:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cilibos
[2014/01/23 05:24:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ygagbuh
[2014/01/23 05:24:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Dudoypby
[2014/01/23 05:24:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ryudiq
[2014/01/23 05:24:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Axhaonoc
[2014/01/23 05:23:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Onzoda
[2014/01/23 05:23:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Maguytam
[2014/01/23 05:23:08 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vekuegy
[2014/01/23 05:22:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ahufdeep
[2014/01/23 05:22:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Moidpuxy
[2014/01/23 05:22:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Icefofax
[2014/01/23 05:21:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uvleuhax
[2014/01/23 05:21:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Woomifsi
[2014/01/23 05:21:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Abzudaiv
[2014/01/23 05:20:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Aswisa
[2014/01/23 05:20:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uwsilib
[2014/01/23 05:20:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Keakiz
[2014/01/23 05:19:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vypyoces
[2014/01/23 05:19:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ulteodzy
[2014/01/23 05:19:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Esukvon
[2014/01/23 05:18:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ehcogeko
[2014/01/23 05:18:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oxqopuy
[2014/01/23 05:18:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ohmokyo
[2014/01/23 05:18:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Asowak
[2014/01/23 05:17:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Osetku
[2014/01/23 05:17:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Dolaef
[2014/01/23 05:16:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Isinhyys
[2014/01/23 05:16:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wivotiec
[2014/01/23 05:16:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yretuhyn
[2014/01/23 05:15:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Waqeeqb
[2014/01/23 05:15:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Butiuqce
[2014/01/23 05:15:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pyiqewe
[2014/01/23 05:15:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yryrxap
[2014/01/23 05:14:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ucevrav
[2014/01/23 05:14:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Omitraz
[2014/01/23 05:14:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xyvoez
[2014/01/23 05:13:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ywukloa
[2014/01/23 05:13:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Selagile
[2014/01/23 05:12:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Aceqavfo
[2014/01/23 05:11:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Awuvegfu
[2014/01/23 05:11:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Evlaiw
[2014/01/23 05:10:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Mubuuhle
[2014/01/23 05:09:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Leenygic
[2014/01/23 05:09:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gyigazb
[2014/01/23 05:08:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Lamyoppe
[2014/01/23 05:07:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Guemsa
[2014/01/23 05:07:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iqtehyom
[2014/01/23 05:06:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Byybemis
[2014/01/23 05:06:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iqapudp
[2014/01/23 05:05:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Lawuyska
[2014/01/23 05:04:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uzemabi
[2014/01/23 05:04:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cozytibi
[2014/01/23 05:03:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hyymbi
[2014/01/23 05:02:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sufayfyt
[2014/01/23 05:02:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ydezokvu
[2014/01/23 05:01:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fibupev
[2014/01/23 05:00:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Igomekdu
[2014/01/23 05:00:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Inygcy
[2014/01/23 04:59:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Todyfit
[2014/01/23 04:58:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cihuigyt
[2014/01/23 04:58:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Roydervi
[2014/01/23 04:57:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Eqxyonh
[2014/01/23 04:57:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ahqyad
[2014/01/23 04:56:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Maysvot
[2014/01/23 04:55:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gaxuxu
[2014/01/23 04:55:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zebyivqo
[2014/01/23 04:54:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Asybegik
[2014/01/23 04:53:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Onkeqyma
[2014/01/23 04:53:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Naqeycmi
[2014/01/23 04:52:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qunerugi
[2014/01/23 04:51:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vywyxoxa
[2014/01/23 04:51:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Meinizoh
[2014/01/23 04:50:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Epxyusah
[2014/01/23 04:49:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nabaxao
[2014/01/23 04:49:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vuuftok
[2014/01/23 04:48:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Elpofe
[2014/01/23 04:48:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ekwaun
[2014/01/23 04:08:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Guveotre
[2014/01/23 04:07:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Igigtofo
[2014/01/23 04:06:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Coemulna
[2014/01/23 04:06:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Omibne
[2014/01/23 04:05:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wewuip
[2014/01/23 04:04:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Opybqo
[2014/01/23 04:04:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oxytre
[2014/01/23 04:03:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kozoyc
[2014/01/23 04:02:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yxloosod
[2014/01/23 04:02:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ybraxe
[2014/01/23 04:01:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ylfezu
[2014/01/23 04:01:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Bywuwax
[2014/01/23 04:00:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ozgyfo
[2014/01/23 03:59:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Efquaq
[2014/01/23 03:58:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Elobzov
[2014/01/23 03:58:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Bynuynyv
[2014/01/23 03:57:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tewuyz
[2014/01/23 03:57:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Raedarvy
[2014/01/23 03:56:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Peugwail
[2014/01/23 03:55:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Luutzo
[2014/01/23 03:55:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Etdoywpi
[2014/01/23 03:54:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Expasa
[2014/01/23 03:53:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ebquwiod
[2014/01/23 03:53:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Igavbopy
[2014/01/23 03:52:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ufdiyrot
[2014/01/23 03:51:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ugxioryf
[2014/01/23 03:51:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ywvegyqo
[2014/01/23 03:50:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Isofiz
[2014/01/23 03:49:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iknisaz
[2014/01/23 03:49:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Alunho
[2014/01/23 03:48:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uqinenyp
[2014/01/23 03:48:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Apotov
[2014/01/23 03:47:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zyyfywby
[2014/01/23 03:46:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Efapzyw
[2014/01/23 03:46:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Siicnu
[2014/01/23 03:45:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Giomkoha
[2014/01/23 03:44:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Caowga
[2014/01/23 03:44:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ymdiget
[2014/01/23 03:43:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Erbuwi
[2014/01/23 03:42:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Liupqequ
[2014/01/23 03:42:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Erodneuq
[2014/01/23 03:41:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Biafhu
[2014/01/23 03:40:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ullaah
[2014/01/23 03:40:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Weufxoir
[2014/01/23 03:39:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ydrozez
[2014/01/23 03:39:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yhoxlues
[2014/01/23 03:38:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Epleax
[2014/01/23 03:37:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Edqasuoh
[2014/01/23 03:36:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ucacox
[2014/01/23 03:36:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Quekir
[2014/01/23 03:35:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Imnouqif
[2014/01/23 03:35:08 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Dahuwe
[2014/01/23 03:34:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Duacynqy
[2014/01/23 03:33:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Loysahqo
[2014/01/23 03:33:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Noelohn
[2014/01/23 03:32:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Exbitayw
[2014/01/23 03:31:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Axygale
[2014/01/23 03:31:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Epidwo
[2014/01/23 03:30:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kazaotul
[2014/01/23 03:29:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Eqxyari
[2014/01/23 03:29:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nafokyt
[2014/01/23 03:28:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ohqoiw
[2014/01/23 03:27:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kilubeh
[2014/01/23 03:27:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ruysatf
[2014/01/23 03:26:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gaqiew
[2014/01/23 03:26:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Weehap
[2014/01/23 03:25:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cukeyfd
[2014/01/23 03:24:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uffaaw
[2014/01/23 03:24:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Haunrohy
[2014/01/23 03:23:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Menifuux
[2014/01/23 03:22:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xuloaqw
[2014/01/23 03:22:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ecalna
[2014/01/23 03:21:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xaehazor
[2014/01/23 03:20:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Avmyroag
[2014/01/23 03:20:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gygian
[2014/01/23 03:19:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Rixoriu
[2014/01/23 03:18:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ogedom
[2014/01/23 03:18:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fuonado
[2014/01/23 03:17:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Owwaor
[2014/01/23 03:17:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Duiszuso
[2014/01/23 02:11:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oxgyuci
[2014/01/23 02:10:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ezzooms
[2014/01/23 02:09:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kouxane
[2014/01/23 02:09:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Idekimaf
[2014/01/23 02:08:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ifgaenm
[2014/01/23 02:08:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yfvyolba
[2014/01/23 02:07:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vezivym
[2014/01/23 02:06:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Odxuwa
[2014/01/23 02:06:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Siulof
[2014/01/23 02:05:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ixevloci
[2014/01/23 02:04:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xuedpawy
[2014/01/23 02:04:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ihibexm
[2014/01/23 02:03:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fuutovhi
[2014/01/23 02:02:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Poviyxuh
[2014/01/23 02:02:08 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Otfacuro
[2014/01/23 02:01:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Dopiceta
[2014/01/23 02:00:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Voylpep
[2014/01/23 02:00:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ykeziw
[2014/01/23 01:59:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Beyzoz
[2014/01/23 01:59:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Epfoyhaz
[2014/01/23 01:58:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Obmyawm
[2014/01/23 01:57:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yqcuoziz
[2014/01/23 01:57:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tuepzov
[2014/01/23 01:56:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Aqtoazk
[2014/01/23 01:55:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uvvemou
[2014/01/23 01:55:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ozsuzi
[2014/01/23 01:54:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Olxuuf
[2014/01/23 01:53:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Alocbefu
[2014/01/23 01:53:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Upozto
[2014/01/23 01:52:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Erithied
[2014/01/23 01:51:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ulyqbuv
[2014/01/23 01:51:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vuyqka
[2014/01/23 01:50:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Edalby
[2014/01/23 01:49:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hoecaw
[2014/01/23 01:49:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Urciefed
[2014/01/23 01:48:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iseneqe
[2014/01/23 01:47:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ykzupul
[2014/01/23 01:47:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Imbegyw
[2014/01/23 01:46:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yconica
[2014/01/23 01:45:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ofynwiy
[2014/01/23 01:45:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Imowzym
[2014/01/23 01:44:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ufpusoan
[2014/01/23 01:43:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Owerxiq
[2014/01/23 01:43:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ceefavas
[2014/01/23 01:42:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Deigmo
[2014/01/23 01:41:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ysuponz
[2014/01/23 01:41:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Elyfsya
[2014/01/23 01:40:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Acpete
[2014/01/23 01:39:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qieqinis
[2014/01/23 01:39:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Umkonya
[2014/01/23 01:38:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Suoxxu
[2014/01/23 01:38:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Arorqeim
[2014/01/23 01:37:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wiestob
[2014/01/23 01:36:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Akfeqiif
[2014/01/23 01:36:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Enalwo
[2014/01/23 01:35:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Atympu
[2014/01/23 01:34:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Adduzo
[2014/01/23 01:34:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xofuwyo
[2014/01/23 01:33:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cyhyca
[2014/01/23 01:32:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Erudqat
[2014/01/23 01:32:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ekoclum
[2014/01/23 01:32:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ubbyfeu
[2014/01/23 01:31:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ycysoc
[2014/01/23 01:31:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ytomisil
[2014/01/23 01:30:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yhebpyp
[2014/01/23 01:30:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vopoadri
[2014/01/23 01:30:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oplufufy
[2014/01/23 01:30:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zovuiqsu
[2014/01/23 01:29:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Peydko
[2014/01/23 01:29:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Opehmix
[2014/01/23 01:29:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Odakxayk
[2014/01/23 01:28:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Emsyraab
[2014/01/23 01:28:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yvesuhy
[2014/01/23 01:28:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ogococh
[2014/01/23 01:27:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Naediqu
[2014/01/23 01:27:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Diukom
[2014/01/23 01:26:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Luediqur
[2014/01/23 01:26:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Muilnyom
[2014/01/23 01:26:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Osifib
[2014/01/23 01:26:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Mobesic
[2014/01/23 01:25:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ciniiwhu
[2014/01/23 01:25:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zubisuel
[2014/01/23 01:25:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Akippyi
[2014/01/23 01:25:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uzurux
[2014/01/23 01:24:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Avihgiux
[2014/01/23 01:24:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wyowuz
[2014/01/23 01:23:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Okfioq
[2014/01/23 01:23:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ehatnya
[2014/01/23 01:23:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uvhyeq
[2014/01/23 01:23:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Utaxubdu
[2014/01/23 01:22:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Upymodi
[2014/01/23 01:22:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Riecyb
[2014/01/23 01:21:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ciryqy
[2014/01/23 01:21:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Mysievi
[2014/01/23 01:21:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ubonome
[2014/01/23 01:21:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sylyixdy
[2014/01/23 01:20:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Usavmixo
[2014/01/23 01:20:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Otufyqd
[2014/01/23 01:20:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zamyamap
[2014/01/23 01:19:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Utolyq
[2014/01/23 01:19:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tiukytem
[2014/01/23 01:18:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gaokyhid
[2014/01/23 01:17:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tyuwez
[2014/01/23 01:17:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iwluop
[2014/01/23 01:16:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pizasag
[2014/01/23 01:16:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Atybpiq
[2014/01/23 01:15:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xiotmaqi
[2014/01/23 01:14:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ecbyuxsi
[2014/01/23 01:14:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Itbiotgi
[2014/01/23 01:13:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Enumkudy
[2014/01/23 01:12:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Baubwaa
[2014/01/23 01:12:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Egkeowu
[2014/01/23 01:11:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uglepu
[2014/01/23 01:10:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hoygypg
[2014/01/23 01:10:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Afsecoog
[2014/01/23 01:09:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tymoyla
[2014/01/23 01:08:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Itupno
[2014/01/23 01:08:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Guteso
[2014/01/23 01:07:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ubhyxeyt
[2014/01/23 01:07:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Mydocyyq
[2014/01/23 01:06:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ivoryqyt
[2014/01/23 01:05:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Puyraco
[2014/01/23 01:05:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ypdaewni
[2014/01/23 01:04:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cepineil
[2014/01/23 01:03:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Idewefty
[2014/01/23 01:03:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wytoir
[2014/01/23 01:02:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nazeuz
[2014/01/23 01:01:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Obedbi
[2014/01/23 01:01:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Owzyenn
[2014/01/23 01:00:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Naroyv
[2014/01/23 00:59:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Exemke
[2014/01/23 00:59:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Diynecxi
[2014/01/23 00:58:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Guqoix
[2014/01/23 00:58:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Seahyviw
[2014/01/23 00:57:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sehide
[2014/01/23 00:56:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yqecopef
[2014/01/23 00:55:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Isipoqa
[2014/01/23 00:55:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hoilall
[2014/01/23 00:54:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Dityucwa
[2014/01/23 00:54:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sytoyq
[2014/01/23 00:53:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Saozqi
[2014/01/23 00:52:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nypuykyl
[2014/01/23 00:51:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zetucyw
[2014/01/23 00:51:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sywyqayz
[2014/01/23 00:50:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zacaes
[2014/01/23 00:50:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Expiytr
[2014/01/23 00:49:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Seedadvo
[2014/01/23 00:48:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Evagleu
[2014/01/23 00:47:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ahheav
[2014/01/23 00:47:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vuurpe
[2014/01/23 00:46:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Reevipp
[2014/01/23 00:46:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Waomxiw
[2014/01/23 00:45:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wyfaib
[2014/01/23 00:44:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uglean
[2014/01/23 00:44:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ixqype
[2014/01/23 00:43:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Irzuze
[2014/01/23 00:42:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wexoym
[2014/01/23 00:42:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ycacmu
[2014/01/23 00:41:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Igygalz
[2014/01/23 00:40:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Horual
[2014/01/23 00:01:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Poagpi
[2014/01/23 00:00:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Evibol
[2014/01/23 00:00:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nesyybq
[2014/01/22 23:59:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ixiqnix
[2014/01/22 23:58:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kootkiiv
[2014/01/22 23:58:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Taogik
[2014/01/22 23:57:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Efagxui
[2014/01/22 23:56:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Opfage
[2014/01/22 23:56:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ennaeg
[2014/01/22 23:55:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cihozut
[2014/01/22 23:54:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Patoikp
[2014/01/22 23:54:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Lyecynbo
[2014/01/22 23:53:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ozodip
[2014/01/22 23:52:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Atgaeqn
[2014/01/22 23:52:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ahbaunze
[2014/01/22 23:51:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cybourw
[2014/01/22 23:50:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Taicifa
[2014/01/22 23:50:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xuwocaw
[2014/01/22 23:49:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xuigsu
[2014/01/22 23:48:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zoyqyz
[2014/01/22 23:48:08 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ufnaam
[2014/01/22 23:47:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wyvenu
[2014/01/22 23:46:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Bymoem
[2014/01/22 23:46:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ungazuoh
[2014/01/22 23:45:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Naxykure
[2014/01/22 23:44:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Heodgaih
[2014/01/22 23:44:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ercaewep
[2014/01/22 23:43:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Niryez
[2014/01/22 23:42:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yzweoqza
[2014/01/22 23:42:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ymypigaz
[2014/01/22 23:41:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gunyfy
[2014/01/22 23:41:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ypihpua
[2014/01/22 23:40:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ixufuwr
[2014/01/22 23:39:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tulezy
[2014/01/22 23:38:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Giexfy
[2014/01/22 23:38:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Avzuob
[2014/01/22 23:37:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Agamte
[2014/01/22 23:37:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ofhegye
[2014/01/22 23:36:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Egqeaspi
[2014/01/22 23:35:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ifynyn
[2014/01/22 23:34:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yxehifa
[2014/01/22 23:34:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vikaqy
[2014/01/22 23:33:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Keovofte
[2014/01/22 23:33:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Izvyeqha
[2014/01/22 23:32:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wyybxy
[2014/01/22 23:31:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ydozulbi
[2014/01/22 23:31:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Lasyzalu
[2014/01/22 23:30:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ipyhafoq
[2014/01/22 23:29:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Lybyid
[2014/01/22 23:29:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Usmoquod
[2014/01/22 23:28:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yzalynk
[2014/01/22 23:27:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xesyot
[2014/01/22 23:27:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ulynos
[2014/01/22 23:26:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zaovykq
[2014/01/22 23:25:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Keyxeb
[2014/01/22 23:25:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Finosy
[2014/01/22 23:24:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Alyvywb
[2014/01/22 23:24:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ihotyl
[2014/01/22 23:23:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Puuwepeh
[2014/01/22 23:22:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ynacacag
[2014/01/22 23:22:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iwvoly
[2014/01/22 23:21:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Foipted
[2014/01/22 23:20:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ovezfiav
[2014/01/22 23:20:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Buoxyta
[2014/01/22 23:19:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Imxeax
[2014/01/22 23:18:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tyniot
[2014/01/22 23:18:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Acakcouv
[2014/01/22 23:17:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tawawy
[2014/01/22 23:16:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Abkoele
[2014/01/22 23:16:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yqykyfaq
[2014/01/22 23:15:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qainsa
[2014/01/22 23:14:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Diziby
[2014/01/22 23:14:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zuvyakr
[2014/01/22 23:13:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xowyigq
[2014/01/22 23:12:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ofagni
[2014/01/22 23:12:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Apqeza
[2014/01/22 23:11:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Anuxxad
[2014/01/22 23:11:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Bufuohoc
[2014/01/22 23:10:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nihehoic
[2014/01/22 23:09:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Bofyqe
[2014/01/22 22:05:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Acebry
[2014/01/22 22:04:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Rakedy
[2014/01/22 22:03:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ucarolar
[2014/01/22 22:03:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uzinoqoz
[2014/01/22 22:02:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ymasyh
[2014/01/22 22:01:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gaykgode
[2014/01/22 22:01:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Buikmoa
[2014/01/22 22:00:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sasuer
[2014/01/22 21:59:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iqpapif
[2014/01/22 21:59:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ikzysoo
[2014/01/22 21:58:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Azdahesa
[2014/01/22 21:58:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Saehykot
[2014/01/22 21:57:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Akesquup
[2014/01/22 21:56:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Upqyzea
[2014/01/22 21:55:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pydyavx
[2014/01/22 21:55:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Edaglyv
[2014/01/22 21:54:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ytvieho
[2014/01/22 21:54:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yquwyt
[2014/01/22 21:53:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Imosez
[2014/01/22 21:52:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wiumaxw
[2014/01/22 21:51:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ogitnyyz
[2014/01/22 21:51:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Suykihip
[2014/01/22 21:50:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Garyqu
[2014/01/22 21:50:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ikdyiri
[2014/01/22 21:49:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fetehe
[2014/01/22 21:48:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Koezwu
[2014/01/22 21:47:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Diakegem
[2014/01/22 21:47:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fuuzaget
[2014/01/22 21:46:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ibunvo
[2014/01/22 21:46:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pilead
[2014/01/22 21:45:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ihxapoza
[2014/01/22 21:44:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Erkysen
[2014/01/22 21:43:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xowacad
[2014/01/22 21:43:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ylceyged
[2014/01/22 21:42:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iwardu
[2014/01/22 21:42:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Edduro
[2014/01/22 21:41:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kaciloa
[2014/01/22 21:40:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yfleqoso
[2014/01/22 21:39:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hahedum
[2014/01/22 21:39:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ysawmuc
[2014/01/22 21:39:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Haivuwox
[2014/01/22 21:39:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ehedpifu
[2014/01/22 21:38:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pexuawo
[2014/01/22 21:38:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Erlyne
[2014/01/22 21:38:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yduhwu
[2014/01/22 21:38:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tivozuf
[2014/01/22 21:37:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uknitiiz
[2014/01/22 21:37:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Saogutz
[2014/01/22 21:36:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Seviwe
[2014/01/22 21:36:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fasaxyar
[2014/01/22 21:35:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Seufyp
[2014/01/22 21:35:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ansyizuw
[2014/01/22 21:35:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ycozehez
[2014/01/22 21:35:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Exytzogu
[2014/01/22 21:34:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Elyvavg
[2014/01/22 21:34:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yngibeq
[2014/01/22 21:34:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ypuxozaf
[2014/01/22 21:34:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xayhluy
[2014/01/22 21:33:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Abgyuv
[2014/01/22 21:33:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Efhaabyf
[2014/01/22 21:32:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Exakuxa
[2014/01/22 21:32:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ezgyuh
[2014/01/22 21:32:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uvobdy
[2014/01/22 21:32:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Koarobz
[2014/01/22 21:31:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vygokone
[2014/01/22 21:31:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uvyquzew
[2014/01/22 21:30:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vawabya
[2014/01/22 21:30:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Patiuwo
[2014/01/22 21:30:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Lupyuxel
[2014/01/22 21:30:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Eqzeyvvu
[2014/01/22 21:29:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yhewakb
[2014/01/22 21:29:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Udlyimig
[2014/01/22 21:28:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Okeniqfy
[2014/01/22 21:28:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uvuzwiq
[2014/01/22 21:28:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kimayn
[2014/01/22 21:27:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Feibfa
[2014/01/22 21:27:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Esvyuz
[2014/01/22 21:27:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Daefodi
[2014/01/22 21:26:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kyheugfy
[2014/01/22 21:26:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Odarqexu
[2014/01/22 21:26:08 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sedobet
[2014/01/22 21:26:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qigypiy
[2014/01/22 21:25:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uxofodr
[2014/01/22 21:25:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Loiwfeky
[2014/01/22 21:24:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cefeuket
[2014/01/22 21:24:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Bebazuu
[2014/01/22 21:24:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Awyvfy
[2014/01/22 21:23:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Azufsopi
[2014/01/22 21:23:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Idysaten
[2014/01/22 21:23:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Subomin
[2014/01/22 21:22:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qyogopo
[2014/01/22 21:22:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zucowo
[2014/01/22 21:22:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kuzaitlo
[2014/01/22 21:22:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Timoar
[2014/01/22 21:21:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ahbeal
[2014/01/22 21:21:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Awefevre
[2014/01/22 21:20:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qouronv
[2014/01/22 21:20:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yhukomco
[2014/01/22 21:19:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qaadfoi
[2014/01/22 21:19:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vuakceh
[2014/01/22 21:19:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Peusihgu
[2014/01/22 21:19:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Maitowow
[2014/01/22 21:18:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Riobsa
[2014/01/22 21:18:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wuapegd
[2014/01/22 21:18:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sofifu
[2014/01/22 21:18:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wuenweuf
[2014/01/22 21:17:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gidusy
[2014/01/22 21:17:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Dyenukx
[2014/01/22 21:16:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ykeluhe
[2014/01/22 21:16:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kocyciw
[2014/01/22 21:15:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Baamkieg
[2014/01/22 21:15:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Epqyitku
[2014/01/22 21:15:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qodaziop
[2014/01/22 21:15:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tegiruim
[2014/01/22 21:14:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Igwuvo
[2014/01/22 21:14:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ximigaep
[2014/01/22 21:14:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ozilyga
[2014/01/22 21:13:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Meuqce
[2014/01/22 21:13:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iqubek
[2014/01/22 21:13:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ebryag
[2014/01/22 21:12:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Rietku
[2014/01/22 21:12:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iblowawi
[2014/01/22 21:11:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nyehny
[2014/01/22 21:11:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kumaokp
[2014/01/22 21:10:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Elylebz
[2014/01/22 21:10:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pyisodof
[2014/01/22 21:09:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Obubbis
[2014/01/22 21:08:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Rinyci
[2014/01/22 21:07:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Etgirize
[2014/01/22 21:07:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iriwgou
[2014/01/22 21:06:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Abtiva
[2014/01/22 21:06:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Amnuny
[2014/01/22 21:05:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gileheev
[2014/01/22 21:04:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nyguhi
[2014/01/22 21:03:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Mubaowqe
[2014/01/22 21:03:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Olraecix
[2014/01/22 21:02:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Deidgyyx
[2014/01/22 21:02:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Otxyuxd
[2014/01/22 21:01:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Detywon
[2014/01/22 21:00:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Viyvuko
[2014/01/22 20:59:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ebwiykon
[2014/01/22 20:59:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pebyaly
[2014/01/22 20:58:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ebuxfut
[2014/01/22 20:57:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Rayxicu
[2014/01/22 20:56:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Udreto
[2014/01/22 20:56:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Risuxyx
[2014/01/22 20:55:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Dolianyk
[2014/01/22 20:54:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Egabaxew
[2014/01/22 20:54:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Afukreha
[2014/01/22 20:53:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ixebegu
[2014/01/22 20:52:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qibylan
[2014/01/22 20:52:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ahviqi
[2014/01/22 20:51:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Dywiycky
[2014/01/22 20:50:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oritxy
[2014/01/22 20:49:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Aztoatyp
[2014/01/22 20:49:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Abguitc
[2014/01/22 20:48:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ifaxtawa
[2014/01/22 20:47:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gibomi
[2014/01/22 20:47:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zeinre
[2014/01/22 20:46:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Woulxion
[2014/01/22 20:08:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Arerufxu
[2014/01/22 20:08:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pyyrru
[2014/01/22 20:07:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Layllezu
[2014/01/22 20:06:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xozayke
[2014/01/22 20:06:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uhupumoq
[2014/01/22 20:05:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fiahahm
[2014/01/22 20:04:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Byhige
[2014/01/22 20:04:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qoluoxcu
[2014/01/22 20:03:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nybaloin
[2014/01/22 20:02:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ydurez
[2014/01/22 20:02:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ymytkoiw
[2014/01/22 20:01:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Posiuso
[2014/01/22 20:00:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wehimew
[2014/01/22 20:00:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oxiwzy
[2014/01/22 19:59:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Muypzior
[2014/01/22 19:58:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xegyit
[2014/01/22 19:58:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Eppigobu
[2014/01/22 19:57:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wanywuu
[2014/01/22 19:56:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Icxyqig
[2014/01/22 19:56:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Segera
[2014/01/22 19:55:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Toedbuwi
[2014/01/22 19:54:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Igzyaf
[2014/01/22 19:54:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Buezyqiw
[2014/01/22 19:53:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hygiduno
[2014/01/22 19:52:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yhyqeho
[2014/01/22 19:52:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wuypavri
[2014/01/22 19:51:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ufysza
[2014/01/22 19:50:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fifimaxi
[2014/01/22 19:50:08 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Akafmi
[2014/01/22 19:49:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Byeqamil
[2014/01/22 19:48:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qiofovy
[2014/01/22 19:48:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Piuszao
[2014/01/22 19:47:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Afkoub
[2014/01/22 19:46:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Irhituwa
[2014/01/22 19:46:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ewsypa
[2014/01/22 19:45:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hagiti
[2014/01/22 19:44:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Bohaaqw
[2014/01/22 19:44:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Awnyeg
[2014/01/22 19:43:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Mabadua
[2014/01/22 19:42:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Reduytno
[2014/01/22 19:42:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zixave
[2014/01/22 19:41:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Awunmeu
[2014/01/22 19:40:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Teezak
[2014/01/22 19:40:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ilmuezo
[2014/01/22 19:39:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Miategz
[2014/01/22 19:38:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zuquew
[2014/01/22 19:38:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oxepigy
[2014/01/22 19:37:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cyitwaos
[2014/01/22 19:36:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ydumyp
[2014/01/22 19:36:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vaumyvat
[2014/01/22 19:35:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nyasar
[2014/01/22 19:34:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Abonap
[2014/01/22 19:33:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ypwypi
[2014/01/22 19:33:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Agxusupo
[2014/01/22 19:32:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ezmyhie
[2014/01/22 19:31:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oqcayni
[2014/01/22 19:31:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Axydgyan
[2014/01/22 19:30:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ebolah
[2014/01/22 19:29:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Algaqew
[2014/01/22 19:29:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wyaftyi
[2014/01/22 19:28:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kemyexw
[2014/01/22 19:27:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Angeanna
[2014/01/22 19:27:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Waleomwa
[2014/01/22 19:26:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ahgufi
[2014/01/22 19:25:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Lofyucg
[2014/01/22 19:25:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Paweepny
[2014/01/22 19:24:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Rytopaib
[2014/01/22 19:23:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ynohqeby
[2014/01/22 19:22:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hecyufwi
[2014/01/22 19:22:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ceokycra
[2014/01/22 19:21:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Evotyspo
[2014/01/22 19:21:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Voefykug
[2014/01/22 19:20:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Dateip
[2014/01/22 19:19:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Feynuw
[2014/01/22 19:18:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qaokzu
[2014/01/22 19:18:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Efnaipk
[2014/01/22 19:17:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Otygta
[2014/01/22 19:17:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kiozfi
[2014/01/22 19:16:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Efurobb
[2014/01/22 19:15:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ceaqafs
[2014/01/22 17:14:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Liyqmib
[2014/01/22 17:13:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ynexpyzo
[2014/01/22 17:12:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iqceysa
[2014/01/22 17:12:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sydocey
[2014/01/22 17:11:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uzfeypgu
[2014/01/22 17:10:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Viyhxiqa
[2014/01/22 17:10:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zoevgiu
[2014/01/22 17:09:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pufapizi
[2014/01/22 17:08:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Aspeel
[2014/01/22 17:08:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Lyoluzq
[2014/01/22 17:07:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Femahuw
[2014/01/22 17:06:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gienwyh
[2014/01/22 17:06:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xionvoru
[2014/01/22 17:05:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nauliha
[2014/01/22 17:04:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zeevzyu
[2014/01/22 17:04:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zeebqii
[2014/01/22 17:03:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fuedzeu
[2014/01/22 17:03:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yfodaca
[2014/01/22 17:02:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sikoyq
[2014/01/22 17:01:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ibhyhu
[2014/01/22 17:00:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Bezaad
[2014/01/22 17:00:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uwhysoo
[2014/01/22 16:59:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yhtyqua
[2014/01/22 16:59:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vaboqeas
[2014/01/22 16:58:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Piyxepo
[2014/01/22 16:57:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Egasawba
[2014/01/22 16:57:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ikizmuih
[2014/01/22 16:56:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Doowce
[2014/01/22 16:55:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nabyocw
[2014/01/22 16:55:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Voodyrhi
[2014/01/22 16:54:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qadoep
[2014/01/22 16:53:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Osowycz
[2014/01/22 16:53:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Icucuf
[2014/01/22 16:52:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ifwyduiz
[2014/01/22 16:51:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nivivura
[2014/01/22 16:51:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ziqaopw
[2014/01/22 16:50:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ydvium
[2014/01/22 16:49:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Icawuq
[2014/01/22 16:49:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Biatxo
[2014/01/22 16:48:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gaewezf
[2014/01/22 16:47:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Linake
[2014/01/22 16:47:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xeynaw
[2014/01/22 16:46:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xaakfyr
[2014/01/22 16:45:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ririho
[2014/01/22 16:45:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Usohokes
[2014/01/22 16:45:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Okabybod
[2014/01/22 16:44:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zozegyu
[2014/01/22 16:44:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Egqohute
[2014/01/22 16:43:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Bodyucyp
[2014/01/22 16:43:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Inqoby
[2014/01/22 16:43:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hyzybuny
[2014/01/22 16:43:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Feguequg
[2014/01/22 16:42:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ataqusi
[2014/01/22 16:42:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Marauq
[2014/01/22 16:42:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Doedodv
[2014/01/22 16:41:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hoopisiw
[2014/01/22 16:41:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nicyzu
[2014/01/22 16:41:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tibebyyp
[2014/01/22 16:40:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qiulkuf
[2014/01/22 16:40:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ybgydi
[2014/01/22 16:39:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ubeproda
[2014/01/22 16:39:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Onuwodte
[2014/01/22 16:38:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pudetud
[2014/01/22 16:38:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qefepuf
[2014/01/22 16:37:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qybyyco
[2014/01/22 16:36:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ocisyg
[2014/01/22 16:35:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ucpeceos
[2014/01/22 16:35:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ewuggyra
[2014/01/22 16:34:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Epcitiu
[2014/01/22 16:33:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wiugsy
[2014/01/22 16:33:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qiiqfi
[2014/01/22 16:32:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Igykevyg
[2014/01/22 16:31:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Rolyiqw
[2014/01/22 16:31:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ocraip
[2014/01/22 16:30:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ywnixe
[2014/01/22 16:29:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Caynsoxa
[2014/01/22 16:29:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oscolip
[2014/01/22 16:28:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uchiqo
[2014/01/22 16:27:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Idihymep
[2014/01/22 16:27:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Udaricap
[2014/01/22 16:26:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zaoqix
[2014/01/22 16:25:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Igpylu
[2014/01/22 16:25:08 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Edyqon
[2014/01/22 16:24:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Enbatu
[2014/01/22 16:23:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ryynkyo
[2014/01/22 16:23:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Paxuicx
[2014/01/22 16:22:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Esawik
[2014/01/22 16:21:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uncauhy
[2014/01/22 16:21:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Irezkoax
[2014/01/22 16:20:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zerowosy
[2014/01/22 16:19:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xenuguel
[2014/01/22 16:19:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yduniba
[2014/01/22 16:18:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zifequ
[2014/01/22 16:17:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Epytedeh
[2014/01/22 16:17:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Syibutqo
[2014/01/22 16:16:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yciqicmi
[2014/01/22 16:15:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Texuhui
[2014/01/22 16:15:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Utbelyce
[2014/01/22 16:14:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Otydire
[2014/01/22 16:13:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ixugok
[2014/01/22 16:13:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Exocuw
[2014/01/22 16:12:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vibinal
[2014/01/22 16:11:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Liizovr
[2014/01/22 16:11:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Emohisot
[2014/01/22 16:10:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iguvekq
[2014/01/22 16:09:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hypaadt
[2014/01/22 16:08:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gyobki
[2014/01/22 16:08:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zyikwady
[2014/01/22 16:07:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ukruqufi
[2014/01/22 16:07:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qylara
[2014/01/22 15:15:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fuewukym
[2014/01/22 15:14:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Invyyq
[2014/01/22 15:14:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Faloubd
[2014/01/22 15:13:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Azibcewo
[2014/01/22 15:12:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Coavicag
[2014/01/22 15:12:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yluhte
[2014/01/22 15:11:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qufuva
[2014/01/22 15:10:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Owhoidcy
[2014/01/22 15:10:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Meodsai
[2014/01/22 15:09:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pobuzu
[2014/01/22 14:03:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ofuqekyd
[2014/01/22 14:02:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hueqwei
[2014/01/22 14:02:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Woacimr
[2014/01/22 14:01:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ynexamt
[2014/01/22 14:00:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vyinxa
[2014/01/22 14:00:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hihiasca
[2014/01/22 13:59:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nearavf
[2014/01/22 13:59:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ettiupz
[2014/01/22 13:58:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ipyzeml
[2014/01/22 13:57:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Supeabu
[2014/01/22 13:56:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Diohulka
[2014/01/22 13:56:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zoodma
[2014/01/22 13:55:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ygekymip
[2014/01/22 13:55:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Urutuki
[2014/01/22 13:54:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Huoxewi
[2014/01/22 13:53:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fyoxanuc
[2014/01/22 13:53:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Agwayfr
[2014/01/22 13:52:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ywceew
[2014/01/22 13:51:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ikliysup
[2014/01/22 13:51:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Foygisd
[2014/01/22 13:50:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hemeycb
[2014/01/22 13:49:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ocuqvy
[2014/01/22 13:49:08 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ydniiw
[2014/01/22 13:48:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pyliwyq
[2014/01/22 13:47:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sycogifo
[2014/01/22 13:47:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fuivozy
[2014/01/22 13:46:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ekxuigc
[2014/01/22 13:46:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wutybi
[2014/01/22 13:45:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Elunzoo
[2014/01/22 13:44:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Facyik
[2014/01/22 13:43:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ekmiceuk
[2014/01/22 13:43:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ypadun
[2014/01/22 13:42:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oferguek
[2014/01/22 13:42:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tobayd
[2014/01/22 13:41:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Agsexi
[2014/01/22 13:40:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hasopo
[2014/01/22 13:40:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Geoftiig
[2014/01/22 13:39:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Inegni
[2014/01/22 13:38:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Roacmoe
[2014/01/22 13:38:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ozxioxuk
[2014/01/22 13:37:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sadohazi
[2014/01/22 13:37:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xaafinpe
[2014/01/22 13:36:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ibzayfer
[2014/01/22 13:35:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ubgyve
[2014/01/22 13:34:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Usidikg
[2014/01/22 13:34:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Utunixed
[2014/01/22 13:33:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Eciwiv
[2014/01/22 13:33:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pitabyug
[2014/01/22 13:32:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hyypep
[2014/01/22 13:31:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tuagku
[2014/01/22 13:31:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Boyqce
[2014/01/22 13:30:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Alosdi
[2014/01/22 13:29:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fituidso
[2014/01/22 13:29:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gipatayr
[2014/01/22 13:28:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gixuirt
[2014/01/22 13:27:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Etwigoak
[2014/01/22 13:27:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Biibhyos
[2014/01/22 13:26:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yqroxe
[2014/01/22 13:25:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yqoreb
[2014/01/22 13:25:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xawufi
[2014/01/22 13:24:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hiqymola
[2014/01/22 13:24:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Edkyuvv
[2014/01/22 13:23:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yqapfoix
[2014/01/22 13:22:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vibiapgi
[2014/01/22 13:22:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Muisuha
[2014/01/22 13:21:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Meokxuar
[2014/01/22 13:20:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nypaza
[2014/01/22 13:20:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Etabniq
[2014/01/22 13:19:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ebohuq
[2014/01/22 13:18:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Unziybah
[2014/01/22 13:18:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ydlaemo
[2014/01/22 13:17:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ylnyilo
[2014/01/22 13:16:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fuoqim
[2014/01/22 13:16:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yginixy
[2014/01/22 13:15:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Biufkuow
[2014/01/22 13:14:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ulfuyte
[2014/01/22 13:14:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Owcagy
[2014/01/22 13:13:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Teryfy
[2014/01/22 13:12:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ewbiobf
[2014/01/22 13:12:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oribew
[2014/01/22 12:47:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ezuqofo
[2014/01/22 12:47:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hyecpuel
[2014/01/22 11:53:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Memyqy
[2014/01/22 11:52:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Liidle
[2014/01/22 11:52:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ykysusqa
[2014/01/22 11:51:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ohenuv
[2014/01/22 11:50:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ihxuqy
[2014/01/22 11:50:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Akbiuc
[2014/01/22 11:49:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Apsouh
[2014/01/22 11:48:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Muepbuo
[2014/01/22 11:48:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yhkixayk
[2014/01/22 11:47:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Penumu
[2014/01/22 11:46:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Teowxio
[2014/01/22 11:46:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Izpaaf
[2014/01/22 11:45:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Eqveoguz
[2014/01/22 11:44:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yqyrhiah
[2014/01/22 11:44:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ozuwal
[2014/01/22 11:43:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ebilanwa
[2014/01/22 11:42:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Noefohu
[2014/01/22 11:42:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Seehheko
[2014/01/22 11:41:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kuwiuby
[2014/01/22 11:40:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Utsoik
[2014/01/22 11:40:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Osyqny
[2014/01/22 11:39:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vaambibe
[2014/01/22 11:38:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ysnuso
[2014/01/22 11:38:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uxipaxl
[2014/01/22 11:37:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Usonipq
[2014/01/22 11:36:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uvehif
[2014/01/22 11:36:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yswied
[2014/01/22 11:35:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Arehsoiw
[2014/01/22 11:35:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tyyqbel
[2014/01/22 11:34:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ysobuxqy
[2014/01/22 11:33:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xyyskeo
[2014/01/22 11:33:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Odovneuw
[2014/01/22 11:32:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Syifyneg
[2014/01/22 11:31:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ascuiquv
[2014/01/22 11:31:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fanipuaq
[2014/01/22 11:30:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Arfaysin
[2014/01/22 11:29:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Apfavoga
[2014/01/22 11:29:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Posyet
[2014/01/22 11:28:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Eglecacu
[2014/01/22 11:27:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ufpuutfa
[2014/01/22 11:27:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Obvelao
[2014/01/22 11:26:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Giulva
[2014/01/22 11:26:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xasitan
[2014/01/22 11:25:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nicyxyze
[2014/01/22 11:24:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tuulabi
[2014/01/22 11:23:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iginiwud
[2014/01/22 11:23:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Evfaizo
[2014/01/22 11:22:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Athian
[2014/01/22 11:22:08 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Mokyif
[2014/01/22 11:21:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tawyara
[2014/01/22 11:20:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Toremawa
[2014/01/22 11:20:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kinolu
[2014/01/22 11:19:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ewolas
[2014/01/22 11:18:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tedyyn
[2014/01/22 11:18:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Operpaa
[2014/01/22 11:17:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Verauki
[2014/01/22 11:16:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ubytyzr
[2014/01/22 11:16:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Etehvuro
[2014/01/22 11:15:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Siodqile
[2014/01/22 11:14:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Suwuiwa
[2014/01/22 11:14:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uhzaidqi
[2014/01/22 11:13:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Layppae
[2014/01/22 11:12:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Owqaocu
[2014/01/22 10:25:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller
[2014/01/22 10:25:19 | 000,000,000 | ---D | C] -- C:\ProgramData\ProductData
[2014/01/22 10:23:43 | 000,000,000 | ---D | C] -- C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
[2014/01/22 10:23:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 7
[2014/01/22 10:23:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Spigot
[2014/01/22 01:33:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Aguwvoqy
[2014/01/22 01:33:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ugefuqb
[2014/01/22 01:32:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Faafulw
[2014/01/22 01:32:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ergaawl
[2014/01/22 01:31:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Bozyadso
[2014/01/22 01:30:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hekeekse
[2014/01/22 01:30:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Awytylwe
[2014/01/22 01:29:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yzihohf
[2014/01/22 01:28:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Mecyuxs
[2014/01/22 01:28:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Firiec
[2014/01/22 01:27:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cuceiffy
[2014/01/22 01:26:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uvangy
[2014/01/22 01:26:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ishiath
[2014/01/22 01:25:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xutuiqav
[2014/01/22 01:24:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vamumifa
[2014/01/22 01:24:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yzaklie
[2014/01/22 01:23:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sotyaf
[2014/01/22 01:22:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iwxiihxu
[2014/01/22 01:22:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Erekty
[2014/01/22 01:21:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yluhaszu
[2014/01/22 01:20:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Elqyerot
[2014/01/22 01:20:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tuzylyn
[2014/01/22 01:19:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xyzagao
[2014/01/22 01:19:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Isacro
[2014/01/22 01:18:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zyzudos
[2014/01/22 01:17:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Worupyz
[2014/01/22 01:16:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Siquez
[2014/01/22 01:16:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pyrova
[2014/01/21 17:39:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xoiregeh
[2014/01/21 17:39:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kouwolm
[2014/01/21 17:38:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yqyqyvyz
[2014/01/21 17:38:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vuiqenle
[2014/01/21 17:37:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Awhaefep
[2014/01/21 17:36:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Suvaeq
[2014/01/21 17:35:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ubyxygke
[2014/01/21 17:35:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Okolaw
[2014/01/21 17:34:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ulqyiq
[2014/01/21 17:34:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Rudatoi
[2014/01/21 17:33:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Deokiw
[2014/01/21 17:32:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Utoqzou
[2014/01/21 17:31:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ubzohaic
[2014/01/21 17:31:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Aciscy
[2014/01/21 17:30:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Evusufu
[2014/01/21 17:30:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Olehuh
[2014/01/21 17:29:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Paevrep
[2014/01/21 17:28:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Dyqomez
[2014/01/21 17:28:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Obugego
[2014/01/21 17:27:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Meibway
[2014/01/21 17:26:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yloksa
[2014/01/21 17:26:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Buefemob
[2014/01/21 17:25:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kovofeq
[2014/01/21 17:24:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Poumuz
[2014/01/21 17:24:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ynlyradi
[2014/01/21 17:23:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nyovfyas
[2014/01/21 17:22:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yrloifni
[2014/01/21 17:22:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ydkyla
[2014/01/21 17:21:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Exykku
[2014/01/21 17:21:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yvgesuqo
[2014/01/21 17:20:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Usygyda
[2014/01/21 17:19:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ywvusoro
[2014/01/21 17:18:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Eqmiiv
[2014/01/21 17:18:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Biowwam
[2014/01/21 17:17:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Weugho
[2014/01/21 17:17:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ugebaqp
[2014/01/21 17:16:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ybomvo
[2014/01/21 17:15:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hogoafh
[2014/01/21 17:15:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Owacbeab
[2014/01/21 17:14:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Voahrucy
[2014/01/21 17:13:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nalevo
[2014/01/21 17:13:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Afmazo
[2014/01/21 17:12:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Irtoyro
[2014/01/21 17:11:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ibinhe
[2014/01/21 17:11:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Octoqeog
[2014/01/21 17:10:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Danaker
[2014/01/21 17:09:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ynysxa
[2014/01/21 17:09:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xahuerpa
[2014/01/21 17:08:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Levabapi
[2014/01/21 17:08:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Adtiybny
[2014/01/21 17:07:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Epguvyif
[2014/01/21 17:06:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yckabi
[2014/01/21 17:05:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Igrysuf
[2014/01/21 17:05:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yqfuur
[2014/01/21 17:04:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Izvyuhq
[2014/01/21 17:04:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Moorevdu
[2014/01/21 17:03:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Lyimyc
[2014/01/21 17:02:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Etorex
[2014/01/21 17:02:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wixyavi
[2014/01/21 17:01:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ecatut
[2014/01/21 17:00:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Soutpyab
[2014/01/21 17:00:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Lihugozy
[2014/01/21 16:59:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Noisediv
[2014/01/21 16:58:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ariwkau
[2014/01/21 16:58:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kaaqroti
[2014/01/21 16:57:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Viefce
[2014/01/21 16:56:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Mibadya
[2014/01/21 16:56:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Riexzog
[2014/01/21 16:55:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Woxoyk
[2014/01/21 16:55:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uqpyop
[2014/01/21 16:54:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Toryke
[2014/01/21 16:53:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cizyko
[2014/01/21 16:52:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Akipun
[2014/01/21 16:52:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yruwoky
[2014/01/21 16:51:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Efcayzdo
[2014/01/21 16:51:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uttoer
[2014/01/21 16:50:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zualohyr
[2014/01/21 16:49:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yfeczy
[2014/01/21 16:48:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Arzuano
[2014/01/21 16:48:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Feygsan
[2014/01/15 10:19:58 | 000,325,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbport.sys
[2014/01/15 10:19:58 | 000,007,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbd.sys
[2014/01/15 10:19:56 | 000,376,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\netio.sys
[2014/01/14 09:36:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Countdown Timer
[2014/01/14 09:36:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\FreeCountdownTimer
[2014/01/14 09:33:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Desktop Timer
[2014/01/14 09:33:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Free Desktop Timer
========== Files - Modified Within 30 Days ==========
[2014/01/31 16:28:27 | 000,000,894 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014/01/31 16:24:48 | 000,013,456 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2014/01/31 16:24:47 | 000,013,456 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2014/01/31 16:13:12 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2014/01/31 16:13:07 | 2095,452,159 | -HS- | M] () -- C:\hiberfil.sys
[2014/01/31 15:57:06 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2014/01/31 01:42:17 | 000,000,456 | ---- | M] () -- C:\Windows\tasks\SyncBackSE Data.job
[2014/01/30 15:11:41 | 000,000,796 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 2605668571.job
[2014/01/30 13:08:57 | 000,000,790 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 1613490217.job
[2014/01/30 12:45:58 | 000,000,798 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 2715068236.job
[2014/01/30 11:14:35 | 000,000,796 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 2466196508.job
[2014/01/30 10:54:53 | 000,000,794 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 646515016.job
[2014/01/30 07:08:58 | 000,077,824 | ---- | M] () -- C:\Users\Greg\AppData\Local\ktmprolk.exe
[2014/01/30 05:11:53 | 000,085,305 | ---- | M] () -- C:\Users\Greg\AppData\Local\fkmfqxif.exe
[2014/01/30 04:45:51 | 000,085,305 | ---- | M] () -- C:\Users\Greg\AppData\Local\sidiwlea.exe
[2014/01/29 19:00:34 | 000,002,237 | ---- | M] () -- C:\Users\Public\Desktop\Advanced SystemCare 7.lnk
[2014/01/29 16:00:33 | 000,000,800 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 3908755253.job
[2014/01/29 14:11:38 | 000,000,796 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 2738451696.job
[2014/01/29 14:08:31 | 000,068,921 | ---- | M] () -- C:\Users\Greg\AppData\Local\brmtolcu.exe
[2014/01/29 07:19:48 | 000,000,796 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 1722134904.job
[2014/01/29 05:08:09 | 000,000,798 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 2053395886.job
[2014/01/29 04:42:19 | 000,000,794 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 2164977508.job
[2014/01/29 03:11:04 | 000,000,792 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 1569583805.job
[2014/01/29 01:13:59 | 000,000,794 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 3134106562.job
[2014/01/29 00:48:09 | 000,000,792 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 278732826.job
[2014/01/28 23:16:52 | 000,000,794 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 760575922.job
[2014/01/28 21:19:48 | 000,000,794 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 3287703646.job
[2014/01/28 20:40:57 | 000,000,796 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 985122024.job
[2014/01/28 19:09:47 | 000,000,794 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 4248253841.job
[2014/01/28 17:13:05 | 000,000,794 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 2271048042.job
[2014/01/28 17:09:29 | 000,118,073 | ---- | M] () -- C:\Users\Greg\AppData\Local\aafeeshi.exe
[2014/01/28 16:46:33 | 000,000,796 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 1833049947.job
[2014/01/28 15:28:08 | 000,000,800 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 2155614799.job
[2014/01/28 09:07:47 | 000,000,800 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 3537697701.job
[2014/01/28 08:41:48 | 000,000,802 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 324362895.job
[2014/01/27 19:16:55 | 000,000,800 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 1406418758.job
[2014/01/27 19:13:45 | 000,094,208 | ---- | M] () -- C:\Users\Greg\AppData\Local\lsstmonh.exe
[2014/01/27 17:19:43 | 000,000,792 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 2996101910.job
[2014/01/27 16:40:42 | 000,000,796 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 3690677127.job
[2014/01/27 15:09:41 | 000,000,798 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 895077069.job
[2014/01/27 14:07:32 | 000,002,257 | ---- | M] () -- C:\Users\Public\Desktop\AVG 1-Click Maintenance.lnk
[2014/01/27 14:07:32 | 000,002,231 | ---- | M] () -- C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk
[2014/01/27 13:17:41 | 000,000,802 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 3046702210.job
[2014/01/27 07:38:46 | 000,000,802 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 4171909079.job
[2014/01/27 03:04:59 | 000,085,305 | ---- | M] () -- C:\Users\Greg\AppData\Local\rchdopoj.exe
[2014/01/26 07:09:25 | 000,101,775 | ---- | M] () -- C:\Users\Greg\AppData\Local\ujkeopan.exe
[2014/01/26 05:15:24 | 000,000,794 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 3050705641.job
[2014/01/26 05:12:21 | 000,093,497 | ---- | M] () -- C:\Users\Greg\AppData\Local\kkbaqcjk.exe
[2014/01/26 04:49:21 | 000,000,790 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 544442309.job
[2014/01/26 04:46:18 | 000,093,497 | ---- | M] () -- C:\Users\Greg\AppData\Local\sgfvqsaq.exe
[2014/01/26 03:18:18 | 000,000,798 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 3288067138.job
[2014/01/26 01:08:12 | 000,000,794 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 1139419153.job
[2014/01/26 00:42:08 | 000,000,796 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 3717181098.job
[2014/01/25 23:11:06 | 000,000,798 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 534460331.job
[2014/01/25 21:13:57 | 000,000,790 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 2267605371.job
[2014/01/25 20:47:55 | 000,000,798 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 197679845.job
[2014/01/25 19:16:50 | 000,000,802 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 1252562066.job
[2014/01/25 17:19:45 | 000,000,800 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 583378015.job
[2014/01/25 16:40:50 | 000,000,794 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 993838087.job
[2014/01/25 12:43:18 | 000,118,073 | ---- | M] () -- C:\Users\Greg\AppData\Local\ilrmfaja.exe
[2014/01/25 11:12:14 | 000,118,073 | ---- | M] () -- C:\Users\Greg\AppData\Local\sgegfcwq.exe
[2014/01/25 09:15:08 | 000,118,073 | ---- | M] () -- C:\Users\Greg\AppData\Local\hqhwcrxs.exe
[2014/01/25 08:36:06 | 000,118,073 | ---- | M] () -- C:\Users\Greg\AppData\Local\gwbdljrn.exe
[2014/01/25 07:05:02 | 000,118,073 | ---- | M] () -- C:\Users\Greg\AppData\Local\nsobckol.exe
[2014/01/25 05:07:57 | 000,085,305 | ---- | M] () -- C:\Users\Greg\AppData\Local\ejpkggut.exe
[2014/01/25 01:13:43 | 000,085,305 | ---- | M] () -- C:\Users\Greg\AppData\Local\qqpsfhrw.exe
[2014/01/24 09:09:44 | 000,122,169 | ---- | M] () -- C:\Users\Greg\AppData\Local\qinqagfw.exe
[2014/01/23 15:53:31 | 000,000,512 | ---- | M] () -- C:\Users\Greg\Documents\MBR.dat
[2014/01/22 12:05:53 | 000,734,906 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2014/01/22 12:05:53 | 000,629,576 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2014/01/22 12:05:53 | 000,108,652 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2014/01/22 10:25:20 | 000,001,245 | ---- | M] () -- C:\Users\Public\Desktop\IObit Uninstaller.lnk
[2014/01/21 16:32:39 | 000,107,368 | ---- | M] (LogMeIn, Inc.) -- C:\Windows\SysNative\LMIRfsClientNP.dll
[2014/01/21 16:32:39 | 000,092,488 | ---- | M] (LogMeIn, Inc.) -- C:\Windows\SysNative\LMIinit.dll
[2014/01/21 16:32:39 | 000,035,656 | ---- | M] (LogMeIn, Inc.) -- C:\Windows\SysNative\LMIport.dll
[2014/01/20 16:23:47 | 000,012,326 | ---- | M] () -- C:\Users\Greg\AppData\Local\lgawiqfw
[2014/01/20 16:22:45 | 000,067,992 | ---- | M] () -- C:\Users\Greg\AppData\Local\idnlbohr
[2014/01/20 16:21:43 | 000,000,000 | ---- | M] () -- C:\Users\Greg\AppData\Roaming\SharedSettings.ccs
[2014/01/19 16:34:49 | 000,001,044 | ---- | M] () -- C:\Users\Greg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
[2014/01/16 03:25:47 | 000,500,856 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
========== Files Created - No Company Name ==========
[2014/01/30 15:11:41 | 000,000,796 | ---- | C] () -- C:\Windows\tasks\Security Center Update - 2605668571.job
[2014/01/30 13:08:57 | 000,000,790 | ---- | C] () -- C:\Windows\tasks\Security Center Update - 1613490217.job
[2014/01/30 12:45:58 | 000,000,798 | ---- | C] () -- C:\Windows\tasks\Security Center Update - 2715068236.job
[2014/01/30 11:14:35 | 000,000,796 | ---- | C] () -- C:\Windows\tasks\Security Center Update - 2466196508.job
[2014/01/30 10:54:53 | 000,000,794 | ---- | C] () -- C:\Windows\tasks\Security Center Update - 646515016.job
[2014/01/30 07:08:58 | 000,077,824 | ---- | C] () -- C:\Users\Greg\AppData\Local\ktmprolk.exe
[2014/01/30 05:11:53 | 000,085,305 | ---- | C] () -- C:\Users\Greg\AppData\Local\fkmfqxif.exe
[2014/01/30 04:45:51 | 000,085,305 | ---- | C] () -- C:\Users\Greg\AppData\Local\sidiwlea.exe
[2014/01/29 16:00:33 | 000,000,800 | ---- | C] () -- C:\Windows\tasks\Security Center Update - 3908755253.job
[2014/01/29 14:11:38 | 000,000,796 | ---- | C] () -- C:\Windows\tasks\Security Center Update - 2738451696.job
[2014/01/29 14:08:31 | 000,068,921 | ---- | C] () -- C:\Users\Greg\AppData\Local\brmtolcu.exe
[2014/01/29 07:19:48 | 000,000,796 | ---- | C] () -- C:\Windows\tasks\Security Center Update - 1722134904.job
[2014/01/29 05:08:09 | 000,000,798 | ---- | C] () -- C:\Windows\tasks\Security Center Update - 2053395886.job
[2014/01/29 04:42:19 | 000,000,794 | ---- | C] () -- C:\Windows\tasks\Security Center Update - 2164977508.job
[2014/01/29 03:11:04 | 000,000,792 | ---- | C] () -- C:\Windows\tasks\Security Center Update - 1569583805.job
[2014/01/29 01:13:59 | 000,000,794 | ---- | C] () -- C:\Windows\tasks\Security Center Update - 3134106562.job
[2014/01/29 00:48:09 | 000,000,792 | ---- | C] () -- C:\Windows\tasks\Security Center Update - 278732826.job
[2014/01/28 23:16:52 | 000,000,794 | ---- | C] () -- C:\Windows\tasks\Security Center Update - 760575922.job
[2014/01/28 21:19:48 | 000,000,794 | ---- | C] () -- C:\Windows\tasks\Security Center Update - 3287703646.job
[2014/01/28 20:40:57 | 000,000,796 | ---- | C] () -- C:\Windows\tasks\Security Center Update - 985122024.job
[2014/01/28 19:09:47 | 000,000,794 | ---- | C] () -- C:\Windows\tasks\Security Center Update - 4248253841.job
[2014/01/28 17:13:05 | 000,000,794 | ---- | C] () -- C:\Windows\tasks\Security Center Update - 2271048042.job
[2014/01/28 17:09:29 | 000,118,073 | ---- | C] () -- C:\Users\Greg\AppData\Local\aafeeshi.exe
[2014/01/28 16:46:33 | 000,000,796 | ---- | C] () -- C:\Windows\tasks\Security Center Update - 1833049947.job
[2014/01/28 11:20:48 | 000,000,800 | ---- | C] () -- C:\Windows\tasks\Security Center Update - 2155614799.job
[2014/01/28 09:07:47 | 000,000,800 | ---- | C] () -- C:\Windows\tasks\Security Center Update - 3537697701.job
[2014/01/28 08:41:48 | 000,000,802 | ---- | C] () -- C:\Windows\tasks\Security Center Update - 324362895.job
[2014/01/27 19:16:55 | 000,000,800 | ---- | C] () -- C:\Windows\tasks\Security Center Update - 1406418758.job
[2014/01/27 19:13:45 | 000,094,208 | ---- | C] () -- C:\Users\Greg\AppData\Local\lsstmonh.exe
[2014/01/27 17:19:43 | 000,000,792 | ---- | C] () -- C:\Windows\tasks\Security Center Update - 2996101910.job
[2014/01/27 16:40:42 | 000,000,796 | ---- | C] () -- C:\Windows\tasks\Security Center Update - 3690677127.job
[2014/01/27 15:09:41 | 000,000,798 | ---- | C] () -- C:\Windows\tasks\Security Center Update - 895077069.job
[2014/01/27 14:07:32 | 000,002,257 | ---- | C] () -- C:\Users\Public\Desktop\AVG 1-Click Maintenance.lnk
[2014/01/27 14:07:32 | 000,002,231 | ---- | C] () -- C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk
[2014/01/27 14:07:29 | 000,002,243 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2014.lnk
[2014/01/27 13:17:41 | 000,000,802 | ---- | C] () -- C:\Windows\tasks\Security Center Update - 3046702210.job
[2014/01/27 07:38:45 | 000,000,802 | ---- | C] () -- C:\Windows\tasks\Security Center Update - 4171909079.job
[2014/01/27 03:04:59 | 000,085,305 | ---- | C] () -- C:\Users\Greg\AppData\Local\rchdopoj.exe
[2014/01/26 07:09:25 | 000,101,775 | ---- | C] () -- C:\Users\Greg\AppData\Local\ujkeopan.exe
[2014/01/26 05:15:24 | 000,000,794 | ---- | C] () -- C:\Windows\tasks\Security Center Update - 3050705641.job
[2014/01/26 05:12:21 | 000,093,497 | ---- | C] () -- C:\Users\Greg\AppData\Local\kkbaqcjk.exe
[2014/01/26 04:49:21 | 000,000,790 | ---- | C] () -- C:\Windows\tasks\Security Center Update - 544442309.job
[2014/01/26 04:46:18 | 000,093,497 | ---- | C] () -- C:\Users\Greg\AppData\Local\sgfvqsaq.exe
[2014/01/26 03:18:18 | 000,000,798 | ---- | C] () -- C:\Windows\tasks\Security Center Update - 3288067138.job
[2014/01/26 01:08:12 | 000,000,794 | ---- | C] () -- C:\Windows\tasks\Security Center Update - 1139419153.job
[2014/01/26 00:42:08 | 000,000,796 | ---- | C] () -- C:\Windows\tasks\Security Center Update - 3717181098.job
[2014/01/25 23:11:06 | 000,000,798 | ---- | C] () -- C:\Windows\tasks\Security Center Update - 534460331.job
[2014/01/25 21:13:57 | 000,000,790 | ---- | C] () -- C:\Windows\tasks\Security Center Update - 2267605371.job
[2014/01/25 20:47:55 | 000,000,798 | ---- | C] () -- C:\Windows\tasks\Security Center Update - 197679845.job
[2014/01/25 19:16:50 | 000,000,802 | ---- | C] () -- C:\Windows\tasks\Security Center Update - 1252562066.job
[2014/01/25 17:19:45 | 000,000,800 | ---- | C] () -- C:\Windows\tasks\Security Center Update - 583378015.job
[2014/01/25 16:40:50 | 000,000,794 | ---- | C] () -- C:\Windows\tasks\Security Center Update - 993838087.job
[2014/01/25 12:43:18 | 000,118,073 | ---- | C] () -- C:\Users\Greg\AppData\Local\ilrmfaja.exe
[2014/01/25 11:12:14 | 000,118,073 | ---- | C] () -- C:\Users\Greg\AppData\Local\sgegfcwq.exe
[2014/01/25 09:15:08 | 000,118,073 | ---- | C] () -- C:\Users\Greg\AppData\Local\hqhwcrxs.exe
[2014/01/25 08:36:06 | 000,118,073 | ---- | C] () -- C:\Users\Greg\AppData\Local\gwbdljrn.exe
[2014/01/25 07:05:02 | 000,118,073 | ---- | C] () -- C:\Users\Greg\AppData\Local\nsobckol.exe
[2014/01/25 05:07:57 | 000,085,305 | ---- | C] () -- C:\Users\Greg\AppData\Local\ejpkggut.exe
[2014/01/25 01:13:43 | 000,085,305 | ---- | C] () -- C:\Users\Greg\AppData\Local\qqpsfhrw.exe
