Redirect Problems San Jose CA
I had no idea that the Office suite was not the real thing. I purchased it several years ago on Ebay and there was nothing in the packaging or anything else that would make anyone suspicious. I'm sure I can no longer find that vendor, so I'm out the software, I guess. I'm download open office and see if it does what I need.
I'm on a different machine now, but I'll take the Microsoft version it off later and let you know. You'll need to tell me how you want to check it so we can proceed.
jack
Hello Jack,
Please run MGADiag again and post back the new results after you have addressed the issue.
Jack&Jill
MRU Teacher of Malware Removal University.
Member of ASAP and UNITE.
Your donation helps in improving Spybot-S&D!
Redirect Problems in San Jose, CA
Okay, Office 2003 removed and here's the diag file:
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Status: Genuine
Validation Code: 0
Cached Validation Code: N/A
Windows Product Key: *****-*****-GD6GR-K6DP3-4C8MT
Windows Product Key Hash: s2kt66ZJWfV4nS1wFD5F9bxTSDw=
Windows Product ID: 55277-OEM-2111907-00102
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 5.1.2600.2.00010300.3.0.hom
ID: {1ADDB1BF-7C41-47ED-AE8E-11FA6D83E63A}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: Registered, 1.7.17.0
Signed By: Microsoft
Product Name: N/A
Architecture: N/A
Build lab: N/A
TTS Error: N/A
Validation Diagnostic: 025D1FF3-230-1
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A
Version: N/A
Windows XP Notifications Data-->
Cached Result: 0
File Exists: Yes
Version: 1.7.17.0
WgaTray.exe Signed By: Microsoft
WgaLogon.dll Signed By: Microsoft
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: B4D0AA8B-604-645_B4D0AA8B-604-645_025D1FF3-230-1
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
File Mismatch: C:\WINDOWS\system32\oembios.bin[Hr = 0x800b0003]
File Mismatch: C:\WINDOWS\system32\oembios.dat[Hr = 0x800b0003]
File Mismatch: C:\WINDOWS\system32\oembios.sig[Hr = 0x800b0003]
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{1ADDB1BF-7C41-47ED-AE8E-11FA6D83E63A}</UGUID><Version>1.9.0027.0</Version><OS>5.1.2600.2.00010300.3.0.hom</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-4C8MT</PKey><PID>55277-OEM-2111907-00102</PID><PIDType>2</PIDType><SID>S-1-5-21-1078081533-688789844-1801674531</SID><SYSTEM><Manufacturer>Dell Computer Corporation </Manufacturer><Model>DIM4400 </Model></SYSTEM><BIOS><Manufacturer>Intel Corp.</Manufacturer><Version>A03</Version><SMBIOSVersion major="2" minor="3"/><Date>20020108000000.000000+000</Date><SLPBIOS>Dell System,Dell Computer,Dell System,Dell System</SLPBIOS></BIOS><HWID>14E03EAF0184C06E</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification><File Name="WgaTray.exe" Version="1.7.17.0"/><File Name="WgaLogon.dll" Version="1.7.17.0"/></GANotification></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>
Licensing Data-->
N/A
Windows Activation Technologies-->
N/A
HWID Data-->
N/A
OEM Activation 1.0 Data-->
BIOS string matches: yes
Marker string from BIOS: 1E840:Dell Inc|112F5:Dell Inc|112F5:Microsoft Corporation
Marker string from OEMBIOS.DAT: Dell System,Dell Computer,Dell System,Dell System
OEM Activation 2.0 Data-->
N/A
What's next? I assume we're still in the diagnosing stage. We're still having the redirect problem.
Thanks!
jack
Hello Jack
Yes, you are right. I need you to address Office issue before I can continue. Thanks for adhering to our rules.What's next? I assume we're still in the diagnosing stage. We're still having the redirect problem.
--------------------
The Rookit Unhooker log that you posted earlier is incomplete due to you saving the Quick Report while it was scanning. Please run it again, read carefully the steps and follow them closely. You may need to wait a bit for the prompt to select disk for scan.
Rerun Rookit Unhooker
- Start Rookit Unhooker by going to Start > All Programs >, then Rookit Unhooker LE and click on RkU.
- Click the Report tab, then click Scan.
- Ensure the following are checked (ticked):
- Drivers
- Stealth Code
- Files
- Code Hooks
- Uncheck the rest, then click OK. An initial scan will be performed.
- When prompted to Select Disks for Scan, make sure C:\ is checked and click OK.
- Wait until the scanner is done, then click on File at the pull down menu, followed by Save Report.
- Save the report somewhere you can find it. Click Close to exit.
- Copy the entire contents of the report and paste it in your next reply.
You may get a warning about parasite detection. Please click OK to continue.
--------------------
Please post back:
1. the Rookit Unhooker log
Jack&Jill
MRU Teacher of Malware Removal University.
Member of ASAP and UNITE.
Your donation helps in improving Spybot-S&D!
Redirect Problems in San Jose, CA
I followed your directions carefully and even let Root kit run all night to be sure it was done, but it would not let me save the report. The save report option was grayed out and I could only use the quick report option, which is what I posted last time. Is it possible that the malware prevents its proper operation? And what next? Do you have advice to save the report?
Thanks!
jack
Hello Jack
Please try running Rookit Unhooker in Safe Mode. You might want to print out the instructions for the Rookit Unhooker steps.
Restart in Safe Mode
- Reboot your computer and tap on the F8 key repeatedly during startup.
- A menu will appear. Select to start Windows in Safe Mode by using the arrow keys. Click here for tutorial on how to boot up in Safe Mode if you need help.
Please post back the result.
Jack&Jill
MRU Teacher of Malware Removal University.
Member of ASAP and UNITE.
Your donation helps in improving Spybot-S&D!