[2014/01/24 09:09:44 | 000,122,169 | ---- | C] () -- C:\Users\Greg\AppData\Local\qinqagfw.exe
[2014/01/23 15:53:31 | 000,000,512 | ---- | C] () -- C:\Users\Greg\Documents\MBR.dat
[2014/01/22 10:25:20 | 000,001,245 | ---- | C] () -- C:\Users\Public\Desktop\IObit Uninstaller.lnk
[2014/01/22 10:23:39 | 000,002,237 | ---- | C] () -- C:\Users\Public\Desktop\Advanced SystemCare 7.lnk
[2014/01/21 16:33:18 | 000,001,004 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Client.lnk
[2014/01/21 16:33:16 | 000,001,020 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Control Panel.lnk
[2014/01/20 16:23:47 | 000,012,326 | ---- | C] () -- C:\Users\Greg\AppData\Local\lgawiqfw
[2014/01/20 16:22:45 | 000,067,992 | ---- | C] () -- C:\Users\Greg\AppData\Local\idnlbohr
[2014/01/20 16:21:43 | 000,000,000 | ---- | C] () -- C:\Users\Greg\AppData\Roaming\SharedSettings.ccs
[2013/10/15 10:33:57 | 000,210,944 | ---- | C] () -- C:\Windows\SysWow64\msvcrt10.dll
[2012/09/14 11:38:02 | 000,000,507 | ---- | C] () -- C:\Windows\hpntwksetup.ini
[2010/11/12 06:21:00 | 000,038,435 | ---- | C] () -- C:\Users\Greg\AppData\Roaming\Microsoft Excel 97-2003.ADR
[2010/10/14 16:05:19 | 000,001,940 | ---- | C] () -- C:\Users\Greg\AppData\Local\{96C87F53-AC72-4604-A9CC-186A49F17F3C}.ini
[2010/03/23 09:58:24 | 000,007,606 | ---- | C] () -- C:\Users\Greg\AppData\Local\Resmon.ResmonCfg
[2010/02/17 09:07:50 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2009/11/13 12:03:35 | 000,000,000 | -H-- | C] () -- C:\ProgramData\PKP_DLdu.DAT
========== ZeroAccess Check ==========
[2009/07/13 22:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013/07/25 20:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013/07/25 19:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 19:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 06:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 19:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
========== LOP Check ==========
[2013/11/26 09:09:37 | 000,000,000 | ---D | M] -- C:\Users\Default\AppData\Roaming\TuneUp Software
[2013/11/26 09:09:37 | 000,000,000 | ---D | M] -- C:\Users\Default User\AppData\Roaming\TuneUp Software
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Abguitc
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Abgyuv
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Abkoele
[2014/01/23 08:32:12 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Abonap
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Abtiva
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Abzudaiv
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Acakcouv
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Acebry
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Aceqavfo
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Achaleky
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Aciscy
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ackanyy
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Acpete
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Adduzo
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Adgypyru
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Adtiybny
[2014/01/24 08:14:58 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Advyze
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Adyzsud
[2014/01/23 08:32:10 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Afkoub
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Afmazo
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Afsecoog
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Afukreha
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Agamte
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Agefodl
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Agraha
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Agsexi
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Agtuydru
[2014/01/22 10:09:35 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Aguwvoqy
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Agwayfr
[2014/01/23 08:32:12 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Agxusupo
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Agyghy
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ahbaunze
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ahbeal
[2014/01/23 08:32:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ahgufi
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ahheav
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ahqyad
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ahufdeep
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ahviqi
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ahzeyvoz
[2014/01/23 08:32:19 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Akafmi
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Akbiuc
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Akesquup
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Akfeqiif
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Akippyi
[2014/01/22 10:09:55 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Akipun
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Aknague
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Akoputve
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Akumzuyq
[2014/01/27 11:36:21 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Akymemud
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Alezhoox
[2014/01/23 08:32:17 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Algaqew
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Alocbefu
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Alosdi
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Alovqyge
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Alunho
[2014/01/28 15:28:11 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Alxonaip
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Alyvywb
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Amnuny
[2014/01/23 08:32:20 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Angeanna
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Anriis
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ansyizuw
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Anuxxad
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Apepvoyz
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Apfavoga
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Apotov
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Appiabac
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Apqeza
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Apsouh
[2014/01/27 11:38:56 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Aqidce
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Aqixyn
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Aqqutaqe
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Aqtoazk
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Arehsoiw
[2014/01/23 08:32:02 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Arerufxu
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Arfaysin
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ariwkau
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Arliykec
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Arorqeim
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Aroxquly
[2014/01/22 10:09:52 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Arzuano
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ascuiquv
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Asdyok
[2014/01/27 11:39:01 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Askenap
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Asnagovo
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Asnigy
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Asowak
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Aspeel
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Aswisa
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Asybegik
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ataqusi
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Atgaeqn
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Athian
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Atybpiq
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Atympu
[2011/03/14 13:00:05 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Autodesk
[2010/03/03 19:32:53 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Avery
[2014/01/27 14:06:51 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\AVG
[2013/10/28 21:37:51 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\AVG2014
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Avgiag
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Avihgiux
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Avmyroag
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Avrozupo
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Avzuob
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Awefevre
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Awekysug
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Awhaefep
[2014/01/23 08:32:08 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Awnyeg
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Awqaomke
[2014/01/23 08:32:09 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Awunmeu
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Awuvegfu
[2014/01/22 10:09:36 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Awytylwe
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Awyvfy
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Awzufi
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Axawcia
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Axhaonoc
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Axowil
[2014/01/23 08:32:16 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Axydgyan
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Axygale
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Azdahesa
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Azibcewo
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Azikfu
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Aztoatyp
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Azufsopi
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Azukko
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Baamkieg
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Badaebn
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Baubwaa
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Bebazuu
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Beesnait
[2014/01/29 07:26:51 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Bepypek
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Beuxahem
[2014/01/27 09:06:51 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Bevoape
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Beyzoz
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Bezaad
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Bezavuw
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Biafhu
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Biatxo
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Biibhyos
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Biigteex
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Biowwam
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Biufkuow
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Bodyucyp
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Bofyqe
[2014/01/23 08:32:07 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Bohaaqw
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Bomyyqob
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Boyqce
[2014/01/22 10:09:35 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Bozyadso
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Buefemob
[2014/01/23 08:32:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Buezyqiw
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Bufuohoc
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Buikmoa
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Buoxyta
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Butiuqce
[2014/01/23 08:32:13 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Byeqamil
[2014/01/23 08:32:19 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Byhige
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Bymoem
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Bynuynyv
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Bywuwax
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Byybemis
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Caegfau
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Caowga
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Caowlo
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Caynowul
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Caynsoxa
[2014/01/23 08:32:02 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ceaqafs
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ceefavas
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Cefeuket
[2014/01/23 08:32:15 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ceokycra
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Cepineil
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Cibiiqo
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Cihozut
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Cihuigyt
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Cilibos
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ciniiwhu
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ciryqy
[2014/01/22 10:09:52 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Cizyko
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Coavicag
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Coemulna
[2011/02/09 07:56:23 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\com.kodakgallery.AirUploader
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Cozytibi
[2013/10/28 11:48:14 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\CrashPlan
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Cubuisku
[2014/01/22 10:09:47 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Cuceiffy
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Cuenty
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Cukeyfd
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Cuvoyroc
[2014/01/29 04:42:19 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Cuwopak
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Cybourw
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Cyhyca
[2014/01/23 08:32:20 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Cyitwaos
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Cyuvif
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Daahfe
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Dabaot
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Daefodi
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Dahuwe
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Daizhuif
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Danaker
[2014/01/23 08:32:23 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Dateip
[2014/01/27 11:39:06 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Daumin
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Deidgyyx
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Deigmo
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Dekeytno
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Deokiw
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Detywon
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Diakegem
[2014/01/29 01:13:59 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Didynyd
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Difagiil
[2014/01/27 09:07:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Dimaotel
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Diohulka
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Dityucwa
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Diukom
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Diynecxi
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Diziby
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Doedodv
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Dohihiu
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Dolaef
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Dolianyk
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Doowce
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Dopiceta
[2014/01/31 16:28:01 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Dropbox
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Duacynqy
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ducuic
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Dudoypby
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Duiszuso
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Duocycy
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Duucyka
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Dyenukx
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Dyqomez
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Dyufoxf
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Dywiycky
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ebbiuc
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ebcezyu
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ebelyl
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ebilanwa
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ebohuq
[2014/01/23 08:32:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ebolah
[2010/05/04 07:04:00 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\EBookSys
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ebquwiod
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ebryag
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ebuxfut
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ebwiykon
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ecalna
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ecatut
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ecbyuxsi
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Eciwiv
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Edaglyv
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Edalby
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Edaqhe
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Edduro
[2014/01/28 09:47:22 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Edebasep
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Edkyuvv
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Edlekias
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Edqasuoh
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Edyqon
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Efagxui
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Efapzyw
[2014/01/22 10:09:53 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Efcayzdo
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Efhaabyf
[2014/01/23 08:32:18 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Efnaipk
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Efquaq
[2014/01/23 08:32:24 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Efurobb
[2014/01/27 11:39:33 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Efwivoi
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Efxovao
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Egabaxew
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Egasawba
[2014/01/27 11:39:39 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Egilhuy
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Egkeowu
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Eglecacu
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Egqeaspi
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Egqohute
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ehatnya
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ehcogeko
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ehedpifu
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ehegath
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ekmiceuk
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ekoclum
[2014/01/23 08:38:54 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ekwaun
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ekxuigc
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Elagibr
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Elobzov
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Elorer
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Elpofe
[2014/01/22 10:09:47 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Elqyerot
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Elunzoo
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Elvyxy
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Elyfsya
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Elylebz
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Elyvavg
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Emohisot
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Emsyraab
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Emumvyy
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Emurku
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Enalwo
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Enbatu
[2014/01/27 11:39:43 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Enciylm
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Enkeibuc
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ennaeg
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Enumkudy
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Epcitiu
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Epfoyhaz
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Epguvyif
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Epidwo
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Epirkew
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Epleax
[2014/01/23 08:32:05 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Eppigobu
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Epqyitku
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Epxyusah
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Epytedeh
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Eqmiiv
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Eqveoguz
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Eqxyari
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Eqxyonh
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Eqzeyvvu
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Erbuwi
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ercaewep
[2014/01/22 10:09:44 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Erekty
[2014/01/22 10:09:46 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ergaawl
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Erithied
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Erkysen
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Erlyne
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Erodneuq
[2014/01/27 11:39:48 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Erqoalu
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Erudqat
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Esawik
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Esmidoiz
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Essycua
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Esukvon
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Esvyuz
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Etabniq
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Etdoywpi
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Etehvuro
[2014/01/23 15:01:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Etgirize
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Etorex
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ettiupz
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Etuwoki
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Etuxrup
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Etwigoak
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Evagleu
[2014/01/23 15:14:58 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Evceafux
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Evfaizo
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Evibol
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Evlaiw
[2014/01/25 19:16:50 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Evniwiax
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Evnyynpu
[2014/01/23 08:32:16 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Evotyspo
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Evusufu
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ewbacax
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ewbiobf
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ewolas
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ewsuowa
[2014/01/23 08:32:22 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ewsypa
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ewuggyra
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ewuqfaiq
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Exakuxa
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Exbitayw
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Exemgypy
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Exemke
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Exocuw
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Expasa
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Expiytr
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Exwyxu
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Exykku
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Exytzogu
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Exzobubi
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Exzysey
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ezfedir
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ezgyuh
[2014/01/23 08:32:30 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ezmyhie
[2014/01/22 12:47:58 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ezuqofo
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ezzooms
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Faadik
[2014/01/22 10:09:41 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Faafulw
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Facyik
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Faloubd
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Fanipuaq
[2014/01/27 08:52:35 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Fanylyuz
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Faqyyw
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Fasaxyar
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Faupvo
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Feguequg
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Feibfa
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Femahuw
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Fetehe
[2014/01/22 10:09:53 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Feygsan
[2014/01/23 08:32:18 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Feynuw
[2014/01/23 08:32:23 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Fiahahm
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Fibupev
[2014/01/30 12:52:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Fiebniib
[2014/01/23 08:32:12 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Fifimaxi
[2010/05/31 08:05:23 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\FileZilla
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Finosy
[2014/01/22 10:09:39 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Firiec
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Fituidso
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Fixuenc
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Foipted
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Foweqibu
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Foygisd
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Fubiys
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Fuedzeu
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Fuewukym
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Fuewvux
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Fuivozy
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Fulyasuq
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Fuonado
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Fuoqim
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Fuutovhi
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Fuuzaget
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Fyfaug
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Fyfyixy
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Fyoxanuc
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Fytaky
[2014/01/27 11:39:54 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Fyveili
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Gaewezf
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Gaokyhid
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Gaqiew
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Garyqu
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Gaxuxu
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Gaykgode
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Geneudi
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Geoftiig
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Gibomi
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Gidusy
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Gienwyh
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Giertok
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Giexfy
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Gifiovob
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Gileheev
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Giomkoha
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Gipatayr
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Giulva
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Gixuirt
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Gomanoo
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Goxutus
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Guemsa
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Guhurea
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Gunoicv
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Gunyfy
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Guqoix
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Guteso
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Guveotre
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Gygian
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Gyigazb
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Gyobki
[2014/01/23 08:32:07 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Hagiti
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Hahedum
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Haivuwox
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Halios
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Hapeeren
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Hasopo
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Haunrohy
[2014/01/23 08:32:30 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Hecyufwi
[2014/01/22 10:09:42 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Hekeekse
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Hemeycb
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Heodgaih
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Hepera
[2014/01/29 07:19:48 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Hewoefv
[2014/01/25 20:47:55 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Hiahrey
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Hihiasca
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Hiqymola
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Hoecaw
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Hoexlo
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Hogoafh
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Hoilall
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Hoopisiw
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Horual
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Hoxuovbi
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Hoygypg
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Hoyxlix
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Hueqwei
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Huoxewi
[2014/01/27 11:22:41 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Huuxkui
[2014/01/22 12:50:02 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Hyecpuel
[2014/01/30 12:54:40 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Hyfoyp
[2014/01/23 08:32:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Hygiduno
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Hypaadt
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Hyymbi
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Hyypep
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Hyzybuny
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ibhyhu
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ibinhe
[2014/01/27 16:40:41 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ibkeanu
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Iblowawi
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ibunvo
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ibzayfer
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Icalfop
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Icawuq
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Icefofax
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Icoteric
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Icucuf
[2014/01/23 08:32:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Icxyqig
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Idekimaf
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ideqorad
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Idewefty
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Idihymep
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Idysaten
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ifaxtawa
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ifgaenm
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ifwyduiz
[2014/01/24 09:12:51 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ifxuyn
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ifynyn
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Igavbopy
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Igcypyr
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Igezqa
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Igigtofo
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Iginiwud
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Igomekdu
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Igpylu
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Igrysuf
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Iguvekq
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Igwuvo
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Igygalz
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Igykevyg
[2014/01/23 08:32:29 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Igzyaf
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ihawvu
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ihibexm
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ihotyl
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ihxapoza
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ihxuqy
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ikdyiri
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ikihes
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ikizmuih
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ikliysup
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Iknisaz
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Iktahe
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ikzysoo
[2014/01/23 08:32:10 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ilmuezo
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Iltuis
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Imbegyw
[2014/01/24 09:11:51 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Imdeyfa
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Imnouqif
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Imosez
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Imowzym
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Imxeax
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Inegni
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Inqoby
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Insomuo
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Invyyq
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Inygcy
[2014/01/22 10:21:16 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\IObit
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ipobgoeh
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ipyhafoq
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ipyzeml
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Iqapudp
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Iqceysa
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Iqoxbany
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Iqpapif
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Iqtehyom
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Iqubek
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Irezkoax
[2014/01/23 08:32:16 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Irhituwa
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Iriwgou
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Irtoyro
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Irzuze
[2014/01/22 10:09:44 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Isacro
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Iseneqe
[2014/01/22 10:09:43 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ishiath
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Isinhyys
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Isipoqa
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Isofiz
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Iswyuf
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Itbiotgi
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Itgienaq
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Itoqyc
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Itsedyry
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Itupno
[2014/01/25 23:11:05 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Iviprui
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ivkuwua
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ivoryqyt
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ivxays
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ivycboy
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Iwardu
[2014/01/25 16:40:50 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Iwkeoh
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Iwluop
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Iwvoly
[2014/01/22 10:09:42 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Iwxiihxu
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ixebegu
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ixevet
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ixevloci
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ixgoumh
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ixiqnix
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ixovkisa
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ixqype
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ixufuwr
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ixugok
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Izpaaf
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Iztiats
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Izvyeqha
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Izvyuhq
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Kaaqroti
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Kaciloa
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Kazaotul
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Keakiz
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Kemicic
[2014/01/23 08:32:19 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Kemyexw
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Kenawe
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Keovofte
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Keuclo
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Keufalqy
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Keyxeb
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Kilubeh
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Kimayn
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Kinolu
[2014/01/23 08:32:21 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Kiozfi
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Koarobz
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Kocyciw
[2014/01/30 12:56:47 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Kodyibc
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Koezwu
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Kogiapab
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Kootkiiv
[2014/01/29 16:00:33 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Kotopuur
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Kouwolm
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Kouxane
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Kovofeq
[2014/01/26 01:08:12 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Kowydeb
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Kozoyc
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Kumaokp
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Kuwiuby
[2014/01/30 14:47:30 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Kuyfdof
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Kuzaitlo
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Kyheugfy
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Kyiwli
[2014/01/27 07:41:17 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Kyruqui
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Kytoeqy
[2014/01/29 10:11:22 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Kyyzzy
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Lamyoppe
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Lasyzalu
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Lawuyska
[2014/01/23 08:32:03 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Layllezu
[2014/01/22 11:52:15 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Layppae
[2009/10/27 15:12:15 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Leadertech
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Leenygic
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Lefequdi
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Levabapi
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Liafite
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Liansina
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Lihugozy
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Liidle
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Liizovr
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Linake
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Liupqequ
[2014/01/27 11:40:07 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Liynuxur
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Liyqmib
[2014/01/23 08:32:13 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Lofyucg
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Loimzes
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Loiwfeky
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Loysahqo
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Luediqur
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Lupyuxel
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Luutzo
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Lybyid
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Lyecynbo
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Lyhoexgi
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Lyimyc
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Lyoluzq
[2014/01/27 11:40:00 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Lyowoww
[2014/01/23 08:32:21 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Mabadua
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Maguytam
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Maitowow
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Marauq
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Maysvot
[2014/01/22 10:09:41 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Mecyuxs
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Medymu
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Meibway
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Meihduah
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Meinizoh
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Memyqy
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Menifuux
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Meodsai
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Meokxuar
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Meuqce
[2014/01/23 08:32:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Miategz
[2014/01/22 10:09:51 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Mibadya
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Mobesic
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Moidpuxy
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Mokyif
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Moorevdu
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Moxiby
[2014/01/23 15:01:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Moxiusd
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Mualcyg
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Mubaowqe
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Mubuuhle
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Muepbuo
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Muilnyom
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Muisuha
[2014/01/23 08:32:05 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Muypzior
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Mydocyyq
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Mygoibhu
[2014/01/26 03:18:17 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Myigwoc
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Mysievi
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Myumdav
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Naadqim
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Nabaxao
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Nabyocw
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Naediqu
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Nafokyt
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Nalevo
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Naocga
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Naqeycmi
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Naroyv
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Nauliha
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Naxolesy
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Naxykure
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Naygodx
[2014/01/23 14:16:08 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Nayvfito
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Nayzpof
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Nazeuz
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Nearavf
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Neloycl
[2014/01/26 00:42:08 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Neqiqiw
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Neseku
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Nesyybq
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Nicyxyze
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Nicyzu
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Nihehoic
[2014/01/27 11:40:14 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Nimaoguz
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Niryez
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Nivivura
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Noazowco
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Noefohu
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Noelohn
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Noisediv
[2014/01/27 11:40:21 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Nomoveik
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Nuygesvi
[2014/01/23 08:32:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Nyasar
[2014/01/23 08:32:11 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Nybaloin
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Nyehny
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Nyguhi
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Nyovfyas
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Nypaza
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Nypuykyl
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Obedbi
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Oberisli
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Obmyawm
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Obubbis
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Obugego
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Obvelao
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ocisyg
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ocraip
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Octoqeog
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ocuqvy
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Odakxayk
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Odarqexu
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Odfifymy
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Odkaat
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Odovneuw
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Odxuwa
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ofagni
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Oferguek
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ofhegye
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ofuqekyd
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ofynwiy
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ogbuipun
[2014/01/27 11:40:33 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ogdoem
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ogedom
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ogitnyyz
[2014/01/27 11:40:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ogleyku
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ogococh
[2014/01/28 07:27:29 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ogolfazy
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ohenuv
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ohmoah
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ohmokyo
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ohqoiw
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Okabybod
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Okcevex
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Okeniqfy
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Okfioq
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Okolaw
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Olehuh
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Olraecix
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Olxuuf
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Omibne
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Omikam
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Omitraz
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Oniszek
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Onkeqyma
[2014/01/27 11:40:46 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Onnubiny
[2014/01/27 11:40:51 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Onpaevyb
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Onuwodte
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Onzoda
[2014/01/27 11:40:39 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Opawkol
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Opceinaf
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Opehmix
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Operpaa
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Opfage
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Opiddo
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Opipel
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Oplufufy
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Opybqo
[2014/01/23 08:32:14 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Oqcayni
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Oqevol
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Oqiwecfi
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Oretfyom
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Orfeyz
[2014/01/28 21:19:48 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Orheuqi
[2014/01/22 17:26:48 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Oribew
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Oritxy
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Osboifax
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Oscolip
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Osetku
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Osifib
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Osowycz
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Osyqny
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Otewyzo
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Otfacuro
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Otufyqd
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Otukryr
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Otxyuxd
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Otydire
[2014/01/23 08:32:25 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Otygta
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ovdeda
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ovdunyxo
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ovezfiav
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Owacbeab
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Owcagy
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Owerxiq
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Owhoidcy
[2014/01/27 11:40:59 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Owniym
[2014/01/22 11:51:37 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Owqaocu
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Owwaor
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Owzyenn
[2014/01/23 08:32:11 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Oxepigy
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Oxgyuci
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Oxinnaca
[2014/01/23 08:32:04 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Oxiwzy
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Oxqopuy
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Oxytre
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ozgyfo
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ozilyga
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ozodip
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ozsuzi
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ozuwal
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ozxioxuk
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Paevrep
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Patiuwo
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Patoikp
[2014/01/23 08:32:20 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Paweepny
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Pawuim
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Paxuicx
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Pebyaly
[2014/01/29 03:11:04 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Pegady
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Pegyake
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Penumu
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Pepopi
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Peugwail
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Peusihgu
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Pexuawo
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Peydko
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Pilead
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Pitabyug
[2014/01/23 08:32:17 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Piuszao
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Piybyg
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Piyxepo
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Pizasag
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Poagpi
[2014/01/22 17:26:59 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Pobuzu
[2014/01/23 08:32:05 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Posiuso
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Posyet
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Poumuz
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Poviyxuh
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Pudetud
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Pufapizi
[2014/01/28 20:40:57 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Punikec
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Puuwepeh
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Puyraco
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Pydyavx
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Pyiqewe
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Pyisodof
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Pyliwyq
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Pyovimy
[2014/01/22 10:09:42 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Pyrova
[2014/01/23 08:32:03 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Pyyrru
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Qaadfoi
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Qadoep
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Qainsa
[2014/01/23 08:32:30 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Qaokzu
[2014/01/30 12:52:37 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Qaseivu
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Qeakex
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Qefepuf
[2014/01/28 19:09:47 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Qeubagi
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Qiackiqo
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Qiasguc
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Qibylan
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Qieqinis
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Qigypiy
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Qiiqfi
[2014/01/23 08:32:08 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Qiofovy
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Qipoizy
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Qiulkuf
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Qiynab
[2014/01/27 11:41:11 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Qoacziwi
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Qodaziop
[2014/01/23 08:32:13 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Qoluoxcu
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Qouronv
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Qoyqyvas
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Quekir
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Qufuva
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Qunerugi
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Qybyyco
[2014/01/27 07:42:48 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Qyidyr
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Qylara
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Qyogopo
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Raedarvy
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Rakedy
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Rayxicu
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Razaqu
[2014/01/23 08:32:09 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Reduytno
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Reevipp
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Riabxaba
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Riecyb
[2014/01/27 11:41:05 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Rieqiz
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Rietku
[2014/01/22 10:09:56 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Riexzog
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Rinyci
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Riobsa
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ririho
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Risuxyx
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Rixoriu
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Roacmoe
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Rofody
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Rolyiqw
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Roukid
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Roydervi
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Rudatoi
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ruobone
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ruruxeb
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ruysatf
[2014/01/23 08:32:14 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Rytopaib
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ryudiq
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ryynkyo
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Sadohazi
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Saehykot
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Saogutz
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Saokdyu
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Saozqi
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Saozyk
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Sasuer
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Satoxyq
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Saweatah
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Seahyviw
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Seanxiu
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Sedobet
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Seedadvo
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Seehheko
[2014/01/23 08:32:06 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Segera
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Sehide
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Selagile
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Seoqeqka
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Seufyp
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Seviwe
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Sifugau
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Siicnu
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Sikoyq
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Siodqile
[2014/01/22 10:09:45 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Siquez
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Siulof
[2009/11/22 12:50:54 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\SkyGolf
[2011/03/14 13:25:33 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\SmartDraw
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Soalxui
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Sofifu
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Sopepo
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Soryat
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Sosutoyx
[2014/01/22 10:09:39 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Sotyaf
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Soutpyab
[2013/10/15 10:49:38 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Spotify
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Subomin
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Sufayfyt
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Suolyt
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Suoxxu
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Supeabu
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Sureet
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Suvaeq
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Suwuiwa
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Suykihip
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Suylok
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Suywar
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Sycogifo
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Sycuehe
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Sydocey
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Syibutqo
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Syifyneg
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Sylyixdy
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Sytoyq
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Syunheiz
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Sywyqayz
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Tafyoxy
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Taicifa
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Taogik
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Tawawy
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Tawyara
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Tedyyn
[2014/01/23 08:32:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Teezak
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Tegiruim
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Teowxio
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Teryfy
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Tewuyz
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Texuhui
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Tiaple
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Tibebyyp
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Timoar
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Tipaufi
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Tiukytem
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Tiviah
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Tivozuf
[2014/01/27 13:54:49 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Tivyma
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Tobayd
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Todyfit
[2014/01/23 08:32:21 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Toedbuwi
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Toumuwa
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Tuagku
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Tuepzov
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Tulezy
[2013/10/28 21:36:41 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\TuneUp Software
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Tuofeqn
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Tuulabi
[2014/01/22 10:09:39 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Tuzylyn
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Tycyveu
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Tyelepa
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Tyexant
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Tymoyla
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Tynehula
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Tyniot
[2014/01/27 07:41:30 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Tyqifuh
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Tyuwez
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Tyyqbel
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ubbyfeu
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ubeproda
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ubgyve
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ubhyxeyt
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ubnoveok
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ubonome
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ubytyzr
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ubyxygke
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ubzohaic
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ucacox
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ucarolar
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ucevrav
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ucgaadxy
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Uchabifo
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Uchiqo
[2014/01/28 23:16:52 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ucimqev
[2014/01/27 11:41:18 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ucivitxu
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ucpeceos
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ucqoilv
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Uctiapit
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Udaricap
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Udlyimig
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Udogezqi
[2014/01/23 15:01:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Udreto
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ufdiyrot
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Uffaaw
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ufnaam
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ufpusoan
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ufpuutfa
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ufuxki
[2014/01/23 08:32:06 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ufysza
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ugebaqp
[2014/01/22 10:09:43 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ugefuqb
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ugfobika
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Uglean
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Uglepu
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ugxioryf
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Uhkityuf
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Uhotywm
[2014/01/23 08:32:04 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Uhupumoq
[2014/01/22 11:52:32 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Uhzaidqi
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ukdumezo
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Uknitiiz
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ukruqufi
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ukycyk
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ukyruba
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ulfuyte
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ulfyus
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ullaah
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ulonez
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ulqyiq
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ulruapc
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ulteodzy
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ulynos
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ulyqbuv
[2014/01/25 17:19:45 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Umgezout
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Umkonya
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Umpapae
[2014/01/27 07:38:45 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Umypimeg
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Uncauhy
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ungazuoh
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Unziybah
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Upozto
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Upqyzea
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Upymodi
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Uqinenyp
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Uqkeihib
[2014/01/22 10:09:52 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Uqpyop
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Urciefed
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Uroxurdo
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Urutuki
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Urymmae
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Usavmixo
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Usidikg
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Usmoquod
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Usohokes
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Usonipq
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Usqyaq
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Usygyda
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Usynryim
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Utaxubdu
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Utbelyce
[2014/01/25 21:13:57 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Utegek
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Utolyq
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Utoqzou
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Utsoik
[2014/01/22 10:09:50 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Uttoer
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Utunixed
[2014/01/22 10:09:46 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Uvangy
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Uvcivoa
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Uvdoqyi
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Uvehif
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Uvhyeq
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Uvleuhax
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Uvobdy
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Uvuzwiq
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Uvvemou
[2014/01/30 14:47:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Uvwoez
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Uvyquzew
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Uwgiipot
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Uwhysoo
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Uwsilib
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Uxipaxl
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Uxobrusu
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Uxofodr
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Uxowro
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Uzemabi
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Uzfeypgu
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Uzinoqoz
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Uzqione
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Uzurux
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Uzyzevw
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Vaambibe
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Vaboqeas
[2014/01/22 10:09:38 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Vamumifa
[2014/01/23 08:32:24 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Vaumyvat
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Vawabya
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Veerduyc
[2014/01/27 11:41:24 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Vegyelf
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Vekuegy
[2014/01/30 12:54:30 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Veodbo
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Veqaiske
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Verauki
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Veubadgo
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Vezivym
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Vibiapgi
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Vibinal
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Vidyxuaw
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Viefce
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Vikaqy
[2014/01/27 13:17:41 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Visoesto
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Viyhxiqa
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Viyvuko
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Voahrucy
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Voefuxol
[2014/01/23 08:32:15 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Voefykug
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Voodyrhi
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Vopoadri
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Voylpep
[2010/06/11 12:16:16 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Vu360
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Vuakceh
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Vuepbuu
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Vuiqenle
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Vuuftok
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Vuurpe
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Vuyqka
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Vygokone
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Vyinxa
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Vypyoces
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Vywyxoxa
[2014/01/27 11:41:31 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Waarxuy
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Wafeqyel
[2014/01/23 08:32:17 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Waleomwa
[2014/01/23 08:32:08 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Wanywuu
[2014/01/27 11:41:36 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Waodir
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Waomxiw
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Waqeeqb
[2010/01/08 09:58:50 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\webex
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Wecoyzy
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Wecuyhd
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Weehap
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Wefoefan
[2014/01/23 08:32:10 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Wehimew
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Weufxoir
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Weugho
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Wewuip
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Wexoym
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Wiestob
[2014/01/27 17:19:43 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Winyop
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Wiugsy
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Wiumaxw
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Wivotiec
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Wixacu
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Wixyavi
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Woacimr
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Woedipgi
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Woomifsi
[2014/01/22 10:09:45 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Worupyz
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Woulxion
[2014/01/22 10:09:53 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Woxoyk
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Wuapegd
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Wuatbeer
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Wuenweuf
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Wunymo
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Wutyal
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Wutybi
[2014/01/23 08:32:06 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Wuypavri
[2014/01/23 08:32:14 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Wyaftyi
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Wybaunf
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Wyemafme
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Wyfaib
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Wyowuz
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Wytoir
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Wyvenu
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Wyybxy
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Xaafinpe
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Xaakfyr
[2014/01/27 11:41:42 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Xaaqibg
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Xaehazor
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Xahuerpa
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Xaimfii
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Xasitan
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Xatuidu
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Xawufi
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Xayhluy
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Xaykyf
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Xeeccyc
[2014/01/23 08:32:21 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Xegyit
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Xenuguel
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Xesyot
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Xeweebe
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Xeynaw
[2014/01/28 09:47:11 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Xibanyyr
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ximigaep
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Xionvoru
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Xiotmaqi
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Xodiowwe
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Xoegqe
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Xofuwyo
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Xoiregeh
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Xowacad
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Xowyigq
[2014/01/23 08:32:22 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Xozayke
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Xuaziwi
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Xuedpawy
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Xuigsu
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Xuixeci
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Xuliwi
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Xuloaqw
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Xuoxaty
[2014/01/22 10:09:37 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Xutuiqav
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Xuwocaw
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Xyluovu
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Xyotyvhe
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Xyukry
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Xyuzvi
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Xyvoez
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Xyyskeo
[2014/01/22 10:09:45 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Xyzagao
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ybgydi
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ybomvo
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ybraxe
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ycacmu
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ycafrio
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ycetazow
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yciqicmi
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yckabi
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ycogoq
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yconica
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ycozehez
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ycysoc
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ydezokvu
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ydkyla
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ydlaemo
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ydniiw
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ydozulbi
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ydrozez
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ydtueco
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yduhwu
[2014/01/23 08:32:11 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ydumyp
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yduniba
[2014/01/23 08:32:07 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ydurez
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ydvium
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ydxihiq
[2014/01/30 16:32:27 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ydyqkyt
[2014/01/22 10:09:55 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yfeczy
[2014/01/28 07:10:56 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yfehatt
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yfleqoso
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yfodaca
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yfvyolba
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ygagbuh
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ygekymip
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yginixy
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ygudevv
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ygxeari
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yhbuto
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yhebpyp
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yhewakb
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yhkixayk
[2014/01/27 11:41:48 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yhmauzna
[2014/01/27 11:41:53 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yhnagyu
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yhoxlues
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yhtyqua
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yhukomco
[2014/01/30 12:55:00 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yhxyfou
[2014/01/23 08:32:22 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yhyqeho
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ykeluhe
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ykeziw
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ykizhy
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ykosdara
[2014/01/22 11:57:26 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ykysusqa
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ykzupul
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ylceyged
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ylefovs
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ylerosol
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ylfezu
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ylnyilo
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yloksa
[2014/01/22 10:09:40 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yluhaszu
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yluhte
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ymasyh
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ymdiget
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ymdoce
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ymroax
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ymsyihm
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ymypigaz
[2014/01/23 08:32:04 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ymytkoiw
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ynacacag
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ynexamt
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ynexpyzo
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yngibeq
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ynlyradi
[2014/01/23 08:32:24 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ynohqeby
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ynysxa
[2013/10/15 06:59:48 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\YouSendIt
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ypadun
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ypdaewni
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ypihpua
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ypomxe
[2014/01/27 11:41:57 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ypowwez
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ypuxozaf
[2014/01/23 08:32:15 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ypwypi
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ypyter
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yqagiduf
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yqapfoix
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yqcuoziz
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yqecopef
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yqfuur
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yqinbii
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yqinpi
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yqoreb
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yqroxe
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yquwyt
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yqykyfaq
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yqyqyvyz
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yqyrhiah
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yrahizm
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yretuhyn
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yrloifni
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yrtuubaz
[2014/01/22 10:09:55 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yruwoky
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yryrxap
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ysaswif
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ysawmuc
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ysnuso
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ysobuxqy
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yspuolu
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ysuponz
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yswied
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ytomisil
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ytvieho
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ytwekoav
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yvesuhy
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yvgesuqo
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yvukut
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ywceew
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ywdeyksy
[2014/01/27 08:55:29 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ywidwa
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ywnixe
[2014/01/27 13:50:43 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ywpoqiep
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ywukloa
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ywvegyqo
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ywvusoro
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yxehifa
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yxloosod
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yxqule
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yxysam
[2014/01/22 10:09:38 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yzaklie
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yzalynk
[2014/01/27 11:42:03 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yzbiero
[2014/01/22 10:09:36 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yzihohf
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yzluti
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yzrebiu
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yzweoqza
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Yzybyhmu
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Zacaes
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Zamyamap
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Zaoqix
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Zaovykq
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Zebyivqo
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Zeebqii
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Zeevzyu
[2014/01/30 12:56:57 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Zefuaqs
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Zeinre
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Zerowosy
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Zetucyw
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ziackuul
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ziceul
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Zifequ
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Ziqaopw
[2014/01/23 08:32:09 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Zixave
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Zodadiec
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Zoevgiu
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Zoodma
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Zovuiqsu
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Zoyqyz
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Zozegyu
[2014/01/22 10:09:51 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Zualohyr
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Zubisuel
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Zucowo
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Zupuuz
[2014/01/23 08:32:18 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Zuquew
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Zuvyakr
[2014/01/27 11:42:08 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Zuzyypix
[2014/01/28 17:13:05 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Zyelpy
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Zyikwady
[2014/01/23 15:01:28 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Zyyfywby
[2014/01/22 10:09:46 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Zyzudos
========== Purity Check ==========
< End of report >
WOW :lip:
Download ComboFix from one of these locations:
Link 1 (http://download.bleepingcomputer.com/sUBs/ComboFix.exe)
Link 2 (http://www.forospyware.com/sUBs/ComboFix.exe)
* IMPORTANT !!! Save ComboFix.exe to your Desktop
Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools
See this Link (http://www.bleepingcomputer.com/forums/topic114351.html) for programs that need to be disabled and instruction on how to disable them.
Remember to re-enable them when we're done.
Double click on ComboFix.exe & follow the prompts.
As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.
http://img.photobucket.com/albums/v706/ried7/RC1.png
Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:
http://img.photobucket.com/albums/v706/ried7/RC2-1.png
Click on Yes, to continue scanning for malware.
When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.
*If there is no internet connection when Combofix has completely finished then restart your computer to restore back the connections.
ComboFix 14-02-01.01 - Greg 02/01/2014 11:36:46.1.4 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.8126.3868 [GMT -6:00]
Running from: c:\users\Greg\Desktop\ComboFix.exe
AV: AVG Internet Security 2014 *Disabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
FW: AVG Internet Security 2014 *Enabled* {36AFA1E1-4CDC-7EF8-11EE-C77C3581ABA2}
SP: AVG Internet Security 2014 *Disabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Greg\AppData\Local\aafeeshi.exe
c:\users\Greg\AppData\Local\assembly\tmp
c:\users\Greg\AppData\Local\assembly\tmp\807LSQRX\__AssemblyInfo__.ini
c:\users\Greg\AppData\Local\assembly\tmp\807LSQRX\DYMO.DLS.DLL
c:\users\Greg\AppData\Local\assembly\tmp\9IY5KXCM\DymoAddinUI.DLL
c:\users\Greg\AppData\Local\brmtolcu.exe
c:\users\Greg\AppData\Local\ejpkggut.exe
c:\users\Greg\AppData\Local\fkmfqxif.exe
c:\users\Greg\AppData\Local\gwbdljrn.exe
c:\users\Greg\AppData\Local\hqhwcrxs.exe
c:\users\Greg\AppData\Local\ilrmfaja.exe
c:\users\Greg\AppData\Local\kkbaqcjk.exe
c:\users\Greg\AppData\Local\ktmprolk.exe
c:\users\Greg\AppData\Local\lsstmonh.exe
c:\users\Greg\AppData\Local\nsobckol.exe
c:\users\Greg\AppData\Local\qinqagfw.exe
c:\users\Greg\AppData\Local\qqpsfhrw.exe
c:\users\Greg\AppData\Local\rchdopoj.exe
c:\users\Greg\AppData\Local\sgegfcwq.exe
c:\users\Greg\AppData\Local\sgfvqsaq.exe
c:\users\Greg\AppData\Local\sidiwlea.exe
c:\users\Greg\AppData\Local\ujkeopan.exe
c:\users\Greg\AppData\Roaming\Pegady
c:\users\Greg\AppData\Roaming\Pegady\qaagil.exe
c:\users\Greg\AppData\Roaming\Utegek
c:\users\Greg\AppData\Roaming\Utegek\qibae.exe
c:\users\Greg\AppData\Roaming\Winyop
c:\users\Greg\AppData\Roaming\Winyop\xipaux.exe
c:\users\Greg\Documents\Readiris.DUS
c:\windows\TEMP\jna7546138428887422705.dll
.
.
((((((((((((((((((((((((( Files Created from 2014-01-01 to 2014-02-01 )))))))))))))))))))))))))))))))
.
.
2014-01-31 02:25 . 2014-01-31 02:25 -------- d-----w- c:\program files (x86)\ERUNT
2014-01-30 17:14 . 2014-01-30 18:56 -------- d-----w- c:\users\Greg\AppData\Roaming\Kodyibc
2014-01-29 22:00 . 2014-01-29 22:00 -------- d-----w- c:\users\Greg\AppData\Roaming\Kotopuur
2014-01-29 20:11 . 2014-01-30 20:47 -------- d-----w- c:\users\Greg\AppData\Roaming\Kuyfdof
2014-01-29 13:19 . 2014-01-29 13:19 -------- d-----w- c:\users\Greg\AppData\Roaming\Hewoefv
2014-01-29 10:42 . 2014-01-29 10:42 -------- d-----w- c:\users\Greg\AppData\Roaming\Cuwopak
2014-01-29 07:13 . 2014-01-29 07:13 -------- d-----w- c:\users\Greg\AppData\Roaming\Didynyd
2014-01-29 06:48 . 2014-01-29 16:11 -------- d-----w- c:\users\Greg\AppData\Roaming\Kyyzzy
2014-01-29 03:19 . 2014-01-29 03:19 -------- d-----w- c:\users\Greg\AppData\Roaming\Orheuqi
2014-01-29 02:40 . 2014-01-29 02:40 -------- d-----w- c:\users\Greg\AppData\Roaming\Punikec
2014-01-29 01:09 . 2014-01-29 01:09 -------- d-----w- c:\users\Greg\AppData\Roaming\Qeubagi
2014-01-28 22:46 . 2014-01-29 13:26 -------- d-----w- c:\users\Greg\AppData\Roaming\Bepypek
2014-01-28 17:20 . 2014-01-28 21:28 -------- d-----w- c:\users\Greg\AppData\Roaming\Alxonaip
2014-01-28 15:07 . 2014-01-28 15:47 -------- d-----w- c:\users\Greg\AppData\Roaming\Edebasep
2014-01-28 13:22 . 2014-01-28 13:27 -------- d-----w- c:\users\Greg\AppData\Roaming\Ogolfazy
2014-01-28 01:16 . 2014-01-30 18:52 -------- d-----w- c:\users\Greg\AppData\Roaming\Fiebniib
2014-01-27 22:40 . 2014-01-27 22:40 -------- d-----w- c:\users\Greg\AppData\Roaming\Ibkeanu
2014-01-27 21:09 . 2014-01-30 18:52 -------- d-----w- c:\users\Greg\AppData\Roaming\Qaseivu
2014-01-27 20:07 . 2013-12-18 15:38 40248 ----a-w- c:\windows\system32\TURegOpt.exe
2014-01-27 20:07 . 2013-12-18 15:38 29496 ----a-w- c:\windows\system32\authuitu.dll
2014-01-27 20:07 . 2013-12-18 15:38 25400 ----a-w- c:\windows\SysWow64\authuitu.dll
2014-01-27 20:06 . 2014-01-27 20:06 -------- d-----w- c:\users\Greg\AppData\Roaming\AVG
2014-01-27 19:56 . 2014-01-28 13:29 -------- d-----w- c:\programdata\AVG
2014-01-27 19:55 . 2014-01-28 15:47 -------- d-sh--w- c:\programdata\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-01-27 17:20 . 2014-01-27 17:22 -------- d-----w- c:\users\Greg\AppData\Roaming\Huuxkui
2014-01-27 15:07 . 2014-01-27 15:07 -------- d-----w- c:\users\Greg\AppData\Roaming\Dimaotel
2014-01-27 15:06 . 2014-01-27 15:06 -------- d-----w- c:\users\Greg\AppData\Roaming\Bevoape
2014-01-27 09:08 . 2014-01-27 17:36 -------- d-----w- c:\users\Greg\AppData\Roaming\Akymemud
2014-01-27 07:10 . 2014-01-27 17:40 -------- d-----w- c:\users\Greg\AppData\Roaming\Ogdoem
2014-01-27 05:13 . 2014-01-27 17:40 -------- d-----w- c:\users\Greg\AppData\Roaming\Nomoveik
2014-01-27 03:16 . 2014-01-27 17:40 -------- d-----w- c:\users\Greg\AppData\Roaming\Onnubiny
2014-01-27 02:50 . 2014-01-27 17:40 -------- d-----w- c:\users\Greg\AppData\Roaming\Ogleyku
2014-01-27 01:19 . 2014-01-27 17:39 -------- d-----w- c:\users\Greg\AppData\Roaming\Fyveili
2014-01-26 22:43 . 2014-01-27 17:39 -------- d-----w- c:\users\Greg\AppData\Roaming\Erqoalu
2014-01-26 21:12 . 2014-01-27 17:39 -------- d-----w- c:\users\Greg\AppData\Roaming\Egilhuy
2014-01-26 19:15 . 2014-01-27 17:41 -------- d-----w- c:\users\Greg\AppData\Roaming\Qoacziwi
2014-01-26 17:17 . 2014-01-27 17:40 -------- d-----w- c:\users\Greg\AppData\Roaming\Onpaevyb
2014-01-26 15:09 . 2014-01-27 17:40 -------- d-----w- c:\users\Greg\AppData\Roaming\Lyowoww
2014-01-26 13:12 . 2014-01-27 14:52 -------- d-----w- c:\users\Greg\AppData\Roaming\Fanylyuz
2014-01-26 11:15 . 2014-01-30 18:54 -------- d-----w- c:\users\Greg\AppData\Roaming\Hyfoyp
2014-01-26 09:18 . 2014-01-26 09:18 -------- d-----w- c:\users\Greg\AppData\Roaming\Myigwoc
2014-01-26 07:08 . 2014-01-26 07:08 -------- d-----w- c:\users\Greg\AppData\Roaming\Kowydeb
2014-01-26 06:42 . 2014-01-26 06:42 -------- d-----w- c:\users\Greg\AppData\Roaming\Neqiqiw
2014-01-26 05:11 . 2014-01-26 05:11 -------- d-----w- c:\users\Greg\AppData\Roaming\Iviprui
2014-01-26 02:47 . 2014-01-26 02:47 -------- d-----w- c:\users\Greg\AppData\Roaming\Hiahrey
2014-01-26 01:16 . 2014-01-26 01:16 -------- d-----w- c:\users\Greg\AppData\Roaming\Evniwiax
2014-01-25 22:40 . 2014-01-25 22:40 -------- d-----w- c:\users\Greg\AppData\Roaming\Iwkeoh
2014-01-25 21:09 . 2014-01-27 13:42 -------- d-----w- c:\users\Greg\AppData\Roaming\Qyidyr
2014-01-25 17:15 . 2014-01-27 17:39 -------- d-----w- c:\users\Greg\AppData\Roaming\Enciylm
2014-01-25 15:18 . 2014-01-27 17:40 -------- d-----w- c:\users\Greg\AppData\Roaming\Opawkol
2014-01-25 13:08 . 2014-01-27 17:39 -------- d-----w- c:\users\Greg\AppData\Roaming\Daumin
2014-01-25 09:13 . 2014-01-27 17:39 -------- d-----w- c:\users\Greg\AppData\Roaming\Efwivoi
2014-01-25 05:19 . 2014-01-27 17:40 -------- d-----w- c:\users\Greg\AppData\Roaming\Owniym
2014-01-25 03:09 . 2014-01-27 17:40 -------- d-----w- c:\users\Greg\AppData\Roaming\Liynuxur
2014-01-25 02:43 . 2014-01-27 17:38 -------- d-----w- c:\users\Greg\AppData\Roaming\Aqidce
2014-01-24 23:14 . 2014-01-27 17:41 -------- d-----w- c:\users\Greg\AppData\Roaming\Rieqiz
2014-01-24 21:17 . 2014-01-27 17:39 -------- d-----w- c:\users\Greg\AppData\Roaming\Askenap
2014-01-24 18:41 . 2014-01-27 17:40 -------- d-----w- c:\users\Greg\AppData\Roaming\Nimaoguz
2014-01-24 15:12 . 2014-01-27 13:41 -------- d-----w- c:\users\Greg\AppData\Roaming\Kyruqui
2014-01-24 14:46 . 2014-01-24 15:12 -------- d-----w- c:\users\Greg\AppData\Roaming\Ifxuyn
2014-01-24 13:42 . 2014-01-24 15:11 -------- d-----w- c:\users\Greg\AppData\Roaming\Imdeyfa
2014-01-23 22:45 . 2014-01-24 14:14 -------- d-----w- c:\users\Greg\AppData\Roaming\Advyze
2014-01-23 21:13 . 2014-01-23 21:14 -------- d-----w- c:\users\Greg\AppData\Roaming\Evceafux
2014-01-23 16:02 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Azikfu
2014-01-23 16:02 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Difagiil
2014-01-23 16:01 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Fixuenc
2014-01-23 16:00 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Agtuydru
2014-01-23 16:00 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Ebbiuc
2014-01-23 15:59 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Cyuvif
2014-01-23 15:58 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Lefequdi
2014-01-23 15:57 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Sureet
2014-01-23 15:55 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Cuvoyroc
2014-01-23 15:55 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Saozyk
2014-01-23 15:54 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Agraha
2014-01-23 15:53 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Giertok
2014-01-23 15:52 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Asnagovo
2014-01-23 15:51 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Caynowul
2014-01-23 15:50 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Fulyasuq
2014-01-23 15:48 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Cubuisku
2014-01-23 15:46 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Naygodx
2014-01-23 15:45 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Ovdeda
2014-01-23 15:44 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Moxiby
2014-01-23 15:44 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Saokdyu
2014-01-23 15:43 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Kyiwli
2014-01-23 15:42 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Elorer
2014-01-23 15:42 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Ipobgoeh
2014-01-23 15:41 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Hapeeren
2014-01-23 15:40 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Lyhoexgi
2014-01-23 15:40 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Iltuis
2014-01-23 15:39 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Liafite
2014-01-23 15:38 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Insomuo
2014-01-23 15:36 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Daahfe
2014-01-23 15:35 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Iswyuf
2014-01-23 15:34 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Ohmoah
2014-01-23 15:34 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Naxolesy
2014-01-23 15:33 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Hoyxlix
2014-01-23 15:33 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Ewsuowa
2014-01-23 15:32 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Aqqutaqe
2014-01-23 15:32 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Ivxays
2014-01-23 15:31 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Achaleky
2014-01-23 15:30 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Rofody
2014-01-23 15:30 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Aroxquly
2014-01-23 15:29 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Moxiusd
2014-01-23 15:28 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Exzysey
2014-01-23 15:28 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Odkaat
2014-01-23 15:27 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Ihawvu
2014-01-23 15:27 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Ezfedir
2014-01-23 15:26 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Avrozupo
2014-01-23 15:26 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Badaebn
2014-01-23 15:26 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Axowil
2014-01-23 15:25 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Awzufi
2014-01-23 15:24 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Orfeyz
2014-01-23 15:24 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Faupvo
2014-01-23 15:23 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Dekeytno
2014-01-23 15:23 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Elvyxy
2014-01-23 15:22 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Oretfyom
2014-01-23 15:22 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Appiabac
2014-01-23 15:22 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Roukid
2014-01-23 15:22 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Ovdunyxo
2014-01-23 15:21 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Ruobone
2014-01-23 15:20 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Awekysug
2014-01-23 15:20 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Qiynab
2014-01-23 15:19 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Foweqibu
2014-01-23 15:18 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Gifiovob
2014-01-23 15:18 . 2014-01-23 21:01 -------- d-----w- c:\users\Greg\AppData\Roaming\Axawcia
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-01-21 22:32 . 2013-10-15 16:53 35656 ----a-w- c:\windows\system32\LMIport.dll
2014-01-21 22:32 . 2013-10-15 16:53 107368 ----a-w- c:\windows\system32\LMIRfsClientNP.dll
2014-01-21 22:32 . 2013-10-15 16:53 92488 ----a-w- c:\windows\system32\LMIinit.dll
2014-01-16 09:01 . 2009-10-27 15:19 86054176 ----a-w- c:\windows\system32\MRT.exe
2013-12-16 14:46 . 2013-10-15 16:53 107368 ----a-w- c:\windows\system32\LMIRfsClientNP.dll.000.bak
2013-12-13 14:53 . 2012-04-12 13:04 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-12-13 14:53 . 2011-06-13 12:11 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-11-26 11:54 . 2013-12-13 16:48 23183360 ----a-w- c:\windows\system32\mshtml.dll
2013-11-26 10:19 . 2013-12-13 16:48 2724864 ----a-w- c:\windows\system32\mshtml.tlb
2013-11-26 10:18 . 2013-12-13 16:48 4096 ----a-w- c:\windows\system32\ieetwcollectorres.dll
2013-11-26 09:48 . 2013-12-13 16:48 66048 ----a-w- c:\windows\system32\iesetup.dll
2013-11-26 09:46 . 2013-12-13 16:48 48640 ----a-w- c:\windows\system32\ieetwproxystub.dll
2013-11-26 09:41 . 2013-12-13 16:48 2764288 ----a-w- c:\windows\system32\iertutil.dll
2013-11-26 09:29 . 2013-12-13 16:48 53760 ----a-w- c:\windows\system32\jsproxy.dll
2013-11-26 09:27 . 2013-12-13 16:48 33792 ----a-w- c:\windows\system32\iernonce.dll
2013-11-26 09:23 . 2013-12-13 16:48 2724864 ----a-w- c:\windows\SysWow64\mshtml.tlb
2013-11-26 09:21 . 2013-12-13 16:48 574976 ----a-w- c:\windows\system32\ieui.dll
2013-11-26 09:18 . 2013-12-13 16:48 139264 ----a-w- c:\windows\system32\ieUnatt.exe
2013-11-26 09:18 . 2013-12-13 16:48 111616 ----a-w- c:\windows\system32\ieetwcollector.exe
2013-11-26 09:16 . 2013-12-13 16:48 708608 ----a-w- c:\windows\system32\jscript9diag.dll
2013-11-26 09:03 . 2013-11-26 09:03 940032 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-11-26 09:03 . 2013-11-26 09:03 194048 ----a-w- c:\windows\SysWow64\elshyph.dll
2013-11-26 09:03 . 2013-11-26 09:03 71680 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2013-11-26 09:03 . 2013-11-26 09:03 645120 ----a-w- c:\windows\SysWow64\jsIntl.dll
2013-11-26 09:03 . 2013-11-26 09:03 235008 ----a-w- c:\windows\system32\elshyph.dll
2013-11-26 09:03 . 2013-11-26 09:03 182272 ----a-w- c:\windows\SysWow64\msls31.dll
2013-11-26 09:03 . 2013-11-26 09:03 62464 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-11-26 09:03 . 2013-11-26 09:03 61952 ----a-w- c:\windows\SysWow64\iesetup.dll
2013-11-26 09:03 . 2013-11-26 09:03 34816 ----a-w- c:\windows\SysWow64\JavaScriptCollectionAgent.dll
2013-11-26 09:03 . 2013-11-26 09:03 337408 ----a-w- c:\windows\SysWow64\html.iec
2013-11-26 09:03 . 2013-11-26 09:03 24576 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-11-26 09:03 . 2013-11-26 09:03 151552 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-11-26 09:03 . 2013-11-26 09:03 139264 ----a-w- c:\windows\SysWow64\wextract.exe
2013-11-26 09:03 . 2013-11-26 09:03 1051136 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2013-11-26 09:03 . 2013-11-26 09:03 942592 ----a-w- c:\windows\system32\jsIntl.dll
2013-11-26 09:03 . 2013-11-26 09:03 86016 ----a-w- c:\windows\SysWow64\iesysprep.dll
2013-11-26 09:03 . 2013-11-26 09:03 86016 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2013-11-26 09:03 . 2013-11-26 09:03 74240 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-11-26 09:03 . 2013-11-26 09:03 61952 ----a-w- c:\windows\SysWow64\MshtmlDac.dll
2013-11-26 09:03 . 2013-11-26 09:03 51200 ----a-w- c:\windows\SysWow64\ieetwproxystub.dll
2013-11-26 09:03 . 2013-11-26 09:03 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-11-26 09:03 . 2013-11-26 09:03 454656 ----a-w- c:\windows\SysWow64\vbscript.dll
2013-11-26 09:03 . 2013-11-26 09:03 36352 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-11-26 09:03 . 2013-11-26 09:03 13312 ----a-w- c:\windows\SysWow64\mshta.exe
2013-11-26 09:03 . 2013-11-26 09:03 112128 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2013-11-26 09:03 . 2013-11-26 09:03 111616 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-11-26 09:03 . 2013-11-26 09:03 90112 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-11-26 09:03 . 2013-11-26 09:03 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-11-26 09:03 . 2013-11-26 09:03 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-11-26 09:03 . 2013-11-26 09:03 247808 ----a-w- c:\windows\system32\msls31.dll
2013-11-26 09:03 . 2013-11-26 09:03 195584 ----a-w- c:\windows\system32\msrating.dll
2013-11-26 09:03 . 2013-11-26 09:03 13312 ----a-w- c:\windows\system32\msfeedssync.exe
2013-11-26 09:03 . 2013-11-26 09:03 131072 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-11-26 09:03 . 2013-11-26 09:03 105984 ----a-w- c:\windows\system32\iesysprep.dll
2013-11-26 09:03 . 2013-11-26 09:03 77312 ----a-w- c:\windows\system32\tdc.ocx
2013-11-26 09:03 . 2013-11-26 09:03 616104 ----a-w- c:\windows\system32\ieapfltr.dat
2013-11-26 09:03 . 2013-11-26 09:03 453120 ----a-w- c:\windows\system32\dxtmsft.dll
2013-11-26 09:03 . 2013-11-26 09:03 413696 ----a-w- c:\windows\system32\html.iec
2013-11-26 09:03 . 2013-11-26 09:03 40448 ----a-w- c:\windows\system32\JavaScriptCollectionAgent.dll
2013-11-26 09:03 . 2013-11-26 09:03 296960 ----a-w- c:\windows\system32\dxtrans.dll
2013-11-26 09:03 . 2013-11-26 09:03 81408 ----a-w- c:\windows\system32\icardie.dll
2013-11-26 09:03 . 2013-11-26 09:03 84992 ----a-w- c:\windows\system32\mshtmled.dll
2013-11-26 09:03 . 2013-11-26 09:03 83968 ----a-w- c:\windows\system32\MshtmlDac.dll
2013-11-26 09:03 . 2013-11-26 09:03 774144 ----a-w- c:\windows\system32\jscript.dll
2013-11-26 09:03 . 2013-11-26 09:03 626176 ----a-w- c:\windows\system32\msfeeds.dll
2013-11-26 09:03 . 2013-11-26 09:03 62464 ----a-w- c:\windows\system32\pngfilt.dll
2013-11-26 09:03 . 2013-11-26 09:03 548352 ----a-w- c:\windows\system32\vbscript.dll
2013-11-26 09:03 . 2013-11-26 09:03 30208 ----a-w- c:\windows\system32\licmgr10.dll
2013-11-26 09:03 . 2013-11-26 09:03 263376 ----a-w- c:\windows\system32\iedkcs32.dll
2013-11-26 09:03 . 2013-11-26 09:03 243200 ----a-w- c:\windows\system32\webcheck.dll
2013-11-26 09:03 . 2013-11-26 09:03 235520 ----a-w- c:\windows\system32\url.dll
2013-11-26 09:03 . 2013-11-26 09:03 167424 ----a-w- c:\windows\system32\iexpress.exe
2013-11-26 09:03 . 2013-11-26 09:03 147968 ----a-w- c:\windows\system32\occache.dll
2013-11-26 09:03 . 2013-11-26 09:03 143872 ----a-w- c:\windows\system32\wextract.exe
2013-11-26 09:03 . 2013-11-26 09:03 13824 ----a-w- c:\windows\system32\mshta.exe
2013-11-26 09:03 . 2013-11-26 09:03 1228800 ----a-w- c:\windows\system32\mshtmlmedia.dll
2013-11-26 09:03 . 2013-11-26 09:03 101376 ----a-w- c:\windows\system32\inseng.dll
2013-11-26 09:03 . 2013-11-26 09:03 48128 ----a-w- c:\windows\system32\imgutil.dll
2013-11-26 09:03 . 2013-11-26 09:03 135680 ----a-w- c:\windows\system32\iepeers.dll
2013-11-26 08:57 . 2013-12-13 16:48 218624 ----a-w- c:\windows\system32\ie4uinit.exe
2013-11-26 08:35 . 2013-12-13 16:48 5769216 ----a-w- c:\windows\system32\jscript9.dll
2013-11-26 08:28 . 2013-12-13 16:48 553472 ----a-w- c:\windows\SysWow64\jscript9diag.dll
2013-11-26 08:16 . 2013-12-13 16:48 4243968 ----a-w- c:\windows\SysWow64\jscript9.dll
2013-11-26 08:02 . 2013-12-13 16:48 1995264 ----a-w- c:\windows\system32\inetcpl.cpl
2013-11-26 07:48 . 2013-12-13 16:48 12996608 ----a-w- c:\windows\system32\ieframe.dll
2013-11-26 07:32 . 2013-12-13 16:48 1928192 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2013-11-26 07:07 . 2013-12-13 16:48 2334208 ----a-w- c:\windows\system32\wininet.dll
2013-11-26 06:40 . 2013-12-13 16:48 1395200 ----a-w- c:\windows\system32\urlmon.dll
2013-11-26 06:34 . 2013-12-13 16:48 817664 ----a-w- c:\windows\system32\ieapfltr.dll
2013-11-26 06:33 . 2013-12-13 16:48 1820160 ----a-w- c:\windows\SysWow64\wininet.dll
2013-11-23 18:26 . 2013-12-13 14:57 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll
2013-11-23 17:47 . 2013-12-13 14:57 465920 ----a-w- c:\windows\system32\WMPhoto.dll
2013-11-12 02:23 . 2013-12-13 14:57 2048 ----a-w- c:\windows\system32\tzres.dll
2013-11-12 02:07 . 2013-12-13 14:57 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2013-11-06 03:55 . 2013-11-06 03:55 150808 ----a-w- c:\windows\system32\drivers\avgdiska.sys
2013-11-05 03:52 . 2013-11-05 03:52 240920 ----a-w- c:\windows\system32\drivers\avgidsdrivera.sys
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00001YSISyncComplete]
@="{89B5F9CC-C4A2-462C-BD27-29CEAC972135}"
[HKEY_CLASSES_ROOT\CLSID\{89B5F9CC-C4A2-462C-BD27-29CEAC972135}]
2012-10-16 17:19 2751608 ----a-w- c:\program files (x86)\YouSendIt Desktop App\YSINSE.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00002YSISyncActive]
@="{84B7BDFB-C50A-4335-B7C2-8AEC454F9E25}"
[HKEY_CLASSES_ROOT\CLSID\{84B7BDFB-C50A-4335-B7C2-8AEC454F9E25}]
2012-10-16 17:19 2751608 ----a-w- c:\program files (x86)\YouSendIt Desktop App\YSINSE.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00003YSISyncError]
@="{306A9CDE-AC70-453A-8008-B5F9962B8F88}"
[HKEY_CLASSES_ROOT\CLSID\{306A9CDE-AC70-453A-8008-B5F9962B8F88}]
2012-10-16 17:19 2751608 ----a-w- c:\program files (x86)\YouSendIt Desktop App\YSINSE.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00004YSILocalOnly]
@="{23A7D2DC-F395-4E33-876C-84A2DFAB0EBB}"
[HKEY_CLASSES_ROOT\CLSID\{23A7D2DC-F395-4E33-876C-84A2DFAB0EBB}]
2012-10-16 17:19 2751608 ----a-w- c:\program files (x86)\YouSendIt Desktop App\YSINSE.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 131248 ----a-w- c:\users\Greg\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 131248 ----a-w- c:\users\Greg\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 131248 ----a-w- c:\users\Greg\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ISUSPM Startup"="c:\program files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe" [2005-08-11 249856]
"iCloudServices"="c:\program files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe" [2013-11-20 59720]
"ApplePhotoStreams"="c:\program files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe" [2013-11-20 59720]
"FreeDesktopTimer"="c:\program files (x86)\Free Desktop Timer\DesktopTimer.exe" [2013-01-26 623616]
"FreeCT"="c:\program files (x86)\FreeCountdownTimer\FreeCountdownTimer.exe" [2013-10-28 2196760]
"Advanced SystemCare 7"="c:\program files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe" [2013-12-09 2285344]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"DLSService"="c:\program files (x86)\DYMO\DYMO Label Software\DLSService.exe" [2010-05-11 55808]
"Microsoft Default Manager"="c:\program files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" [2010-05-10 439568]
"BrMfcWnd"="c:\program files (x86)\Brother\Brmfcmon\BrMfcWnd.exe" [2009-05-26 1159168]
"ControlCenter3"="c:\program files (x86)\Brother\ControlCenter3\brctrcen.exe" [2008-12-24 114688]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-22 59720]
"HP Software Update"="c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe" [2011-10-28 49208]
"HPUsageTrackingLEDM"="c:\program files (x86)\HP\HP UT LEDM\bin\hppusg.exe" [2009-08-04 30264]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
"AVG_UI"="c:\program files (x86)\AVG\AVG2014\avgui.exe" [2013-11-08 4956176]
"CaddieSyncConduit"="c:\program files (x86)\SkyGolf\CaddieSync Express\CaddieSyncExpress.exe" [2013-05-08 2544960]
.
c:\users\Greg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\Greg\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2014-1-2 30714328]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
CrashPlan Tray.lnk - c:\program files\CrashPlan\CrashPlanTray.exe [2013-4-8 209920]
Dyn Updater Tray Icon.lnk - c:\program files (x86)\DynDNS Updater\DynTray.exe [2011-11-15 78192]
Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2009-10-27 1207312]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 btwampfl;btwampfl;c:\windows\system32\DRIVERS\btwampfl.sys;c:\windows\SYSNATIVE\DRIVERS\btwampfl.sys [x]
R3 ControlTransferDriver;AudioBox USB Control Transfer;c:\windows\system32\Drivers\PreSonusUsb_xfer.sys;c:\windows\SYSNATIVE\Drivers\PreSonusUsb_xfer.sys [x]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 PRESONUS_AUDIOBOX_MIDI;Presonus AudioBox WDM MIDI Device;c:\windows\system32\drivers\psabusbm.sys;c:\windows\SYSNATIVE\drivers\psabusbm.sys [x]
R3 PRESONUS_AUDIOBOX_USB;Presonus AudioBox USB driver;c:\windows\system32\Drivers\psabusbu.sys;c:\windows\SYSNATIVE\Drivers\psabusbu.sys [x]
R3 PRESONUS_AUDIOBOX_WDM;Presonus AudioBox USB WDM;c:\windows\system32\drivers\psabusba.sys;c:\windows\SYSNATIVE\drivers\psabusba.sys [x]
R3 preSonusUsb;preSonusUsb;c:\windows\system32\Drivers\preSonusUsb.sys;c:\windows\SYSNATIVE\Drivers\preSonusUsb.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 silabenm;Silicon Labs CP210x USB to UART Bridge Serial Port Enumerator Driver;c:\windows\system32\DRIVERS\silabenm.sys;c:\windows\SYSNATIVE\DRIVERS\silabenm.sys [x]
R3 silabser;Silicon Labs CP210x USB to UART Bridge Driver;c:\windows\system32\DRIVERS\silabser.sys;c:\windows\SYSNATIVE\DRIVERS\silabser.sys [x]
R3 SkyhawkeUSBLan;SkyhawkeUSBLan;c:\windows\system32\DRIVERS\btblan.sys;c:\windows\SYSNATIVE\DRIVERS\btblan.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsha.sys [x]
S0 Avgloga;AVG Logging Driver;c:\windows\system32\DRIVERS\avgloga.sys;c:\windows\SYSNATIVE\DRIVERS\avgloga.sys [x]
S0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgmfx64.sys [x]
S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgrkx64.sys [x]
S1 Avgdiska;AVG Disk Driver;c:\windows\system32\DRIVERS\avgdiska.sys;c:\windows\SYSNATIVE\DRIVERS\avgdiska.sys [x]
S1 Avgfwfd;AVG network filter service;c:\windows\system32\DRIVERS\avgfwd6a.sys;c:\windows\SYSNATIVE\DRIVERS\avgfwd6a.sys [x]
S1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsdrivera.sys [x]
S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgldx64.sys [x]
S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys;c:\windows\SYSNATIVE\DRIVERS\avgtdia.sys [x]
S2 AdvancedSystemCareService7;Advanced SystemCare Service 7;c:\program files (x86)\IObit\Advanced SystemCare 7\ASCService.exe;c:\program files (x86)\IObit\Advanced SystemCare 7\ASCService.exe [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 avgfws;AVG Firewall;c:\program files (x86)\AVG\AVG2014\avgfws.exe;c:\program files (x86)\AVG\AVG2014\avgfws.exe [x]
S2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2014\avgidsagent.exe;c:\program files (x86)\AVG\AVG2014\avgidsagent.exe [x]
S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2014\avgwdsvc.exe;c:\program files (x86)\AVG\AVG2014\avgwdsvc.exe [x]
S2 BcmBtRSupport;Bluetooth Driver Management Service;c:\windows\system32\BtwRSupportService.exe;c:\windows\SYSNATIVE\BtwRSupportService.exe [x]
S2 BingDesktopUpdate;Bing Desktop Update service;c:\program files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe;c:\program files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [x]
S2 CrashPlanService;CrashPlan Backup Service;c:\program files\CrashPlan\CrashPlanService.exe;c:\program files\CrashPlan\CrashPlanService.exe [x]
S2 DymoPnpService;DYMO PnP Service;c:\program files (x86)\DYMO\DYMO Label Software\DymoPnpService.exe;c:\program files (x86)\DYMO\DYMO Label Software\DymoPnpService.exe [x]
S2 Dyn Updater;Dyn Updater;c:\program files (x86)\DynDNS Updater\DynUpSvc.exe;c:\program files (x86)\DynDNS Updater\DynUpSvc.exe [x]
S2 File Backup;File Backup Service;c:\program files (x86)\Workspace\offSyncService.exe;c:\program files (x86)\Workspace\offSyncService.exe [x]
S2 HP LaserJet Service;HP LaserJet Service;c:\program files (x86)\HP\HPLaserJetService\HPLaserJetService.exe;c:\program files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [x]
S2 HPSIService;HP SI Service;c:\windows\system32\HPSIsvc.exe;c:\windows\SYSNATIVE\HPSIsvc.exe [x]
S2 LiveUpdateSvc;LiveUpdate;c:\program files (x86)\IObit\LiveUpdate\LiveUpdate.exe;c:\program files (x86)\IObit\LiveUpdate\LiveUpdate.exe [x]
S2 LMIGuardianSvc;LMIGuardianSvc;c:\program files (x86)\LogMeIn\x64\LMIGuardianSvc.exe;c:\program files (x86)\LogMeIn\x64\LMIGuardianSvc.exe [x]
S2 LMIInfo;LogMeIn Kernel Information Provider;c:\program files (x86)\LogMeIn\x64\RaInfo.sys;c:\program files (x86)\LogMeIn\x64\RaInfo.sys [x]
S2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 TuneUp.UtilitiesSvc;AVG PC TuneUp Service;c:\program files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe;c:\program files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [x]
S3 bcbtums;Bluetooth USB LD Filter;c:\windows\system32\drivers\bcbtums.sys;c:\windows\SYSNATIVE\drivers\bcbtums.sys [x]
S3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys;c:\windows\SYSNATIVE\DRIVERS\dc3d.sys [x]
S3 mvusbews;USB EWS Device;c:\windows\system32\Drivers\mvusbews.sys;c:\windows\SYSNATIVE\Drivers\mvusbews.sys [x]
S3 Point64;Microsoft Mouse and Keyboard Center Filter Driver;c:\windows\system32\DRIVERS\point64.sys;c:\windows\SYSNATIVE\DRIVERS\point64.sys [x]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys;c:\program files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [x]
S3 VST64_DPV;VST64_DPV;c:\windows\system32\DRIVERS\VSTDPV6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTDPV6.SYS [x]
S3 VST64HWBS2;VST64HWBS2;c:\windows\system32\DRIVERS\VSTBS26.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTBS26.SYS [x]
.