Redirect Problems in San Jose, CA
I think I found the problem I was having with the Rootkit Unhooker software. When it finishes scanning, it switches from the report tab to the tab that is open when you launch the software. And when you're on that tab, you can't generate the report. I switched back to the report tab and was able to save the results. See how this looks:
RkU Version: 3.8.388.590, Type LE (SR2)
==============================================
OS Name: Windows XP
Version 5.1.2600 (Service Pack 3)
Number of processors #1
==============================================
>Drivers
==============================================
0x804D7000 C:\WINDOWS\system32\ntoskrnl.exe 2189952 bytes (Microsoft Corporation, NT Kernel & System)
0x804D7000 PnpManager 2189952 bytes
0x804D7000 RAW 2189952 bytes
0x804D7000 WMIxWDM 2189952 bytes
0xBF800000 Win32k 1855488 bytes
0xBF800000 C:\WINDOWS\System32\win32k.sys 1855488 bytes (Microsoft Corporation, Multi-User Win32 Driver)
0xF76ED000 Ntfs.sys 577536 bytes (Microsoft Corporation, NT File System Driver)
0xF6245000 C:\WINDOWS\System32\DRIVERS\HSF_CNXT.sys 552960 bytes (Conexant Systems, WinACHSF driver)
0xEB2C6000 C:\WINDOWS\system32\DRIVERS\Wdf01000.sys 503808 bytes (Microsoft Corporation, WDF Dynamic)
0xEC17D000 C:\WINDOWS\System32\DRIVERS\v124nt.sys 491520 bytes (Conexant Systems, V124NT driver)
0xEB3A8000 C:\WINDOWS\System32\DRIVERS\mrxsmb.sys 458752 bytes (Microsoft Corporation, Windows NT SMB Minirdr)
0xF6182000 C:\WINDOWS\system32\drivers\smwdm.sys 417792 bytes (Analog Devices, Inc., SoundMAX Integrated Digital Audio )
0xEB60A000 C:\WINDOWS\System32\DRIVERS\k56nt.sys 393216 bytes (Conexant Systems, K56NT driver)
0xF5976000 C:\WINDOWS\System32\DRIVERS\update.sys 385024 bytes (Microsoft Corporation, Update Driver)
0xEB48D000 C:\WINDOWS\System32\DRIVERS\tcpip.sys 364544 bytes (Microsoft Corporation, TCP/IP Protocol Driver)
0xEC26A000 C:\WINDOWS\System32\DRIVERS\srv.sys 360448 bytes (Microsoft Corporation, Server driver)
0xBF012000 C:\WINDOWS\System32\ati2dvaa.dll 319488 bytes (ATI Technologies Inc., ATI RAGE 128 WindowsNT Display Driver)
0xF6315000 C:\WINDOWS\System32\DRIVERS\ati2mtaa.sys 299008 bytes (ATI Technologies Inc., ATI RAGE 128 Miniport Driver)
0xEB169000 C:\WINDOWS\System32\DRIVERS\fallback.sys 290816 bytes (Conexant Systems, Fallback driver)
0xBFFA0000 C:\WINDOWS\System32\ATMFD.DLL 286720 bytes (Adobe Systems Incorporated, Windows NT OpenType/Type 1 Font Driver)
0xEBCC3000 C:\WINDOWS\System32\Drivers\HTTP.sys 266240 bytes (Microsoft Corporation, HTTP Protocol Stack)
0xEC239000 C:\WINDOWS\System32\DRIVERS\faxnt.sys 200704 bytes (Conexant Systems, FaxNT driver)
0xF7820000 ACPI.sys 188416 bytes (Microsoft Corporation, ACPI Driver for NT)
0xEB0B3000 C:\WINDOWS\System32\DRIVERS\mrxdav.sys 184320 bytes (Microsoft Corporation, Windows NT WebDav Minirdr)
0xF76C0000 NDIS.sys 184320 bytes (Microsoft Corporation, NDIS 5.1 wrapper driver)
0xEB418000 C:\WINDOWS\System32\DRIVERS\rdbss.sys 176128 bytes (Microsoft Corporation, Redirected Drive Buffering SubSystem Driver)
0xEB465000 C:\WINDOWS\System32\DRIVERS\netbt.sys 163840 bytes (Microsoft Corporation, MBT Transport driver)
0xF621F000 C:\WINDOWS\System32\DRIVERS\AmosNt.SYS 155648 bytes (Conexant Systems, AmosNT driver)
0xEB382000 C:\WINDOWS\System32\DRIVERS\ipnat.sys 155648 bytes (Microsoft Corporation, IP Network Address Translator)
0xEB98A000 C:\WINDOWS\System32\Drivers\Fastfat.SYS 147456 bytes (Microsoft Corporation, Fast FAT File System Driver)
0xF615E000 C:\WINDOWS\system32\drivers\portcls.sys 147456 bytes (Microsoft Corporation, Port Class (Class Driver for Port/Miniport Devices))
0xF62DD000 C:\WINDOWS\System32\DRIVERS\USBPORT.SYS 147456 bytes (Microsoft Corporation, USB 1.1 & 2.0 Port Driver)
0xEB35F000 C:\WINDOWS\system32\DRIVERS\avipbb.sys 143360 bytes (Avira GmbH, Avira Driver for Security Enhancement)
0xF61E8000 C:\WINDOWS\System32\DRIVERS\ks.sys 143360 bytes (Microsoft Corporation, Kernel CSA Library)
0xEB443000 C:\WINDOWS\System32\drivers\afd.sys 139264 bytes (Microsoft Corporation, Ancillary Function Driver for WinSock)
0x806EE000 ACPI_HAL 131840 bytes
0x806EE000 C:\WINDOWS\system32\hal.dll 131840 bytes (Microsoft Corporation, Hardware Abstraction Layer DLL)
0xF77A3000 fltmgr.sys 131072 bytes (Microsoft Corporation, Microsoft Filesystem Filter Manager)
0xF77F0000 ftdisk.sys 126976 bytes (Microsoft Corporation, FT Disk Driver)
0xEB341000 C:\WINDOWS\System32\Drivers\usbvideo.sys 122880 bytes (Microsoft Corporation, USB Video Class Driver)
0xEB14C000 C:\WINDOWS\System32\DRIVERS\fsksnt.sys 118784 bytes (Conexant Systems, FSKsNT driver)
0xF76A6000 Mup.sys 106496 bytes (Microsoft Corporation, Multiple UNC Provider driver)
0xF77D8000 atapi.sys 98304 bytes (Microsoft Corporation, IDE/ATAPI Port Driver)
0xF777A000 KSecDD.sys 94208 bytes (Microsoft Corporation, Kernel Security Support Provider Interface)
0xF5AAD000 C:\WINDOWS\System32\DRIVERS\ndiswan.sys 94208 bytes (Microsoft Corporation, MS PPP Framing Driver (Strong Encryption))
0xEB28B000 C:\WINDOWS\system32\DRIVERS\avgntflt.sys 86016 bytes (Avira GmbH, Avira Minifilter Driver)
0xEB2A0000 C:\WINDOWS\System32\Drivers\dump_IdeChnDr.sys 86016 bytes
0xF77C3000 IdeChnDr.sys 86016 bytes (Intel Corporation, Intel Ultra ATA Storage Driver)
0xEB1FE000 C:\WINDOWS\system32\drivers\wdmaud.sys 86016 bytes (Microsoft Corporation, MMSYSTEM Wave/Midi API mapper)
0xF620B000 C:\WINDOWS\System32\DRIVERS\parport.sys 81920 bytes (Microsoft Corporation, Parallel Port Driver)
0xF6301000 C:\WINDOWS\System32\DRIVERS\VIDEOPRT.SYS 81920 bytes (Microsoft Corporation, Video Port Driver)
0xEB4E6000 C:\WINDOWS\System32\DRIVERS\ipsec.sys 77824 bytes (Microsoft Corporation, IPSec Driver)