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-01-27 20:28 1211672 ----a-w- c:\program files (x86)\Google\Chrome\Application\32.0.1700.102\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2014-02-01 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-12 14:53]
.
2013-11-21 c:\windows\Tasks\AVG_SYS_TASK.job
- c:\programdata\AVG 1113a Campaign\AVG-Secure-Search-Update-1113a.exe [2013-11-21 13:26]
.
2013-11-21 c:\windows\Tasks\AVG_SYS_TASK_DELETE.job
- c:\programdata\AVG 1113a Campaign\AVG-Secure-Search-Update-1113a.exe [2013-11-21 13:26]
.
2013-11-26 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-10-15 20:10]
.
2014-02-01 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-10-15 20:10]
.
2014-01-26 c:\windows\Tasks\Security Center Update - 1139419153.job
- c:\users\Greg\AppData\Roaming\Kowydeb\yqedi.exe [2010-01-20 01:44]
.
2014-01-26 c:\windows\Tasks\Security Center Update - 1252562066.job
- c:\users\Greg\AppData\Roaming\Evniwiax\esidmyl.exe [2011-06-08 22:10]
.
2014-01-29 c:\windows\Tasks\Security Center Update - 1722134904.job
- c:\users\Greg\AppData\Roaming\Hewoefv\durylu.exe [2012-01-11 02:57]
.
2014-01-26 c:\windows\Tasks\Security Center Update - 197679845.job
- c:\users\Greg\AppData\Roaming\Hiahrey\yriduhi.exe [2011-02-06 15:08]
.
2014-01-29 c:\windows\Tasks\Security Center Update - 2053395886.job
- c:\users\Greg\AppData\Roaming\Toreqia\vinueqd.exe [2010-03-27 19:03]
.
2014-01-29 c:\windows\Tasks\Security Center Update - 2164977508.job
- c:\users\Greg\AppData\Roaming\Cuwopak\roupe.exe [2011-05-22 21:38]
.
2014-01-28 c:\windows\Tasks\Security Center Update - 2271048042.job
- c:\users\Greg\AppData\Roaming\Zyelpy\faahewc.exe [2013-01-25 06:40]
.
2014-01-27 c:\windows\Tasks\Security Center Update - 3046702210.job
- c:\users\Greg\AppData\Roaming\Visoesto\amedzyi.exe [2012-06-29 17:56]
.
2014-01-29 c:\windows\Tasks\Security Center Update - 3134106562.job
- c:\users\Greg\AppData\Roaming\Didynyd\daybw.exe [2013-01-01 12:53]
.
2014-01-29 c:\windows\Tasks\Security Center Update - 3287703646.job
- c:\users\Greg\AppData\Roaming\Orheuqi\ipolk.exe [2013-01-24 19:09]
.
2014-01-26 c:\windows\Tasks\Security Center Update - 3288067138.job
- c:\users\Greg\AppData\Roaming\Myigwoc\evuleba.exe [2009-12-13 00:37]
.
2014-01-27 c:\windows\Tasks\Security Center Update - 3690677127.job
- c:\users\Greg\AppData\Roaming\Ibkeanu\tyhouv.exe [2013-01-15 01:15]
.
2014-01-26 c:\windows\Tasks\Security Center Update - 3717181098.job
- c:\users\Greg\AppData\Roaming\Neqiqiw\cowaqy.exe [2014-01-17 09:27]
.
2014-01-29 c:\windows\Tasks\Security Center Update - 3908755253.job
- c:\users\Greg\AppData\Roaming\Kotopuur\arzyod.exe [2010-02-14 09:22]
.
2014-01-27 c:\windows\Tasks\Security Center Update - 4171909079.job
- c:\users\Greg\AppData\Roaming\Umypimeg\qesylec.exe [2012-01-04 11:50]
.
2014-01-29 c:\windows\Tasks\Security Center Update - 4248253841.job
- c:\users\Greg\AppData\Roaming\Qeubagi\erukm.exe [2010-01-15 17:21]
.
2014-01-26 c:\windows\Tasks\Security Center Update - 534460331.job
- c:\users\Greg\AppData\Roaming\Iviprui\boatixe.exe [2011-07-30 20:06]
.
2014-01-25 c:\windows\Tasks\Security Center Update - 583378015.job
- c:\users\Greg\AppData\Roaming\Umgezout\zyxaki.exe [2013-01-22 09:30]
.
2014-01-29 c:\windows\Tasks\Security Center Update - 760575922.job
- c:\users\Greg\AppData\Roaming\Ucimqev\ehezf.exe [2013-01-10 05:28]
.
2014-01-29 c:\windows\Tasks\Security Center Update - 985122024.job
- c:\users\Greg\AppData\Roaming\Punikec\dygesa.exe [2011-11-21 02:43]
.
2014-01-25 c:\windows\Tasks\Security Center Update - 993838087.job
- c:\users\Greg\AppData\Roaming\Iwkeoh\cyebyra.exe [2011-02-02 08:54]
.
2014-01-31 c:\windows\Tasks\SyncBackSE Data.job
- c:\program files (x86)\2BrightSparks\SyncBackSE\SyncBackSE.exe [2012-01-26 03:49]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}]
2014-01-22 16:25 2486592 ----a-w- c:\program files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00001YSISyncComplete]
@="{89B5F9CC-C4A2-462C-BD27-29CEAC972135}"
[HKEY_CLASSES_ROOT\CLSID\{89B5F9CC-C4A2-462C-BD27-29CEAC972135}]
2012-10-16 17:20 2882680 ----a-w- c:\program files (x86)\YouSendIt Desktop App\YSINSE64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00002YSISyncActive]
@="{84B7BDFB-C50A-4335-B7C2-8AEC454F9E25}"
[HKEY_CLASSES_ROOT\CLSID\{84B7BDFB-C50A-4335-B7C2-8AEC454F9E25}]
2012-10-16 17:20 2882680 ----a-w- c:\program files (x86)\YouSendIt Desktop App\YSINSE64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00003YSISyncError]
@="{306A9CDE-AC70-453A-8008-B5F9962B8F88}"
[HKEY_CLASSES_ROOT\CLSID\{306A9CDE-AC70-453A-8008-B5F9962B8F88}]
2012-10-16 17:20 2882680 ----a-w- c:\program files (x86)\YouSendIt Desktop App\YSINSE64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00004YSILocalOnly]
@="{23A7D2DC-F395-4E33-876C-84A2DFAB0EBB}"
[HKEY_CLASSES_ROOT\CLSID\{23A7D2DC-F395-4E33-876C-84A2DFAB0EBB}]
2012-10-16 17:20 2882680 ----a-w- c:\program files (x86)\YouSendIt Desktop App\YSINSE64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 164016 ----a-w- c:\users\Greg\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 164016 ----a-w- c:\users\Greg\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 164016 ----a-w- c:\users\Greg\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 164016 ----a-w- c:\users\Greg\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\off0]
@="{8E33AEC3-C5F2-43C4-B048-9E3EB19B1DD5}"
[HKEY_CLASSES_ROOT\CLSID\{8E33AEC3-C5F2-43C4-B048-9E3EB19B1DD5}]
2012-06-21 15:19 1308432 ----a-w- c:\program files (x86)\Workspace\offsyncext64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\off1]
@="{8E33AEC4-C5F2-43C4-B048-9E3EB19B1DD5}"
[HKEY_CLASSES_ROOT\CLSID\{8E33AEC4-C5F2-43C4-B048-9E3EB19B1DD5}]
2012-06-21 15:19 1308432 ----a-w- c:\program files (x86)\Workspace\offsyncext64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Bluetooth Connection Assistant"="LBTWIZ.EXE -silent" [X]
"VX3000"="c:\windows\vVX3000.exe" [2009-07-01 762224]
"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2009-06-17 130576]
"LogMeIn GUI"="c:\program files (x86)\LogMeIn\x64\LogMeInSystray.exe" [2013-04-30 57928]
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://search.yahoo.com/?type=198484&fr=spigot-yhp-ie
uDefault_Search_URL = hxxp://www.google.com/ie
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Append Link Target to Existing PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert to Adobe PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
IE: Se&nd to OneNote - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
TCP: Interfaces\{ECF2B04B-5FBD-4691-A868-5A94A86C6697}: NameServer = 8.8.8.8,8.8.4.4
DPF: Garmin Communicator Plug-In - hxxps://static.garmincdn.com/gcp/ie/4.0.4.0/GarminAxControl_32.CAB
DPF: {627C5D14-CB66-493E-B0F3-589C7E2FA833} - hxxp://s118403992.hwddns.com/template/WebClient.cab
DPF: {BC0AE9E6-E549-4554-A222-EA083A894683} - hxxp://a03-b03.mypicturetown.com/P2PwebCmdController/x/Upld_47.CAB
DPF: {FE92D9C3-4A69-4EC7-8651-1DC8531D0075} - hxxp://68.15.12.110:8012/user/TSBnwCam.CAB
.
- - - - ORPHANS REMOVED - - - -
.
URLSearchHooks-{00000000-6E41-4FD3-8538-502F5495E5FC} - (no file)
Toolbar-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
BHO-{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5} - (no file)
AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe
AddRemove-SLABCOMM&10C4&EA60 - c:\program files (x86)\Silabs\MCU\DriverUninstall\DriverUninstaller.exe VCP CP210x Cardinal\SLABCOMM&10C4&EA60
AddRemove-SyncWare - c:\windows\system32\javaws.exe
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Other Running Processes ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\users\Greg\AppData\Roaming\Dropbox\bin\Dropbox.exe
c:\program files (x86)\Brother\ControlCenter3\brccMCtl.exe
c:\program files\Logitech\SetPoint\x86\SetPoint32.exe
c:\program files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
c:\program files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe
.
**************************************************************************
.
Completion time: 2014-02-01 16:31:39 - machine was rebooted
ComboFix-quarantined-files.txt 2014-02-01 22:31
.
Pre-Run: 562,932,826,112 bytes free
Post-Run: 562,017,644,544 bytes free
.
- - End Of File - - 9C6623294FFD9517A1E13BA5EC28EBB1
A36C5E4F47E84449FF07ED3517B43A31
Open OTL and run a new scan and post the log please
The report is so large (like last time) so I zipped and attached it instead of splitting it up into several posts. Hope that's OK?
We have a ton of stuff to remove, not sure if OTL can handle it in one run. I have been at this for close to 13 years and this is the most heavily infected computer I have ever come across , if our fixes fail then the only other resource is to format and reinstall windows
Open OTL.exe
Copy/paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL
:OTL
[2014/01/30 15:11:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ydyqkyt
[2014/01/30 13:08:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uvwoez
[2014/01/30 12:45:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zefuaqs
[2014/01/30 11:14:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kodyibc
[2014/01/30 10:54:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yhxyfou
[2014/01/29 16:00:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kotopuur
[2014/01/29 14:11:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kuyfdof
[2014/01/29 07:19:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hewoefv
[2014/01/29 05:08:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Toreqia
[2014/01/29 04:42:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cuwopak
[2014/01/29 01:13:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Didynyd
[2014/01/29 00:48:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kyyzzy
[2014/01/28 23:16:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ucimqev
[2014/01/28 21:19:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Orheuqi
[2014/01/28 20:40:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Punikec
[2014/01/28 19:09:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qeubagi
[2014/01/28 17:13:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zyelpy
[2014/01/28 16:46:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Bepypek
[2014/01/28 11:20:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Alxonaip
[2014/01/28 09:07:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Edebasep
[2014/01/28 08:41:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xibanyyr
[2014/01/28 07:22:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ogolfazy
[2014/01/28 07:05:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yfehatt
[2014/01/27 19:16:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fiebniib
[2014/01/27 16:40:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ibkeanu
[2014/01/27 15:09:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qaseivu
[2014/01/27 13:37:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tivyma
[2014/01/27 13:17:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Visoesto
[2014/01/27 12:38:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ywpoqiep
[2014/01/27 11:20:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Huuxkui
[2014/01/27 09:07:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Dimaotel
[2014/01/27 09:06:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Bevoape
[2014/01/27 07:38:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Umypimeg
[2014/01/27 03:08:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Akymemud
[2014/01/27 01:10:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ogdoem
[2014/01/27 00:44:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Waarxuy
[2014/01/26 23:13:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nomoveik
[2014/01/26 21:16:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Onnubiny
[2014/01/26 20:50:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ogleyku
[2014/01/26 19:19:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fyveili
[2014/01/26 17:09:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ypowwez
[2014/01/26 16:43:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Erqoalu
[2014/01/26 15:12:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Egilhuy
[2014/01/26 13:15:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qoacziwi
[2014/01/26 12:49:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Waodir
[2014/01/26 11:17:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Onpaevyb
[2014/01/26 09:09:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Lyowoww
[2014/01/26 08:43:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vegyelf
[2014/01/26 07:12:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fanylyuz
[2014/01/26 05:15:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hyfoyp
[2014/01/26 04:49:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Veodbo
[2014/01/26 03:18:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Myigwoc
[2014/01/26 01:08:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kowydeb
[2014/01/26 00:42:08 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Neqiqiw
[2014/01/25 23:11:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iviprui
[2014/01/25 20:47:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hiahrey
[2014/01/25 19:16:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Evniwiax
[2014/01/25 17:19:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Umgezout
[2014/01/25 16:40:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iwkeoh
[2014/01/25 15:09:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qyidyr
[2014/01/25 11:15:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Enciylm
[2014/01/25 09:18:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Opawkol
[2014/01/25 08:39:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xaaqibg
[2014/01/25 07:08:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Daumin
[2014/01/25 05:10:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ucivitxu
[2014/01/25 04:44:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yzbiero
[2014/01/25 03:13:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Efwivoi
[2014/01/25 01:16:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ywidwa
[2014/01/25 00:50:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yhnagyu
[2014/01/24 23:19:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Owniym
[2014/01/24 21:09:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Liynuxur
[2014/01/24 20:43:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Aqidce
[2014/01/24 17:14:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Rieqiz
[2014/01/24 16:48:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yhmauzna
[2014/01/24 15:17:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Askenap
[2014/01/24 13:24:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zuzyypix
[2014/01/24 12:41:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nimaoguz
[2014/01/24 11:10:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tyqifuh
[2014/01/24 09:12:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kyruqui
[2014/01/24 08:46:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ifxuyn
[2014/01/24 07:42:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Imdeyfa
[2014/01/23 16:45:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Advyze
[2014/01/23 15:13:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Evceafux
[2014/01/23 10:03:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ucgaadxy
[2014/01/23 10:03:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yqinbii
[2014/01/23 10:02:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Azikfu
[2014/01/23 10:02:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Difagiil
[2014/01/23 10:01:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fixuenc
[2014/01/23 10:00:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Agtuydru
[2014/01/23 10:00:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ebbiuc
[2014/01/23 09:59:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cyuvif
[2014/01/23 09:58:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xoegqe
[2014/01/23 09:58:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Lefequdi
[2014/01/23 09:57:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sureet
[2014/01/23 09:56:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zodadiec
[2014/01/23 09:55:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cuvoyroc
[2014/01/23 09:55:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Saozyk
[2014/01/23 09:54:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Agraha
[2014/01/23 09:54:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ymroax
[2014/01/23 09:53:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Giertok
[2014/01/23 09:52:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Asnagovo
[2014/01/23 09:51:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uctiapit
[2014/01/23 09:51:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Caynowul
[2014/01/23 09:50:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ytwekoav
[2014/01/23 09:50:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fulyasuq
[2014/01/23 09:49:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xaimfii
[2014/01/23 09:48:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cubuisku
[2014/01/23 09:47:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uroxurdo
[2014/01/23 09:47:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Usqyaq
[2014/01/23 09:46:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xuixeci
[2014/01/23 09:46:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Naygodx
[2014/01/23 09:45:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ovdeda
[2014/01/23 09:44:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Moxiby
[2014/01/23 09:44:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Saokdyu
[2014/01/23 09:43:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kyiwli
[2014/01/23 09:42:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Elorer
[2014/01/23 09:42:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ipobgoeh
[2014/01/23 09:41:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hapeeren
[2014/01/23 09:40:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Lyhoexgi
[2014/01/23 09:40:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iltuis
[2014/01/23 09:39:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Liafite
[2014/01/23 09:38:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xuaziwi
[2014/01/23 09:38:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Insomuo
[2014/01/23 09:37:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Toumuwa
[2014/01/23 09:36:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Daahfe
[2014/01/23 09:36:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xaykyf
[2014/01/23 09:36:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uzqione
[2014/01/23 09:35:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iswyuf
[2014/01/23 09:35:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xodiowwe
[2014/01/23 09:34:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uhkityuf
[2014/01/23 09:34:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xeeccyc
[2014/01/23 09:34:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ohmoah
[2014/01/23 09:34:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Naxolesy
[2014/01/23 09:33:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hoyxlix
[2014/01/23 09:33:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ewsuowa
[2014/01/23 09:33:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yxysam
[2014/01/23 09:32:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uqkeihib
[2014/01/23 09:32:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Aqqutaqe
[2014/01/23 09:32:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ivxays
[2014/01/23 09:31:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ufuxki
[2014/01/23 09:31:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Achaleky
[2014/01/23 09:30:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xuoxaty
[2014/01/23 09:30:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xyuzvi
[2014/01/23 09:30:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Rofody
[2014/01/23 09:30:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Aroxquly
[2014/01/23 09:29:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Moxiusd
[2014/01/23 09:28:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Exzysey
[2014/01/23 09:28:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ugfobika
[2014/01/23 09:28:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Odkaat
[2014/01/23 09:28:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tiviah
[2014/01/23 09:27:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ihawvu
[2014/01/23 09:27:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ezfedir
[2014/01/23 09:26:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ulonez
[2014/01/23 09:26:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Avrozupo
[2014/01/23 09:26:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Badaebn
[2014/01/23 09:26:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Axowil
[2014/01/23 09:25:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yxqule
[2014/01/23 09:25:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Awzufi
[2014/01/23 09:24:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xyotyvhe
[2014/01/23 09:24:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Orfeyz
[2014/01/23 09:24:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uchabifo
[2014/01/23 09:24:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Faupvo
[2014/01/23 09:23:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Dekeytno
[2014/01/23 09:23:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Elvyxy
[2014/01/23 09:22:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oretfyom
[2014/01/23 09:22:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Appiabac
[2014/01/23 09:22:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Roukid
[2014/01/23 09:22:08 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ovdunyxo
[2014/01/23 09:21:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wuatbeer
[2014/01/23 09:21:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ruobone
[2014/01/23 09:20:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xuliwi
[2014/01/23 09:20:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Awekysug
[2014/01/23 09:20:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qiynab
[2014/01/23 09:20:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xeweebe
[2014/01/23 09:19:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Woedipgi
[2014/01/23 09:19:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Foweqibu
[2014/01/23 09:18:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gifiovob
[2014/01/23 09:18:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uvcivoa
[2014/01/23 09:18:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Axawcia
[2014/01/23 09:18:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ylefovs
[2014/01/23 09:17:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yzybyhmu
[2014/01/23 09:17:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ysaswif
[2014/01/23 09:16:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ixgoumh
[2014/01/23 09:16:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ixevet
[2014/01/23 09:16:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Opiddo
[2014/01/23 09:16:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xyluovu
[2014/01/23 09:15:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ykizhy
[2014/01/23 09:15:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Awqaomke
[2014/01/23 09:14:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Otukryr
[2014/01/23 09:14:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wafeqyel
[2014/01/23 09:14:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ydtueco
[2014/01/23 09:14:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Azukko
[2014/01/23 09:13:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Igezqa
[2014/01/23 09:13:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Seoqeqka
[2014/01/23 09:13:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sycuehe
[2014/01/23 09:12:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pyovimy
[2014/01/23 09:12:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Dabaot
[2014/01/23 09:12:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cibiiqo
[2014/01/23 09:11:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Enkeibuc
[2014/01/23 09:11:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Duocycy
[2014/01/23 09:10:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yrtuubaz
[2014/01/23 09:10:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Otewyzo
[2014/01/23 09:09:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Epirkew
[2014/01/23 09:08:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Avgiag
[2014/01/23 09:08:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Asnigy
[2014/01/23 09:07:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Urymmae
[2014/01/23 09:06:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hoexlo
[2014/01/23 09:06:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Beuxahem
[2014/01/23 09:05:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Soryat
[2014/01/23 09:05:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oberisli
[2014/01/23 09:04:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uxobrusu
[2014/01/23 09:03:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iztiats
[2014/01/23 09:03:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pegyake
[2014/01/23 09:02:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tycyveu
[2014/01/23 09:01:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yvukut
[2014/01/23 09:01:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Loimzes
[2014/01/23 09:00:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Apepvoyz
[2014/01/23 08:59:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iktahe
[2014/01/23 08:59:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yrahizm
[2014/01/23 08:58:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oqiwecfi
[2014/01/23 08:57:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uhotywm
[2014/01/23 08:57:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ypomxe
[2014/01/23 08:56:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ebelyl
[2014/01/23 08:56:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Aknague
[2014/01/23 08:55:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Naocga
[2014/01/23 08:54:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hepera
[2014/01/23 08:53:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Essycua
[2014/01/23 08:53:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cuenty
[2014/01/23 08:52:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Daizhuif
[2014/01/23 08:52:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Akoputve
[2014/01/23 08:51:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ebcezyu
[2014/01/23 08:50:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Emurku
[2014/01/23 08:49:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ivycboy
[2014/01/23 08:49:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oniszek
[2014/01/23 08:48:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Adgypyru
[2014/01/23 08:48:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Caegfau
[2014/01/23 08:47:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Exwyxu
[2014/01/23 08:46:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oxinnaca
[2014/01/23 08:46:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qiasguc
[2014/01/23 08:45:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ruruxeb
[2014/01/23 08:44:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fyfyixy
[2014/01/23 08:44:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nayvfito
[2014/01/23 08:01:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ypyter
[2014/01/23 08:01:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vidyxuaw
[2014/01/23 08:00:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pawuim
[2014/01/23 08:00:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Myumdav
[2014/01/23 07:59:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Elagibr
[2014/01/23 07:58:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Alovqyge
[2014/01/23 07:58:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yqagiduf
[2014/01/23 07:57:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iqoxbany
[2014/01/23 07:56:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fubiys
[2014/01/23 07:56:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tyelepa
[2014/01/23 07:55:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Keufalqy
[2014/01/23 07:54:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wecuyhd
[2014/01/23 07:54:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Esmidoiz
[2014/01/23 07:53:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kemicic
[2014/01/23 07:52:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xyukry
[2014/01/23 07:52:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Akumzuyq
[2014/01/23 07:51:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ziackuul
[2014/01/23 07:51:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ywdeyksy
[2014/01/23 07:50:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hoxuovbi
[2014/01/23 07:49:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uwgiipot
[2014/01/23 07:49:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Goxutus
[2014/01/23 07:48:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Etuwoki
[2014/01/23 07:47:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zupuuz
[2014/01/23 07:47:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ewbacax
[2014/01/23 07:46:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sosutoyx
[2014/01/23 07:45:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ylerosol
[2014/01/23 07:45:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ziceul
[2014/01/23 07:44:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wybaunf
[2014/01/23 07:43:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Saweatah
[2014/01/23 07:43:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Emumvyy
[2014/01/23 07:42:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Bomyyqob
[2014/01/23 07:42:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tiaple
[2014/01/23 07:41:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yspuolu
[2014/01/23 07:40:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yqinpi
[2014/01/23 07:40:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Seanxiu
[2014/01/23 07:39:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Anriis
[2014/01/23 07:38:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ymsyihm
[2014/01/23 07:38:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Igcypyr
[2014/01/23 07:37:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Geneudi
[2014/01/23 07:36:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Soalxui
[2014/01/23 07:36:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Suylok
[2014/01/23 07:35:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Icalfop
[2014/01/23 07:34:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Faqyyw
[2014/01/23 07:34:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Omikam
[2014/01/23 07:33:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yhbuto
[2014/01/23 07:33:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Exzobubi
[2014/01/23 07:32:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Duucyka
[2014/01/23 07:31:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Keuclo
[2014/01/23 07:31:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Evnyynpu
[2014/01/23 07:30:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ukycyk
[2014/01/23 07:29:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Udogezqi
[2014/01/23 07:29:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Biigteex
[2014/01/23 07:28:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ducuic
[2014/01/23 07:27:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Arliykec
[2014/01/23 07:27:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ycogoq
[2014/01/23 07:26:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Suolyt
[2014/01/23 07:25:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qeakex
[2014/01/23 07:25:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ahzeyvoz
[2014/01/23 07:24:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vuepbuu
[2014/01/23 07:24:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Dohihiu
[2014/01/23 07:23:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ycafrio
[2014/01/23 07:22:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Medymu
[2014/01/23 07:22:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tafyoxy
[2014/01/23 07:21:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uxowro
[2014/01/23 07:20:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ygudevv
[2014/01/23 07:20:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ackanyy
[2014/01/23 07:19:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uvdoqyi
[2014/01/23 07:18:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Veqaiske
[2014/01/23 07:18:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Naadqim
[2014/01/23 07:17:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sopepo
[2014/01/23 07:16:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Itsedyry
[2014/01/23 07:16:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nayzpof
[2014/01/23 07:15:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Edaqhe
[2014/01/23 07:15:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Usynryim
[2014/01/23 07:14:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Meihduah
[2014/01/23 07:13:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ulfyus
[2014/01/23 07:13:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Asdyok
[2014/01/23 07:12:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ycetazow
[2014/01/23 07:11:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Neseku
[2014/01/23 07:11:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ubnoveok
[2014/01/23 06:04:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gunoicv
[2014/01/23 06:04:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Veerduyc
[2014/01/23 06:03:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wutyal
[2014/01/23 06:02:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kogiapab
[2014/01/23 06:02:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kytoeqy
[2014/01/23 06:01:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Caowlo
[2014/01/23 06:00:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qoyqyvas
[2014/01/23 06:00:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oqevol
[2014/01/23 05:59:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Opipel
[2014/01/23 05:59:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Umpapae
[2014/01/23 05:58:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Razaqu
[2014/01/23 05:57:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Beesnait
[2014/01/23 05:57:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Etuxrup
[2014/01/23 05:56:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ehegath
[2014/01/23 05:55:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Bezavuw
[2014/01/23 05:55:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ymdoce
[2014/01/23 05:54:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gomanoo
[2014/01/23 05:53:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Noazowco
[2014/01/23 05:53:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Osboifax
[2014/01/23 05:52:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Satoxyq
[2014/01/23 05:51:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Veubadgo
[2014/01/23 05:51:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xatuidu
[2014/01/23 05:50:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ewuqfaiq
[2014/01/23 05:50:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ukyruba
[2014/01/23 05:49:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ideqorad
[2014/01/23 05:48:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wecoyzy
[2014/01/23 05:48:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Opceinaf
[2014/01/23 05:47:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Alezhoox
[2014/01/23 05:46:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Icoteric
[2014/01/23 05:46:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tyexant
[2014/01/23 05:45:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Mygoibhu
[2014/01/23 05:44:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Liansina
[2014/01/23 05:44:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Aqixyn
[2014/01/23 05:43:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yzrebiu
[2014/01/23 05:42:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Agefodl
[2014/01/23 05:42:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uzyzevw
[2014/01/23 05:41:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Odfifymy
[2014/01/23 05:41:08 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Mualcyg
[2014/01/23 05:40:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Exemgypy
[2014/01/23 05:39:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ygxeari
[2014/01/23 05:39:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ulruapc
[2014/01/23 05:38:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fuewvux
[2014/01/23 05:38:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ixovkisa
[2014/01/23 05:38:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Faadik
[2014/01/23 05:37:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Okcevex
[2014/01/23 05:37:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fyfaug
[2014/01/23 05:37:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pepopi
[2014/01/23 05:36:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Syunheiz
[2014/01/23 05:36:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ivkuwua
[2014/01/23 05:36:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Adyzsud
[2014/01/23 05:35:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Guhurea
[2014/01/23 05:35:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qiackiqo
[2014/01/23 05:35:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ykosdara
[2014/01/23 05:34:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kenawe
[2014/01/23 05:34:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tipaufi
[2014/01/23 05:34:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ydxihiq
[2014/01/23 05:33:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nuygesvi
[2014/01/23 05:33:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fytaky
[2014/01/23 05:33:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wyemafme
[2014/01/23 05:33:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ikihes
[2014/01/23 05:32:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ogbuipun
[2014/01/23 05:32:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Itgienaq
[2014/01/23 05:32:08 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Riabxaba
[2014/01/23 05:31:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Piybyg
[2014/01/23 05:31:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wixacu
[2014/01/23 05:31:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sifugau
[2014/01/23 05:30:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wefoefan
[2014/01/23 05:30:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Itoqyc
[2014/01/23 05:30:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tynehula
[2014/01/23 05:29:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qipoizy
[2014/01/23 05:29:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Neloycl
[2014/01/23 05:29:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Edlekias
[2014/01/23 05:28:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Halios
[2014/01/23 05:28:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ucqoilv
[2014/01/23 05:28:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wunymo
[2014/01/23 05:27:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Voefuxol
[2014/01/23 05:27:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yzluti
[2014/01/23 05:27:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Suywar
[2014/01/23 05:27:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Dyufoxf
[2014/01/23 05:26:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tuofeqn
[2014/01/23 05:26:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Agyghy
[2014/01/23 05:25:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Efxovao
[2014/01/23 05:25:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ukdumezo
[2014/01/23 05:25:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cilibos
[2014/01/23 05:24:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ygagbuh
[2014/01/23 05:24:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Dudoypby
[2014/01/23 05:24:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ryudiq
[2014/01/23 05:24:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Axhaonoc
[2014/01/23 05:23:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Onzoda
[2014/01/23 05:23:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Maguytam
[2014/01/23 05:23:08 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vekuegy
[2014/01/23 05:22:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ahufdeep
[2014/01/23 05:22:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Moidpuxy
[2014/01/23 05:22:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Icefofax
[2014/01/23 05:21:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uvleuhax
[2014/01/23 05:21:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Woomifsi
[2014/01/23 05:21:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Abzudaiv
[2014/01/23 05:20:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Aswisa
[2014/01/23 05:20:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uwsilib
[2014/01/23 05:20:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Keakiz
[2014/01/23 05:19:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vypyoces
[2014/01/23 05:19:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ulteodzy
[2014/01/23 05:19:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Esukvon
[2014/01/23 05:18:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ehcogeko
[2014/01/23 05:18:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oxqopuy
[2014/01/23 05:18:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ohmokyo
[2014/01/23 05:18:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Asowak
[2014/01/23 05:17:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Osetku
[2014/01/23 05:17:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Dolaef
[2014/01/23 05:16:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Isinhyys
[2014/01/23 05:16:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wivotiec
[2014/01/23 05:16:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yretuhyn
[2014/01/23 05:15:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Waqeeqb
[2014/01/23 05:15:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Butiuqce
[2014/01/23 05:15:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pyiqewe
[2014/01/23 05:15:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yryrxap
[2014/01/23 05:14:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ucevrav
[2014/01/23 05:14:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Omitraz
[2014/01/23 05:14:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xyvoez
[2014/01/23 05:13:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ywukloa
[2014/01/23 05:13:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Selagile
[2014/01/23 05:12:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Aceqavfo
[2014/01/23 05:11:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Awuvegfu
[2014/01/23 05:11:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Evlaiw
[2014/01/23 05:10:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Mubuuhle
[2014/01/23 05:09:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Leenygic
[2014/01/23 05:09:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gyigazb
[2014/01/23 05:08:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Lamyoppe
[2014/01/23 05:07:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Guemsa
[2014/01/23 05:07:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iqtehyom
[2014/01/23 05:06:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Byybemis
[2014/01/23 05:06:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iqapudp
[2014/01/23 05:05:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Lawuyska
[2014/01/23 05:04:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uzemabi
[2014/01/23 05:04:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cozytibi
[2014/01/23 05:03:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hyymbi
[2014/01/23 05:02:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sufayfyt
[2014/01/23 05:02:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ydezokvu
[2014/01/23 05:01:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fibupev
[2014/01/23 05:00:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Igomekdu
[2014/01/23 05:00:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Inygcy
[2014/01/23 04:59:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Todyfit
[2014/01/23 04:58:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cihuigyt
[2014/01/23 04:58:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Roydervi
[2014/01/23 04:57:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Eqxyonh
[2014/01/23 04:57:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ahqyad
[2014/01/23 04:56:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Maysvot
[2014/01/23 04:55:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gaxuxu
[2014/01/23 04:55:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zebyivqo
[2014/01/23 04:54:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Asybegik
[2014/01/23 04:53:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Onkeqyma
[2014/01/23 04:53:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Naqeycmi
[2014/01/23 04:52:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qunerugi
[2014/01/23 04:51:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vywyxoxa
[2014/01/23 04:51:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Meinizoh
[2014/01/23 04:50:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Epxyusah
[2014/01/23 04:49:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nabaxao
[2014/01/23 04:49:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vuuftok
[2014/01/23 04:48:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Elpofe
[2014/01/23 04:48:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ekwaun
[2014/01/23 04:08:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Guveotre
[2014/01/23 04:07:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Igigtofo
[2014/01/23 04:06:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Coemulna
[2014/01/23 04:06:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Omibne
[2014/01/23 04:05:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wewuip
[2014/01/23 04:04:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Opybqo
[2014/01/23 04:04:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oxytre
[2014/01/23 04:03:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kozoyc
[2014/01/23 04:02:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yxloosod
[2014/01/23 04:02:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ybraxe
[2014/01/23 04:01:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ylfezu
[2014/01/23 04:01:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Bywuwax
[2014/01/23 04:00:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ozgyfo
[2014/01/23 03:59:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Efquaq
[2014/01/23 03:58:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Elobzov
[2014/01/23 03:58:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Bynuynyv
[2014/01/23 03:57:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tewuyz
[2014/01/23 03:57:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Raedarvy
[2014/01/23 03:56:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Peugwail
[2014/01/23 03:55:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Luutzo
[2014/01/23 03:55:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Etdoywpi
[2014/01/23 03:54:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Expasa
[2014/01/23 03:53:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ebquwiod
[2014/01/23 03:53:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Igavbopy
[2014/01/23 03:52:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ufdiyrot
[2014/01/23 03:51:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ugxioryf
[2014/01/23 03:51:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ywvegyqo
[2014/01/23 03:50:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Isofiz
[2014/01/23 03:49:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iknisaz
[2014/01/23 03:49:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Alunho
[2014/01/23 03:48:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uqinenyp
[2014/01/23 03:48:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Apotov
[2014/01/23 03:47:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zyyfywby
[2014/01/23 03:46:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Efapzyw
[2014/01/23 03:46:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Siicnu
[2014/01/23 03:45:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Giomkoha
[2014/01/23 03:44:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Caowga
[2014/01/23 03:44:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ymdiget
[2014/01/23 03:43:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Erbuwi
[2014/01/23 03:42:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Liupqequ
[2014/01/23 03:42:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Erodneuq
[2014/01/23 03:41:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Biafhu
[2014/01/23 03:40:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ullaah
[2014/01/23 03:40:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Weufxoir
[2014/01/23 03:39:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ydrozez
[2014/01/23 03:39:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yhoxlues
[2014/01/23 03:38:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Epleax
[2014/01/23 03:37:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Edqasuoh
[2014/01/23 03:36:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ucacox
[2014/01/23 03:36:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Quekir
[2014/01/23 03:35:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Imnouqif
[2014/01/23 03:35:08 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Dahuwe
[2014/01/23 03:34:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Duacynqy
[2014/01/23 03:33:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Loysahqo
[2014/01/23 03:33:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Noelohn
[2014/01/23 03:32:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Exbitayw
[2014/01/23 03:31:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Axygale
[2014/01/23 03:31:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Epidwo
[2014/01/23 03:30:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kazaotul
[2014/01/23 03:29:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Eqxyari
[2014/01/23 03:29:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nafokyt
[2014/01/23 03:28:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ohqoiw
[2014/01/23 03:27:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kilubeh
[2014/01/23 03:27:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ruysatf
[2014/01/23 03:26:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gaqiew
[2014/01/23 03:26:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Weehap
[2014/01/23 03:25:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cukeyfd
[2014/01/23 03:24:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uffaaw
[2014/01/23 03:24:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Haunrohy
[2014/01/23 03:23:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Menifuux
[2014/01/23 03:22:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xuloaqw
[2014/01/23 03:22:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ecalna
[2014/01/23 03:21:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xaehazor
[2014/01/23 03:20:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Avmyroag
[2014/01/23 03:20:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gygian
[2014/01/23 03:19:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Rixoriu
[2014/01/23 03:18:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ogedom
[2014/01/23 03:18:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fuonado
[2014/01/23 03:17:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Owwaor
[2014/01/23 03:17:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Duiszuso
[2014/01/23 02:11:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oxgyuci
[2014/01/23 02:10:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ezzooms
[2014/01/23 02:09:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kouxane
[2014/01/23 02:09:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Idekimaf
[2014/01/23 02:08:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ifgaenm
[2014/01/23 02:08:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yfvyolba
[2014/01/23 02:07:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vezivym
[2014/01/23 02:06:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Odxuwa
[2014/01/23 02:06:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Siulof
[2014/01/23 02:05:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ixevloci
[2014/01/23 02:04:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xuedpawy
[2014/01/23 02:04:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ihibexm
[2014/01/23 02:03:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fuutovhi
[2014/01/23 02:02:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Poviyxuh
[2014/01/23 02:02:08 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Otfacuro
[2014/01/23 02:01:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Dopiceta
[2014/01/23 02:00:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Voylpep
[2014/01/23 02:00:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ykeziw
[2014/01/23 01:59:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Beyzoz
[2014/01/23 01:59:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Epfoyhaz
[2014/01/23 01:58:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Obmyawm
[2014/01/23 01:57:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yqcuoziz
[2014/01/23 01:57:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tuepzov
[2014/01/23 01:56:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Aqtoazk
[2014/01/23 01:55:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uvvemou
[2014/01/23 01:55:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ozsuzi
[2014/01/23 01:54:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Olxuuf
[2014/01/23 01:53:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Alocbefu
[2014/01/23 01:53:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Upozto
[2014/01/23 01:52:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Erithied
[2014/01/23 01:51:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ulyqbuv
[2014/01/23 01:51:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vuyqka
[2014/01/23 01:50:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Edalby
[2014/01/23 01:49:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hoecaw
[2014/01/23 01:49:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Urciefed
[2014/01/23 01:48:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iseneqe
[2014/01/23 01:47:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ykzupul
[2014/01/23 01:47:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Imbegyw
[2014/01/23 01:46:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yconica
[2014/01/23 01:45:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ofynwiy
[2014/01/23 01:45:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Imowzym
[2014/01/23 01:44:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ufpusoan
[2014/01/23 01:43:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Owerxiq
[2014/01/23 01:43:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ceefavas
[2014/01/23 01:42:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Deigmo
[2014/01/23 01:41:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ysuponz
[2014/01/23 01:41:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Elyfsya
[2014/01/23 01:40:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Acpete
[2014/01/23 01:39:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qieqinis
[2014/01/23 01:39:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Umkonya
[2014/01/23 01:38:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Suoxxu
[2014/01/23 01:38:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Arorqeim
[2014/01/23 01:37:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wiestob
[2014/01/23 01:36:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Akfeqiif
[2014/01/23 01:36:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Enalwo
[2014/01/23 01:35:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Atympu
[2014/01/23 01:34:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Adduzo
[2014/01/23 01:34:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xofuwyo
[2014/01/23 01:33:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cyhyca
[2014/01/23 01:32:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Erudqat
[2014/01/23 01:32:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ekoclum
[2014/01/23 01:32:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ubbyfeu
[2014/01/23 01:31:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ycysoc
[2014/01/23 01:31:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ytomisil
[2014/01/23 01:30:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yhebpyp
[2014/01/23 01:30:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vopoadri
[2014/01/23 01:30:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oplufufy
[2014/01/23 01:30:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zovuiqsu
[2014/01/23 01:29:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Peydko
[2014/01/23 01:29:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Opehmix
[2014/01/23 01:29:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Odakxayk
[2014/01/23 01:28:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Emsyraab
[2014/01/23 01:28:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yvesuhy
[2014/01/23 01:28:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ogococh
[2014/01/23 01:27:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Naediqu
[2014/01/23 01:27:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Diukom
[2014/01/23 01:26:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Luediqur
[2014/01/23 01:26:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Muilnyom
[2014/01/23 01:26:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Osifib
[2014/01/23 01:26:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Mobesic
[2014/01/23 01:25:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ciniiwhu
[2014/01/23 01:25:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zubisuel
[2014/01/23 01:25:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Akippyi
[2014/01/23 01:25:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uzurux
[2014/01/23 01:24:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Avihgiux
[2014/01/23 01:24:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wyowuz
[2014/01/23 01:23:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Okfioq
[2014/01/23 01:23:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ehatnya
[2014/01/23 01:23:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uvhyeq
[2014/01/23 01:23:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Utaxubdu
[2014/01/23 01:22:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Upymodi
[2014/01/23 01:22:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Riecyb
[2014/01/23 01:21:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ciryqy
[2014/01/23 01:21:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Mysievi
[2014/01/23 01:21:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ubonome
[2014/01/23 01:21:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sylyixdy
[2014/01/23 01:20:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Usavmixo
[2014/01/23 01:20:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Otufyqd
[2014/01/23 01:20:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zamyamap
[2014/01/23 01:19:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Utolyq
[2014/01/23 01:19:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tiukytem
[2014/01/23 01:18:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gaokyhid
[2014/01/23 01:17:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tyuwez
[2014/01/23 01:17:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iwluop
[2014/01/23 01:16:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pizasag
[2014/01/23 01:16:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Atybpiq
[2014/01/23 01:15:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xiotmaqi
[2014/01/23 01:14:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ecbyuxsi
[2014/01/23 01:14:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Itbiotgi
[2014/01/23 01:13:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Enumkudy
[2014/01/23 01:12:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Baubwaa
[2014/01/23 01:12:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Egkeowu
[2014/01/23 01:11:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uglepu
[2014/01/23 01:10:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hoygypg
[2014/01/23 01:10:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Afsecoog
[2014/01/23 01:09:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tymoyla
[2014/01/23 01:08:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Itupno
[2014/01/23 01:08:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Guteso
[2014/01/23 01:07:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ubhyxeyt
[2014/01/23 01:07:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Mydocyyq
[2014/01/23 01:06:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ivoryqyt
[2014/01/23 01:05:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Puyraco
[2014/01/23 01:05:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ypdaewni
[2014/01/23 01:04:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cepineil
[2014/01/23 01:03:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Idewefty
[2014/01/23 01:03:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wytoir
[2014/01/23 01:02:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nazeuz
[2014/01/23 01:01:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Obedbi
[2014/01/23 01:01:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Owzyenn
[2014/01/23 01:00:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Naroyv
[2014/01/23 00:59:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Exemke
[2014/01/23 00:59:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Diynecxi
[2014/01/23 00:58:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Guqoix
[2014/01/23 00:58:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Seahyviw
[2014/01/23 00:57:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sehide
[2014/01/23 00:56:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yqecopef
[2014/01/23 00:55:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Isipoqa
:Services
:Reg
:Files
ipconfig /flushdns /c
:Commands
[purity]
[EMPTYJAVA]
[emptytemp]
[start explorer]
[Reboot]
Then click the Run Fix button at the top. <--Not run Scan
Let the program run unhindered, reboot when it is done
Then post the results of the log it produces
Then run a new scan with OTL and post the new log please
Too big again, so attached is zipped version.