0xBF000000 C:\WINDOWS\System32\drivers\dxg.sys 73728 bytes (Microsoft Corporation, DirectX Graphics Driver)
0xF7791000 sr.sys 73728 bytes (Microsoft Corporation, System Restore Filesystem Filter Driver)
0xF62CC000 C:\WINDOWS\System32\DRIVERS\basic2.sys 69632 bytes (Conexant Systems, NTRksample driver)
0xEBB16000 C:\WINDOWS\System32\Drivers\EPLPDX02.SYS 69632 bytes (MK Systems CO., LTD., LPT I/O driver for EPSON PRINTER)
0xF780F000 pci.sys 69632 bytes (Microsoft Corporation, NT Plug and Play PCI Enumerator)
0xF5A9C000 C:\WINDOWS\System32\DRIVERS\psched.sys 69632 bytes (Microsoft Corporation, MS QoS Packet Scheduler)
0xEB2B5000 C:\WINDOWS\System32\Drivers\Udfs.SYS 69632 bytes (Microsoft Corporation, UDF File System Driver)
0xF7A2F000 C:\WINDOWS\System32\DRIVERS\cdrom.sys 65536 bytes (Microsoft Corporation, SCSI CD-ROM Driver)
0xF799F000 C:\WINDOWS\System32\DRIVERS\nic1394.sys 65536 bytes (Microsoft Corporation, IEEE1394 Ndis Miniport and Call Manager)
0xF78CF000 ohci1394.sys 65536 bytes (Microsoft Corporation, 1394 OpenHCI Port Driver)
0xF7A0F000 C:\WINDOWS\System32\DRIVERS\serial.sys 65536 bytes (Microsoft Corporation, Serial Device Driver)
0xEEBD6000 C:\WINDOWS\System32\DRIVERS\arp1394.sys 61440 bytes (Microsoft Corporation, IP/1394 Arp Client)
0xF7A4F000 C:\WINDOWS\system32\drivers\drmk.sys 61440 bytes (Microsoft Corporation, Microsoft Kernel DRM Descrambler Filter)
0xF7A3F000 C:\WINDOWS\System32\DRIVERS\redbook.sys 61440 bytes (Microsoft Corporation, Redbook Audio Filter Driver)
0xF79EF000 C:\WINDOWS\System32\DRIVERS\rksample.sys 61440 bytes (Conexant Systems, Rksample WDM driver)
0xF427C000 C:\WINDOWS\system32\drivers\sysaudio.sys 61440 bytes (Microsoft Corporation, System Audio WDM Filter)
0xEF51F000 C:\WINDOWS\system32\drivers\usbaudio.sys 61440 bytes (Microsoft Corporation, USB Audio Class Driver)
0xF42AC000 C:\WINDOWS\System32\DRIVERS\usbhub.sys 61440 bytes (Microsoft Corporation, Default Hub Driver for USB)
0xF78DF000 C:\WINDOWS\System32\DRIVERS\1394BUS.SYS 57344 bytes (Microsoft Corporation, 1394 Bus Device Driver)
0xF78AF000 C:\WINDOWS\System32\DRIVERS\CLASSPNP.SYS 53248 bytes (Microsoft Corporation, SCSI Class System Dll)
0xF79FF000 C:\WINDOWS\System32\DRIVERS\i8042prt.sys 53248 bytes (Microsoft Corporation, i8042 Port Driver)
0xF7A6F000 C:\WINDOWS\System32\DRIVERS\rasl2tp.sys 53248 bytes (Microsoft Corporation, RAS L2TP mini-port/call-manager driver)
0xF7A5F000 C:\WINDOWS\system32\DRIVERS\STREAM.SYS 53248 bytes (Microsoft Corporation, WDM CODEC Class Device Driver 2.0)
0xEB535000 C:\WINDOWS\System32\DRIVERS\tonesnt.sys 53248 bytes (Conexant Systems, TonesNT driver)
0xF788F000 VolSnap.sys 53248 bytes (Microsoft Corporation, Volume Shadow Copy Driver)
0xEF50F000 C:\WINDOWS\system32\DRIVERS\WDFLDR.SYS 53248 bytes (Microsoft Corporation, WDFLDR)
0xF6858000 C:\WINDOWS\System32\DRIVERS\raspptp.sys 49152 bytes (Microsoft Corporation, Peer-to-Peer Tunneling Protocol)
0xF78EF000 agp440.sys 45056 bytes (Microsoft Corporation, 440 NT AGP Filter)
0xEEBF6000 C:\WINDOWS\System32\Drivers\Fips.SYS 45056 bytes (Microsoft Corporation, FIPS Crypto Driver)
0xF7A1F000 C:\WINDOWS\System32\DRIVERS\imapi.sys 45056 bytes (Microsoft Corporation, IMAPI Kernel Driver)
0xF787F000 MountMgr.sys 45056 bytes (Microsoft Corporation, Mount Manager)
0xF6868000 C:\WINDOWS\System32\DRIVERS\raspppoe.sys 45056 bytes (Microsoft Corporation, RAS PPPoE mini-port/call-manager driver)
0xF6828000 C:\WINDOWS\system32\DRIVERS\rrnetcap.sys 45056 bytes (RapidSolution Software AG, Intermediate Filter Driver)
0xF78BF000 sbp2port.sys 45056 bytes (Microsoft Corporation, SBP-2 Protocol Driver)
0xF79DF000 C:\WINDOWS\System32\DRIVERS\SOAR.SYS 45056 bytes (Conexant Systems, Soar driver)
0xF786F000 isapnp.sys 40960 bytes (Microsoft Corporation, PNP ISA Bus Driver)
0xF42CC000 C:\WINDOWS\System32\Drivers\NDProxy.SYS 40960 bytes (Microsoft Corporation, NDIS Proxy)
0xEB5A2000 C:\WINDOWS\System32\DRIVERS\secdrv.sys 40960 bytes (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K., Macrovision SECURITY Driver)
0xF6838000 C:\WINDOWS\System32\DRIVERS\termdd.sys 40960 bytes (Microsoft Corporation, Terminal Server Driver)
0xF789F000 disk.sys 36864 bytes (Microsoft Corporation, PnP Disk Driver)
0xEF52F000 C:\WINDOWS\system32\DRIVERS\HIDCLASS.SYS 36864 bytes (Microsoft Corporation, Hid Class Library)
0xF6848000 C:\WINDOWS\System32\DRIVERS\msgpc.sys 36864 bytes (Microsoft Corporation, MS General Packet Classifier)
0xEF29C000 C:\WINDOWS\System32\DRIVERS\netbios.sys 36864 bytes (Microsoft Corporation, NetBIOS interface driver)
0xEB741000 C:\WINDOWS\System32\Drivers\Normandy.SYS 36864 bytes (RKU Driver)
0xF79CF000 C:\WINDOWS\System32\DRIVERS\processr.sys 36864 bytes (Microsoft Corporation, Processor Device Driver)
0xEEBE6000 C:\WINDOWS\System32\DRIVERS\wanarp.sys 36864 bytes (Microsoft Corporation, MS Remote Access and Routing ARP Driver)
0xF7C57000 C:\WINDOWS\System32\Drivers\Modem.SYS 32768 bytes (Microsoft Corporation, Modem Device Driver)
0xEF94D000 C:\WINDOWS\System32\Drivers\Npfs.SYS 32768 bytes (Microsoft Corporation, NPFS Driver)
0xEF1CF000 C:\WINDOWS\System32\DRIVERS\usbccgp.sys 32768 bytes (Microsoft Corporation, USB Common Class Generic Parent Driver)
0xF7C4F000 C:\WINDOWS\System32\DRIVERS\usbehci.sys 32768 bytes (Microsoft Corporation, EHCI eUSB Miniport Driver)
0xF7C77000 C:\WINDOWS\System32\DRIVERS\fdc.sys 28672 bytes (Microsoft Corporation, Floppy Disk Controller Driver)
0xEF602000 C:\WINDOWS\system32\DRIVERS\HIDPARSE.SYS 28672 bytes (Microsoft Corporation, Hid Parsing Library)
0xEF5FA000 C:\WINDOWS\system32\DRIVERS\LHidFilt.Sys 28672 bytes (Logitech, Inc., Logitech HID Filter Driver.)