When you run the fix with OTL it has to start with :OTL and end with [reboot] or the fix wont work, looks like nothing was removed, use the same script starting with :OTL and give it another try
Another thing, please read the instructions, your just making this more difficult, most of our tools and scanners work more effectively from the desktop
C:\Users\Greg\Downloads <-- Go into your downloads folder and right click on OTL and select CUT, then right click on a blank space on your desktop and select PASTE
Sorry about the desktop thing. I had moved the app to a folder so that the owner wouldn't mess with it. Forgot to take it out again.
All processes killed
========== OTL ==========
C:\Users\Greg\AppData\Roaming\Ydyqkyt folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uvwoez folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zefuaqs folder moved successfully.
C:\Users\Greg\AppData\Roaming\Kodyibc folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yhxyfou folder moved successfully.
C:\Users\Greg\AppData\Roaming\Kotopuur folder moved successfully.
C:\Users\Greg\AppData\Roaming\Kuyfdof folder moved successfully.
C:\Users\Greg\AppData\Roaming\Hewoefv folder moved successfully.
C:\Users\Greg\AppData\Roaming\Toreqia folder moved successfully.
C:\Users\Greg\AppData\Roaming\Cuwopak folder moved successfully.
C:\Users\Greg\AppData\Roaming\Didynyd folder moved successfully.
C:\Users\Greg\AppData\Roaming\Kyyzzy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ucimqev folder moved successfully.
C:\Users\Greg\AppData\Roaming\Orheuqi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Punikec folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qeubagi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zyelpy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Bepypek folder moved successfully.
C:\Users\Greg\AppData\Roaming\Alxonaip folder moved successfully.
C:\Users\Greg\AppData\Roaming\Edebasep folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xibanyyr folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ogolfazy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yfehatt folder moved successfully.
C:\Users\Greg\AppData\Roaming\Fiebniib folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ibkeanu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qaseivu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Tivyma folder moved successfully.
C:\Users\Greg\AppData\Roaming\Visoesto folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ywpoqiep folder moved successfully.
C:\Users\Greg\AppData\Roaming\Huuxkui folder moved successfully.
C:\Users\Greg\AppData\Roaming\Dimaotel folder moved successfully.
C:\Users\Greg\AppData\Roaming\Bevoape folder moved successfully.
C:\Users\Greg\AppData\Roaming\Umypimeg folder moved successfully.
C:\Users\Greg\AppData\Roaming\Akymemud folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ogdoem folder moved successfully.
C:\Users\Greg\AppData\Roaming\Waarxuy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Nomoveik folder moved successfully.
C:\Users\Greg\AppData\Roaming\Onnubiny folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ogleyku folder moved successfully.
C:\Users\Greg\AppData\Roaming\Fyveili folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ypowwez folder moved successfully.
C:\Users\Greg\AppData\Roaming\Erqoalu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Egilhuy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qoacziwi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Waodir folder moved successfully.
C:\Users\Greg\AppData\Roaming\Onpaevyb folder moved successfully.
C:\Users\Greg\AppData\Roaming\Lyowoww folder moved successfully.
C:\Users\Greg\AppData\Roaming\Vegyelf folder moved successfully.
C:\Users\Greg\AppData\Roaming\Fanylyuz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Hyfoyp folder moved successfully.
C:\Users\Greg\AppData\Roaming\Veodbo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Myigwoc folder moved successfully.
C:\Users\Greg\AppData\Roaming\Kowydeb folder moved successfully.
C:\Users\Greg\AppData\Roaming\Neqiqiw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Iviprui folder moved successfully.
C:\Users\Greg\AppData\Roaming\Hiahrey folder moved successfully.
C:\Users\Greg\AppData\Roaming\Evniwiax folder moved successfully.
C:\Users\Greg\AppData\Roaming\Umgezout folder moved successfully.
C:\Users\Greg\AppData\Roaming\Iwkeoh folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qyidyr folder moved successfully.
C:\Users\Greg\AppData\Roaming\Enciylm folder moved successfully.
C:\Users\Greg\AppData\Roaming\Opawkol folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xaaqibg folder moved successfully.
C:\Users\Greg\AppData\Roaming\Daumin folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ucivitxu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yzbiero folder moved successfully.
C:\Users\Greg\AppData\Roaming\Efwivoi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ywidwa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yhnagyu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Owniym folder moved successfully.
C:\Users\Greg\AppData\Roaming\Liynuxur folder moved successfully.
C:\Users\Greg\AppData\Roaming\Aqidce folder moved successfully.
C:\Users\Greg\AppData\Roaming\Rieqiz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yhmauzna folder moved successfully.
C:\Users\Greg\AppData\Roaming\Askenap folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zuzyypix folder moved successfully.
C:\Users\Greg\AppData\Roaming\Nimaoguz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Tyqifuh folder moved successfully.
C:\Users\Greg\AppData\Roaming\Kyruqui folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ifxuyn folder moved successfully.
C:\Users\Greg\AppData\Roaming\Imdeyfa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Advyze folder moved successfully.
C:\Users\Greg\AppData\Roaming\Evceafux folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ucgaadxy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yqinbii folder moved successfully.
C:\Users\Greg\AppData\Roaming\Azikfu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Difagiil folder moved successfully.
C:\Users\Greg\AppData\Roaming\Fixuenc folder moved successfully.
C:\Users\Greg\AppData\Roaming\Agtuydru folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ebbiuc folder moved successfully.
C:\Users\Greg\AppData\Roaming\Cyuvif folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xoegqe folder moved successfully.
C:\Users\Greg\AppData\Roaming\Lefequdi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Sureet folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zodadiec folder moved successfully.
C:\Users\Greg\AppData\Roaming\Cuvoyroc folder moved successfully.
C:\Users\Greg\AppData\Roaming\Saozyk folder moved successfully.
C:\Users\Greg\AppData\Roaming\Agraha folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ymroax folder moved successfully.
C:\Users\Greg\AppData\Roaming\Giertok folder moved successfully.
C:\Users\Greg\AppData\Roaming\Asnagovo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uctiapit folder moved successfully.
C:\Users\Greg\AppData\Roaming\Caynowul folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ytwekoav folder moved successfully.
C:\Users\Greg\AppData\Roaming\Fulyasuq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xaimfii folder moved successfully.
C:\Users\Greg\AppData\Roaming\Cubuisku folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uroxurdo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Usqyaq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xuixeci folder moved successfully.
C:\Users\Greg\AppData\Roaming\Naygodx folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ovdeda folder moved successfully.
C:\Users\Greg\AppData\Roaming\Moxiby folder moved successfully.
C:\Users\Greg\AppData\Roaming\Saokdyu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Kyiwli folder moved successfully.
C:\Users\Greg\AppData\Roaming\Elorer folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ipobgoeh folder moved successfully.
C:\Users\Greg\AppData\Roaming\Hapeeren folder moved successfully.
C:\Users\Greg\AppData\Roaming\Lyhoexgi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Iltuis folder moved successfully.
C:\Users\Greg\AppData\Roaming\Liafite folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xuaziwi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Insomuo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Toumuwa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Daahfe folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xaykyf folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uzqione folder moved successfully.
C:\Users\Greg\AppData\Roaming\Iswyuf folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xodiowwe folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uhkityuf folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xeeccyc folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ohmoah folder moved successfully.
C:\Users\Greg\AppData\Roaming\Naxolesy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Hoyxlix folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ewsuowa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yxysam folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uqkeihib folder moved successfully.
C:\Users\Greg\AppData\Roaming\Aqqutaqe folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ivxays folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ufuxki folder moved successfully.
C:\Users\Greg\AppData\Roaming\Achaleky folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xuoxaty folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xyuzvi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Rofody folder moved successfully.
C:\Users\Greg\AppData\Roaming\Aroxquly folder moved successfully.
C:\Users\Greg\AppData\Roaming\Moxiusd folder moved successfully.
C:\Users\Greg\AppData\Roaming\Exzysey folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ugfobika folder moved successfully.
C:\Users\Greg\AppData\Roaming\Odkaat folder moved successfully.
C:\Users\Greg\AppData\Roaming\Tiviah folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ihawvu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ezfedir folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ulonez folder moved successfully.
C:\Users\Greg\AppData\Roaming\Avrozupo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Badaebn folder moved successfully.
C:\Users\Greg\AppData\Roaming\Axowil folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yxqule folder moved successfully.
C:\Users\Greg\AppData\Roaming\Awzufi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xyotyvhe folder moved successfully.
C:\Users\Greg\AppData\Roaming\Orfeyz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uchabifo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Faupvo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Dekeytno folder moved successfully.
C:\Users\Greg\AppData\Roaming\Elvyxy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Oretfyom folder moved successfully.
C:\Users\Greg\AppData\Roaming\Appiabac folder moved successfully.
C:\Users\Greg\AppData\Roaming\Roukid folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ovdunyxo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Wuatbeer folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ruobone folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xuliwi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Awekysug folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qiynab folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xeweebe folder moved successfully.
C:\Users\Greg\AppData\Roaming\Woedipgi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Foweqibu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Gifiovob folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uvcivoa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Axawcia folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ylefovs folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yzybyhmu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ysaswif folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ixgoumh folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ixevet folder moved successfully.
C:\Users\Greg\AppData\Roaming\Opiddo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xyluovu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ykizhy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Awqaomke folder moved successfully.
C:\Users\Greg\AppData\Roaming\Otukryr folder moved successfully.
C:\Users\Greg\AppData\Roaming\Wafeqyel folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ydtueco folder moved successfully.
C:\Users\Greg\AppData\Roaming\Azukko folder moved successfully.
C:\Users\Greg\AppData\Roaming\Igezqa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Seoqeqka folder moved successfully.
C:\Users\Greg\AppData\Roaming\Sycuehe folder moved successfully.
C:\Users\Greg\AppData\Roaming\Pyovimy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Dabaot folder moved successfully.
C:\Users\Greg\AppData\Roaming\Cibiiqo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Enkeibuc folder moved successfully.
C:\Users\Greg\AppData\Roaming\Duocycy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yrtuubaz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Otewyzo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Epirkew folder moved successfully.
C:\Users\Greg\AppData\Roaming\Avgiag folder moved successfully.
C:\Users\Greg\AppData\Roaming\Asnigy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Urymmae folder moved successfully.
C:\Users\Greg\AppData\Roaming\Hoexlo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Beuxahem folder moved successfully.
C:\Users\Greg\AppData\Roaming\Soryat folder moved successfully.
C:\Users\Greg\AppData\Roaming\Oberisli folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uxobrusu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Iztiats folder moved successfully.
C:\Users\Greg\AppData\Roaming\Pegyake folder moved successfully.
C:\Users\Greg\AppData\Roaming\Tycyveu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yvukut folder moved successfully.
C:\Users\Greg\AppData\Roaming\Loimzes folder moved successfully.
C:\Users\Greg\AppData\Roaming\Apepvoyz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Iktahe folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yrahizm folder moved successfully.
C:\Users\Greg\AppData\Roaming\Oqiwecfi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uhotywm folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ypomxe folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ebelyl folder moved successfully.
C:\Users\Greg\AppData\Roaming\Aknague folder moved successfully.
C:\Users\Greg\AppData\Roaming\Naocga folder moved successfully.
C:\Users\Greg\AppData\Roaming\Hepera folder moved successfully.
C:\Users\Greg\AppData\Roaming\Essycua folder moved successfully.
C:\Users\Greg\AppData\Roaming\Cuenty folder moved successfully.
C:\Users\Greg\AppData\Roaming\Daizhuif folder moved successfully.
C:\Users\Greg\AppData\Roaming\Akoputve folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ebcezyu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Emurku folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ivycboy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Oniszek folder moved successfully.
C:\Users\Greg\AppData\Roaming\Adgypyru folder moved successfully.
C:\Users\Greg\AppData\Roaming\Caegfau folder moved successfully.
C:\Users\Greg\AppData\Roaming\Exwyxu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Oxinnaca folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qiasguc folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ruruxeb folder moved successfully.
C:\Users\Greg\AppData\Roaming\Fyfyixy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Nayvfito folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ypyter folder moved successfully.
C:\Users\Greg\AppData\Roaming\Vidyxuaw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Pawuim folder moved successfully.
C:\Users\Greg\AppData\Roaming\Myumdav folder moved successfully.
C:\Users\Greg\AppData\Roaming\Elagibr folder moved successfully.
C:\Users\Greg\AppData\Roaming\Alovqyge folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yqagiduf folder moved successfully.
C:\Users\Greg\AppData\Roaming\Iqoxbany folder moved successfully.
C:\Users\Greg\AppData\Roaming\Fubiys folder moved successfully.
C:\Users\Greg\AppData\Roaming\Tyelepa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Keufalqy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Wecuyhd folder moved successfully.
C:\Users\Greg\AppData\Roaming\Esmidoiz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Kemicic folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xyukry folder moved successfully.
C:\Users\Greg\AppData\Roaming\Akumzuyq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ziackuul folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ywdeyksy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Hoxuovbi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uwgiipot folder moved successfully.
C:\Users\Greg\AppData\Roaming\Goxutus folder moved successfully.
C:\Users\Greg\AppData\Roaming\Etuwoki folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zupuuz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ewbacax folder moved successfully.
C:\Users\Greg\AppData\Roaming\Sosutoyx folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ylerosol folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ziceul folder moved successfully.
C:\Users\Greg\AppData\Roaming\Wybaunf folder moved successfully.
C:\Users\Greg\AppData\Roaming\Saweatah folder moved successfully.
C:\Users\Greg\AppData\Roaming\Emumvyy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Bomyyqob folder moved successfully.
C:\Users\Greg\AppData\Roaming\Tiaple folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yspuolu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yqinpi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Seanxiu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Anriis folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ymsyihm folder moved successfully.
C:\Users\Greg\AppData\Roaming\Igcypyr folder moved successfully.
C:\Users\Greg\AppData\Roaming\Geneudi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Soalxui folder moved successfully.
C:\Users\Greg\AppData\Roaming\Suylok folder moved successfully.
C:\Users\Greg\AppData\Roaming\Icalfop folder moved successfully.
C:\Users\Greg\AppData\Roaming\Faqyyw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Omikam folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yhbuto folder moved successfully.
C:\Users\Greg\AppData\Roaming\Exzobubi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Duucyka folder moved successfully.
C:\Users\Greg\AppData\Roaming\Keuclo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Evnyynpu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ukycyk folder moved successfully.
C:\Users\Greg\AppData\Roaming\Udogezqi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Biigteex folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ducuic folder moved successfully.
C:\Users\Greg\AppData\Roaming\Arliykec folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ycogoq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Suolyt folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qeakex folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ahzeyvoz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Vuepbuu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Dohihiu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ycafrio folder moved successfully.
C:\Users\Greg\AppData\Roaming\Medymu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Tafyoxy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uxowro folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ygudevv folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ackanyy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uvdoqyi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Veqaiske folder moved successfully.
C:\Users\Greg\AppData\Roaming\Naadqim folder moved successfully.
C:\Users\Greg\AppData\Roaming\Sopepo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Itsedyry folder moved successfully.
C:\Users\Greg\AppData\Roaming\Nayzpof folder moved successfully.
C:\Users\Greg\AppData\Roaming\Edaqhe folder moved successfully.
C:\Users\Greg\AppData\Roaming\Usynryim folder moved successfully.
C:\Users\Greg\AppData\Roaming\Meihduah folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ulfyus folder moved successfully.
C:\Users\Greg\AppData\Roaming\Asdyok folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ycetazow folder moved successfully.
C:\Users\Greg\AppData\Roaming\Neseku folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ubnoveok folder moved successfully.
C:\Users\Greg\AppData\Roaming\Gunoicv folder moved successfully.
C:\Users\Greg\AppData\Roaming\Veerduyc folder moved successfully.
C:\Users\Greg\AppData\Roaming\Wutyal folder moved successfully.
C:\Users\Greg\AppData\Roaming\Kogiapab folder moved successfully.
C:\Users\Greg\AppData\Roaming\Kytoeqy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Caowlo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qoyqyvas folder moved successfully.
C:\Users\Greg\AppData\Roaming\Oqevol folder moved successfully.
C:\Users\Greg\AppData\Roaming\Opipel folder moved successfully.
C:\Users\Greg\AppData\Roaming\Umpapae folder moved successfully.
C:\Users\Greg\AppData\Roaming\Razaqu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Beesnait folder moved successfully.
C:\Users\Greg\AppData\Roaming\Etuxrup folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ehegath folder moved successfully.
C:\Users\Greg\AppData\Roaming\Bezavuw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ymdoce folder moved successfully.
C:\Users\Greg\AppData\Roaming\Gomanoo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Noazowco folder moved successfully.
C:\Users\Greg\AppData\Roaming\Osboifax folder moved successfully.
C:\Users\Greg\AppData\Roaming\Satoxyq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Veubadgo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xatuidu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ewuqfaiq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ukyruba folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ideqorad folder moved successfully.
C:\Users\Greg\AppData\Roaming\Wecoyzy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Opceinaf folder moved successfully.
C:\Users\Greg\AppData\Roaming\Alezhoox folder moved successfully.
C:\Users\Greg\AppData\Roaming\Icoteric folder moved successfully.
C:\Users\Greg\AppData\Roaming\Tyexant folder moved successfully.
C:\Users\Greg\AppData\Roaming\Mygoibhu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Liansina folder moved successfully.
C:\Users\Greg\AppData\Roaming\Aqixyn folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yzrebiu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Agefodl folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uzyzevw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Odfifymy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Mualcyg folder moved successfully.
C:\Users\Greg\AppData\Roaming\Exemgypy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ygxeari folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ulruapc folder moved successfully.
C:\Users\Greg\AppData\Roaming\Fuewvux folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ixovkisa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Faadik folder moved successfully.
C:\Users\Greg\AppData\Roaming\Okcevex folder moved successfully.
C:\Users\Greg\AppData\Roaming\Fyfaug folder moved successfully.
C:\Users\Greg\AppData\Roaming\Pepopi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Syunheiz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ivkuwua folder moved successfully.
C:\Users\Greg\AppData\Roaming\Adyzsud folder moved successfully.
C:\Users\Greg\AppData\Roaming\Guhurea folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qiackiqo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ykosdara folder moved successfully.
C:\Users\Greg\AppData\Roaming\Kenawe folder moved successfully.
C:\Users\Greg\AppData\Roaming\Tipaufi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ydxihiq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Nuygesvi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Fytaky folder moved successfully.
C:\Users\Greg\AppData\Roaming\Wyemafme folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ikihes folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ogbuipun folder moved successfully.
C:\Users\Greg\AppData\Roaming\Itgienaq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Riabxaba folder moved successfully.
C:\Users\Greg\AppData\Roaming\Piybyg folder moved successfully.
C:\Users\Greg\AppData\Roaming\Wixacu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Sifugau folder moved successfully.
C:\Users\Greg\AppData\Roaming\Wefoefan folder moved successfully.
C:\Users\Greg\AppData\Roaming\Itoqyc folder moved successfully.
C:\Users\Greg\AppData\Roaming\Tynehula folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qipoizy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Neloycl folder moved successfully.
C:\Users\Greg\AppData\Roaming\Edlekias folder moved successfully.
C:\Users\Greg\AppData\Roaming\Halios folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ucqoilv folder moved successfully.
C:\Users\Greg\AppData\Roaming\Wunymo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Voefuxol folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yzluti folder moved successfully.
C:\Users\Greg\AppData\Roaming\Suywar folder moved successfully.
C:\Users\Greg\AppData\Roaming\Dyufoxf folder moved successfully.
C:\Users\Greg\AppData\Roaming\Tuofeqn folder moved successfully.
C:\Users\Greg\AppData\Roaming\Agyghy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Efxovao folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ukdumezo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Cilibos folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ygagbuh folder moved successfully.
C:\Users\Greg\AppData\Roaming\Dudoypby folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ryudiq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Axhaonoc folder moved successfully.
C:\Users\Greg\AppData\Roaming\Onzoda folder moved successfully.
C:\Users\Greg\AppData\Roaming\Maguytam folder moved successfully.
C:\Users\Greg\AppData\Roaming\Vekuegy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ahufdeep folder moved successfully.
C:\Users\Greg\AppData\Roaming\Moidpuxy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Icefofax folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uvleuhax folder moved successfully.
C:\Users\Greg\AppData\Roaming\Woomifsi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Abzudaiv folder moved successfully.
C:\Users\Greg\AppData\Roaming\Aswisa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uwsilib folder moved successfully.
C:\Users\Greg\AppData\Roaming\Keakiz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Vypyoces folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ulteodzy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Esukvon folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ehcogeko folder moved successfully.
C:\Users\Greg\AppData\Roaming\Oxqopuy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ohmokyo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Asowak folder moved successfully.
C:\Users\Greg\AppData\Roaming\Osetku folder moved successfully.
C:\Users\Greg\AppData\Roaming\Dolaef folder moved successfully.
C:\Users\Greg\AppData\Roaming\Isinhyys folder moved successfully.
C:\Users\Greg\AppData\Roaming\Wivotiec folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yretuhyn folder moved successfully.
C:\Users\Greg\AppData\Roaming\Waqeeqb folder moved successfully.
C:\Users\Greg\AppData\Roaming\Butiuqce folder moved successfully.
C:\Users\Greg\AppData\Roaming\Pyiqewe folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yryrxap folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ucevrav folder moved successfully.
C:\Users\Greg\AppData\Roaming\Omitraz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xyvoez folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ywukloa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Selagile folder moved successfully.
C:\Users\Greg\AppData\Roaming\Aceqavfo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Awuvegfu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Evlaiw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Mubuuhle folder moved successfully.
C:\Users\Greg\AppData\Roaming\Leenygic folder moved successfully.
C:\Users\Greg\AppData\Roaming\Gyigazb folder moved successfully.
C:\Users\Greg\AppData\Roaming\Lamyoppe folder moved successfully.
C:\Users\Greg\AppData\Roaming\Guemsa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Iqtehyom folder moved successfully.
C:\Users\Greg\AppData\Roaming\Byybemis folder moved successfully.
C:\Users\Greg\AppData\Roaming\Iqapudp folder moved successfully.
C:\Users\Greg\AppData\Roaming\Lawuyska folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uzemabi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Cozytibi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Hyymbi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Sufayfyt folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ydezokvu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Fibupev folder moved successfully.
C:\Users\Greg\AppData\Roaming\Igomekdu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Inygcy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Todyfit folder moved successfully.
C:\Users\Greg\AppData\Roaming\Cihuigyt folder moved successfully.
C:\Users\Greg\AppData\Roaming\Roydervi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Eqxyonh folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ahqyad folder moved successfully.
C:\Users\Greg\AppData\Roaming\Maysvot folder moved successfully.
C:\Users\Greg\AppData\Roaming\Gaxuxu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zebyivqo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Asybegik folder moved successfully.
C:\Users\Greg\AppData\Roaming\Onkeqyma folder moved successfully.
C:\Users\Greg\AppData\Roaming\Naqeycmi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qunerugi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Vywyxoxa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Meinizoh folder moved successfully.
C:\Users\Greg\AppData\Roaming\Epxyusah folder moved successfully.
C:\Users\Greg\AppData\Roaming\Nabaxao folder moved successfully.
C:\Users\Greg\AppData\Roaming\Vuuftok folder moved successfully.
C:\Users\Greg\AppData\Roaming\Elpofe folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ekwaun folder moved successfully.
C:\Users\Greg\AppData\Roaming\Guveotre folder moved successfully.
C:\Users\Greg\AppData\Roaming\Igigtofo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Coemulna folder moved successfully.
C:\Users\Greg\AppData\Roaming\Omibne folder moved successfully.
C:\Users\Greg\AppData\Roaming\Wewuip folder moved successfully.
C:\Users\Greg\AppData\Roaming\Opybqo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Oxytre folder moved successfully.
C:\Users\Greg\AppData\Roaming\Kozoyc folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yxloosod folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ybraxe folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ylfezu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Bywuwax folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ozgyfo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Efquaq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Elobzov folder moved successfully.
C:\Users\Greg\AppData\Roaming\Bynuynyv folder moved successfully.
C:\Users\Greg\AppData\Roaming\Tewuyz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Raedarvy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Peugwail folder moved successfully.
C:\Users\Greg\AppData\Roaming\Luutzo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Etdoywpi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Expasa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ebquwiod folder moved successfully.
C:\Users\Greg\AppData\Roaming\Igavbopy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ufdiyrot folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ugxioryf folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ywvegyqo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Isofiz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Iknisaz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Alunho folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uqinenyp folder moved successfully.
C:\Users\Greg\AppData\Roaming\Apotov folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zyyfywby folder moved successfully.
C:\Users\Greg\AppData\Roaming\Efapzyw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Siicnu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Giomkoha folder moved successfully.
C:\Users\Greg\AppData\Roaming\Caowga folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ymdiget folder moved successfully.
C:\Users\Greg\AppData\Roaming\Erbuwi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Liupqequ folder moved successfully.
C:\Users\Greg\AppData\Roaming\Erodneuq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Biafhu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ullaah folder moved successfully.
C:\Users\Greg\AppData\Roaming\Weufxoir folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ydrozez folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yhoxlues folder moved successfully.
C:\Users\Greg\AppData\Roaming\Epleax folder moved successfully.
C:\Users\Greg\AppData\Roaming\Edqasuoh folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ucacox folder moved successfully.
C:\Users\Greg\AppData\Roaming\Quekir folder moved successfully.
C:\Users\Greg\AppData\Roaming\Imnouqif folder moved successfully.
C:\Users\Greg\AppData\Roaming\Dahuwe folder moved successfully.
C:\Users\Greg\AppData\Roaming\Duacynqy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Loysahqo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Noelohn folder moved successfully.
C:\Users\Greg\AppData\Roaming\Exbitayw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Axygale folder moved successfully.
C:\Users\Greg\AppData\Roaming\Epidwo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Kazaotul folder moved successfully.
C:\Users\Greg\AppData\Roaming\Eqxyari folder moved successfully.
C:\Users\Greg\AppData\Roaming\Nafokyt folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ohqoiw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Kilubeh folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ruysatf folder moved successfully.
C:\Users\Greg\AppData\Roaming\Gaqiew folder moved successfully.
C:\Users\Greg\AppData\Roaming\Weehap folder moved successfully.
C:\Users\Greg\AppData\Roaming\Cukeyfd folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uffaaw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Haunrohy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Menifuux folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xuloaqw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ecalna folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xaehazor folder moved successfully.
C:\Users\Greg\AppData\Roaming\Avmyroag folder moved successfully.
C:\Users\Greg\AppData\Roaming\Gygian folder moved successfully.
C:\Users\Greg\AppData\Roaming\Rixoriu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ogedom folder moved successfully.
C:\Users\Greg\AppData\Roaming\Fuonado folder moved successfully.
C:\Users\Greg\AppData\Roaming\Owwaor folder moved successfully.
C:\Users\Greg\AppData\Roaming\Duiszuso folder moved successfully.
C:\Users\Greg\AppData\Roaming\Oxgyuci folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ezzooms folder moved successfully.
C:\Users\Greg\AppData\Roaming\Kouxane folder moved successfully.
C:\Users\Greg\AppData\Roaming\Idekimaf folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ifgaenm folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yfvyolba folder moved successfully.
C:\Users\Greg\AppData\Roaming\Vezivym folder moved successfully.
C:\Users\Greg\AppData\Roaming\Odxuwa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Siulof folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ixevloci folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xuedpawy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ihibexm folder moved successfully.
C:\Users\Greg\AppData\Roaming\Fuutovhi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Poviyxuh folder moved successfully.
C:\Users\Greg\AppData\Roaming\Otfacuro folder moved successfully.
C:\Users\Greg\AppData\Roaming\Dopiceta folder moved successfully.
C:\Users\Greg\AppData\Roaming\Voylpep folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ykeziw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Beyzoz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Epfoyhaz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Obmyawm folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yqcuoziz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Tuepzov folder moved successfully.
C:\Users\Greg\AppData\Roaming\Aqtoazk folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uvvemou folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ozsuzi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Olxuuf folder moved successfully.
C:\Users\Greg\AppData\Roaming\Alocbefu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Upozto folder moved successfully.
C:\Users\Greg\AppData\Roaming\Erithied folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ulyqbuv folder moved successfully.
C:\Users\Greg\AppData\Roaming\Vuyqka folder moved successfully.
C:\Users\Greg\AppData\Roaming\Edalby folder moved successfully.
C:\Users\Greg\AppData\Roaming\Hoecaw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Urciefed folder moved successfully.
C:\Users\Greg\AppData\Roaming\Iseneqe folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ykzupul folder moved successfully.
C:\Users\Greg\AppData\Roaming\Imbegyw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yconica folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ofynwiy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Imowzym folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ufpusoan folder moved successfully.
C:\Users\Greg\AppData\Roaming\Owerxiq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ceefavas folder moved successfully.
C:\Users\Greg\AppData\Roaming\Deigmo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ysuponz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Elyfsya folder moved successfully.
C:\Users\Greg\AppData\Roaming\Acpete folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qieqinis folder moved successfully.
C:\Users\Greg\AppData\Roaming\Umkonya folder moved successfully.
C:\Users\Greg\AppData\Roaming\Suoxxu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Arorqeim folder moved successfully.
C:\Users\Greg\AppData\Roaming\Wiestob folder moved successfully.
C:\Users\Greg\AppData\Roaming\Akfeqiif folder moved successfully.
C:\Users\Greg\AppData\Roaming\Enalwo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Atympu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Adduzo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xofuwyo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Cyhyca folder moved successfully.
C:\Users\Greg\AppData\Roaming\Erudqat folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ekoclum folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ubbyfeu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ycysoc folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ytomisil folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yhebpyp folder moved successfully.
C:\Users\Greg\AppData\Roaming\Vopoadri folder moved successfully.
C:\Users\Greg\AppData\Roaming\Oplufufy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zovuiqsu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Peydko folder moved successfully.
C:\Users\Greg\AppData\Roaming\Opehmix folder moved successfully.
C:\Users\Greg\AppData\Roaming\Odakxayk folder moved successfully.
C:\Users\Greg\AppData\Roaming\Emsyraab folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yvesuhy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ogococh folder moved successfully.
C:\Users\Greg\AppData\Roaming\Naediqu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Diukom folder moved successfully.
C:\Users\Greg\AppData\Roaming\Luediqur folder moved successfully.
C:\Users\Greg\AppData\Roaming\Muilnyom folder moved successfully.
C:\Users\Greg\AppData\Roaming\Osifib folder moved successfully.
C:\Users\Greg\AppData\Roaming\Mobesic folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ciniiwhu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zubisuel folder moved successfully.
C:\Users\Greg\AppData\Roaming\Akippyi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uzurux folder moved successfully.
C:\Users\Greg\AppData\Roaming\Avihgiux folder moved successfully.
C:\Users\Greg\AppData\Roaming\Wyowuz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Okfioq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ehatnya folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uvhyeq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Utaxubdu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Upymodi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Riecyb folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ciryqy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Mysievi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ubonome folder moved successfully.
C:\Users\Greg\AppData\Roaming\Sylyixdy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Usavmixo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Otufyqd folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zamyamap folder moved successfully.
C:\Users\Greg\AppData\Roaming\Utolyq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Tiukytem folder moved successfully.
C:\Users\Greg\AppData\Roaming\Gaokyhid folder moved successfully.
C:\Users\Greg\AppData\Roaming\Tyuwez folder moved successfully.
C:\Users\Greg\AppData\Roaming\Iwluop folder moved successfully.
C:\Users\Greg\AppData\Roaming\Pizasag folder moved successfully.
C:\Users\Greg\AppData\Roaming\Atybpiq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xiotmaqi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ecbyuxsi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Itbiotgi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Enumkudy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Baubwaa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Egkeowu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uglepu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Hoygypg folder moved successfully.
C:\Users\Greg\AppData\Roaming\Afsecoog folder moved successfully.
C:\Users\Greg\AppData\Roaming\Tymoyla folder moved successfully.
C:\Users\Greg\AppData\Roaming\Itupno folder moved successfully.
C:\Users\Greg\AppData\Roaming\Guteso folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ubhyxeyt folder moved successfully.
C:\Users\Greg\AppData\Roaming\Mydocyyq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ivoryqyt folder moved successfully.
C:\Users\Greg\AppData\Roaming\Puyraco folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ypdaewni folder moved successfully.
C:\Users\Greg\AppData\Roaming\Cepineil folder moved successfully.
C:\Users\Greg\AppData\Roaming\Idewefty folder moved successfully.
C:\Users\Greg\AppData\Roaming\Wytoir folder moved successfully.
C:\Users\Greg\AppData\Roaming\Nazeuz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Obedbi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Owzyenn folder moved successfully.
C:\Users\Greg\AppData\Roaming\Naroyv folder moved successfully.
C:\Users\Greg\AppData\Roaming\Exemke folder moved successfully.
C:\Users\Greg\AppData\Roaming\Diynecxi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Guqoix folder moved successfully.
C:\Users\Greg\AppData\Roaming\Seahyviw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Sehide folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yqecopef folder moved successfully.
C:\Users\Greg\AppData\Roaming\Isipoqa folder moved successfully.
========== SERVICES/DRIVERS ==========
========== REGISTRY ==========
========== FILES ==========
< ipconfig /flushdns /c >
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
C:\Users\Greg\Desktop\cmd.bat deleted successfully.
C:\Users\Greg\Desktop\cmd.txt deleted successfully.
========== COMMANDS ==========
[EMPTYJAVA]
User: All Users
User: Default
User: Default User
User: Greg
->Java cache emptied: 40661634 bytes
User: LogMeInRemoteUser
User: LogMeInRemoteUser.GREG
User: Public
Total Java Files Cleaned = 39.00 mb
[EMPTYTEMP]
User: All Users
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
->Flash cache emptied: 56502 bytes
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
User: Greg
->Temp folder emptied: 28448575 bytes
->Temporary Internet Files folder emptied: 3406048239 bytes
->Java cache emptied: 0 bytes
->Google Chrome cache emptied: 7770340 bytes
->Apple Safari cache emptied: 0 bytes
->Flash cache emptied: 268067 bytes
User: LogMeInRemoteUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
->Flash cache emptied: 56502 bytes
User: LogMeInRemoteUser.GREG
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
->Flash cache emptied: 56502 bytes
User: Public
->Temp folder emptied: 0 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 1272183 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 42303946 bytes
RecycleBin emptied: 16312043 bytes
Total Files Cleaned = 3,340.00 mb
OTL by OldTimer - Version 3.2.69.0 log created on 02022014_134618
Files\Folders moved on Reboot...
C:\Users\Greg\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EKIVQ94C\38PXS0V9.htm not found!
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EKIVQ94C\AM3TAUFG.htm moved successfully.
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EKIVQ94C\KMUC7LSK.htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\87Y3HPU0\F6RGEUHN.htm not found!
File move failed. C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat scheduled to be moved on reboot.
File\Folder C:\Windows\temp\hsperfdata_GREG$\2348 not found!
File\Folder C:\Windows\temp\jna4932740670565408226.dll not found!
File move failed. C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat scheduled to be moved on reboot.
PendingFileRenameOperations files...
Registry entries deleted on Reboot...
Once again, too big to paste. Attached.
When you say owner, how are you related to this computer ?
Helping a fiend - I am a little more computer-savvy than he is.