0xEF5F2000 C:\WINDOWS\system32\DRIVERS\LMouFilt.Sys 28672 bytes (Logitech, Inc., Logitech Mouse Filter Driver.)
0xF7AFF000 C:\WINDOWS\System32\Drivers\MxlW2k.SYS 28672 bytes (MusicMatch, Inc., MusicMatch Access Layer KMD)
0xF7AEF000 C:\WINDOWS\System32\DRIVERS\PCIIDEX.SYS 28672 bytes (Microsoft Corporation, PCI IDE Bus Driver Extension)
0xEF1D7000 C:\WINDOWS\System32\DRIVERS\usbprint.sys 28672 bytes (Microsoft Corporation, USB Printer driver)
0xF7B07000 C:\WINDOWS\SYSTEM32\DRIVERS\GEARAspiWDM.sys 24576 bytes (GEAR Software Inc., CD DVD Filter)
0xF7C6F000 C:\WINDOWS\System32\DRIVERS\kbdclass.sys 24576 bytes (Microsoft Corporation, Keyboard Class Driver)
0xF7C67000 C:\WINDOWS\System32\DRIVERS\mouclass.sys 24576 bytes (Microsoft Corporation, Mouse Class Driver)
0xF7C5F000 C:\WINDOWS\System32\DRIVERS\RTL8139.SYS 24576 bytes (Realtek Semiconductor Corporation, Realtek RTL8139 NDIS 5.0 Driver)
0xEF1DF000 C:\WINDOWS\system32\DRIVERS\ssmdrv.sys 24576 bytes (Avira GmbH, AVIRA SnapShot Driver)
0xF7B0F000 C:\WINDOWS\System32\DRIVERS\usbuhci.sys 24576 bytes (Microsoft Corporation, UHCI USB Miniport Driver)
0xEF95D000 C:\WINDOWS\System32\drivers\vga.sys 24576 bytes (Microsoft Corporation, VGA/Super VGA Video Driver)
0xEF96D000 C:\WINDOWS\System32\DRIVERS\flpydisk.sys 20480 bytes (Microsoft Corporation, Floppy Driver)
0xEF955000 C:\WINDOWS\System32\Drivers\Msfs.SYS 20480 bytes (Microsoft Corporation, Mailslot driver)
0xF7AF7000 PartMgr.sys 20480 bytes (Microsoft Corporation, Partition Manager)
0xF7B7F000 C:\WINDOWS\System32\DRIVERS\ptilink.sys 20480 bytes (Parallel Technologies, Inc., Parallel Technologies DirectParallel IO Library)
0xF7B87000 C:\WINDOWS\System32\DRIVERS\raspti.sys 20480 bytes (Microsoft Corporation, PTI DirectParallel(R) mini-port/call-manager driver)
0xF7B77000 C:\WINDOWS\System32\DRIVERS\TDI.SYS 20480 bytes (Microsoft Corporation, TDI Wrapper)
0xF7C47000 C:\WINDOWS\System32\DRIVERS\usbohci.sys 20480 bytes (Microsoft Corporation, OHCI USB Miniport Driver)
0xEF5EA000 C:\WINDOWS\System32\watchdog.sys 20480 bytes (Microsoft Corporation, Watchdog Driver)
0xF765E000 C:\WINDOWS\system32\DRIVERS\ArcSoftVirtualCapture.sys 16384 bytes (ArcSoft, Inc., ArcSoft Magic-i Driver)
0xF7C83000 IdeBusDr.sys 16384 bytes (Intel Corporation, Intel Ultra ATA Storage Driver)
0xF7D0F000 C:\WINDOWS\System32\DRIVERS\mssmbios.sys 16384 bytes (Microsoft Corporation, System Management BIOS Driver)
0xF5A8C000 C:\WINDOWS\System32\DRIVERS\ndisuio.sys 16384 bytes (Microsoft Corporation, NDIS User mode I/O Driver)
0xF3723000 C:\WINDOWS\SYSTEM32\DRIVERS\OMCI.SYS 16384 bytes (Dell Computer Corporation, OMCI Device Driver)
0xF766A000 C:\WINDOWS\System32\DRIVERS\serenum.sys 16384 bytes (Microsoft Corporation, Serial Port Enumerator)
0xF7662000 C:\WINDOWS\System32\DRIVERS\usbscan.sys 16384 bytes (Microsoft Corporation, USB Scanner Driver)
0xF7C7F000 C:\WINDOWS\system32\BOOTVID.dll 12288 bytes (Microsoft Corporation, VGA Boot Driver)
0xEFCE4000 C:\WINDOWS\System32\drivers\Dxapi.sys 12288 bytes (Microsoft Corporation, DirectX API Driver)
0xEF37B000 C:\WINDOWS\system32\DRIVERS\hidusb.sys 12288 bytes (Microsoft Corporation, USB Miniport Driver for Input Devices)
0xF766E000 C:\WINDOWS\System32\DRIVERS\IPFilter.sys 12288 bytes (Microsoft Corporation, Microsoft IntelliPoint)
0xEF377000 C:\WINDOWS\System32\DRIVERS\mouhid.sys 12288 bytes (Microsoft Corporation, HID Mouse Filter Driver)
0xF6C97000 C:\WINDOWS\System32\DRIVERS\ndistapi.sys 12288 bytes (Microsoft Corporation, NDIS 3.0 connection wrapper driver)
0xF373F000 C:\WINDOWS\System32\DRIVERS\rasacd.sys 12288 bytes (Microsoft Corporation, RAS Automatic Connection Driver)
0xF3737000 C:\WINDOWS\System32\drivers\ws2ifsl.sys 12288 bytes (Microsoft Corporation, Winsock2 IFS Layer)
0xEB757000 C:\Program Files\Avira\AntiVir Desktop\avgio.sys 8192 bytes (Avira GmbH, Avira AntiVir Support for Minifilter)
0xF7D81000 C:\WINDOWS\System32\Drivers\Beep.SYS 8192 bytes (Microsoft Corporation, BEEP Driver)
0xF7D7F000 C:\WINDOWS\System32\Drivers\Fs_Rec.SYS 8192 bytes (Microsoft Corporation, File System Recognizer Driver)
0xF7D73000 intelide.sys 8192 bytes (Microsoft Corporation, Intel PCI IDE Driver)
0xF7D6F000 C:\WINDOWS\system32\KDCOM.DLL 8192 bytes (Microsoft Corporation, Kernel Debugger HW Extension DLL)
0xF7D83000 C:\WINDOWS\System32\Drivers\mnmdd.SYS 8192 bytes (Microsoft Corporation, Frame buffer simulator)
0xF7DBF000 C:\WINDOWS\System32\DRIVERS\msikbd2k.sys 8192 bytes (Netropa Corporation, Multimedia Keyboard Driver for Windows 2000)
0xF7DFB000 C:\WINDOWS\System32\Drivers\ParVdm.SYS 8192 bytes (Microsoft Corporation, VDM Parallel Driver)
0xF7D85000 C:\WINDOWS\System32\DRIVERS\RDPCDD.sys 8192 bytes (Microsoft Corporation, RDP Miniport)
0xF7DDF000 C:\WINDOWS\System32\DRIVERS\swenum.sys 8192 bytes (Microsoft Corporation, Plug and Play Software Device Enumerator)
0xF7DC1000 C:\WINDOWS\System32\DRIVERS\USBD.SYS 8192 bytes (Microsoft Corporation, Universal Serial Bus Driver)
0xF7D71000 C:\WINDOWS\System32\DRIVERS\WMILIB.SYS 8192 bytes (Microsoft Corporation, WMILIB WMI support library Dll)
0xF7F10000 C:\WINDOWS\System32\DRIVERS\audstub.sys 4096 bytes (Microsoft Corporation, AudStub Driver)
0xEE623000 C:\WINDOWS\System32\drivers\dxgthk.sys 4096 bytes (Microsoft Corporation, DirectX Graphics Driver Thunk)
0xEEA41000 C:\WINDOWS\System32\Drivers\Null.SYS 4096 bytes (Microsoft Corporation, NULL Driver)
0xF7F0E000 C:\WINDOWS\system32\drivers\SENSUPGD.SYS 4096 bytes (Sensaura Ltd, Sensaura Upgrade)
Redirect Problems in San Jose, CA
Here's another, more recent, that I just ran. It seems longer, so I'd study this one. --jack
First half:
RkU Version: 3.8.388.590, Type LE (SR2)
==============================================
OS Name: Windows XP
Version 5.1.2600 (Service Pack 3)
Number of processors #1
==============================================
>Drivers
==============================================
0x804D7000 C:\WINDOWS\system32\ntoskrnl.exe 2189952 bytes (Microsoft Corporation, NT Kernel & System)
0x804D7000 PnpManager 2189952 bytes
0x804D7000 RAW 2189952 bytes
0x804D7000 WMIxWDM 2189952 bytes
0xBF800000 Win32k 1855488 bytes
0xBF800000 C:\WINDOWS\System32\win32k.sys 1855488 bytes (Microsoft Corporation, Multi-User Win32 Driver)
0xF76ED000 Ntfs.sys 577536 bytes (Microsoft Corporation, NT File System Driver)
0xF6245000 C:\WINDOWS\System32\DRIVERS\HSF_CNXT.sys 552960 bytes (Conexant Systems, WinACHSF driver)
0xEB2C6000 C:\WINDOWS\system32\DRIVERS\Wdf01000.sys 503808 bytes (Microsoft Corporation, WDF Dynamic)
0xEC17D000 C:\WINDOWS\System32\DRIVERS\v124nt.sys 491520 bytes (Conexant Systems, V124NT driver)
0xEB3A8000 C:\WINDOWS\System32\DRIVERS\mrxsmb.sys 458752 bytes (Microsoft Corporation, Windows NT SMB Minirdr)
0xF6182000 C:\WINDOWS\system32\drivers\smwdm.sys 417792 bytes (Analog Devices, Inc., SoundMAX Integrated Digital Audio )
0xEB60A000 C:\WINDOWS\System32\DRIVERS\k56nt.sys 393216 bytes (Conexant Systems, K56NT driver)
0xF5976000 C:\WINDOWS\System32\DRIVERS\update.sys 385024 bytes (Microsoft Corporation, Update Driver)
0xEB48D000 C:\WINDOWS\System32\DRIVERS\tcpip.sys 364544 bytes (Microsoft Corporation, TCP/IP Protocol Driver)
0xEC26A000 C:\WINDOWS\System32\DRIVERS\srv.sys 360448 bytes (Microsoft Corporation, Server driver)
0xBF012000 C:\WINDOWS\System32\ati2dvaa.dll 319488 bytes (ATI Technologies Inc., ATI RAGE 128 WindowsNT Display Driver)
0xF6315000 C:\WINDOWS\System32\DRIVERS\ati2mtaa.sys 299008 bytes (ATI Technologies Inc., ATI RAGE 128 Miniport Driver)
0xEB169000 C:\WINDOWS\System32\DRIVERS\fallback.sys 290816 bytes (Conexant Systems, Fallback driver)
0xBFFA0000 C:\WINDOWS\System32\ATMFD.DLL 286720 bytes (Adobe Systems Incorporated, Windows NT OpenType/Type 1 Font Driver)
0xEBCC3000 C:\WINDOWS\System32\Drivers\HTTP.sys 266240 bytes (Microsoft Corporation, HTTP Protocol Stack)
0xEC239000 C:\WINDOWS\System32\DRIVERS\faxnt.sys 200704 bytes (Conexant Systems, FaxNT driver)
0xF7820000 ACPI.sys 188416 bytes (Microsoft Corporation, ACPI Driver for NT)
0xEB0B3000 C:\WINDOWS\System32\DRIVERS\mrxdav.sys 184320 bytes (Microsoft Corporation, Windows NT WebDav Minirdr)
0xF76C0000 NDIS.sys 184320 bytes (Microsoft Corporation, NDIS 5.1 wrapper driver)
0xEB418000 C:\WINDOWS\System32\DRIVERS\rdbss.sys 176128 bytes (Microsoft Corporation, Redirected Drive Buffering SubSystem Driver)