I meant friend, although he can be a fiend sometimes, too. :-)
OK, listen, there is a lot to remove, and somewhat restricted on the forum as to how much I can add to the fix, if after the fix the log shows all removed than just let me know, no need right now for another OTL scan, we can do that when where at the very end
Open OTL.exe
Copy/paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL
:OTL
[2014/01/23 00:55:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hoilall
[2014/01/23 00:54:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Dityucwa
[2014/01/23 00:54:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sytoyq
[2014/01/23 00:53:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Saozqi
[2014/01/23 00:52:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nypuykyl
[2014/01/23 00:51:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zetucyw
[2014/01/23 00:51:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sywyqayz
[2014/01/23 00:50:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zacaes
[2014/01/23 00:50:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Expiytr
[2014/01/23 00:49:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Seedadvo
[2014/01/23 00:48:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Evagleu
[2014/01/23 00:47:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ahheav
[2014/01/23 00:47:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vuurpe
[2014/01/23 00:46:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Reevipp
[2014/01/23 00:46:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Waomxiw
[2014/01/23 00:45:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wyfaib
[2014/01/23 00:44:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uglean
[2014/01/23 00:44:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ixqype
[2014/01/23 00:43:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Irzuze
[2014/01/23 00:42:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wexoym
[2014/01/23 00:42:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ycacmu
[2014/01/23 00:41:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Igygalz
[2014/01/23 00:40:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Horual
[2014/01/23 00:01:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Poagpi
[2014/01/23 00:00:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Evibol
[2014/01/23 00:00:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nesyybq
[2014/01/22 23:59:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ixiqnix
[2014/01/22 23:58:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kootkiiv
[2014/01/22 23:58:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Taogik
[2014/01/22 23:57:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Efagxui
[2014/01/22 23:56:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Opfage
[2014/01/22 23:56:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ennaeg
[2014/01/22 23:55:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cihozut
[2014/01/22 23:54:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Patoikp
[2014/01/22 23:54:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Lyecynbo
[2014/01/22 23:53:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ozodip
[2014/01/22 23:52:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Atgaeqn
[2014/01/22 23:52:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ahbaunze
[2014/01/22 23:51:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cybourw
[2014/01/22 23:50:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Taicifa
[2014/01/22 23:50:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xuwocaw
[2014/01/22 23:49:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xuigsu
[2014/01/22 23:48:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zoyqyz
[2014/01/22 23:48:08 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ufnaam
[2014/01/22 23:47:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wyvenu
[2014/01/22 23:46:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Bymoem
[2014/01/22 23:46:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ungazuoh
[2014/01/22 23:45:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Naxykure
[2014/01/22 23:44:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Heodgaih
[2014/01/22 23:44:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ercaewep
[2014/01/22 23:43:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Niryez
[2014/01/22 23:42:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yzweoqza
[2014/01/22 23:42:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ymypigaz
[2014/01/22 23:41:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gunyfy
[2014/01/22 23:41:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ypihpua
[2014/01/22 23:40:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ixufuwr
[2014/01/22 23:39:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tulezy
[2014/01/22 23:38:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Giexfy
[2014/01/22 23:38:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Avzuob
[2014/01/22 23:37:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Agamte
[2014/01/22 23:37:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ofhegye
[2014/01/22 23:36:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Egqeaspi
[2014/01/22 23:35:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ifynyn
[2014/01/22 23:34:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yxehifa
[2014/01/22 23:34:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vikaqy
[2014/01/22 23:33:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Keovofte
[2014/01/22 23:33:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Izvyeqha
[2014/01/22 23:32:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wyybxy
[2014/01/22 23:31:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ydozulbi
[2014/01/22 23:31:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Lasyzalu
[2014/01/22 23:30:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ipyhafoq
[2014/01/22 23:29:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Lybyid
[2014/01/22 23:29:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Usmoquod
[2014/01/22 23:28:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yzalynk
[2014/01/22 23:27:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xesyot
[2014/01/22 23:27:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ulynos
[2014/01/22 23:26:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zaovykq
[2014/01/22 23:25:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Keyxeb
[2014/01/22 23:25:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Finosy
[2014/01/22 23:24:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Alyvywb
[2014/01/22 23:24:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ihotyl
[2014/01/22 23:23:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Puuwepeh
[2014/01/22 23:22:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ynacacag
[2014/01/22 23:22:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iwvoly
[2014/01/22 23:21:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Foipted
[2014/01/22 23:20:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ovezfiav
[2014/01/22 23:20:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Buoxyta
[2014/01/22 23:19:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Imxeax
[2014/01/22 23:18:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tyniot
[2014/01/22 23:18:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Acakcouv
[2014/01/22 23:17:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tawawy
[2014/01/22 23:16:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Abkoele
[2014/01/22 23:16:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yqykyfaq
[2014/01/22 23:15:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qainsa
[2014/01/22 23:14:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Diziby
[2014/01/22 23:14:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zuvyakr
[2014/01/22 23:13:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xowyigq
[2014/01/22 23:12:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ofagni
[2014/01/22 23:12:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Apqeza
[2014/01/22 23:11:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Anuxxad
[2014/01/22 23:11:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Bufuohoc
[2014/01/22 23:10:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nihehoic
[2014/01/22 23:09:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Bofyqe
[2014/01/22 22:05:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Acebry
[2014/01/22 22:04:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Rakedy
[2014/01/22 22:03:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ucarolar
[2014/01/22 22:03:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uzinoqoz
[2014/01/22 22:02:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ymasyh
[2014/01/22 22:01:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gaykgode
[2014/01/22 22:01:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Buikmoa
[2014/01/22 22:00:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sasuer
[2014/01/22 21:59:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iqpapif
[2014/01/22 21:59:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ikzysoo
[2014/01/22 21:58:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Azdahesa
[2014/01/22 21:58:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Saehykot
[2014/01/22 21:57:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Akesquup
[2014/01/22 21:56:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Upqyzea
[2014/01/22 21:55:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pydyavx
[2014/01/22 21:55:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Edaglyv
[2014/01/22 21:54:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ytvieho
[2014/01/22 21:54:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yquwyt
[2014/01/22 21:53:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Imosez
[2014/01/22 21:52:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wiumaxw
[2014/01/22 21:51:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ogitnyyz
[2014/01/22 21:51:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Suykihip
[2014/01/22 21:50:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Garyqu
[2014/01/22 21:50:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ikdyiri
[2014/01/22 21:49:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fetehe
[2014/01/22 21:48:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Koezwu
[2014/01/22 21:47:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Diakegem
[2014/01/22 21:47:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fuuzaget
[2014/01/22 21:46:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ibunvo
[2014/01/22 21:46:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pilead
[2014/01/22 21:45:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ihxapoza
[2014/01/22 21:44:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Erkysen
[2014/01/22 21:43:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xowacad
[2014/01/22 21:43:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ylceyged
[2014/01/22 21:42:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iwardu
[2014/01/22 21:42:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Edduro
[2014/01/22 21:41:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kaciloa
[2014/01/22 21:40:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yfleqoso
[2014/01/22 21:39:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hahedum
[2014/01/22 21:39:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ysawmuc
[2014/01/22 21:39:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Haivuwox
[2014/01/22 21:39:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ehedpifu
[2014/01/22 21:38:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pexuawo
[2014/01/22 21:38:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Erlyne
[2014/01/22 21:38:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yduhwu
[2014/01/22 21:38:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tivozuf
[2014/01/22 21:37:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uknitiiz
[2014/01/22 21:37:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Saogutz
[2014/01/22 21:36:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Seviwe
[2014/01/22 21:36:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fasaxyar
[2014/01/22 21:35:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Seufyp
[2014/01/22 21:35:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ansyizuw
[2014/01/22 21:35:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ycozehez
[2014/01/22 21:35:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Exytzogu
[2014/01/22 21:34:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Elyvavg
[2014/01/22 21:34:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yngibeq
[2014/01/22 21:34:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ypuxozaf
[2014/01/22 21:34:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xayhluy
[2014/01/22 21:33:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Abgyuv
[2014/01/22 21:33:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Efhaabyf
[2014/01/22 21:32:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Exakuxa
[2014/01/22 21:32:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ezgyuh
[2014/01/22 21:32:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uvobdy
[2014/01/22 21:32:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Koarobz
[2014/01/22 21:31:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vygokone
[2014/01/22 21:31:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uvyquzew
[2014/01/22 21:30:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vawabya
[2014/01/22 21:30:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Patiuwo
[2014/01/22 21:30:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Lupyuxel
[2014/01/22 21:30:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Eqzeyvvu
[2014/01/22 21:29:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yhewakb
[2014/01/22 21:29:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Udlyimig
[2014/01/22 21:28:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Okeniqfy
[2014/01/22 21:28:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uvuzwiq
[2014/01/22 21:28:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kimayn
[2014/01/22 21:27:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Feibfa
[2014/01/22 21:27:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Esvyuz
[2014/01/22 21:27:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Daefodi
[2014/01/22 21:26:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kyheugfy
[2014/01/22 21:26:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Odarqexu
[2014/01/22 21:26:08 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sedobet
[2014/01/22 21:26:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qigypiy
[2014/01/22 21:25:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uxofodr
[2014/01/22 21:25:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Loiwfeky
[2014/01/22 21:24:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cefeuket
[2014/01/22 21:24:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Bebazuu
[2014/01/22 21:24:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Awyvfy
[2014/01/22 21:23:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Azufsopi
[2014/01/22 21:23:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Idysaten
[2014/01/22 21:23:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Subomin
[2014/01/22 21:22:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qyogopo
[2014/01/22 21:22:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zucowo
[2014/01/22 21:22:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kuzaitlo
[2014/01/22 21:22:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Timoar
[2014/01/22 21:21:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ahbeal
[2014/01/22 21:21:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Awefevre
[2014/01/22 21:20:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qouronv
[2014/01/22 21:20:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yhukomco
[2014/01/22 21:19:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qaadfoi
[2014/01/22 21:19:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vuakceh
[2014/01/22 21:19:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Peusihgu
[2014/01/22 21:19:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Maitowow
[2014/01/22 21:18:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Riobsa
[2014/01/22 21:18:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wuapegd
[2014/01/22 21:18:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sofifu
[2014/01/22 21:18:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wuenweuf
[2014/01/22 21:17:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gidusy
[2014/01/22 21:17:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Dyenukx
[2014/01/22 21:16:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ykeluhe
[2014/01/22 21:16:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kocyciw
[2014/01/22 21:15:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Baamkieg
[2014/01/22 21:15:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Epqyitku
[2014/01/22 21:15:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qodaziop
[2014/01/22 21:15:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tegiruim
[2014/01/22 21:14:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Igwuvo
[2014/01/22 21:14:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ximigaep
[2014/01/22 21:14:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ozilyga
[2014/01/22 21:13:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Meuqce
[2014/01/22 21:13:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iqubek
[2014/01/22 21:13:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ebryag
[2014/01/22 21:12:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Rietku
[2014/01/22 21:12:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iblowawi
[2014/01/22 21:11:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nyehny
[2014/01/22 21:11:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kumaokp
[2014/01/22 21:10:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Elylebz
[2014/01/22 21:10:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pyisodof
[2014/01/22 21:09:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Obubbis
[2014/01/22 21:08:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Rinyci
[2014/01/22 21:07:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Etgirize
[2014/01/22 21:07:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iriwgou
[2014/01/22 21:06:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Abtiva
[2014/01/22 21:06:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Amnuny
[2014/01/22 21:05:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gileheev
[2014/01/22 21:04:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nyguhi
[2014/01/22 21:03:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Mubaowqe
[2014/01/22 21:03:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Olraecix
[2014/01/22 21:02:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Deidgyyx
[2014/01/22 21:02:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Otxyuxd
[2014/01/22 21:01:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Detywon
[2014/01/22 21:00:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Viyvuko
[2014/01/22 20:59:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ebwiykon
[2014/01/22 20:59:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pebyaly
[2014/01/22 20:58:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ebuxfut
[2014/01/22 20:57:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Rayxicu
[2014/01/22 20:56:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Udreto
[2014/01/22 20:56:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Risuxyx
[2014/01/22 20:55:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Dolianyk
[2014/01/22 20:54:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Egabaxew
[2014/01/22 20:54:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Afukreha
[2014/01/22 20:53:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ixebegu
[2014/01/22 20:52:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qibylan
[2014/01/22 20:52:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ahviqi
[2014/01/22 20:51:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Dywiycky
[2014/01/22 20:50:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oritxy
[2014/01/22 20:49:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Aztoatyp
[2014/01/22 20:49:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Abguitc
[2014/01/22 20:48:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ifaxtawa
[2014/01/22 20:47:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gibomi
[2014/01/22 20:47:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zeinre
[2014/01/22 20:46:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Woulxion
[2014/01/22 20:08:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Arerufxu
[2014/01/22 20:08:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pyyrru
[2014/01/22 20:07:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Layllezu
[2014/01/22 20:06:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xozayke
[2014/01/22 20:06:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uhupumoq
[2014/01/22 20:05:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fiahahm
[2014/01/22 20:04:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Byhige
[2014/01/22 20:04:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qoluoxcu
[2014/01/22 20:03:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nybaloin
[2014/01/22 20:02:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ydurez
[2014/01/22 20:02:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ymytkoiw
[2014/01/22 20:01:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Posiuso
[2014/01/22 20:00:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wehimew
[2014/01/22 20:00:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oxiwzy
[2014/01/22 19:59:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Muypzior
[2014/01/22 19:58:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xegyit
[2014/01/22 19:58:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Eppigobu
[2014/01/22 19:57:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wanywuu
[2014/01/22 19:56:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Icxyqig
[2014/01/22 19:56:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Segera
[2014/01/22 19:55:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Toedbuwi
[2014/01/22 19:54:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Igzyaf
[2014/01/22 19:54:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Buezyqiw
[2014/01/22 19:53:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hygiduno
[2014/01/22 19:52:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yhyqeho
[2014/01/22 19:52:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wuypavri
[2014/01/22 19:51:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ufysza
[2014/01/22 19:50:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fifimaxi
[2014/01/22 19:50:08 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Akafmi
[2014/01/22 19:49:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Byeqamil
[2014/01/22 19:48:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qiofovy
[2014/01/22 19:48:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Piuszao
[2014/01/22 19:47:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Afkoub
[2014/01/22 19:46:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Irhituwa
[2014/01/22 19:46:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ewsypa
[2014/01/22 19:45:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hagiti
[2014/01/22 19:44:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Bohaaqw
[2014/01/22 19:44:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Awnyeg
[2014/01/22 19:43:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Mabadua
[2014/01/22 19:42:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Reduytno
[2014/01/22 19:42:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zixave
[2014/01/22 19:41:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Awunmeu
[2014/01/22 19:40:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Teezak
[2014/01/22 19:40:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ilmuezo
[2014/01/22 19:39:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Miategz
[2014/01/22 19:38:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zuquew
[2014/01/22 19:38:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oxepigy
[2014/01/22 19:37:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cyitwaos
[2014/01/22 19:36:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ydumyp
[2014/01/22 19:36:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vaumyvat
[2014/01/22 19:35:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nyasar
[2014/01/22 19:34:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Abonap
[2014/01/22 19:33:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ypwypi
[2014/01/22 19:33:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Agxusupo
[2014/01/22 19:32:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ezmyhie
[2014/01/22 19:31:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oqcayni
[2014/01/22 19:31:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Axydgyan
[2014/01/22 19:30:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ebolah
[2014/01/22 19:29:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Algaqew
[2014/01/22 19:29:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wyaftyi
[2014/01/22 19:28:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kemyexw
[2014/01/22 19:27:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Angeanna
[2014/01/22 19:27:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Waleomwa
[2014/01/22 19:26:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ahgufi
[2014/01/22 19:25:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Lofyucg
[2014/01/22 19:25:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Paweepny
[2014/01/22 19:24:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Rytopaib
[2014/01/22 19:23:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ynohqeby
[2014/01/22 19:22:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hecyufwi
[2014/01/22 19:22:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ceokycra
[2014/01/22 19:21:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Evotyspo
[2014/01/22 19:21:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Voefykug
[2014/01/22 19:20:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Dateip
[2014/01/22 19:19:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Feynuw
[2014/01/22 19:18:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qaokzu
[2014/01/22 19:18:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Efnaipk
[2014/01/22 19:17:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Otygta
[2014/01/22 19:17:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kiozfi
[2014/01/22 19:16:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Efurobb
[2014/01/22 19:15:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ceaqafs
[2014/01/22 17:14:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Liyqmib
[2014/01/22 17:13:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ynexpyzo
[2014/01/22 17:12:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iqceysa
[2014/01/22 17:12:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sydocey
[2014/01/22 17:11:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uzfeypgu
[2014/01/22 17:10:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Viyhxiqa
[2014/01/22 17:10:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zoevgiu
[2014/01/22 17:09:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pufapizi
[2014/01/22 17:08:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Aspeel
[2014/01/22 17:08:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Lyoluzq
[2014/01/22 17:07:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Femahuw
[2014/01/22 17:06:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gienwyh
[2014/01/22 17:06:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xionvoru
[2014/01/22 17:05:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nauliha
[2014/01/22 17:04:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zeevzyu
[2014/01/22 17:04:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zeebqii
[2014/01/22 17:03:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fuedzeu
[2014/01/22 17:03:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yfodaca
[2014/01/22 17:02:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sikoyq
[2014/01/22 17:01:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ibhyhu
[2014/01/22 17:00:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Bezaad
[2014/01/22 17:00:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uwhysoo
[2014/01/22 16:59:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yhtyqua
[2014/01/22 16:59:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vaboqeas
[2014/01/22 16:58:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Piyxepo
[2014/01/22 16:57:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Egasawba
[2014/01/22 16:57:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ikizmuih
[2014/01/22 16:56:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Doowce
[2014/01/22 16:55:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nabyocw
[2014/01/22 16:55:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Voodyrhi
[2014/01/22 16:54:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qadoep
[2014/01/22 16:53:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Osowycz
[2014/01/22 16:53:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Icucuf
[2014/01/22 16:52:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ifwyduiz
[2014/01/22 16:51:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nivivura
[2014/01/22 16:51:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ziqaopw
[2014/01/22 16:50:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ydvium
[2014/01/22 16:49:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Icawuq
[2014/01/22 16:49:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Biatxo
[2014/01/22 16:48:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gaewezf
[2014/01/22 16:47:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Linake
[2014/01/22 16:47:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xeynaw
[2014/01/22 16:46:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xaakfyr
[2014/01/22 16:45:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ririho
[2014/01/22 16:45:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Usohokes
[2014/01/22 16:45:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Okabybod
[2014/01/22 16:44:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zozegyu
[2014/01/22 16:44:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Egqohute
[2014/01/22 16:43:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Bodyucyp
[2014/01/22 16:43:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Inqoby
[2014/01/22 16:43:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hyzybuny
[2014/01/22 16:43:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Feguequg
[2014/01/22 16:42:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ataqusi
[2014/01/22 16:42:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Marauq
[2014/01/22 16:42:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Doedodv
[2014/01/22 16:41:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hoopisiw
[2014/01/22 16:41:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nicyzu
[2014/01/22 16:41:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tibebyyp
[2014/01/22 16:40:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qiulkuf
[2014/01/22 16:40:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ybgydi
[2014/01/22 16:39:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ubeproda
[2014/01/22 16:39:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Onuwodte
[2014/01/22 16:38:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pudetud
[2014/01/22 16:38:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qefepuf
[2014/01/22 16:37:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qybyyco
[2014/01/22 16:36:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ocisyg
[2014/01/22 16:35:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ucpeceos
[2014/01/22 16:35:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ewuggyra
[2014/01/22 16:34:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Epcitiu
[2014/01/22 16:33:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wiugsy
[2014/01/22 16:33:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qiiqfi
[2014/01/22 16:32:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Igykevyg
[2014/01/22 16:31:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Rolyiqw
[2014/01/22 16:31:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ocraip
[2014/01/22 16:30:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ywnixe
[2014/01/22 16:29:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Caynsoxa
[2014/01/22 16:29:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oscolip
[2014/01/22 16:28:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uchiqo
[2014/01/22 16:27:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Idihymep
[2014/01/22 16:27:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Udaricap
[2014/01/22 16:26:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zaoqix
[2014/01/22 16:25:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Igpylu
[2014/01/22 16:25:08 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Edyqon
[2014/01/22 16:24:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Enbatu
[2014/01/22 16:23:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ryynkyo
[2014/01/22 16:23:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Paxuicx
[2014/01/22 16:22:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Esawik
[2014/01/22 16:21:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uncauhy
[2014/01/22 16:21:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Irezkoax
[2014/01/22 16:20:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zerowosy
[2014/01/22 16:19:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xenuguel
[2014/01/22 16:19:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yduniba
[2014/01/22 16:18:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zifequ
[2014/01/22 16:17:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Epytedeh
[2014/01/22 16:17:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Syibutqo
[2014/01/22 16:16:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yciqicmi
[2014/01/22 16:15:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Texuhui
[2014/01/22 16:15:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Utbelyce
[2014/01/22 16:14:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Otydire
[2014/01/22 16:13:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ixugok
[2014/01/22 16:13:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Exocuw
[2014/01/22 16:12:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vibinal
[2014/01/22 16:11:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Liizovr
[2014/01/22 16:11:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Emohisot
[2014/01/22 16:10:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iguvekq
[2014/01/22 16:09:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hypaadt
[2014/01/22 16:08:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gyobki
[2014/01/22 16:08:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zyikwady
[2014/01/22 16:07:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ukruqufi
[2014/01/22 16:07:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qylara
[2014/01/22 15:15:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fuewukym
[2014/01/22 15:14:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Invyyq
[2014/01/22 15:14:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Faloubd
[2014/01/22 15:13:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Azibcewo
[2014/01/22 15:12:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Coavicag
[2014/01/22 15:12:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yluhte
[2014/01/22 15:11:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Qufuva
[2014/01/22 15:10:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Owhoidcy
[2014/01/22 15:10:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Meodsai
[2014/01/22 15:09:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pobuzu
[2014/01/22 14:03:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ofuqekyd
[2014/01/22 14:02:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hueqwei
[2014/01/22 14:02:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Woacimr
[2014/01/22 14:01:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ynexamt
[2014/01/22 14:00:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vyinxa
[2014/01/22 14:00:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hihiasca
[2014/01/22 13:59:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nearavf
[2014/01/22 13:59:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ettiupz
[2014/01/22 13:58:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ipyzeml
[2014/01/22 13:57:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Supeabu
[2014/01/22 13:56:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Diohulka
[2014/01/22 13:56:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zoodma
[2014/01/22 13:55:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ygekymip
[2014/01/22 13:55:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Urutuki
[2014/01/22 13:54:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Huoxewi
[2014/01/22 13:53:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fyoxanuc
[2014/01/22 13:53:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Agwayfr
[2014/01/22 13:52:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ywceew
[2014/01/22 13:51:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ikliysup
[2014/01/22 13:51:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Foygisd
[2014/01/22 13:50:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hemeycb
[2014/01/22 13:49:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ocuqvy
[2014/01/22 13:49:08 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ydniiw
[2014/01/22 13:48:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pyliwyq
[2014/01/22 13:47:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sycogifo
[2014/01/22 13:47:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fuivozy
[2014/01/22 13:46:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ekxuigc
[2014/01/22 13:46:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wutybi
[2014/01/22 13:45:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Elunzoo
[2014/01/22 13:44:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Facyik
[2014/01/22 13:43:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ekmiceuk
[2014/01/22 13:43:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ypadun
[2014/01/22 13:42:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oferguek
[2014/01/22 13:42:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tobayd
[2014/01/22 13:41:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Agsexi
[2014/01/22 13:40:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hasopo
[2014/01/22 13:40:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Geoftiig
[2014/01/22 13:39:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Inegni
[2014/01/22 13:38:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Roacmoe
[2014/01/22 13:38:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ozxioxuk
[2014/01/22 13:37:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sadohazi
[2014/01/22 13:37:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xaafinpe
[2014/01/22 13:36:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ibzayfer
[2014/01/22 13:35:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ubgyve
[2014/01/22 13:34:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Usidikg
[2014/01/22 13:34:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Utunixed
[2014/01/22 13:33:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Eciwiv
[2014/01/22 13:33:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pitabyug
[2014/01/22 13:32:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hyypep
[2014/01/22 13:31:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tuagku
[2014/01/22 13:31:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Boyqce
[2014/01/22 13:30:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Alosdi
[2014/01/22 13:29:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fituidso
[2014/01/22 13:29:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gipatayr
[2014/01/22 13:28:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Gixuirt
[2014/01/22 13:27:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Etwigoak
[2014/01/22 13:27:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Biibhyos
[2014/01/22 13:26:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yqroxe
[2014/01/22 13:25:54 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yqoreb
[2014/01/22 13:25:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xawufi
[2014/01/22 13:24:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hiqymola
[2014/01/22 13:24:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Edkyuvv
[2014/01/22 13:23:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yqapfoix
[2014/01/22 13:22:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vibiapgi
[2014/01/22 13:22:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Muisuha
[2014/01/22 13:21:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Meokxuar
[2014/01/22 13:20:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nypaza
[2014/01/22 13:20:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Etabniq
[2014/01/22 13:19:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ebohuq
[2014/01/22 13:18:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Unziybah
[2014/01/22 13:18:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ydlaemo
[2014/01/22 13:17:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ylnyilo
[2014/01/22 13:16:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fuoqim
[2014/01/22 13:16:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yginixy
[2014/01/22 13:15:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Biufkuow
[2014/01/22 13:14:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ulfuyte
[2014/01/22 13:14:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Owcagy
[2014/01/22 13:13:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Teryfy
[2014/01/22 13:12:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ewbiobf
[2014/01/22 13:12:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Oribew
[2014/01/22 12:47:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ezuqofo
[2014/01/22 12:47:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hyecpuel
[2014/01/22 11:53:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Memyqy
[2014/01/22 11:52:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Liidle
[2014/01/22 11:52:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ykysusqa
[2014/01/22 11:51:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ohenuv
[2014/01/22 11:50:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ihxuqy
[2014/01/22 11:50:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Akbiuc
[2014/01/22 11:49:32 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Apsouh
[2014/01/22 11:48:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Muepbuo
[2014/01/22 11:48:14 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yhkixayk
[2014/01/22 11:47:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Penumu
[2014/01/22 11:46:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Teowxio
[2014/01/22 11:46:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Izpaaf
[2014/01/22 11:45:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Eqveoguz
[2014/01/22 11:44:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yqyrhiah
[2014/01/22 11:44:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ozuwal
[2014/01/22 11:43:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ebilanwa
[2014/01/22 11:42:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Noefohu
[2014/01/22 11:42:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Seehheko
[2014/01/22 11:41:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kuwiuby
[2014/01/22 11:40:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Utsoik
[2014/01/22 11:40:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Osyqny
[2014/01/22 11:39:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vaambibe
[2014/01/22 11:38:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ysnuso
[2014/01/22 11:38:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uxipaxl
[2014/01/22 11:37:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Usonipq
[2014/01/22 11:36:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uvehif
[2014/01/22 11:36:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yswied
[2014/01/22 11:35:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Arehsoiw
[2014/01/22 11:35:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tyyqbel
[2014/01/22 11:34:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ysobuxqy
[2014/01/22 11:33:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xyyskeo
[2014/01/22 11:33:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Odovneuw
[2014/01/22 11:32:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Syifyneg
[2014/01/22 11:31:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ascuiquv
[2014/01/22 11:31:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Fanipuaq
[2014/01/22 11:30:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Arfaysin
[2014/01/22 11:29:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Apfavoga
[2014/01/22 11:29:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Posyet
[2014/01/22 11:28:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Eglecacu
[2014/01/22 11:27:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ufpuutfa
[2014/01/22 11:27:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Obvelao
[2014/01/22 11:26:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Giulva
[2014/01/22 11:26:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xasitan
[2014/01/22 11:25:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nicyxyze
[2014/01/22 11:24:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tuulabi
[2014/01/22 11:23:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iginiwud
[2014/01/22 11:23:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Evfaizo
[2014/01/22 11:22:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Athian
[2014/01/22 11:22:08 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Mokyif
[2014/01/22 11:21:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tawyara
[2014/01/22 11:20:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Toremawa
[2014/01/22 11:20:01 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kinolu
[2014/01/22 11:19:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ewolas
[2014/01/22 11:18:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tedyyn
[2014/01/22 11:18:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Operpaa
[2014/01/22 11:17:22 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Verauki
[2014/01/22 11:16:50 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ubytyzr
[2014/01/22 11:16:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Etehvuro
[2014/01/22 11:15:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Siodqile
[2014/01/22 11:14:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Suwuiwa
[2014/01/22 11:14:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uhzaidqi
[2014/01/22 11:13:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Layppae
[2014/01/22 11:12:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Owqaocu
:Services
:Reg
:Files
:Commands
[emptytemp]
[start explorer]
[Reboot]
Then click the Run Fix button at the top. <--Not run Scan
Let the program run unhindered, reboot when it is done
Then post the results of the log it produces
All processes killed
========== OTL ==========
C:\Users\Greg\AppData\Roaming\Hoilall folder moved successfully.
C:\Users\Greg\AppData\Roaming\Dityucwa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Sytoyq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Saozqi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Nypuykyl folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zetucyw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Sywyqayz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zacaes folder moved successfully.
C:\Users\Greg\AppData\Roaming\Expiytr folder moved successfully.
C:\Users\Greg\AppData\Roaming\Seedadvo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Evagleu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ahheav folder moved successfully.
C:\Users\Greg\AppData\Roaming\Vuurpe folder moved successfully.
C:\Users\Greg\AppData\Roaming\Reevipp folder moved successfully.
C:\Users\Greg\AppData\Roaming\Waomxiw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Wyfaib folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uglean folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ixqype folder moved successfully.
C:\Users\Greg\AppData\Roaming\Irzuze folder moved successfully.
C:\Users\Greg\AppData\Roaming\Wexoym folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ycacmu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Igygalz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Horual folder moved successfully.
C:\Users\Greg\AppData\Roaming\Poagpi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Evibol folder moved successfully.
C:\Users\Greg\AppData\Roaming\Nesyybq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ixiqnix folder moved successfully.
C:\Users\Greg\AppData\Roaming\Kootkiiv folder moved successfully.
C:\Users\Greg\AppData\Roaming\Taogik folder moved successfully.
C:\Users\Greg\AppData\Roaming\Efagxui folder moved successfully.
C:\Users\Greg\AppData\Roaming\Opfage folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ennaeg folder moved successfully.
C:\Users\Greg\AppData\Roaming\Cihozut folder moved successfully.
C:\Users\Greg\AppData\Roaming\Patoikp folder moved successfully.
C:\Users\Greg\AppData\Roaming\Lyecynbo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ozodip folder moved successfully.
C:\Users\Greg\AppData\Roaming\Atgaeqn folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ahbaunze folder moved successfully.
C:\Users\Greg\AppData\Roaming\Cybourw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Taicifa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xuwocaw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xuigsu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zoyqyz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ufnaam folder moved successfully.
C:\Users\Greg\AppData\Roaming\Wyvenu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Bymoem folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ungazuoh folder moved successfully.
C:\Users\Greg\AppData\Roaming\Naxykure folder moved successfully.
C:\Users\Greg\AppData\Roaming\Heodgaih folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ercaewep folder moved successfully.
C:\Users\Greg\AppData\Roaming\Niryez folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yzweoqza folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ymypigaz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Gunyfy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ypihpua folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ixufuwr folder moved successfully.
C:\Users\Greg\AppData\Roaming\Tulezy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Giexfy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Avzuob folder moved successfully.
C:\Users\Greg\AppData\Roaming\Agamte folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ofhegye folder moved successfully.
C:\Users\Greg\AppData\Roaming\Egqeaspi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ifynyn folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yxehifa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Vikaqy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Keovofte folder moved successfully.
C:\Users\Greg\AppData\Roaming\Izvyeqha folder moved successfully.
C:\Users\Greg\AppData\Roaming\Wyybxy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ydozulbi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Lasyzalu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ipyhafoq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Lybyid folder moved successfully.
C:\Users\Greg\AppData\Roaming\Usmoquod folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yzalynk folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xesyot folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ulynos folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zaovykq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Keyxeb folder moved successfully.
C:\Users\Greg\AppData\Roaming\Finosy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Alyvywb folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ihotyl folder moved successfully.
C:\Users\Greg\AppData\Roaming\Puuwepeh folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ynacacag folder moved successfully.
C:\Users\Greg\AppData\Roaming\Iwvoly folder moved successfully.
C:\Users\Greg\AppData\Roaming\Foipted folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ovezfiav folder moved successfully.
C:\Users\Greg\AppData\Roaming\Buoxyta folder moved successfully.
C:\Users\Greg\AppData\Roaming\Imxeax folder moved successfully.
C:\Users\Greg\AppData\Roaming\Tyniot folder moved successfully.
C:\Users\Greg\AppData\Roaming\Acakcouv folder moved successfully.
C:\Users\Greg\AppData\Roaming\Tawawy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Abkoele folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yqykyfaq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qainsa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Diziby folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zuvyakr folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xowyigq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ofagni folder moved successfully.
C:\Users\Greg\AppData\Roaming\Apqeza folder moved successfully.
C:\Users\Greg\AppData\Roaming\Anuxxad folder moved successfully.
C:\Users\Greg\AppData\Roaming\Bufuohoc folder moved successfully.
C:\Users\Greg\AppData\Roaming\Nihehoic folder moved successfully.
C:\Users\Greg\AppData\Roaming\Bofyqe folder moved successfully.
C:\Users\Greg\AppData\Roaming\Acebry folder moved successfully.
C:\Users\Greg\AppData\Roaming\Rakedy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ucarolar folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uzinoqoz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ymasyh folder moved successfully.
C:\Users\Greg\AppData\Roaming\Gaykgode folder moved successfully.
C:\Users\Greg\AppData\Roaming\Buikmoa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Sasuer folder moved successfully.
C:\Users\Greg\AppData\Roaming\Iqpapif folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ikzysoo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Azdahesa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Saehykot folder moved successfully.
C:\Users\Greg\AppData\Roaming\Akesquup folder moved successfully.
C:\Users\Greg\AppData\Roaming\Upqyzea folder moved successfully.
C:\Users\Greg\AppData\Roaming\Pydyavx folder moved successfully.
C:\Users\Greg\AppData\Roaming\Edaglyv folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ytvieho folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yquwyt folder moved successfully.
C:\Users\Greg\AppData\Roaming\Imosez folder moved successfully.
C:\Users\Greg\AppData\Roaming\Wiumaxw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ogitnyyz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Suykihip folder moved successfully.
C:\Users\Greg\AppData\Roaming\Garyqu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ikdyiri folder moved successfully.
C:\Users\Greg\AppData\Roaming\Fetehe folder moved successfully.
C:\Users\Greg\AppData\Roaming\Koezwu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Diakegem folder moved successfully.
C:\Users\Greg\AppData\Roaming\Fuuzaget folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ibunvo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Pilead folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ihxapoza folder moved successfully.
C:\Users\Greg\AppData\Roaming\Erkysen folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xowacad folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ylceyged folder moved successfully.
C:\Users\Greg\AppData\Roaming\Iwardu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Edduro folder moved successfully.
C:\Users\Greg\AppData\Roaming\Kaciloa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yfleqoso folder moved successfully.
C:\Users\Greg\AppData\Roaming\Hahedum folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ysawmuc folder moved successfully.
C:\Users\Greg\AppData\Roaming\Haivuwox folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ehedpifu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Pexuawo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Erlyne folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yduhwu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Tivozuf folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uknitiiz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Saogutz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Seviwe folder moved successfully.
C:\Users\Greg\AppData\Roaming\Fasaxyar folder moved successfully.
C:\Users\Greg\AppData\Roaming\Seufyp folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ansyizuw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ycozehez folder moved successfully.
C:\Users\Greg\AppData\Roaming\Exytzogu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Elyvavg folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yngibeq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ypuxozaf folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xayhluy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Abgyuv folder moved successfully.
C:\Users\Greg\AppData\Roaming\Efhaabyf folder moved successfully.
C:\Users\Greg\AppData\Roaming\Exakuxa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ezgyuh folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uvobdy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Koarobz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Vygokone folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uvyquzew folder moved successfully.
C:\Users\Greg\AppData\Roaming\Vawabya folder moved successfully.
C:\Users\Greg\AppData\Roaming\Patiuwo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Lupyuxel folder moved successfully.
C:\Users\Greg\AppData\Roaming\Eqzeyvvu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yhewakb folder moved successfully.
C:\Users\Greg\AppData\Roaming\Udlyimig folder moved successfully.
C:\Users\Greg\AppData\Roaming\Okeniqfy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uvuzwiq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Kimayn folder moved successfully.
C:\Users\Greg\AppData\Roaming\Feibfa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Esvyuz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Daefodi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Kyheugfy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Odarqexu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Sedobet folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qigypiy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uxofodr folder moved successfully.
C:\Users\Greg\AppData\Roaming\Loiwfeky folder moved successfully.
C:\Users\Greg\AppData\Roaming\Cefeuket folder moved successfully.
C:\Users\Greg\AppData\Roaming\Bebazuu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Awyvfy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Azufsopi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Idysaten folder moved successfully.
C:\Users\Greg\AppData\Roaming\Subomin folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qyogopo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zucowo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Kuzaitlo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Timoar folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ahbeal folder moved successfully.
C:\Users\Greg\AppData\Roaming\Awefevre folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qouronv folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yhukomco folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qaadfoi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Vuakceh folder moved successfully.
C:\Users\Greg\AppData\Roaming\Peusihgu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Maitowow folder moved successfully.
C:\Users\Greg\AppData\Roaming\Riobsa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Wuapegd folder moved successfully.
C:\Users\Greg\AppData\Roaming\Sofifu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Wuenweuf folder moved successfully.
C:\Users\Greg\AppData\Roaming\Gidusy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Dyenukx folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ykeluhe folder moved successfully.
C:\Users\Greg\AppData\Roaming\Kocyciw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Baamkieg folder moved successfully.
C:\Users\Greg\AppData\Roaming\Epqyitku folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qodaziop folder moved successfully.
C:\Users\Greg\AppData\Roaming\Tegiruim folder moved successfully.
C:\Users\Greg\AppData\Roaming\Igwuvo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ximigaep folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ozilyga folder moved successfully.
C:\Users\Greg\AppData\Roaming\Meuqce folder moved successfully.
C:\Users\Greg\AppData\Roaming\Iqubek folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ebryag folder moved successfully.
C:\Users\Greg\AppData\Roaming\Rietku folder moved successfully.
C:\Users\Greg\AppData\Roaming\Iblowawi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Nyehny folder moved successfully.
C:\Users\Greg\AppData\Roaming\Kumaokp folder moved successfully.
C:\Users\Greg\AppData\Roaming\Elylebz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Pyisodof folder moved successfully.
C:\Users\Greg\AppData\Roaming\Obubbis folder moved successfully.
C:\Users\Greg\AppData\Roaming\Rinyci folder moved successfully.
C:\Users\Greg\AppData\Roaming\Etgirize folder moved successfully.
C:\Users\Greg\AppData\Roaming\Iriwgou folder moved successfully.
C:\Users\Greg\AppData\Roaming\Abtiva folder moved successfully.
C:\Users\Greg\AppData\Roaming\Amnuny folder moved successfully.
C:\Users\Greg\AppData\Roaming\Gileheev folder moved successfully.
C:\Users\Greg\AppData\Roaming\Nyguhi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Mubaowqe folder moved successfully.
C:\Users\Greg\AppData\Roaming\Olraecix folder moved successfully.
C:\Users\Greg\AppData\Roaming\Deidgyyx folder moved successfully.
C:\Users\Greg\AppData\Roaming\Otxyuxd folder moved successfully.
C:\Users\Greg\AppData\Roaming\Detywon folder moved successfully.
C:\Users\Greg\AppData\Roaming\Viyvuko folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ebwiykon folder moved successfully.
C:\Users\Greg\AppData\Roaming\Pebyaly folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ebuxfut folder moved successfully.
C:\Users\Greg\AppData\Roaming\Rayxicu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Udreto folder moved successfully.
C:\Users\Greg\AppData\Roaming\Risuxyx folder moved successfully.
C:\Users\Greg\AppData\Roaming\Dolianyk folder moved successfully.
C:\Users\Greg\AppData\Roaming\Egabaxew folder moved successfully.
C:\Users\Greg\AppData\Roaming\Afukreha folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ixebegu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qibylan folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ahviqi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Dywiycky folder moved successfully.
C:\Users\Greg\AppData\Roaming\Oritxy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Aztoatyp folder moved successfully.
C:\Users\Greg\AppData\Roaming\Abguitc folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ifaxtawa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Gibomi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zeinre folder moved successfully.
C:\Users\Greg\AppData\Roaming\Woulxion folder moved successfully.
C:\Users\Greg\AppData\Roaming\Arerufxu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Pyyrru folder moved successfully.
C:\Users\Greg\AppData\Roaming\Layllezu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xozayke folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uhupumoq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Fiahahm folder moved successfully.
C:\Users\Greg\AppData\Roaming\Byhige folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qoluoxcu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Nybaloin folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ydurez folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ymytkoiw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Posiuso folder moved successfully.
C:\Users\Greg\AppData\Roaming\Wehimew folder moved successfully.
C:\Users\Greg\AppData\Roaming\Oxiwzy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Muypzior folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xegyit folder moved successfully.
C:\Users\Greg\AppData\Roaming\Eppigobu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Wanywuu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Icxyqig folder moved successfully.
C:\Users\Greg\AppData\Roaming\Segera folder moved successfully.
C:\Users\Greg\AppData\Roaming\Toedbuwi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Igzyaf folder moved successfully.
C:\Users\Greg\AppData\Roaming\Buezyqiw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Hygiduno folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yhyqeho folder moved successfully.
C:\Users\Greg\AppData\Roaming\Wuypavri folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ufysza folder moved successfully.
C:\Users\Greg\AppData\Roaming\Fifimaxi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Akafmi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Byeqamil folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qiofovy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Piuszao folder moved successfully.
C:\Users\Greg\AppData\Roaming\Afkoub folder moved successfully.
C:\Users\Greg\AppData\Roaming\Irhituwa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ewsypa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Hagiti folder moved successfully.
C:\Users\Greg\AppData\Roaming\Bohaaqw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Awnyeg folder moved successfully.
C:\Users\Greg\AppData\Roaming\Mabadua folder moved successfully.
C:\Users\Greg\AppData\Roaming\Reduytno folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zixave folder moved successfully.
C:\Users\Greg\AppData\Roaming\Awunmeu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Teezak folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ilmuezo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Miategz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zuquew folder moved successfully.
C:\Users\Greg\AppData\Roaming\Oxepigy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Cyitwaos folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ydumyp folder moved successfully.
C:\Users\Greg\AppData\Roaming\Vaumyvat folder moved successfully.
C:\Users\Greg\AppData\Roaming\Nyasar folder moved successfully.
C:\Users\Greg\AppData\Roaming\Abonap folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ypwypi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Agxusupo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ezmyhie folder moved successfully.
C:\Users\Greg\AppData\Roaming\Oqcayni folder moved successfully.
C:\Users\Greg\AppData\Roaming\Axydgyan folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ebolah folder moved successfully.
C:\Users\Greg\AppData\Roaming\Algaqew folder moved successfully.
C:\Users\Greg\AppData\Roaming\Wyaftyi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Kemyexw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Angeanna folder moved successfully.
C:\Users\Greg\AppData\Roaming\Waleomwa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ahgufi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Lofyucg folder moved successfully.
C:\Users\Greg\AppData\Roaming\Paweepny folder moved successfully.
C:\Users\Greg\AppData\Roaming\Rytopaib folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ynohqeby folder moved successfully.
C:\Users\Greg\AppData\Roaming\Hecyufwi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ceokycra folder moved successfully.
C:\Users\Greg\AppData\Roaming\Evotyspo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Voefykug folder moved successfully.
C:\Users\Greg\AppData\Roaming\Dateip folder moved successfully.
C:\Users\Greg\AppData\Roaming\Feynuw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qaokzu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Efnaipk folder moved successfully.
C:\Users\Greg\AppData\Roaming\Otygta folder moved successfully.
C:\Users\Greg\AppData\Roaming\Kiozfi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Efurobb folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ceaqafs folder moved successfully.
C:\Users\Greg\AppData\Roaming\Liyqmib folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ynexpyzo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Iqceysa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Sydocey folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uzfeypgu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Viyhxiqa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zoevgiu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Pufapizi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Aspeel folder moved successfully.
C:\Users\Greg\AppData\Roaming\Lyoluzq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Femahuw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Gienwyh folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xionvoru folder moved successfully.
C:\Users\Greg\AppData\Roaming\Nauliha folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zeevzyu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zeebqii folder moved successfully.
C:\Users\Greg\AppData\Roaming\Fuedzeu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yfodaca folder moved successfully.
C:\Users\Greg\AppData\Roaming\Sikoyq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ibhyhu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Bezaad folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uwhysoo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yhtyqua folder moved successfully.
C:\Users\Greg\AppData\Roaming\Vaboqeas folder moved successfully.
C:\Users\Greg\AppData\Roaming\Piyxepo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Egasawba folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ikizmuih folder moved successfully.
C:\Users\Greg\AppData\Roaming\Doowce folder moved successfully.
C:\Users\Greg\AppData\Roaming\Nabyocw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Voodyrhi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qadoep folder moved successfully.
C:\Users\Greg\AppData\Roaming\Osowycz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Icucuf folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ifwyduiz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Nivivura folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ziqaopw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ydvium folder moved successfully.
C:\Users\Greg\AppData\Roaming\Icawuq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Biatxo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Gaewezf folder moved successfully.
C:\Users\Greg\AppData\Roaming\Linake folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xeynaw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xaakfyr folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ririho folder moved successfully.
C:\Users\Greg\AppData\Roaming\Usohokes folder moved successfully.
C:\Users\Greg\AppData\Roaming\Okabybod folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zozegyu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Egqohute folder moved successfully.
C:\Users\Greg\AppData\Roaming\Bodyucyp folder moved successfully.
C:\Users\Greg\AppData\Roaming\Inqoby folder moved successfully.
C:\Users\Greg\AppData\Roaming\Hyzybuny folder moved successfully.
C:\Users\Greg\AppData\Roaming\Feguequg folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ataqusi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Marauq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Doedodv folder moved successfully.
C:\Users\Greg\AppData\Roaming\Hoopisiw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Nicyzu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Tibebyyp folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qiulkuf folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ybgydi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ubeproda folder moved successfully.
C:\Users\Greg\AppData\Roaming\Onuwodte folder moved successfully.
C:\Users\Greg\AppData\Roaming\Pudetud folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qefepuf folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qybyyco folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ocisyg folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ucpeceos folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ewuggyra folder moved successfully.
C:\Users\Greg\AppData\Roaming\Epcitiu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Wiugsy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qiiqfi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Igykevyg folder moved successfully.
C:\Users\Greg\AppData\Roaming\Rolyiqw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ocraip folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ywnixe folder moved successfully.
C:\Users\Greg\AppData\Roaming\Caynsoxa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Oscolip folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uchiqo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Idihymep folder moved successfully.
C:\Users\Greg\AppData\Roaming\Udaricap folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zaoqix folder moved successfully.
C:\Users\Greg\AppData\Roaming\Igpylu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Edyqon folder moved successfully.
C:\Users\Greg\AppData\Roaming\Enbatu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ryynkyo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Paxuicx folder moved successfully.
C:\Users\Greg\AppData\Roaming\Esawik folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uncauhy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Irezkoax folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zerowosy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xenuguel folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yduniba folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zifequ folder moved successfully.
C:\Users\Greg\AppData\Roaming\Epytedeh folder moved successfully.
C:\Users\Greg\AppData\Roaming\Syibutqo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yciqicmi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Texuhui folder moved successfully.
C:\Users\Greg\AppData\Roaming\Utbelyce folder moved successfully.
C:\Users\Greg\AppData\Roaming\Otydire folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ixugok folder moved successfully.
C:\Users\Greg\AppData\Roaming\Exocuw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Vibinal folder moved successfully.
C:\Users\Greg\AppData\Roaming\Liizovr folder moved successfully.
C:\Users\Greg\AppData\Roaming\Emohisot folder moved successfully.
C:\Users\Greg\AppData\Roaming\Iguvekq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Hypaadt folder moved successfully.
C:\Users\Greg\AppData\Roaming\Gyobki folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zyikwady folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ukruqufi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qylara folder moved successfully.
C:\Users\Greg\AppData\Roaming\Fuewukym folder moved successfully.
C:\Users\Greg\AppData\Roaming\Invyyq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Faloubd folder moved successfully.
C:\Users\Greg\AppData\Roaming\Azibcewo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Coavicag folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yluhte folder moved successfully.
C:\Users\Greg\AppData\Roaming\Qufuva folder moved successfully.
C:\Users\Greg\AppData\Roaming\Owhoidcy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Meodsai folder moved successfully.
C:\Users\Greg\AppData\Roaming\Pobuzu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ofuqekyd folder moved successfully.
C:\Users\Greg\AppData\Roaming\Hueqwei folder moved successfully.
C:\Users\Greg\AppData\Roaming\Woacimr folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ynexamt folder moved successfully.
C:\Users\Greg\AppData\Roaming\Vyinxa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Hihiasca folder moved successfully.
C:\Users\Greg\AppData\Roaming\Nearavf folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ettiupz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ipyzeml folder moved successfully.
C:\Users\Greg\AppData\Roaming\Supeabu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Diohulka folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zoodma folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ygekymip folder moved successfully.
C:\Users\Greg\AppData\Roaming\Urutuki folder moved successfully.
C:\Users\Greg\AppData\Roaming\Huoxewi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Fyoxanuc folder moved successfully.
C:\Users\Greg\AppData\Roaming\Agwayfr folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ywceew folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ikliysup folder moved successfully.
C:\Users\Greg\AppData\Roaming\Foygisd folder moved successfully.
C:\Users\Greg\AppData\Roaming\Hemeycb folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ocuqvy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ydniiw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Pyliwyq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Sycogifo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Fuivozy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ekxuigc folder moved successfully.
C:\Users\Greg\AppData\Roaming\Wutybi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Elunzoo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Facyik folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ekmiceuk folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ypadun folder moved successfully.
C:\Users\Greg\AppData\Roaming\Oferguek folder moved successfully.
C:\Users\Greg\AppData\Roaming\Tobayd folder moved successfully.
C:\Users\Greg\AppData\Roaming\Agsexi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Hasopo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Geoftiig folder moved successfully.