0xEB465000 C:\WINDOWS\System32\DRIVERS\netbt.sys 163840 bytes (Microsoft Corporation, MBT Transport driver)
0xF621F000 C:\WINDOWS\System32\DRIVERS\AmosNt.SYS 155648 bytes (Conexant Systems, AmosNT driver)
0xEB382000 C:\WINDOWS\System32\DRIVERS\ipnat.sys 155648 bytes (Microsoft Corporation, IP Network Address Translator)
0xEB98A000 C:\WINDOWS\System32\Drivers\Fastfat.SYS 147456 bytes (Microsoft Corporation, Fast FAT File System Driver)
0xF615E000 C:\WINDOWS\system32\drivers\portcls.sys 147456 bytes (Microsoft Corporation, Port Class (Class Driver for Port/Miniport Devices))
0xF62DD000 C:\WINDOWS\System32\DRIVERS\USBPORT.SYS 147456 bytes (Microsoft Corporation, USB 1.1 & 2.0 Port Driver)
0xEB35F000 C:\WINDOWS\system32\DRIVERS\avipbb.sys 143360 bytes (Avira GmbH, Avira Driver for Security Enhancement)
0xF61E8000 C:\WINDOWS\System32\DRIVERS\ks.sys 143360 bytes (Microsoft Corporation, Kernel CSA Library)
0xEB443000 C:\WINDOWS\System32\drivers\afd.sys 139264 bytes (Microsoft Corporation, Ancillary Function Driver for WinSock)
0x806EE000 ACPI_HAL 131840 bytes
0x806EE000 C:\WINDOWS\system32\hal.dll 131840 bytes (Microsoft Corporation, Hardware Abstraction Layer DLL)
0xF77A3000 fltmgr.sys 131072 bytes (Microsoft Corporation, Microsoft Filesystem Filter Manager)
0xF77F0000 ftdisk.sys 126976 bytes (Microsoft Corporation, FT Disk Driver)
0xEB341000 C:\WINDOWS\System32\Drivers\usbvideo.sys 122880 bytes (Microsoft Corporation, USB Video Class Driver)
0xEB14C000 C:\WINDOWS\System32\DRIVERS\fsksnt.sys 118784 bytes (Conexant Systems, FSKsNT driver)
0xF76A6000 Mup.sys 106496 bytes (Microsoft Corporation, Multiple UNC Provider driver)
0xF77D8000 atapi.sys 98304 bytes (Microsoft Corporation, IDE/ATAPI Port Driver)
0xF777A000 KSecDD.sys 94208 bytes (Microsoft Corporation, Kernel Security Support Provider Interface)
0xF5AAD000 C:\WINDOWS\System32\DRIVERS\ndiswan.sys 94208 bytes (Microsoft Corporation, MS PPP Framing Driver (Strong Encryption))
0xEB28B000 C:\WINDOWS\system32\DRIVERS\avgntflt.sys 86016 bytes (Avira GmbH, Avira Minifilter Driver)
0xEB2A0000 C:\WINDOWS\System32\Drivers\dump_IdeChnDr.sys 86016 bytes
0xF77C3000 IdeChnDr.sys 86016 bytes (Intel Corporation, Intel Ultra ATA Storage Driver)
0xEB1FE000 C:\WINDOWS\system32\drivers\wdmaud.sys 86016 bytes (Microsoft Corporation, MMSYSTEM Wave/Midi API mapper)
0xF620B000 C:\WINDOWS\System32\DRIVERS\parport.sys 81920 bytes (Microsoft Corporation, Parallel Port Driver)
0xF6301000 C:\WINDOWS\System32\DRIVERS\VIDEOPRT.SYS 81920 bytes (Microsoft Corporation, Video Port Driver)
0xEB4E6000 C:\WINDOWS\System32\DRIVERS\ipsec.sys 77824 bytes (Microsoft Corporation, IPSec Driver)
0xBF000000 C:\WINDOWS\System32\drivers\dxg.sys 73728 bytes (Microsoft Corporation, DirectX Graphics Driver)
0xF7791000 sr.sys 73728 bytes (Microsoft Corporation, System Restore Filesystem Filter Driver)
0xF62CC000 C:\WINDOWS\System32\DRIVERS\basic2.sys 69632 bytes (Conexant Systems, NTRksample driver)
0xEBB16000 C:\WINDOWS\System32\Drivers\EPLPDX02.SYS 69632 bytes (MK Systems CO., LTD., LPT I/O driver for EPSON PRINTER)
0xF780F000 pci.sys 69632 bytes (Microsoft Corporation, NT Plug and Play PCI Enumerator)
0xF5A9C000 C:\WINDOWS\System32\DRIVERS\psched.sys 69632 bytes (Microsoft Corporation, MS QoS Packet Scheduler)
0xEB2B5000 C:\WINDOWS\System32\Drivers\Udfs.SYS 69632 bytes (Microsoft Corporation, UDF File System Driver)
0xF7A2F000 C:\WINDOWS\System32\DRIVERS\cdrom.sys 65536 bytes (Microsoft Corporation, SCSI CD-ROM Driver)
0xF799F000 C:\WINDOWS\System32\DRIVERS\nic1394.sys 65536 bytes (Microsoft Corporation, IEEE1394 Ndis Miniport and Call Manager)
0xF78CF000 ohci1394.sys 65536 bytes (Microsoft Corporation, 1394 OpenHCI Port Driver)
0xF7A0F000 C:\WINDOWS\System32\DRIVERS\serial.sys 65536 bytes (Microsoft Corporation, Serial Device Driver)
0xEEBD6000 C:\WINDOWS\System32\DRIVERS\arp1394.sys 61440 bytes (Microsoft Corporation, IP/1394 Arp Client)
0xF7A4F000 C:\WINDOWS\system32\drivers\drmk.sys 61440 bytes (Microsoft Corporation, Microsoft Kernel DRM Descrambler Filter)
0xF7A3F000 C:\WINDOWS\System32\DRIVERS\redbook.sys 61440 bytes (Microsoft Corporation, Redbook Audio Filter Driver)
0xF79EF000 C:\WINDOWS\System32\DRIVERS\rksample.sys 61440 bytes (Conexant Systems, Rksample WDM driver)
0xF427C000 C:\WINDOWS\system32\drivers\sysaudio.sys 61440 bytes (Microsoft Corporation, System Audio WDM Filter)
0xEF51F000 C:\WINDOWS\system32\drivers\usbaudio.sys 61440 bytes (Microsoft Corporation, USB Audio Class Driver)
0xF42AC000 C:\WINDOWS\System32\DRIVERS\usbhub.sys 61440 bytes (Microsoft Corporation, Default Hub Driver for USB)
0xF78DF000 C:\WINDOWS\System32\DRIVERS\1394BUS.SYS 57344 bytes (Microsoft Corporation, 1394 Bus Device Driver)
0xF78AF000 C:\WINDOWS\System32\DRIVERS\CLASSPNP.SYS 53248 bytes (Microsoft Corporation, SCSI Class System Dll)
0xF79FF000 C:\WINDOWS\System32\DRIVERS\i8042prt.sys 53248 bytes (Microsoft Corporation, i8042 Port Driver)
0xF7A6F000 C:\WINDOWS\System32\DRIVERS\rasl2tp.sys 53248 bytes (Microsoft Corporation, RAS L2TP mini-port/call-manager driver)
0xF7A5F000 C:\WINDOWS\system32\DRIVERS\STREAM.SYS 53248 bytes (Microsoft Corporation, WDM CODEC Class Device Driver 2.0)
0xEB535000 C:\WINDOWS\System32\DRIVERS\tonesnt.sys 53248 bytes (Conexant Systems, TonesNT driver)
0xF788F000 VolSnap.sys 53248 bytes (Microsoft Corporation, Volume Shadow Copy Driver)
0xEF50F000 C:\WINDOWS\system32\DRIVERS\WDFLDR.SYS 53248 bytes (Microsoft Corporation, WDFLDR)
0xF6858000 C:\WINDOWS\System32\DRIVERS\raspptp.sys 49152 bytes (Microsoft Corporation, Peer-to-Peer Tunneling Protocol)
0xF78EF000 agp440.sys 45056 bytes (Microsoft Corporation, 440 NT AGP Filter)
0xEEBF6000 C:\WINDOWS\System32\Drivers\Fips.SYS 45056 bytes (Microsoft Corporation, FIPS Crypto Driver)
0xF7A1F000 C:\WINDOWS\System32\DRIVERS\imapi.sys 45056 bytes (Microsoft Corporation, IMAPI Kernel Driver)
0xF787F000 MountMgr.sys 45056 bytes (Microsoft Corporation, Mount Manager)
0xF6868000 C:\WINDOWS\System32\DRIVERS\raspppoe.sys 45056 bytes (Microsoft Corporation, RAS PPPoE mini-port/call-manager driver)
0xF6828000 C:\WINDOWS\system32\DRIVERS\rrnetcap.sys 45056 bytes (RapidSolution Software AG, Intermediate Filter Driver)
0xF78BF000 sbp2port.sys 45056 bytes (Microsoft Corporation, SBP-2 Protocol Driver)
0xF79DF000 C:\WINDOWS\System32\DRIVERS\SOAR.SYS 45056 bytes (Conexant Systems, Soar driver)
0xF786F000 isapnp.sys 40960 bytes (Microsoft Corporation, PNP ISA Bus Driver)
0xF42CC000 C:\WINDOWS\System32\Drivers\NDProxy.SYS 40960 bytes (Microsoft Corporation, NDIS Proxy)
0xEB5A2000 C:\WINDOWS\System32\DRIVERS\secdrv.sys 40960 bytes (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K., Macrovision SECURITY Driver)
0xF6838000 C:\WINDOWS\System32\DRIVERS\termdd.sys 40960 bytes (Microsoft Corporation, Terminal Server Driver)
0xF789F000 disk.sys 36864 bytes (Microsoft Corporation, PnP Disk Driver)
0xEF52F000 C:\WINDOWS\system32\DRIVERS\HIDCLASS.SYS 36864 bytes (Microsoft Corporation, Hid Class Library)
0xF6848000 C:\WINDOWS\System32\DRIVERS\msgpc.sys 36864 bytes (Microsoft Corporation, MS General Packet Classifier)
0xEF29C000 C:\WINDOWS\System32\DRIVERS\netbios.sys 36864 bytes (Microsoft Corporation, NetBIOS interface driver)
0xEB741000 C:\WINDOWS\System32\Drivers\Normandy.SYS 36864 bytes (RKU Driver)
0xF79CF000 C:\WINDOWS\System32\DRIVERS\processr.sys 36864 bytes (Microsoft Corporation, Processor Device Driver)
0xEEBE6000 C:\WINDOWS\System32\DRIVERS\wanarp.sys 36864 bytes (Microsoft Corporation, MS Remote Access and Routing ARP Driver)
0xF7C57000 C:\WINDOWS\System32\Drivers\Modem.SYS 32768 bytes (Microsoft Corporation, Modem Device Driver)
0xEF94D000 C:\WINDOWS\System32\Drivers\Npfs.SYS 32768 bytes (Microsoft Corporation, NPFS Driver)
0xEF1CF000 C:\WINDOWS\System32\DRIVERS\usbccgp.sys 32768 bytes (Microsoft Corporation, USB Common Class Generic Parent Driver)
0xF7C4F000 C:\WINDOWS\System32\DRIVERS\usbehci.sys 32768 bytes (Microsoft Corporation, EHCI eUSB Miniport Driver)
0xF7C77000 C:\WINDOWS\System32\DRIVERS\fdc.sys 28672 bytes (Microsoft Corporation, Floppy Disk Controller Driver)
0xEF602000 C:\WINDOWS\system32\DRIVERS\HIDPARSE.SYS 28672 bytes (Microsoft Corporation, Hid Parsing Library)
0xEF5FA000 C:\WINDOWS\system32\DRIVERS\LHidFilt.Sys 28672 bytes (Logitech, Inc., Logitech HID Filter Driver.)
0xEF5F2000 C:\WINDOWS\system32\DRIVERS\LMouFilt.Sys 28672 bytes (Logitech, Inc., Logitech Mouse Filter Driver.)