C:\Users\Greg\AppData\Roaming\Inegni folder moved successfully.
C:\Users\Greg\AppData\Roaming\Roacmoe folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ozxioxuk folder moved successfully.
C:\Users\Greg\AppData\Roaming\Sadohazi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xaafinpe folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ibzayfer folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ubgyve folder moved successfully.
C:\Users\Greg\AppData\Roaming\Usidikg folder moved successfully.
C:\Users\Greg\AppData\Roaming\Utunixed folder moved successfully.
C:\Users\Greg\AppData\Roaming\Eciwiv folder moved successfully.
C:\Users\Greg\AppData\Roaming\Pitabyug folder moved successfully.
C:\Users\Greg\AppData\Roaming\Hyypep folder moved successfully.
C:\Users\Greg\AppData\Roaming\Tuagku folder moved successfully.
C:\Users\Greg\AppData\Roaming\Boyqce folder moved successfully.
C:\Users\Greg\AppData\Roaming\Alosdi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Fituidso folder moved successfully.
C:\Users\Greg\AppData\Roaming\Gipatayr folder moved successfully.
C:\Users\Greg\AppData\Roaming\Gixuirt folder moved successfully.
C:\Users\Greg\AppData\Roaming\Etwigoak folder moved successfully.
C:\Users\Greg\AppData\Roaming\Biibhyos folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yqroxe folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yqoreb folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xawufi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Hiqymola folder moved successfully.
C:\Users\Greg\AppData\Roaming\Edkyuvv folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yqapfoix folder moved successfully.
C:\Users\Greg\AppData\Roaming\Vibiapgi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Muisuha folder moved successfully.
C:\Users\Greg\AppData\Roaming\Meokxuar folder moved successfully.
C:\Users\Greg\AppData\Roaming\Nypaza folder moved successfully.
C:\Users\Greg\AppData\Roaming\Etabniq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ebohuq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Unziybah folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ydlaemo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ylnyilo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Fuoqim folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yginixy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Biufkuow folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ulfuyte folder moved successfully.
C:\Users\Greg\AppData\Roaming\Owcagy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Teryfy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ewbiobf folder moved successfully.
C:\Users\Greg\AppData\Roaming\Oribew folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ezuqofo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Hyecpuel folder moved successfully.
C:\Users\Greg\AppData\Roaming\Memyqy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Liidle folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ykysusqa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ohenuv folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ihxuqy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Akbiuc folder moved successfully.
C:\Users\Greg\AppData\Roaming\Apsouh folder moved successfully.
C:\Users\Greg\AppData\Roaming\Muepbuo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yhkixayk folder moved successfully.
C:\Users\Greg\AppData\Roaming\Penumu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Teowxio folder moved successfully.
C:\Users\Greg\AppData\Roaming\Izpaaf folder moved successfully.
C:\Users\Greg\AppData\Roaming\Eqveoguz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yqyrhiah folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ozuwal folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ebilanwa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Noefohu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Seehheko folder moved successfully.
C:\Users\Greg\AppData\Roaming\Kuwiuby folder moved successfully.
C:\Users\Greg\AppData\Roaming\Utsoik folder moved successfully.
C:\Users\Greg\AppData\Roaming\Osyqny folder moved successfully.
C:\Users\Greg\AppData\Roaming\Vaambibe folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ysnuso folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uxipaxl folder moved successfully.
C:\Users\Greg\AppData\Roaming\Usonipq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uvehif folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yswied folder moved successfully.
C:\Users\Greg\AppData\Roaming\Arehsoiw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Tyyqbel folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ysobuxqy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xyyskeo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Odovneuw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Syifyneg folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ascuiquv folder moved successfully.
C:\Users\Greg\AppData\Roaming\Fanipuaq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Arfaysin folder moved successfully.
C:\Users\Greg\AppData\Roaming\Apfavoga folder moved successfully.
C:\Users\Greg\AppData\Roaming\Posyet folder moved successfully.
C:\Users\Greg\AppData\Roaming\Eglecacu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ufpuutfa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Obvelao folder moved successfully.
C:\Users\Greg\AppData\Roaming\Giulva folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xasitan folder moved successfully.
C:\Users\Greg\AppData\Roaming\Nicyxyze folder moved successfully.
C:\Users\Greg\AppData\Roaming\Tuulabi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Iginiwud folder moved successfully.
C:\Users\Greg\AppData\Roaming\Evfaizo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Athian folder moved successfully.
C:\Users\Greg\AppData\Roaming\Mokyif folder moved successfully.
C:\Users\Greg\AppData\Roaming\Tawyara folder moved successfully.
C:\Users\Greg\AppData\Roaming\Toremawa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Kinolu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ewolas folder moved successfully.
C:\Users\Greg\AppData\Roaming\Tedyyn folder moved successfully.
C:\Users\Greg\AppData\Roaming\Operpaa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Verauki folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ubytyzr folder moved successfully.
C:\Users\Greg\AppData\Roaming\Etehvuro folder moved successfully.
C:\Users\Greg\AppData\Roaming\Siodqile folder moved successfully.
C:\Users\Greg\AppData\Roaming\Suwuiwa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uhzaidqi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Layppae folder moved successfully.
C:\Users\Greg\AppData\Roaming\Owqaocu folder moved successfully.
========== SERVICES/DRIVERS ==========
========== REGISTRY ==========
========== FILES ==========
========== COMMANDS ==========
[EMPTYTEMP]
User: All Users
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
User: Greg
->Temp folder emptied: 6109266 bytes
->Temporary Internet Files folder emptied: 556841686 bytes
->Java cache emptied: 0 bytes
->Google Chrome cache emptied: 7701348 bytes
->Apple Safari cache emptied: 0 bytes
->Flash cache emptied: 12986 bytes
User: LogMeInRemoteUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
User: LogMeInRemoteUser.GREG
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
User: Public
->Temp folder emptied: 0 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 270667 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 11338735 bytes
%systemroot%\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 753 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 128 bytes
RecycleBin emptied: 0 bytes
Total Files Cleaned = 555.00 mb
OTL by OldTimer - Version 3.2.69.0 log created on 02022014_161234
Files\Folders moved on Reboot...
File\Folder C:\Users\Greg\AppData\Local\Temp\fla7F27.tmp not found!
File\Folder C:\Users\Greg\AppData\Local\Temp\fla7FE4.tmp not found!
File\Folder C:\Users\Greg\AppData\Local\Temp\fla80EE.tmp not found!
File\Folder C:\Users\Greg\AppData\Local\Temp\fla80EF.tmp not found!
File\Folder C:\Users\Greg\AppData\Local\Temp\fla80FF.tmp not found!
File\Folder C:\Users\Greg\AppData\Local\Temp\fla8258.tmp not found!
C:\Users\Greg\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\0REoKIo0Pr_803142420[1].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\beacon[4].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\beacon[5].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\beacon[6].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\beacon[7].htm not found!
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\iframe3[1].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\iframe3[2].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\iframe3[3].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\iframe3[4].htm moved successfully.
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\if[4].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\if[6].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\p-01-0VIaSjnOLgB4LJGAN7.gif not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\p-01-0VIaSjnOLgSHET3FXE.gif not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\p-01-0VIaSjnOLg[10].gif not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\p-01-0VIaSjnOLg[6].gif not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\p-01-0VIaSjnOLg[7].gif not found!
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\ttj[2].js moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\ttj[3].js moved successfully.
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\usermatch09YODTJE.htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\usermatchNH2ESNW4.htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\usermatchNK9E1EYE.htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\usermatchP8PRXUA2.htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\usermatchQYHNI3W2.htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\usermatchZCC54NKH.htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\usermatchZP8WSPAQ.htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPVBFUMS\usermatch[10].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\0RUSuwZ15J_622351915[1].htm not found!
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\120x600[1].js moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\160x600[1].js moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\4cbd1b0c9f6f42058c6bc64c7199a699[1].js moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\ab[1].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\ad[1].htm moved successfully.
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\beacon[4].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\beacon[5].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\beacon[6].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\beacon[7].htm not found!
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\beacon[8].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\cs[1].htm moved successfully.
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\html[2].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\if[5].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\if[6].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\if[9].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\p-01-0VIaSjnOLg0GBJI8IH.gif not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\p-01-0VIaSjnOLg75XA2CIC.gif not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\p-01-0VIaSjnOLgOBMH534T.gif not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\p-01-0VIaSjnOLgZ2BSJS7E.gif not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\p-01-0VIaSjnOLg[10].gif not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\p-01-0VIaSjnOLg[8].gif not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\pixel[1].htm not found!
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\RzoNiRR1p2Mqyyz2RwqSMw[1].woff moved successfully.
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\usermatchI4RTTC6K.htm not found!
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VICUTNLO\yVHpdQrmTj9Kax1tmFSx2j8E0i7KZn-EPnyo3HZu7kw[1].woff moved successfully.
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\0Rg44tLOjg_1295652532[1].htm not found!
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\beacon[2].htm moved successfully.
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\BY89I4PQ.htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\if[5].htm not found!
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\p-01-0VIaSjnOLg[2].gif moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\p-01-0VIaSjnOLg[3].gif moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\p-01-0VIaSjnOLg[4].gif moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\p-01-0VIaSjnOLg[5].gif moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\p-01-0VIaSjnOLg[6].gif moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\p-01-0VIaSjnOLg[7].gif moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\p-01-0VIaSjnOLg[8].gif moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\usermatch[3].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\usermatch[4].htm moved successfully.
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\usermatch[5].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\usermatch[7].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SGVRH8Z8\usermatch[8].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\beaconAXSYYN8Y.htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\beaconGXL94CTA.htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\beacon[10].htm not found!
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\beacon[3].htm moved successfully.
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\beacon[6].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\beacon[8].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\beacon[9].htm not found!
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\if[3].htm moved successfully.
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\if[4].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\p-01-0VIaSjnOLg6PA9UHTU.gif not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\p-01-0VIaSjnOLgMWORQPW2.gif not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\p-01-0VIaSjnOLgU2EGJJLB.gif not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\serv[1].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\serv[2].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\tt[1].htm not found!
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\usermatch[2].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\usermatch[4].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\usermatch[5].htm moved successfully.
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\usermatch[6].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\usermatch[7].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QX24GEKU\vj[1].js not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QS026C4T\p-01-0VIaSjnOLg[6].gif not found!
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\beacon[2].htm moved successfully.
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\beacon[5].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\iframe3W8ZAJ8QP.htm not found!
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\iframe3[10].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\iframe3[4].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\iframe3[6].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\iframe3[7].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\if[3].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\if[8].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\if[9].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\p-01-0VIaSjnOLgK95C4AYI.gif moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\p-01-0VIaSjnOLgOR6D2AXI.gif moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\p-01-0VIaSjnOLgVOQ2VJRR.gif moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\p-01-0VIaSjnOLgW4G080A4.gif moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\p-01-0VIaSjnOLg[10].gif moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\p-01-0VIaSjnOLg[7].gif moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\p-01-0VIaSjnOLg[8].gif moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\p-01-0VIaSjnOLg[9].gif moved successfully.
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3DWIBWM\pd[1].htm not found!
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KIQS7DTC\handshake[4].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KIQS7DTC\vpixel[2].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EKIVQ94C\the-more-show[1].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\87Y3HPU0\vpixel[1].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\31H33TJT\vpixel[1].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\31H33TJT\vpixel[2].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2UM641HX\html[1].htm moved successfully.
File move failed. C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat scheduled to be moved on reboot.
File\Folder C:\Windows\temp\hsperfdata_GREG$\2168 not found!
File\Folder C:\Windows\temp\jna6499668670523374915.dll not found!
File move failed. C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat scheduled to be moved on reboot.
PendingFileRenameOperations files...
Registry entries deleted on Reboot...
Now after this fix post the log from the fix and also run a new scan with OTL and post the log
Open OTL.exe
Copy/paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL
:OTL
[2014/01/22 10:23:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Spigot
[2014/01/22 01:33:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Aguwvoqy
[2014/01/22 01:33:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ugefuqb
[2014/01/22 01:32:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Faafulw
[2014/01/22 01:32:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ergaawl
[2014/01/22 01:31:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Bozyadso
[2014/01/22 01:30:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hekeekse
[2014/01/22 01:30:00 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Awytylwe
[2014/01/22 01:29:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yzihohf
[2014/01/22 01:28:42 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Mecyuxs
[2014/01/22 01:28:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Firiec
[2014/01/22 01:27:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cuceiffy
[2014/01/22 01:26:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uvangy
[2014/01/22 01:26:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ishiath
[2014/01/22 01:25:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xutuiqav
[2014/01/22 01:24:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vamumifa
[2014/01/22 01:24:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yzaklie
[2014/01/22 01:23:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Sotyaf
[2014/01/22 01:22:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Iwxiihxu
[2014/01/22 01:22:11 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Erekty
[2014/01/22 01:21:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yluhaszu
[2014/01/22 01:20:52 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Elqyerot
[2014/01/22 01:20:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Tuzylyn
[2014/01/22 01:19:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xyzagao
[2014/01/22 01:19:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Isacro
[2014/01/22 01:18:17 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zyzudos
[2014/01/22 01:17:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Worupyz
[2014/01/22 01:16:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Siquez
[2014/01/22 01:16:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Pyrova
[2014/01/21 17:39:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xoiregeh
[2014/01/21 17:39:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kouwolm
[2014/01/21 17:38:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yqyqyvyz
[2014/01/21 17:38:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Vuiqenle
[2014/01/21 17:37:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Awhaefep
[2014/01/21 17:36:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Suvaeq
[2014/01/21 17:35:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ubyxygke
[2014/01/21 17:35:25 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Okolaw
[2014/01/21 17:34:37 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ulqyiq
[2014/01/21 17:34:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Rudatoi
[2014/01/21 17:33:18 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Deokiw
[2014/01/21 17:32:46 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Utoqzou
[2014/01/21 17:31:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ubzohaic
[2014/01/21 17:31:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Aciscy
[2014/01/21 17:30:39 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Evusufu
[2014/01/21 17:30:07 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Olehuh
[2014/01/21 17:29:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Paevrep
[2014/01/21 17:28:49 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Dyqomez
[2014/01/21 17:28:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Obugego
[2014/01/21 17:27:31 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Meibway
[2014/01/21 17:26:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yloksa
[2014/01/21 17:26:13 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Buefemob
[2014/01/21 17:25:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kovofeq
[2014/01/21 17:24:56 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Poumuz
[2014/01/21 17:24:10 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ynlyradi
[2014/01/21 17:23:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nyovfyas
[2014/01/21 17:22:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yrloifni
[2014/01/21 17:22:20 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ydkyla
[2014/01/21 17:21:33 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Exykku
[2014/01/21 17:21:02 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yvgesuqo
[2014/01/21 17:20:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Usygyda
[2014/01/21 17:19:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ywvusoro
[2014/01/21 17:18:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Eqmiiv
[2014/01/21 17:18:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Biowwam
[2014/01/21 17:17:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Weugho
[2014/01/21 17:17:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ugebaqp
[2014/01/21 17:16:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ybomvo
[2014/01/21 17:15:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Hogoafh
[2014/01/21 17:15:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Owacbeab
[2014/01/21 17:14:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Voahrucy
[2014/01/21 17:13:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Nalevo
[2014/01/21 17:13:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Afmazo
[2014/01/21 17:12:29 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Irtoyro
[2014/01/21 17:11:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ibinhe
[2014/01/21 17:11:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Octoqeog
[2014/01/21 17:10:40 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Danaker
[2014/01/21 17:09:53 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ynysxa
[2014/01/21 17:09:21 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Xahuerpa
[2014/01/21 17:08:35 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Levabapi
[2014/01/21 17:08:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Adtiybny
[2014/01/21 17:07:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Epguvyif
[2014/01/21 17:06:45 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yckabi
[2014/01/21 17:05:58 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Igrysuf
[2014/01/21 17:05:27 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yqfuur
[2014/01/21 17:04:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Izvyuhq
[2014/01/21 17:04:09 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Moorevdu
[2014/01/21 17:03:23 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Lyimyc
[2014/01/21 17:02:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Etorex
[2014/01/21 17:02:05 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Wixyavi
[2014/01/21 17:01:34 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ecatut
[2014/01/21 17:00:48 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Soutpyab
[2014/01/21 17:00:16 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Lihugozy
[2014/01/21 16:59:30 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Noisediv
[2014/01/21 16:58:59 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Ariwkau
[2014/01/21 16:58:12 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Kaaqroti
[2014/01/21 16:57:41 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Viefce
[2014/01/21 16:56:55 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Mibadya
[2014/01/21 16:56:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Riexzog
[2014/01/21 16:55:38 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Woxoyk
[2014/01/21 16:55:06 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uqpyop
[2014/01/21 16:54:19 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Toryke
[2014/01/21 16:53:47 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Cizyko
[2014/01/21 16:52:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Akipun
[2014/01/21 16:52:24 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yruwoky
[2014/01/21 16:51:36 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Efcayzdo
[2014/01/21 16:51:03 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Uttoer
[2014/01/21 16:50:15 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Zualohyr
[2014/01/21 16:49:43 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Yfeczy
[2014/01/21 16:48:57 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Arzuano
[2014/01/21 16:48:26 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\Feygsan
[2014/01/29 16:00:33 | 000,000,800 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 3908755253.job
[2014/01/29 07:19:48 | 000,000,796 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 1722134904.job
[2014/01/29 05:08:09 | 000,000,798 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 2053395886.job
[2014/01/29 04:42:19 | 000,000,794 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 2164977508.job
[2014/01/29 01:13:59 | 000,000,794 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 3134106562.job
[2014/01/28 23:16:52 | 000,000,794 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 760575922.job
[2014/01/28 21:19:48 | 000,000,794 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 3287703646.job
[2014/01/28 20:40:57 | 000,000,796 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 985122024.job
[2014/01/28 19:09:47 | 000,000,794 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 4248253841.job
[2014/01/28 17:13:05 | 000,000,794 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 2271048042.job
[2014/01/27 16:40:42 | 000,000,796 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 3690677127.job
[2014/01/27 13:17:41 | 000,000,802 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 3046702210.job
[2014/01/27 07:38:46 | 000,000,802 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 4171909079.job
[2014/01/26 03:18:18 | 000,000,798 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 3288067138.job
[2014/01/26 01:08:12 | 000,000,794 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 1139419153.job
[2014/01/26 00:42:08 | 000,000,796 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 3717181098.job
[2014/01/25 23:11:06 | 000,000,798 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 534460331.job
[2014/01/25 20:47:55 | 000,000,798 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 197679845.job
[2014/01/25 19:16:50 | 000,000,802 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 1252562066.job
[2014/01/25 17:19:45 | 000,000,800 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 583378015.job
[2014/01/25 16:40:50 | 000,000,794 | ---- | M] () -- C:\Windows\tasks\Security Center Update - 993838087.job
:Services
:Reg
:Files
ipconfig /flushdns /c
:Commands
[emptytemp]
[start explorer]
[Reboot]
Then click the Run Fix button at the top. <--Not run Scan
Let the program run unhindered, reboot when it is done
Then post the results of the log it produces
Then run a new scan with OTL and post the new log please
All processes killed
========== OTL ==========
C:\Program Files (x86)\Common Files\Spigot\GC folder moved successfully.
C:\Program Files (x86)\Common Files\Spigot folder moved successfully.
C:\Users\Greg\AppData\Roaming\Aguwvoqy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ugefuqb folder moved successfully.
C:\Users\Greg\AppData\Roaming\Faafulw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ergaawl folder moved successfully.
C:\Users\Greg\AppData\Roaming\Bozyadso folder moved successfully.
C:\Users\Greg\AppData\Roaming\Hekeekse folder moved successfully.
C:\Users\Greg\AppData\Roaming\Awytylwe folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yzihohf folder moved successfully.
C:\Users\Greg\AppData\Roaming\Mecyuxs folder moved successfully.
C:\Users\Greg\AppData\Roaming\Firiec folder moved successfully.
C:\Users\Greg\AppData\Roaming\Cuceiffy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uvangy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ishiath folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xutuiqav folder moved successfully.
C:\Users\Greg\AppData\Roaming\Vamumifa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yzaklie folder moved successfully.
C:\Users\Greg\AppData\Roaming\Sotyaf folder moved successfully.
C:\Users\Greg\AppData\Roaming\Iwxiihxu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Erekty folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yluhaszu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Elqyerot folder moved successfully.
C:\Users\Greg\AppData\Roaming\Tuzylyn folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xyzagao folder moved successfully.
C:\Users\Greg\AppData\Roaming\Isacro folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zyzudos folder moved successfully.
C:\Users\Greg\AppData\Roaming\Worupyz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Siquez folder moved successfully.
C:\Users\Greg\AppData\Roaming\Pyrova folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xoiregeh folder moved successfully.
C:\Users\Greg\AppData\Roaming\Kouwolm folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yqyqyvyz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Vuiqenle folder moved successfully.
C:\Users\Greg\AppData\Roaming\Awhaefep folder moved successfully.
C:\Users\Greg\AppData\Roaming\Suvaeq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ubyxygke folder moved successfully.
C:\Users\Greg\AppData\Roaming\Okolaw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ulqyiq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Rudatoi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Deokiw folder moved successfully.
C:\Users\Greg\AppData\Roaming\Utoqzou folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ubzohaic folder moved successfully.
C:\Users\Greg\AppData\Roaming\Aciscy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Evusufu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Olehuh folder moved successfully.
C:\Users\Greg\AppData\Roaming\Paevrep folder moved successfully.
C:\Users\Greg\AppData\Roaming\Dyqomez folder moved successfully.
C:\Users\Greg\AppData\Roaming\Obugego folder moved successfully.
C:\Users\Greg\AppData\Roaming\Meibway folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yloksa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Buefemob folder moved successfully.
C:\Users\Greg\AppData\Roaming\Kovofeq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Poumuz folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ynlyradi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Nyovfyas folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yrloifni folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ydkyla folder moved successfully.
C:\Users\Greg\AppData\Roaming\Exykku folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yvgesuqo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Usygyda folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ywvusoro folder moved successfully.
C:\Users\Greg\AppData\Roaming\Eqmiiv folder moved successfully.
C:\Users\Greg\AppData\Roaming\Biowwam folder moved successfully.
C:\Users\Greg\AppData\Roaming\Weugho folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ugebaqp folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ybomvo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Hogoafh folder moved successfully.
C:\Users\Greg\AppData\Roaming\Owacbeab folder moved successfully.
C:\Users\Greg\AppData\Roaming\Voahrucy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Nalevo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Afmazo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Irtoyro folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ibinhe folder moved successfully.
C:\Users\Greg\AppData\Roaming\Octoqeog folder moved successfully.
C:\Users\Greg\AppData\Roaming\Danaker folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ynysxa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Xahuerpa folder moved successfully.
C:\Users\Greg\AppData\Roaming\Levabapi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Adtiybny folder moved successfully.
C:\Users\Greg\AppData\Roaming\Epguvyif folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yckabi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Igrysuf folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yqfuur folder moved successfully.
C:\Users\Greg\AppData\Roaming\Izvyuhq folder moved successfully.
C:\Users\Greg\AppData\Roaming\Moorevdu folder moved successfully.
C:\Users\Greg\AppData\Roaming\Lyimyc folder moved successfully.
C:\Users\Greg\AppData\Roaming\Etorex folder moved successfully.
C:\Users\Greg\AppData\Roaming\Wixyavi folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ecatut folder moved successfully.
C:\Users\Greg\AppData\Roaming\Soutpyab folder moved successfully.
C:\Users\Greg\AppData\Roaming\Lihugozy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Noisediv folder moved successfully.
C:\Users\Greg\AppData\Roaming\Ariwkau folder moved successfully.
C:\Users\Greg\AppData\Roaming\Kaaqroti folder moved successfully.
C:\Users\Greg\AppData\Roaming\Viefce folder moved successfully.
C:\Users\Greg\AppData\Roaming\Mibadya folder moved successfully.
C:\Users\Greg\AppData\Roaming\Riexzog folder moved successfully.
C:\Users\Greg\AppData\Roaming\Woxoyk folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uqpyop folder moved successfully.
C:\Users\Greg\AppData\Roaming\Toryke folder moved successfully.
C:\Users\Greg\AppData\Roaming\Cizyko folder moved successfully.
C:\Users\Greg\AppData\Roaming\Akipun folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yruwoky folder moved successfully.
C:\Users\Greg\AppData\Roaming\Efcayzdo folder moved successfully.
C:\Users\Greg\AppData\Roaming\Uttoer folder moved successfully.
C:\Users\Greg\AppData\Roaming\Zualohyr folder moved successfully.
C:\Users\Greg\AppData\Roaming\Yfeczy folder moved successfully.
C:\Users\Greg\AppData\Roaming\Arzuano folder moved successfully.
C:\Users\Greg\AppData\Roaming\Feygsan folder moved successfully.
C:\Windows\Tasks\Security Center Update - 3908755253.job moved successfully.
C:\Windows\Tasks\Security Center Update - 1722134904.job moved successfully.
C:\Windows\Tasks\Security Center Update - 2053395886.job moved successfully.
C:\Windows\Tasks\Security Center Update - 2164977508.job moved successfully.
C:\Windows\Tasks\Security Center Update - 3134106562.job moved successfully.
C:\Windows\Tasks\Security Center Update - 760575922.job moved successfully.
C:\Windows\Tasks\Security Center Update - 3287703646.job moved successfully.
C:\Windows\Tasks\Security Center Update - 985122024.job moved successfully.
C:\Windows\Tasks\Security Center Update - 4248253841.job moved successfully.
C:\Windows\Tasks\Security Center Update - 2271048042.job moved successfully.
C:\Windows\Tasks\Security Center Update - 3690677127.job moved successfully.
C:\Windows\Tasks\Security Center Update - 3046702210.job moved successfully.
C:\Windows\Tasks\Security Center Update - 4171909079.job moved successfully.
C:\Windows\Tasks\Security Center Update - 3288067138.job moved successfully.
C:\Windows\Tasks\Security Center Update - 1139419153.job moved successfully.
C:\Windows\Tasks\Security Center Update - 3717181098.job moved successfully.
C:\Windows\Tasks\Security Center Update - 534460331.job moved successfully.
C:\Windows\Tasks\Security Center Update - 197679845.job moved successfully.
C:\Windows\Tasks\Security Center Update - 1252562066.job moved successfully.
C:\Windows\Tasks\Security Center Update - 583378015.job moved successfully.
C:\Windows\Tasks\Security Center Update - 993838087.job moved successfully.
========== SERVICES/DRIVERS ==========
========== REGISTRY ==========
========== FILES ==========
< ipconfig /flushdns /c >
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
C:\Users\Greg\Desktop\cmd.bat deleted successfully.
C:\Users\Greg\Desktop\cmd.txt deleted successfully.
========== COMMANDS ==========
[EMPTYTEMP]
User: All Users
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
User: Greg
->Temp folder emptied: 86946173 bytes
->Temporary Internet Files folder emptied: 687456557 bytes
->Java cache emptied: 0 bytes
->Google Chrome cache emptied: 7041719 bytes
->Apple Safari cache emptied: 0 bytes
->Flash cache emptied: 85851 bytes
User: LogMeInRemoteUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
User: LogMeInRemoteUser.GREG
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
User: Public
->Temp folder emptied: 0 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 2557128 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 128 bytes
RecycleBin emptied: 40888745 bytes
Total Files Cleaned = 787.00 mb
OTL by OldTimer - Version 3.2.69.0 log created on 02042014_094033
Files\Folders moved on Reboot...
C:\Users\Greg\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZV3JICPM\5TCLFI4R.htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZV3JICPM\LHZJ63XN.htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZV3JICPM\VDLFMH9M.htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HC7CST37\HL5A9JPM.htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HC7CST37\OBMKKMBP.htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HC7CST37\QNFGCLJK.htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BZ8TU2N3\XUURJTL8.htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2WQV7XI0\EJZCZI0V.htm moved successfully.
File move failed. C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat scheduled to be moved on reboot.
File\Folder C:\Windows\temp\hsperfdata_GREG$\2156 not found!
File\Folder C:\Windows\temp\jna6009933180953729174.dll not found!
File move failed. C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat scheduled to be moved on reboot.
PendingFileRenameOperations files...
Registry entries deleted on Reboot...
OTL logfile created on: 2/4/2014 9:55:00 AM - Run 5
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Greg\Desktop
64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.16428)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
7.94 Gb Total Physical Memory | 4.86 Gb Available Physical Memory | 61.24% Memory free
8.94 Gb Paging File | 5.52 Gb Available in Paging File | 61.75% Paging File free
Paging file location(s): c:\pagefile.sys 1024 2048
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 931.41 Gb Total Space | 587.85 Gb Free Space | 63.11% Space Free | Partition Type: NTFS
Drive E: | 298.09 Gb Total Space | 152.62 Gb Free Space | 51.20% Space Free | Partition Type: NTFS
Computer Name: GREG | User Name: Greg | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
PRC - C:\Users\Greg\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Users\Greg\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe (IObit)
PRC - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe (IObit)
PRC - C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe (Google Inc.)
PRC - C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files (x86)\AVG\AVG2014\avgui.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files (x86)\FreeCountdownTimer\FreeCountdownTimer.exe (Comfort Software Group)
PRC - C:\Program Files (x86)\IObit\Advanced SystemCare 7\RealTimeProtector.exe ()
PRC - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Skype Technologies S.A.)
PRC - C:\Program Files (x86)\AVG\AVG2014\avgfws.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe (Microsoft Corp.)
PRC - C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrobat_sl.exe (Adobe Systems Incorporated)
PRC - C:\Program Files (x86)\SkyGolf\CaddieSync Express\CaddieSyncExpress.exe (SkyHawke)
PRC - C:\Program Files\CrashPlan\CrashPlanTray.exe (Code 42 Software, Inc.)
PRC - C:\Program Files (x86)\Free Desktop Timer\DesktopTimer.exe ()
PRC - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\Workspace\offSyncService.exe (Starfield Technologies)
PRC - C:\Program Files (x86)\DynDNS Updater\DynUpSvc.exe (Dyn, Inc.)
PRC - C:\Program Files (x86)\DynDNS Updater\DynTray.exe (Dyn, Inc.)
PRC - C:\Program Files (x86)\DYMO\DYMO Label Software\DLSService.exe (Sanford, L.P.)
PRC - C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe (Hewlett-Packard Company)
PRC - C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe ()
PRC - C:\Windows\vVX3000.exe (Microsoft Corporation)
PRC - C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe (HP)
========== Modules (No Company Name) ==========
MOD - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ppgooglenaclpluginchrome.dll ()
MOD - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\pdf.dll ()
MOD - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libglesv2.dll ()
MOD - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libegl.dll ()
MOD - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ffmpegsumo.dll ()
MOD - C:\Users\Greg\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll ()
MOD - C:\Program Files (x86)\IObit\Advanced SystemCare 7\RealTimeProtector.exe ()
MOD - C:\Users\Greg\AppData\Roaming\Dropbox\bin\libcef.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\ef0a534be135cd8f0d99d938d8b1814a\System.Windows.Forms.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\29f3ae8d313e62b4daed1107ccd29f9f\System.Configuration.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\f4e49f5f51d2fa5e6190464468dff4d3\Microsoft.VisualBasic.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\6ebbfafc5521934f7e1c154937a2788b\System.Web.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\d473c19e69818875b9c739cad8f386a5\System.Runtime.Remoting.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\c664f44617c6a89edcc171fa8596c89d\System.ServiceProcess.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\5aa44bce7933e4de09d935848f868a4b\System.Drawing.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\09db78d6068543df01862a023aca785a\System.Xml.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System\5d22a30e587e2cac106b81fb351e7c08\System.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\9a6c1b7af18b4d5a91dc7f8d6617522f\mscorlib.ni.dll ()
MOD - C:\Program Files (x86)\SkyGolf\CaddieSync Express\conduitscripting0.dll ()
MOD - C:\Program Files (x86)\SkyGolf\CaddieSync Express\qjson0.dll ()
MOD - C:\Program Files (x86)\SkyGolf\CaddieSync Express\qextserialport1.dll ()
MOD - C:\Program Files (x86)\Free Desktop Timer\DesktopTimer.exe ()
MOD - C:\Program Files (x86)\IObit\Advanced SystemCare 7\madexcept_.bpl ()
MOD - C:\Program Files (x86)\IObit\Advanced SystemCare 7\maddisAsm_.bpl ()
MOD - C:\Program Files (x86)\IObit\Advanced SystemCare 7\madbasic_.bpl ()
MOD - C:\Program Files (x86)\IObit\Advanced SystemCare 7\webres.dll ()
MOD - C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll ()
MOD - C:\Program Files (x86)\HP\HP UT LEDM\bin\HPTools.dll ()
MOD - C:\Program Files (x86)\HP\HP UT LEDM\bin\HPToolkit.dll ()
MOD - C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe ()
MOD - C:\Program Files (x86)\SkyGolf\CaddieSync Express\libgcc_s_dw2-1.dll ()
MOD - C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll ()
MOD - C:\Program Files (x86)\SkyGolf\CaddieSync Express\mingwm10.dll ()
========== Services (SafeList) ==========
SRV:[b]64bit: - (IEEtwCollectorService) -- C:\Windows\SysNative\IEEtwCollector.exe (Microsoft Corporation)
SRV:64bit: - (BcmBtRSupport) -- C:\Windows\SysNative\BtwRSupportService.exe (Broadcom Corporation.)
SRV:64bit: - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV:64bit: - (CrashPlanService) -- C:\Program Files\CrashPlan\CrashPlanService.exe (CrashPlan)
SRV:64bit: - (HPSIService) -- C:\Windows\SysNative\HPSIsvc.exe (HP)
SRV:64bit: - (FLEXnet Licensing Service 64) -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe (Acresso Software Inc.)
SRV:64bit: - (wlcrasvc) -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe (Microsoft Corporation)
SRV:64bit: - (MSCamSvc) -- C:\Program Files\Microsoft LifeCam\MSCamS64.exe (Microsoft Corporation)
SRV:64bit: - (LBTServ) -- C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe (Logitech, Inc.)
SRV:64bit: - (AppMgmt) -- C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SRV:64bit: - (CISVC) -- C:\Windows\SysNative\CISVC.EXE (Microsoft Corporation)
SRV:64bit: - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD)
SRV - (LMIMaint) -- C:\Program Files (x86)\LogMeIn\x64\ramaint.exe (LogMeIn, Inc.)
SRV - (LMIGuardianSvc) -- C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe (LogMeIn, Inc.)
SRV - (AdobeARMservice) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (TuneUp.UtilitiesSvc) -- C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe (AVG)
SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (AdvancedSystemCareService7) -- C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe (IObit)
SRV - (LiveUpdateSvc) -- C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe (IObit)
SRV - (AVGIDSAgent) -- C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe (AVG Technologies CZ, s.r.o.)
SRV - (Skype C2C Service) -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Skype Technologies S.A.)
SRV - (avgfws) -- C:\Program Files (x86)\AVG\AVG2014\avgfws.exe (AVG Technologies CZ, s.r.o.)
SRV - (avgwd) -- C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
SRV - (BingDesktopUpdate) -- C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe (Microsoft Corp.)
SRV - (LogMeIn) -- C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe (LogMeIn, Inc.)
SRV - (Stereo Service) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (File Backup) -- C:\Program Files (x86)\Workspace\offSyncService.exe (Starfield Technologies)
SRV - (SkypeUpdate) -- C:\Program Files (x86)\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (Dyn Updater) -- C:\Program Files (x86)\DynDNS Updater\DynUpSvc.exe (Dyn, Inc.)
SRV - (DymoPnpService) -- C:\Program Files (x86)\DYMO\DYMO Label Software\DymoPnpService.exe (Sanford, L.P.)
SRV - (HPSLPSVC) -- C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL (Hewlett-Packard Co.)
SRV - (FLEXnet Licensing Service) -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Acresso Software Inc.)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (HP LaserJet Service) -- C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe (HP)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
========== Driver Services (SafeList) ==========
DRV:64bit: - (LMIRfsClientNP) -- C:\Windows\SysNative\LMIRfsClientNP.dll (LogMeIn, Inc.)
DRV:64bit: - (Avgdiska) -- C:\Windows\SysNative\drivers\avgdiska.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (AVGIDSDriver) -- C:\Windows\SysNative\drivers\avgidsdrivera.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (Avgldx64) -- C:\Windows\SysNative\drivers\avgldx64.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (Avgloga) -- C:\Windows\SysNative\drivers\avgloga.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (AVGIDSHA) -- C:\Windows\SysNative\drivers\avgidsha.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (btwampfl) -- C:\Windows\SysNative\drivers\btwampfl.sys (Broadcom Corporation.)
DRV:64bit: - (bcbtums) -- C:\Windows\SysNative\drivers\bcbtums.sys (Broadcom Corporation.)
DRV:64bit: - (Avgmfx64) -- C:\Windows\SysNative\drivers\avgmfx64.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (Avgfwfd) -- C:\Windows\SysNative\drivers\avgfwd6a.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (Avgrkx64) -- C:\Windows\SysNative\drivers\avgrkx64.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (Avgtdia) -- C:\Windows\SysNative\drivers\avgtdia.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (Point64) -- C:\Windows\SysNative\drivers\point64.sys (Microsoft Corporation)
DRV:64bit: - (LMIRfsDriver) -- C:\Windows\SysNative\drivers\LMIRfsDriver.sys (LogMeIn, Inc.)
DRV:64bit: - (lmimirr) -- C:\Windows\SysNative\drivers\lmimirr.sys (LogMeIn, Inc.)
DRV:64bit: - (dc3d) -- C:\Windows\SysNative\drivers\dc3d.sys (Microsoft Corporation)
DRV:64bit: - (USBAAPL64) -- C:\Windows\SysNative\drivers\usbaapl64.sys (Apple, Inc.)
DRV:64bit: - (mvusbews) -- C:\Windows\SysNative\drivers\mvusbews.sys (Marvell Semiconductor, Inc.)
DRV:64bit: - (RdpVideoMiniport) -- C:\Windows\SysNative\drivers\rdpvideominiport.sys (Microsoft Corporation)
DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (GEARAspiWDM) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (Fs_Rec) -- C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (fssfltr) -- C:\Windows\SysNative\drivers\fssfltr.sys (Microsoft Corporation)
DRV:64bit: - (SkyhawkeUSBLan) -- C:\Windows\SysNative\drivers\btblan.sys (Belcarra Technologies)
DRV:64bit: - (PRESONUS_AUDIOBOX_USB) -- C:\Windows\SysNative\drivers\psabusbu.sys (Ploytec GmbH)
DRV:64bit: - (PRESONUS_AUDIOBOX_WDM) -- C:\Windows\SysNative\drivers\psabusba.sys (Ploytec GmbH)
DRV:64bit: - (PRESONUS_AUDIOBOX_MIDI) -- C:\Windows\SysNative\drivers\psabusbm.sys (Ploytec GmbH)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (StillCam) -- C:\Windows\SysNative\drivers\serscan.sys (Microsoft Corporation)
DRV:64bit: - (VX3000) -- C:\Windows\SysNative\drivers\VX3000.sys (Microsoft Corporation)
DRV:64bit: - (LMouFilt) -- C:\Windows\SysNative\drivers\LMouFilt.Sys (Logitech, Inc.)
DRV:64bit: - (LHidFilt) -- C:\Windows\SysNative\drivers\LHidFilt.Sys (Logitech, Inc.)
DRV:64bit: - (VST64_DPV) -- C:\Windows\SysNative\drivers\VSTDPV6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (winachsf) -- C:\Windows\SysNative\drivers\VSTCNXT6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (VST64HWBS2) -- C:\Windows\SysNative\drivers\VSTBS26.SYS (Conexant Systems, Inc.)
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (e1express) -- C:\Windows\SysNative\drivers\e1e6232e.sys (Intel Corporation)
DRV:64bit: - (atikmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (silabser) -- C:\Windows\SysNative\drivers\silabser.sys (Silicon Laboratories)
DRV:64bit: - (silabenm) -- C:\Windows\SysNative\drivers\silabenm.sys (Silicon Laboratories, Inc.)
DRV:64bit: - (preSonusUsb) -- C:\Windows\SysNative\drivers\preSonusUsb.sys (PreSonus Audio Electronics)
DRV:64bit: - (ControlTransferDriver) -- C:\Windows\SysNative\drivers\PreSonusUSB_xfer.sys (PreSonus Audio Electronics)
DRV - (TuneUpUtilitiesDrv) -- C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys (TuneUp Software)
DRV - (LMIInfo) -- C:\Program Files (x86)\LogMeIn\x64\rainfo.sys (LogMeIn, Inc.)
DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE:64bit: - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.yahoo.com/?type=198484&fr=spigot-yhp-ie
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 4A 5C 73 60 1A 57 CA 01 [binary data]
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\..\SearchScopes,DefaultScope = {A8273032-2A44-4B51-9260-1E36A9BBC3B4}
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\..\SearchScopes\{678C32DE-279F-4E67-AFB8-37B78B72F5A5}: "URL" = https://www.google.com/search?q={searchTerms}
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\..\SearchScopes\{7A2F9203-01E3-4ED0-B627-F7BD85BE63E6}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000031&src=kw&q={searchTerms}&locale=en_US&apn_ptnrs=TV&apn_dtid=OSJ000YYUS&apn_uid=8140A633-0BA9-4F77-8487-8BF9C208F80A&apn_sauid=880C589A-978F-4EB4-9DB0-700BF77083E6&
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\..\SearchScopes\{90CAD367-7355-4EA0-88C5-EEB0659C7EC5}: "URL" = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8&rlz=1I7GGIE_en
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\..\SearchScopes\{A8273032-2A44-4B51-9260-1E36A9BBC3B4}: "URL" = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=198484&p={searchTerms}
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
========== FireFox ==========
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@dymo.com/DymoLabelFramework: C:\Program Files (x86)\DYMO\DYMO Label Software\Framework\npDYMOLabelFramework.dll ( Sanford L.P.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.45.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Acrobat: C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@citrixonline.com/appdetectorplugin: C:\Users\Greg\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
FF - HKCU\Software\MozillaPlugins\@starfield.com/off: C:\Users\Greg\AppData\Roaming\Mozilla\Plugins\npoff.dll ( Starfield Technologies, LLC.)
FF - HKCU\Software\MozillaPlugins\@starfield.com/off64: C:\Users\Greg\AppData\Roaming\Mozilla\Plugins\npoff64.dll ( Starfield Technologies, LLC.)
FF - HKCU\Software\MozillaPlugins\@starfield.com/wbe: C:\Users\Greg\AppData\Roaming\Mozilla\Plugins\npwbe.dll (Starfield Technology, LLC)
FF - HKCU\Software\MozillaPlugins\@starfield.com/wbe64: C:\Users\Greg\AppData\Roaming\Mozilla\Plugins\npwbe64.dll (Starfield Technology, LLC)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010/09/29 11:56:01 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}: C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\ [2011/01/13 03:02:09 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\quickprint@hp.com: C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension [2011/01/26 14:27:28 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010/09/29 11:56:01 | 000,000,000 | ---D | M]
[2010/08/12 14:06:34 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Greg\AppData\Roaming\Mozilla\Extensions
[2010/03/16 18:23:10 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Greg\AppData\Roaming\Mozilla\Extensions\mozswing@mozswing.org
========== Chrome ==========
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},
CHR - homepage: http://search.yahoo.com/?type=198484&fr=spigot-yhp-ch
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.89\PepperFlash\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\pdf.dll
CHR - plugin: Skype Toolbars (Enabled) = C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\npSkypeChromePlugin.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: Online Storage plug-in (Enabled) = C:\Users\Greg\AppData\Roaming\Mozilla\plugins\npoff.dll
CHR - plugin: Workspace Webmail plug-in 1.0.20.42 (Enabled) = C:\Users\Greg\AppData\Roaming\Mozilla\plugins\npwbe.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
CHR - plugin: Microsoft Office Live Plug-in for Firefox (Enabled) = C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll
CHR - plugin: DYMO Label Framework (Enabled) = C:\Program Files (x86)\DYMO\DYMO Label Software\Framework\npDYMOLabelFramework.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Picasa (Enabled) = C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll
CHR - plugin: Java(TM) Platform SE 6 U31 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll
CHR - Extension: Angry Birds = C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj\1.5.0.7_0\
CHR - Extension: 1Password = C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\aomjjhallfgjeglblehebfpbcfeobpgk\4.0.1.99_0\
CHR - Extension: ShopAtHome.com extension = C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlmebkoiahbppacaicbgncnjhbpdfkcc\7.1.0.16_0\
CHR - Extension: Google Wallet = C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\
CHR - Extension: Google Reader = C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjjhlfkghdhmijklfnahfkpgmhcmfgcm\4.4_0\
CHR - Extension: RSS Feed Reader = C:\Users\Greg\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnjaodmkngahhkoihejjehlcdlnohgmp\5.2.2_0\
O1 HOSTS File: ([2014/02/01 16:19:06 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2:64bit: - BHO: (ExplorerWnd Helper) - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit)
O2:64bit: - BHO: (no name) - {34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5} - No CLSID value found.
O2:64bit: - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Advanced SystemCare Browser Protection) - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit)
O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3 - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [Bluetooth Connection Assistant] LBTWIZ.EXE -silent File not found
O4:64bit: - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\Windows\KHALMNPR.Exe (Logitech, Inc.)
O4:64bit: - HKLM..\Run: [LogMeIn GUI] C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe (LogMeIn, Inc.)
O4:64bit: - HKLM..\Run: [VX3000] C:\Windows\vVX3000.exe (Microsoft Corporation)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [AVG_UI] C:\Program Files (x86)\AVG\AVG2014\avgui.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [CaddieSyncConduit] C:\Program Files (x86)\SkyGolf\CaddieSync Express\CaddieSyncExpress.exe (SkyHawke)
O4 - HKLM..\Run: [ControlCenter3] C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [DLSService] C:\Program Files (x86)\DYMO\DYMO Label Software\DLSService.exe (Sanford, L.P.)
O4 - HKLM..\Run: [HPUsageTrackingLEDM] C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe (Hewlett-Packard Company)
O4 - HKU\S-1-5-21-544424465-2215569426-3739340312-1000..\Run: [Advanced SystemCare 7] C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe (IObit)
O4 - HKU\S-1-5-21-544424465-2215569426-3739340312-1000..\Run: [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Apple Inc.)
O4 - HKU\S-1-5-21-544424465-2215569426-3739340312-1000..\Run: [FreeCT] C:\Program Files (x86)\FreeCountdownTimer\FreeCountdownTimer.exe (Comfort Software Group)
O4 - HKU\S-1-5-21-544424465-2215569426-3739340312-1000..\Run: [FreeDesktopTimer] C:\Program Files (x86)\Free Desktop Timer\DesktopTimer.exe ()
O4 - HKU\S-1-5-21-544424465-2215569426-3739340312-1003..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-544424465-2215569426-3739340312-1003..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - Startup: C:\Users\Greg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Greg\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-544424465-2215569426-3739340312-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-544424465-2215569426-3739340312-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8:64bit: - Extra context menu item: Append Link Target to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Append to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Convert Link Target to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Convert to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Append Link Target to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Append to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert Link Target to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O9:64bit: - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\smartprintsetup.exe (Hewlett-Packard)
O9 - Extra 'Tools' menuitem : SmartPrint - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\smartprintsetup.exe (Hewlett-Packard)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000010 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000010 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} http://office.microsoft.com/_layouts/ClientBin/ieawsdc32.cab (Microsoft Office Template and Media Control)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {33415AC7-AFFA-4D55-B41C-C64C0D07DFCA} http://h50203.www5.hp.com/HPISWeb/Customer/cabs/HPISWebManager.CAB (Hewlett-Packard Printer Diagnostics)
O16 - DPF: {627C5D14-CB66-493E-B0F3-589C7E2FA833} http://s118403992.hwddns.com/template/WebClient.cab (NxWebRemoteHH)
O16 - DPF: {BC0AE9E6-E549-4554-A222-EA083A894683} http://a03-b03.mypicturetown.com/P2PwebCmdController/x/Upld_47.CAB (QuickUpload)
O16 - DPF: {C1FDEE68-98D5-4F42-A4DD-D0BECF5077EB} http://tools.ebayimg.com/eps/wl/activex/eBay_Enhanced_Picture_Control_v1-0-29-0.cab (EPUImageControl Class)
O16 - DPF: {C7DEDA04-2FFF-4B81-AE66-0A0E0EF4AD2F} http://www.ritzpix.com/net/Uploader/LPUploader57.cab (Image Uploader Control)
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} https://corecon.webex.com/client/T27L/webex/ieatgpc1.cab (GpcContainer Class)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Value error.)
O16 - DPF: {FE92D9C3-4A69-4EC7-8651-1DC8531D0075} http://68.15.12.110:8012/user/TSBnwCam.CAB (TSBnwCam Control)
O16 - DPF: Garmin Communicator Plug-In https://static.garmincdn.com/gcp/ie/4.0.4.0/GarminAxControl_32.CAB (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{ECF2B04B-5FBD-4691-A868-5A94A86C6697}: NameServer = 8.8.8.8,8.8.4.4
O18:64bit: - Protocol\Handler\grooveLocalGWS - No CLSID value found
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\ms-itss - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\LBTWlgn: DllName - (c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll) - c:\Program Files\Common Files\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O27:64bit: - HKLM IFEO\ehshell.exe: Debugger - C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe (LogMeIn, Inc.)
O27 - HKLM IFEO\ehshell.exe: Debugger - C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe (LogMeIn, Inc.)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011/03/14 11:57:12 | 000,000,000 | ---D | M] - C:\Autodesk -- [ NTFS ]
O32 - AutoRun File - [2006/09/18 15:43:36 | 000,000,024 | ---- | M] () - E:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = ComFile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
========== Files/Folders - Created Within 30 Days ==========
[2014/02/03 15:49:28 | 000,000,000 | ---D | C] -- C:\Users\Greg\Desktop\200 Northfield Road
[2014/02/03 08:05:04 | 000,000,000 | ---D | C] -- C:\Users\Greg\Desktop\McGovern
[2014/02/02 12:57:04 | 000,000,000 | ---D | C] -- C:\_OTL
[2014/02/01 16:19:12 | 000,000,000 | ---D | C] -- C:\$RECYCLE.BIN
[2014/02/01 11:26:40 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2014/02/01 11:26:40 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2014/02/01 11:26:40 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2014/02/01 11:24:17 | 000,000,000 | ---D | C] -- C:\Qoobox
[2014/01/31 15:55:34 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Greg\Desktop\OTL.exe
[2014/01/30 20:25:55 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT
[2014/01/30 20:25:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ERUNT
[2014/01/30 20:25:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ERUNT
[2014/01/27 14:07:57 | 000,040,248 | ---- | C] (AVG) -- C:\Windows\SysNative\TURegOpt.exe
[2014/01/27 14:07:55 | 000,029,496 | ---- | C] (AVG) -- C:\Windows\SysNative\authuitu.dll
[2014/01/27 14:07:54 | 000,025,400 | ---- | C] (AVG) -- C:\Windows\SysWow64\authuitu.dll
[2014/01/27 14:07:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2014
[2014/01/27 14:06:51 | 000,000,000 | ---D | C] -- C:\Users\Greg\AppData\Roaming\AVG
[2014/01/27 13:56:09 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG
[2014/01/27 13:55:57 | 000,000,000 | -HSD | C] -- C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
[2014/01/22 10:25:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller
[2014/01/22 10:25:19 | 000,000,000 | ---D | C] -- C:\ProgramData\ProductData
[2014/01/22 10:23:43 | 000,000,000 | ---D | C] -- C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
[2014/01/22 10:23:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 7
[2014/01/15 10:19:58 | 000,325,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbport.sys
[2014/01/15 10:19:58 | 000,007,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbd.sys
[2014/01/15 10:19:56 | 000,376,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\netio.sys
[2014/01/14 09:36:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Countdown Timer
[2014/01/14 09:36:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\FreeCountdownTimer
[2014/01/14 09:33:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Desktop Timer
[2014/01/14 09:33:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Free Desktop Timer
========== Files - Modified Within 30 Days ==========
[2014/02/04 09:56:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2014/02/04 09:55:32 | 000,013,456 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2014/02/04 09:55:32 | 000,013,456 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2014/02/04 09:47:16 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2014/02/04 09:47:11 | 2095,452,159 | -HS- | M] () -- C:\hiberfil.sys
[2014/02/04 09:26:00 | 000,000,894 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014/02/03 15:51:30 | 000,734,906 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2014/02/03 15:51:30 | 000,629,576 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2014/02/03 15:51:30 | 000,108,652 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2014/02/01 16:19:06 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
[2014/01/31 15:55:56 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Greg\Desktop\OTL.exe
[2014/01/23 15:53:31 | 000,000,512 | ---- | M] () -- C:\Users\Greg\Documents\MBR.dat
[2014/01/21 16:32:39 | 000,107,368 | ---- | M] (LogMeIn, Inc.) -- C:\Windows\SysNative\LMIRfsClientNP.dll
[2014/01/21 16:32:39 | 000,092,488 | ---- | M] (LogMeIn, Inc.) -- C:\Windows\SysNative\LMIinit.dll
[2014/01/21 16:32:39 | 000,035,656 | ---- | M] (LogMeIn, Inc.) -- C:\Windows\SysNative\LMIport.dll
[2014/01/20 16:23:47 | 000,012,326 | ---- | M] () -- C:\Users\Greg\AppData\Local\lgawiqfw
[2014/01/20 16:22:45 | 000,067,992 | ---- | M] () -- C:\Users\Greg\AppData\Local\idnlbohr
[2014/01/20 16:21:43 | 000,000,000 | ---- | M] () -- C:\Users\Greg\AppData\Roaming\SharedSettings.ccs
[2014/01/19 16:34:49 | 000,001,044 | ---- | M] () -- C:\Users\Greg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
[2014/01/16 03:25:47 | 000,500,856 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
========== Files Created - No Company Name ==========
[2014/02/01 11:26:40 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2014/02/01 11:26:40 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2014/02/01 11:26:40 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2014/02/01 11:26:40 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2014/02/01 11:26:40 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2014/01/27 14:07:29 | 000,002,243 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2014.lnk
[2014/01/23 15:53:31 | 000,000,512 | ---- | C] () -- C:\Users\Greg\Documents\MBR.dat
[2014/01/21 16:33:18 | 000,001,004 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Client.lnk
[2014/01/21 16:33:16 | 000,001,020 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Control Panel.lnk
[2014/01/20 16:23:47 | 000,012,326 | ---- | C] () -- C:\Users\Greg\AppData\Local\lgawiqfw
[2014/01/20 16:22:45 | 000,067,992 | ---- | C] () -- C:\Users\Greg\AppData\Local\idnlbohr
[2014/01/20 16:21:43 | 000,000,000 | ---- | C] () -- C:\Users\Greg\AppData\Roaming\SharedSettings.ccs
[2013/10/15 10:33:57 | 000,210,944 | ---- | C] () -- C:\Windows\SysWow64\msvcrt10.dll
[2012/09/14 11:38:02 | 000,000,507 | ---- | C] () -- C:\Windows\hpntwksetup.ini
[2010/11/12 06:21:00 | 000,038,435 | ---- | C] () -- C:\Users\Greg\AppData\Roaming\Microsoft Excel 97-2003.ADR
[2010/10/14 16:05:19 | 000,001,940 | ---- | C] () -- C:\Users\Greg\AppData\Local\{96C87F53-AC72-4604-A9CC-186A49F17F3C}.ini
[2010/03/23 09:58:24 | 000,007,606 | ---- | C] () -- C:\Users\Greg\AppData\Local\Resmon.ResmonCfg
[2010/02/17 09:07:50 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2009/11/13 12:03:35 | 000,000,000 | -H-- | C] () -- C:\ProgramData\PKP_DLdu.DAT
========== ZeroAccess Check ==========
[2009/07/13 22:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013/07/25 20:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013/07/25 19:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 19:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 06:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 19:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
========== LOP Check ==========
[2013/11/26 09:09:37 | 000,000,000 | ---D | M] -- C:\Users\Default\AppData\Roaming\TuneUp Software
[2013/11/26 09:09:37 | 000,000,000 | ---D | M] -- C:\Users\Default User\AppData\Roaming\TuneUp Software
[2011/03/14 13:00:05 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Autodesk
[2010/03/03 19:32:53 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Avery
[2014/01/27 14:06:51 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\AVG
[2013/10/28 21:37:51 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\AVG2014
[2011/02/09 07:56:23 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\com.kodakgallery.AirUploader
[2013/10/28 11:48:14 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\CrashPlan
[2014/02/04 09:51:43 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Dropbox
[2010/05/04 07:04:00 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\EBookSys
[2010/05/31 08:05:23 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\FileZilla
[2014/01/22 10:21:16 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\IObit
[2009/10/27 15:12:15 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Leadertech
[2009/11/22 12:50:54 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\SkyGolf
[2011/03/14 13:25:33 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\SmartDraw
[2013/10/15 10:49:38 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Spotify
[2013/10/28 21:36:41 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\TuneUp Software
[2010/06/11 12:16:16 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\Vu360
[2010/01/08 09:58:50 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\webex
[2013/10/15 06:59:48 | 000,000,000 | ---D | M] -- C:\Users\Greg\AppData\Roaming\YouSendIt
========== Purity Check ==========
< End of report >
Lets run these through OTL
Open OTL.exe
Copy/paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL
:OTL
[2014/01/20 16:23:47 | 000,012,326 | ---- | M] () -- C:\Users\Greg\AppData\Local\lgawiqfw
[2014/01/20 16:22:45 | 000,067,992 | ---- | M] () -- C:\Users\Greg\AppData\Local\idnlbohr
[2014/01/20 16:23:47 | 000,012,326 | ---- | C] () -- C:\Users\Greg\AppData\Local\lgawiqfw
[2014/01/20 16:22:45 | 000,067,992 | ---- | C] () -- C:\Users\Greg\AppData\Local\idnlbohr
:Services
:Reg
:Files
:Commands
[emptytemp]
[start explorer]
[Reboot]
Then click the Run Fix button at the top. <--Not run Scan
Let the program run unhindered, reboot when it is done
Then post the results of the log it produces
Then lets run TDSSKiller
Please download TDSSKiller.zip (http://support.kaspersky.com/downloads/utils/tdsskiller.zip)
Extract it to your desktop
Double click TDSSKiller.exe
Press Start Scan
Only if Malicious objects are found then ensure Cure is selected
Then click Continue > Reboot now
Copy and paste the log in your next reply
A copy of the log will be saved automatically to the root of the drive (typically C:\)
All processes killed
========== OTL ==========
C:\Users\Greg\AppData\Local\lgawiqfw moved successfully.
C:\Users\Greg\AppData\Local\idnlbohr moved successfully.
File C:\Users\Greg\AppData\Local\lgawiqfw not found.
File C:\Users\Greg\AppData\Local\idnlbohr not found.
========== SERVICES/DRIVERS ==========
========== REGISTRY ==========
========== FILES ==========
========== COMMANDS ==========
[EMPTYTEMP]
User: All Users
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
User: Greg
->Temp folder emptied: 13195168 bytes
->Temporary Internet Files folder emptied: 594661231 bytes
->Java cache emptied: 0 bytes
->Google Chrome cache emptied: 7058266 bytes
->Apple Safari cache emptied: 0 bytes
->Flash cache emptied: 52155 bytes
User: LogMeInRemoteUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
User: LogMeInRemoteUser.GREG
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
User: Public
->Temp folder emptied: 0 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 1076091 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 128 bytes
RecycleBin emptied: 0 bytes
Total Files Cleaned = 588.00 mb
OTL by OldTimer - Version 3.2.69.0 log created on 02052014_084140
Files\Folders moved on Reboot...
File\Folder C:\Users\Greg\AppData\Local\Temp\fla14BB.tmp not found!
File\Folder C:\Users\Greg\AppData\Local\Temp\fla1BAE.tmp not found!
File\Folder C:\Users\Greg\AppData\Local\Temp\fla2940.tmp not found!
File\Folder C:\Users\Greg\AppData\Local\Temp\fla3350.tmp not found!
File\Folder C:\Users\Greg\AppData\Local\Temp\fla3E11.tmp not found!
File\Folder C:\Users\Greg\AppData\Local\Temp\fla44A9.tmp not found!
File\Folder C:\Users\Greg\AppData\Local\Temp\fla530.tmp not found!
File\Folder C:\Users\Greg\AppData\Local\Temp\fla7653.tmp not found!
File\Folder C:\Users\Greg\AppData\Local\Temp\fla861A.tmp not found!
File\Folder C:\Users\Greg\AppData\Local\Temp\fla92D2.tmp not found!
File\Folder C:\Users\Greg\AppData\Local\Temp\flaA0C4.tmp not found!
File\Folder C:\Users\Greg\AppData\Local\Temp\flaA10E.tmp not found!
File\Folder C:\Users\Greg\AppData\Local\Temp\flaC405.tmp not found!
File\Folder C:\Users\Greg\AppData\Local\Temp\flaC8E6.tmp not found!
File\Folder C:\Users\Greg\AppData\Local\Temp\flaEFE7.tmp not found!
File\Folder C:\Users\Greg\AppData\Local\Temp\flaF141.tmp not found!
File\Folder C:\Users\Greg\AppData\Local\Temp\flaF692.tmp not found!
File\Folder C:\Users\Greg\AppData\Local\Temp\flaFB4F.tmp not found!
C:\Users\Greg\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBM8K1GR\beacon0UHBAL9N.htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBM8K1GR\beaconJKMK26SD.htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBM8K1GR\beaconL2H3MO9D.htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBM8K1GR\beaconQMNX3HVS.htm moved successfully.
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBM8K1GR\cl[1].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBM8K1GR\DBDMYVE1.htm not found!
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBM8K1GR\display[1].htm moved successfully.
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBM8K1GR\ev[1] not found!
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBM8K1GR\if4L2KLFJE.htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBM8K1GR\if51P30CP5.htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBM8K1GR\ifHFLQHR0U.htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBM8K1GR\ifS7OQR6IK.htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBM8K1GR\ifX85848MS.htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBM8K1GR\ifZKQU7B4R.htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBM8K1GR\pd[1].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBM8K1GR\tt[7].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBM8K1GR\tt[8].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBM8K1GR\usermatch3D1B2R9N.htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBM8K1GR\usermatchCLGW4GXM.htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBM8K1GR\usermatchCPUYNUO3.htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBM8K1GR\usermatchITDJDCI0.htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBM8K1GR\usermatchYA2M2KGT.htm moved successfully.
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UTD5L67G\0Rq5jTMHpL_1022753169[1].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UTD5L67G\0Rq5jTMHpL_1022753169[2].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UTD5L67G\1JBFR9KR.htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UTD5L67G\beacon54D33BMO.htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UTD5L67G\beaconA6O7J8IJ.htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UTD5L67G\beaconCDCVJ42R.htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UTD5L67G\beaconG2FYBTSF.htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UTD5L67G\beaconGFZREQNF.htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UTD5L67G\beaconJ8R9MSIS.htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UTD5L67G\beaconNR7ZSIKI.htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UTD5L67G\beaconUNB6KQJ1.htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UTD5L67G\if3DM6GYWP.htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UTD5L67G\view[1].htm not found!
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TU4JKZY7\MZBLRB7I.htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TU4JKZY7\pubmatic_160_600[1].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TU4JKZY7\pubmatic_300_250[1].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TU4JKZY7\pubmatic_728_90[1].htm moved successfully.
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TU4JKZY7\sb[1].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TNSDMVY9\AdDisplayTrackerServlet[5].htm not found!
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TNSDMVY9\shutterstock_165325028[1].jpg moved successfully.
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TNSDMVY9\zone1_iframe[1].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TNSDMVY9\zone2_iframe[1].htm not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G6QMEEDA\87MV9VM4.htm not found!
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G6QMEEDA\iframe[1].htm moved successfully.
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G6QMEEDA\vpixel[2].htm moved successfully.
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62CEGA1S\11229[1].js not found!
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62CEGA1S\83328d2d[1].htm not found!
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5BZLI3EZ\TRK8LVR8.htm moved successfully.
File\Folder C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3KNJFPRQ\cafemom-mad-life-branded-154552[1].htm not found!
C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2HSNPOE5\adsMainLeft[1].htm moved successfully.
File move failed. C:\Users\Greg\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat scheduled to be moved on reboot.
File\Folder C:\Windows\temp\hsperfdata_GREG$\2320 not found!
File\Folder C:\Windows\temp\jna5191002122651123577.dll not found!
File move failed. C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat scheduled to be moved on reboot.
PendingFileRenameOperations files...
Registry entries deleted on Reboot...
Too big again, attached zip. First scan found malicious item, then ran it again after reboot - 2nd log.
Good,
Please download Malwarebytes Anti-Rootkit from Here (http://downloads.malwarebytes.org/file/mbar)
Unzip the contents to a folder in a convenient location.
Open the folder where the contents were unzipped and run mbar.exe
Follow the instructions in the wizard to update and allow the program to scan your computer for threats.
Click on the Cleanup button to remove any threats and reboot if prompted to do so.
Wait while the system shuts down and the cleanup process is performed.
Perform another scan with Malwarebytes Anti-Rootkit to verify that no threats remain. If they do, then click Cleanup once more and repeat the process.
When done, please post the two logs produced they will be in the MBAR folder... mbar-log.txt and system-log.txt
---------------------------------------
Malwarebytes Anti-Rootkit BETA 1.07.0.1009
(c) Malwarebytes Corporation 2011-2012
OS version: 6.1.7601 Windows 7 Service Pack 1 x64
Account is Administrative
Internet Explorer version: 11.0.9600.16476
File system is: NTFS
Disk drives: C:\ DRIVE_FIXED, E:\ DRIVE_FIXED
CPU speed: 2.394000 GHz
Memory total: 8520667136, free: 5828567040
Downloaded database version: v2014.02.05.08
Downloaded database version: v2013.12.18.01
=======================================
Initializing...
------------ Kernel report ------------
02/05/2014 12:06:32
------------ Loaded modules -----------
\SystemRoot\system32\ntoskrnl.exe
\SystemRoot\system32\hal.dll
\SystemRoot\system32\kdcom.dll
\SystemRoot\system32\mcupdate_GenuineIntel.dll
\SystemRoot\system32\PSHED.dll
\SystemRoot\system32\CLFS.SYS
\SystemRoot\system32\CI.dll
\SystemRoot\system32\drivers\Wdf01000.sys
\SystemRoot\system32\drivers\WDFLDR.SYS
\SystemRoot\system32\drivers\ACPI.sys
\SystemRoot\system32\drivers\WMILIB.SYS
\SystemRoot\system32\drivers\msisadrv.sys
\SystemRoot\system32\drivers\pci.sys
\SystemRoot\system32\drivers\vdrvroot.sys
\SystemRoot\System32\drivers\partmgr.sys
\SystemRoot\system32\drivers\volmgr.sys
\SystemRoot\System32\drivers\volmgrx.sys
\SystemRoot\system32\drivers\pciide.sys
\SystemRoot\system32\drivers\PCIIDEX.SYS
\SystemRoot\System32\drivers\mountmgr.sys
\SystemRoot\system32\drivers\vmbus.sys
\SystemRoot\system32\drivers\winhv.sys
\SystemRoot\system32\drivers\atapi.sys
\SystemRoot\system32\drivers\ataport.SYS
\SystemRoot\system32\drivers\amdxata.sys
\SystemRoot\system32\drivers\fltmgr.sys
\SystemRoot\system32\drivers\fileinfo.sys
\SystemRoot\System32\Drivers\Ntfs.sys
\SystemRoot\System32\Drivers\msrpc.sys
\SystemRoot\System32\Drivers\ksecdd.sys
\SystemRoot\System32\Drivers\cng.sys
\SystemRoot\System32\drivers\pcw.sys
\SystemRoot\System32\Drivers\Fs_Rec.sys
\SystemRoot\system32\drivers\ndis.sys
\SystemRoot\system32\drivers\NETIO.SYS
\SystemRoot\System32\Drivers\ksecpkg.sys
\SystemRoot\System32\drivers\tcpip.sys
\SystemRoot\System32\drivers\fwpkclnt.sys
\SystemRoot\system32\drivers\vmstorfl.sys
\SystemRoot\system32\drivers\volsnap.sys
\SystemRoot\System32\Drivers\spldr.sys
\SystemRoot\System32\drivers\rdyboost.sys
\SystemRoot\System32\Drivers\mup.sys
\SystemRoot\System32\drivers\hwpolicy.sys
\SystemRoot\System32\DRIVERS\fvevol.sys
\SystemRoot\system32\DRIVERS\disk.sys
\SystemRoot\system32\DRIVERS\CLASSPNP.SYS
\SystemRoot\system32\DRIVERS\cdrom.sys
\SystemRoot\System32\Drivers\Null.SYS
\SystemRoot\System32\Drivers\Beep.SYS
\SystemRoot\System32\drivers\vga.sys
\SystemRoot\System32\drivers\VIDEOPRT.SYS
\SystemRoot\System32\drivers\watchdog.sys
\SystemRoot\System32\DRIVERS\RDPCDD.sys
\SystemRoot\system32\drivers\rdpencdd.sys
\SystemRoot\system32\drivers\rdprefmp.sys
\SystemRoot\System32\Drivers\Msfs.SYS
\SystemRoot\System32\Drivers\Npfs.SYS
\SystemRoot\system32\DRIVERS\tdx.sys
\SystemRoot\system32\DRIVERS\TDI.SYS
\SystemRoot\System32\DRIVERS\netbt.sys
\SystemRoot\system32\drivers\afd.sys
\SystemRoot\system32\drivers\ws2ifsl.sys
\SystemRoot\system32\DRIVERS\wfplwf.sys
\SystemRoot\system32\DRIVERS\pacer.sys
\SystemRoot\system32\DRIVERS\netbios.sys
\SystemRoot\system32\DRIVERS\wanarp.sys
\SystemRoot\system32\drivers\termdd.sys
\SystemRoot\system32\DRIVERS\rdbss.sys
\SystemRoot\system32\drivers\nsiproxy.sys
\SystemRoot\system32\drivers\mssmbios.sys
\SystemRoot\System32\drivers\discache.sys
\SystemRoot\system32\drivers\csc.sys
\SystemRoot\System32\Drivers\dfsc.sys
\SystemRoot\system32\DRIVERS\blbdrive.sys
\SystemRoot\system32\DRIVERS\tunnel.sys
\SystemRoot\system32\DRIVERS\intelppm.sys
\SystemRoot\system32\DRIVERS\nvlddmkm.sys
\SystemRoot\System32\Drivers\nvBridge.kmd
\SystemRoot\System32\drivers\dxgkrnl.sys
\SystemRoot\System32\drivers\dxgmms1.sys
\SystemRoot\system32\DRIVERS\e1e6232e.sys
\SystemRoot\system32\DRIVERS\usbuhci.sys
\SystemRoot\system32\DRIVERS\USBPORT.SYS
\SystemRoot\system32\DRIVERS\usbehci.sys
\SystemRoot\system32\drivers\HDAudBus.sys
\SystemRoot\system32\DRIVERS\VSTBS26.SYS
\SystemRoot\system32\DRIVERS\ks.sys
\SystemRoot\system32\DRIVERS\VSTDPV6.SYS
\SystemRoot\system32\DRIVERS\VSTCNXT6.SYS
\SystemRoot\system32\drivers\modem.sys
\SystemRoot\system32\drivers\1394ohci.sys
\SystemRoot\system32\DRIVERS\GEARAspiWDM.sys
\SystemRoot\system32\drivers\CompositeBus.sys
\SystemRoot\system32\DRIVERS\lmimirr.sys
\SystemRoot\system32\drivers\serscan.sys
\SystemRoot\system32\drivers\ksthunk.sys
\SystemRoot\system32\DRIVERS\AgileVpn.sys
\SystemRoot\system32\DRIVERS\rasl2tp.sys
\SystemRoot\system32\DRIVERS\ndistapi.sys
\SystemRoot\system32\DRIVERS\ndiswan.sys
\SystemRoot\system32\DRIVERS\raspppoe.sys
\SystemRoot\system32\DRIVERS\raspptp.sys
\SystemRoot\system32\DRIVERS\rassstp.sys
\SystemRoot\system32\DRIVERS\rdpbus.sys
\SystemRoot\system32\DRIVERS\kbdclass.sys
\SystemRoot\system32\DRIVERS\mouclass.sys
\SystemRoot\system32\drivers\swenum.sys
\SystemRoot\system32\DRIVERS\umbus.sys
\SystemRoot\system32\DRIVERS\usbhub.sys
\SystemRoot\System32\Drivers\NDProxy.SYS
\SystemRoot\system32\drivers\HdAudio.sys
\SystemRoot\system32\drivers\portcls.sys
\SystemRoot\system32\drivers\drmk.sys
\SystemRoot\System32\Drivers\crashdmp.sys
\SystemRoot\System32\Drivers\dump_dumpata.sys
\SystemRoot\System32\Drivers\dump_atapi.sys
\SystemRoot\System32\Drivers\dump_dumpfve.sys
\SystemRoot\System32\win32k.sys
\SystemRoot\System32\drivers\Dxapi.sys
\SystemRoot\system32\DRIVERS\usbprint.sys
\SystemRoot\system32\DRIVERS\USBD.SYS
\SystemRoot\system32\DRIVERS\monitor.sys
\SystemRoot\system32\DRIVERS\USBSTOR.SYS
\SystemRoot\System32\TSDDD.dll
\SystemRoot\system32\drivers\hidusb.sys
\SystemRoot\system32\drivers\HIDCLASS.SYS
\SystemRoot\system32\drivers\HIDPARSE.SYS
\SystemRoot\system32\DRIVERS\kbdhid.sys
\SystemRoot\System32\cdd.dll
\SystemRoot\system32\DRIVERS\usbccgp.sys
\SystemRoot\system32\DRIVERS\dc3d.sys
\SystemRoot\system32\DRIVERS\mouhid.sys
\SystemRoot\system32\DRIVERS\point64.sys
\SystemRoot\system32\DRIVERS\VX3000.sys
\SystemRoot\system32\DRIVERS\STREAM.SYS
\SystemRoot\system32\drivers\usbaudio.sys
\SystemRoot\System32\ATMFD.DLL
\SystemRoot\system32\drivers\luafv.sys
\SystemRoot\system32\DRIVERS\lltdio.sys
\SystemRoot\system32\DRIVERS\rspndr.sys
\SystemRoot\system32\drivers\HTTP.sys
\SystemRoot\system32\DRIVERS\udfs.sys
\SystemRoot\system32\DRIVERS\bowser.sys
\SystemRoot\System32\drivers\mpsdrv.sys
\SystemRoot\system32\DRIVERS\mrxsmb.sys
\SystemRoot\system32\DRIVERS\mrxsmb10.sys
\SystemRoot\system32\DRIVERS\mrxsmb20.sys
\SystemRoot\system32\drivers\bcbtums.sys
\SystemRoot\System32\Drivers\BTHUSB.sys
\SystemRoot\System32\Drivers\bthport.sys
\SystemRoot\system32\DRIVERS\rfcomm.sys
\SystemRoot\system32\drivers\BthEnum.sys
\SystemRoot\system32\DRIVERS\bthpan.sys
\??\C:\Program Files (x86)\LogMeIn\x64\RaInfo.sys
\??\C:\Windows\system32\drivers\LMIRfsDriver.sys
\SystemRoot\System32\Drivers\mvusbews.sys
\SystemRoot\system32\drivers\peauth.sys
\SystemRoot\System32\Drivers\secdrv.SYS
\SystemRoot\System32\DRIVERS\srvnet.sys
\SystemRoot\System32\drivers\tcpipreg.sys
\SystemRoot\System32\DRIVERS\srv2.sys
\SystemRoot\System32\DRIVERS\srv.sys
\??\C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys
\SystemRoot\system32\drivers\WudfPf.sys
\SystemRoot\system32\DRIVERS\WinUsb.sys
\SystemRoot\system32\DRIVERS\WUDFRd.sys
\SystemRoot\System32\drivers\rdpdr.sys
\SystemRoot\system32\DRIVERS\asyncmac.sys
\SystemRoot\System32\Drivers\pmhdglbm.SYS
\SystemRoot\System32\Drivers\aswVmm.SYS
\??\C:\Windows\system32\drivers\aswRdr2.sys
\??\C:\Windows\system32\drivers\aswMonFlt.sys
\??\C:\Windows\system32\drivers\aswSnx.sys
\??\C:\Windows\system32\drivers\aswStm.sys
\SystemRoot\system32\drivers\tdtcp.sys
\SystemRoot\System32\DRIVERS\tssecsrv.sys
\SystemRoot\System32\Drivers\RDPWD.SYS
\SystemRoot\System32\lmimirr.dll
\SystemRoot\System32\lmimirr2.dll
\??\C:\Windows\system32\drivers\mbamchameleon.sys
\??\C:\Windows\system32\drivers\MBAMSwissArmy.sys
\Windows\System32\ntdll.dll
\Windows\System32\smss.exe
\Windows\System32\apisetschema.dll
\Windows\System32\autochk.exe
\Windows\System32\advapi32.dll
\Windows\System32\imagehlp.dll
\Windows\System32\kernel32.dll
\Windows\System32\msctf.dll
\Windows\System32\nsi.dll
\Windows\System32\usp10.dll
\Windows\System32\shell32.dll
\Windows\System32\imm32.dll
\Windows\System32\clbcatq.dll
\Windows\System32\normaliz.dll
\Windows\System32\rpcrt4.dll
\Windows\System32\difxapi.dll
\Windows\System32\setupapi.dll
\Windows\System32\lpk.dll
\Windows\System32\msvcrt.dll
\Windows\System32\shlwapi.dll
\Windows\System32\ole32.dll
\Windows\System32\comdlg32.dll
\Windows\System32\sechost.dll
\Windows\System32\oleaut32.dll
\Windows\System32\Wldap32.dll
\Windows\System32\ws2_32.dll
\Windows\System32\psapi.dll
\Windows\System32\user32.dll
\Windows\System32\gdi32.dll
\Windows\System32\urlmon.dll
\Windows\System32\iertutil.dll
\Windows\System32\wininet.dll
\Windows\System32\KernelBase.dll
\Windows\System32\wintrust.dll
\Windows\System32\devobj.dll
\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
\Windows\System32\crypt32.dll
\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
\Windows\System32\comctl32.dll
\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
\Windows\System32\cfgmgr32.dll
\Windows\System32\msasn1.dll
\Windows\SysWOW64\normaliz.dll
----------- End -----------
Done!
<<<1>>>
Upper Device Name: \Device\Harddisk5\DR5
Upper Device Object: 0xfffffa8009630790
Upper Device Driver Name: \Driver\Disk\
Lower Device Name: \Device\00000076\
Lower Device Object: 0xfffffa8009492750
Lower Device Driver Name: \Driver\USBSTOR\
<<<1>>>
Upper Device Name: \Device\Harddisk4\DR4
Upper Device Object: 0xfffffa800959b790
Upper Device Driver Name: \Driver\Disk\
Lower Device Name: \Device\00000075\
Lower Device Object: 0xfffffa8008d0c660
Lower Device Driver Name: \Driver\USBSTOR\
<<<1>>>
Upper Device Name: \Device\Harddisk3\DR3
Upper Device Object: 0xfffffa80094e6790
Upper Device Driver Name: \Driver\Disk\
Lower Device Name: \Device\00000074\
Lower Device Object: 0xfffffa8008d0d750
Lower Device Driver Name: \Driver\USBSTOR\
<<<1>>>
Upper Device Name: \Device\Harddisk2\DR2
Upper Device Object: 0xfffffa8009497790
Upper Device Driver Name: \Driver\Disk\
Lower Device Name: \Device\00000073\
Lower Device Object: 0xfffffa80094bcb60
Lower Device Driver Name: \Driver\USBSTOR\
<<<1>>>
Upper Device Name: \Device\Harddisk1\DR1
Upper Device Object: 0xfffffa8007d07060
Upper Device Driver Name: \Driver\Disk\
Lower Device Name: \Device\Ide\IdeDeviceP0T1L0-2\
Lower Device Object: 0xfffffa8007782060
Lower Device Driver Name: \Driver\atapi\
<<<1>>>
Upper Device Name: \Device\Harddisk0\DR0
Upper Device Object: 0xfffffa8007d06060
Upper Device Driver Name: \Driver\Disk\
Lower Device Name: \Device\Ide\IdeDeviceP0T0L0-0\
Lower Device Object: 0xfffffa8007778680
Lower Device Driver Name: \Driver\atapi\
<<<2>>>
Physical Sector Size: 512
Drive: 0, DevicePointer: 0xfffffa8007d06060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
--------- Disk Stack ------
DevicePointer: 0xfffffa8007b489c0, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xfffffa8007d06060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
DevicePointer: 0xfffffa8007778680, DeviceName: \Device\Ide\IdeDeviceP0T0L0-0\, DriverName: \Driver\atapi\
------------ End ----------
Alternate DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
Upper DeviceData: 0x0, 0x0, 0x0
Lower DeviceData: 0x0, 0x0, 0x0
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
<<<2>>>
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
Scanning drivers directory: C:\WINDOWS\SYSTEM32\drivers...
<<<2>>>
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
Done!
Drive 0
Scanning MBR on drive 0...
Inspecting partition table:
MBR Signature: 55AA
Disk Signature: 3285CFC5
Partition information:
Partition 0 type is Primary (0x7)
Partition is ACTIVE.
Partition starts at LBA: 2048 Numsec = 204800
Partition file system is NTFS
Partition is bootable
Partition 1 type is Primary (0x7)
Partition is NOT ACTIVE.
Partition starts at LBA: 206848 Numsec = 1953314816
Partition 2 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0
Partition 3 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0
Disk Size: 1000204886016 bytes
Sector size: 512 bytes
Scanning physical sectors of unpartitioned space on drive 0 (1-2047-1953505168-1953525168)...
Done!
Physical Sector Size: 512
Drive: 1, DevicePointer: 0xfffffa8007d07060, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\
--------- Disk Stack ------
DevicePointer: 0xfffffa8007d069a0, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xfffffa8007d07060, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\
DevicePointer: 0xfffffa8007782060, DeviceName: \Device\Ide\IdeDeviceP0T1L0-2\, DriverName: \Driver\atapi\
------------ End ----------
Alternate DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\
Upper DeviceData: 0x0, 0x0, 0x0
Lower DeviceData: 0x0, 0x0, 0x0
Drive 1
Scanning MBR on drive 1...
Inspecting partition table:
MBR Signature: 55AA
Disk Signature: 730AE6F8
Partition information:
Partition 0 type is Primary (0x7)
Partition is ACTIVE.
Partition starts at LBA: 2048 Numsec = 625138352
Partition file system is NTFS
Partition is bootable
Partition 1 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0
Partition 2 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0
Partition 3 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0
Disk Size: 320072933376 bytes
Sector size: 512 bytes
Done!
Physical Sector Size: 0
Drive: 2, DevicePointer: 0xfffffa8009497790, DeviceName: \Device\Harddisk2\DR2\, DriverName: \Driver\Disk\
--------- Disk Stack ------
DevicePointer: 0xfffffa80094b1b90, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xfffffa8009497790, DeviceName: \Device\Harddisk2\DR2\, DriverName: \Driver\Disk\
DevicePointer: 0xfffffa80094bcb60, DeviceName: \Device\00000073\, DriverName: \Driver\USBSTOR\
------------ End ----------
Physical Sector Size: 0
Drive: 3, DevicePointer: 0xfffffa80094e6790, DeviceName: \Device\Harddisk3\DR3\, DriverName: \Driver\Disk\
--------- Disk Stack ------
DevicePointer: 0xfffffa80094b16e0, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xfffffa80094e6790, DeviceName: \Device\Harddisk3\DR3\, DriverName: \Driver\Disk\
DevicePointer: 0xfffffa8008d0d750, DeviceName: \Device\00000074\, DriverName: \Driver\USBSTOR\
------------ End ----------
Physical Sector Size: 0
Drive: 4, DevicePointer: 0xfffffa800959b790, DeviceName: \Device\Harddisk4\DR4\, DriverName: \Driver\Disk\
--------- Disk Stack ------
DevicePointer: 0xfffffa80095f2b90, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xfffffa800959b790, DeviceName: \Device\Harddisk4\DR4\, DriverName: \Driver\Disk\
DevicePointer: 0xfffffa8008d0c660, DeviceName: \Device\00000075\, DriverName: \Driver\USBSTOR\
------------ End ----------
Physical Sector Size: 0
Drive: 5, DevicePointer: 0xfffffa8009630790, DeviceName: \Device\Harddisk5\DR5\, DriverName: \Driver\Disk\
--------- Disk Stack ------
DevicePointer: 0xfffffa80095f26e0, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xfffffa8009630790, DeviceName: \Device\Harddisk5\DR5\, DriverName: \Driver\Disk\
DevicePointer: 0xfffffa8009492750, DeviceName: \Device\00000076\, DriverName: \Driver\USBSTOR\
------------ End ----------
Scan finished
=======================================
Removal queue found; removal started
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-0-0-2048-i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-r.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-1-i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-1-0-2048-i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-1-r.mbam...
Removal finished
Malwarebytes Anti-Rootkit BETA 1.07.0.1009
www.malwarebytes.org
Database version: v2014.02.05.08
Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
Greg :: GREG [administrator]
2/5/2014 12:06:37 PM
mbar-log-2014-02-05 (12-06-37).txt
Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 319332
Time elapsed: 15 minute(s), 15 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 0
(No malicious items detected)
Physical Sectors Detected: 0
(No malicious items detected)
(end)
ok, go ahead and run a new scan with aswMBR, it was in your first or second post, it should still be on your desktop unless you removed it, I just want to see the new report...DONT FIX ANYTHING
aswMBR version 0.9.9.1771 Copyright(c) 2011 AVAST Software
Run date: 2014-02-05 12:54:54
-----------------------------
12:54:54.262 OS Version: Windows x64 6.1.7601 Service Pack 1
12:54:54.262 Number of processors: 4 586 0xF0B
12:54:54.263 ComputerName: GREG UserName: Greg
12:54:58.511 Initialize success
12:55:02.823 AVAST engine defs: 14020500
12:55:16.943 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0
12:55:16.948 Disk 0 Vendor: ST31000528AS CC34 Size: 953869MB BusType: 3
12:55:16.953 Disk 1 \Device\Harddisk1\DR1 -> \Device\Ide\IdeDeviceP0T1L0-2
12:55:16.957 Disk 1 Vendor: WDC_WD3200AAKS-75VYA0 12.01B02 Size: 305245MB BusType: 3
12:55:17.057 Disk 0 MBR read successfully
12:55:17.064 Disk 0 MBR scan
12:55:17.070 Disk 0 Windows 7 default MBR code
12:55:17.079 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 2048
12:55:17.092 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 953767 MB offset 206848
12:55:17.136 Disk 0 scanning C:\Windows\system32\drivers
12:55:28.349 Service scanning
12:55:49.158 Modules scanning
12:55:49.159 Disk 0 trace - called modules:
12:55:49.172 ntoskrnl.exe CLASSPNP.SYS disk.sys ataport.SYS pciide.sys PCIIDEX.SYS hal.dll atapi.sys
12:55:49.173 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8007d06060]
12:55:49.174 3 CLASSPNP.SYS[fffff880018fa43f] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0xfffffa8007778680]
12:55:50.523 AVAST engine scan C:\Windows
12:55:54.101 AVAST engine scan C:\Windows\system32
12:59:20.013 AVAST engine scan C:\Windows\system32\drivers
13:00:03.003 AVAST engine scan C:\Users\Greg
13:41:14.759 AVAST engine scan C:\ProgramData
13:46:20.463 Scan finished successfully
13:59:10.827 Disk 0 MBR has been saved successfully to "C:\Users\Greg\Desktop\MBR.dat"
13:59:10.837 The log file has been saved successfully to "C:\Users\Greg\Desktop\aswMBR.txt"
Looking good :bigthumb:
How are things running now ?
Looks good, thanks very much! I'll monitor behavior over the next couple of days.
Cheers!
Great, sometimes this garbage has a way of reappearing, why dont you wait a couple of days and then run a new Scan with OTL and post the log and let me take a final look.
One of the reasons your friend got this computer so infected is that he appears to be installing anything he can get for free, not all but a lot of free apps like timers , free smileys and the like most often come bundled with other garbage.
Will do, and thanks again.