0xF7AFF000 C:\WINDOWS\System32\Drivers\MxlW2k.SYS 28672 bytes (MusicMatch, Inc., MusicMatch Access Layer KMD)
0xF7AEF000 C:\WINDOWS\System32\DRIVERS\PCIIDEX.SYS 28672 bytes (Microsoft Corporation, PCI IDE Bus Driver Extension)
0xEF1D7000 C:\WINDOWS\System32\DRIVERS\usbprint.sys 28672 bytes (Microsoft Corporation, USB Printer driver)
0xF7B07000 C:\WINDOWS\SYSTEM32\DRIVERS\GEARAspiWDM.sys 24576 bytes (GEAR Software Inc., CD DVD Filter)
0xF7C6F000 C:\WINDOWS\System32\DRIVERS\kbdclass.sys 24576 bytes (Microsoft Corporation, Keyboard Class Driver)
0xF7C67000 C:\WINDOWS\System32\DRIVERS\mouclass.sys 24576 bytes (Microsoft Corporation, Mouse Class Driver)
0xF7C5F000 C:\WINDOWS\System32\DRIVERS\RTL8139.SYS 24576 bytes (Realtek Semiconductor Corporation, Realtek RTL8139 NDIS 5.0 Driver)
0xEF1DF000 C:\WINDOWS\system32\DRIVERS\ssmdrv.sys 24576 bytes (Avira GmbH, AVIRA SnapShot Driver)
0xF7B0F000 C:\WINDOWS\System32\DRIVERS\usbuhci.sys 24576 bytes (Microsoft Corporation, UHCI USB Miniport Driver)
0xEF95D000 C:\WINDOWS\System32\drivers\vga.sys 24576 bytes (Microsoft Corporation, VGA/Super VGA Video Driver)
0xEF96D000 C:\WINDOWS\System32\DRIVERS\flpydisk.sys 20480 bytes (Microsoft Corporation, Floppy Driver)
0xEF955000 C:\WINDOWS\System32\Drivers\Msfs.SYS 20480 bytes (Microsoft Corporation, Mailslot driver)
0xF7AF7000 PartMgr.sys 20480 bytes (Microsoft Corporation, Partition Manager)
0xF7B7F000 C:\WINDOWS\System32\DRIVERS\ptilink.sys 20480 bytes (Parallel Technologies, Inc., Parallel Technologies DirectParallel IO Library)
0xF7B87000 C:\WINDOWS\System32\DRIVERS\raspti.sys 20480 bytes (Microsoft Corporation, PTI DirectParallel(R) mini-port/call-manager driver)
0xF7B77000 C:\WINDOWS\System32\DRIVERS\TDI.SYS 20480 bytes (Microsoft Corporation, TDI Wrapper)
0xF7C47000 C:\WINDOWS\System32\DRIVERS\usbohci.sys 20480 bytes (Microsoft Corporation, OHCI USB Miniport Driver)
0xEF5EA000 C:\WINDOWS\System32\watchdog.sys 20480 bytes (Microsoft Corporation, Watchdog Driver)
0xF765E000 C:\WINDOWS\system32\DRIVERS\ArcSoftVirtualCapture.sys 16384 bytes (ArcSoft, Inc., ArcSoft Magic-i Driver)
0xF7C83000 IdeBusDr.sys 16384 bytes (Intel Corporation, Intel Ultra ATA Storage Driver)
0xF7D0F000 C:\WINDOWS\System32\DRIVERS\mssmbios.sys 16384 bytes (Microsoft Corporation, System Management BIOS Driver)
0xF5A8C000 C:\WINDOWS\System32\DRIVERS\ndisuio.sys 16384 bytes (Microsoft Corporation, NDIS User mode I/O Driver)
0xF3723000 C:\WINDOWS\SYSTEM32\DRIVERS\OMCI.SYS 16384 bytes (Dell Computer Corporation, OMCI Device Driver)
0xF766A000 C:\WINDOWS\System32\DRIVERS\serenum.sys 16384 bytes (Microsoft Corporation, Serial Port Enumerator)
0xF7662000 C:\WINDOWS\System32\DRIVERS\usbscan.sys 16384 bytes (Microsoft Corporation, USB Scanner Driver)
0xF7C7F000 C:\WINDOWS\system32\BOOTVID.dll 12288 bytes (Microsoft Corporation, VGA Boot Driver)
0xEFCE4000 C:\WINDOWS\System32\drivers\Dxapi.sys 12288 bytes (Microsoft Corporation, DirectX API Driver)
0xEF37B000 C:\WINDOWS\system32\DRIVERS\hidusb.sys 12288 bytes (Microsoft Corporation, USB Miniport Driver for Input Devices)
0xF766E000 C:\WINDOWS\System32\DRIVERS\IPFilter.sys 12288 bytes (Microsoft Corporation, Microsoft IntelliPoint)
0xEF377000 C:\WINDOWS\System32\DRIVERS\mouhid.sys 12288 bytes (Microsoft Corporation, HID Mouse Filter Driver)
0xF6C97000 C:\WINDOWS\System32\DRIVERS\ndistapi.sys 12288 bytes (Microsoft Corporation, NDIS 3.0 connection wrapper driver)
0xF373F000 C:\WINDOWS\System32\DRIVERS\rasacd.sys 12288 bytes (Microsoft Corporation, RAS Automatic Connection Driver)
0xF3737000 C:\WINDOWS\System32\drivers\ws2ifsl.sys 12288 bytes (Microsoft Corporation, Winsock2 IFS Layer)
0xEB757000 C:\Program Files\Avira\AntiVir Desktop\avgio.sys 8192 bytes (Avira GmbH, Avira AntiVir Support for Minifilter)
0xF7D81000 C:\WINDOWS\System32\Drivers\Beep.SYS 8192 bytes (Microsoft Corporation, BEEP Driver)
0xF7D7F000 C:\WINDOWS\System32\Drivers\Fs_Rec.SYS 8192 bytes (Microsoft Corporation, File System Recognizer Driver)
0xF7D73000 intelide.sys 8192 bytes (Microsoft Corporation, Intel PCI IDE Driver)
0xF7D6F000 C:\WINDOWS\system32\KDCOM.DLL 8192 bytes (Microsoft Corporation, Kernel Debugger HW Extension DLL)
0xF7D83000 C:\WINDOWS\System32\Drivers\mnmdd.SYS 8192 bytes (Microsoft Corporation, Frame buffer simulator)
0xF7DBF000 C:\WINDOWS\System32\DRIVERS\msikbd2k.sys 8192 bytes (Netropa Corporation, Multimedia Keyboard Driver for Windows 2000)
0xF7DFB000 C:\WINDOWS\System32\Drivers\ParVdm.SYS 8192 bytes (Microsoft Corporation, VDM Parallel Driver)
0xF7D85000 C:\WINDOWS\System32\DRIVERS\RDPCDD.sys 8192 bytes (Microsoft Corporation, RDP Miniport)
0xF7DDF000 C:\WINDOWS\System32\DRIVERS\swenum.sys 8192 bytes (Microsoft Corporation, Plug and Play Software Device Enumerator)
0xF7DC1000 C:\WINDOWS\System32\DRIVERS\USBD.SYS 8192 bytes (Microsoft Corporation, Universal Serial Bus Driver)
0xF7D71000 C:\WINDOWS\System32\DRIVERS\WMILIB.SYS 8192 bytes (Microsoft Corporation, WMILIB WMI support library Dll)
0xF7F10000 C:\WINDOWS\System32\DRIVERS\audstub.sys 4096 bytes (Microsoft Corporation, AudStub Driver)
0xEE623000 C:\WINDOWS\System32\drivers\dxgthk.sys 4096 bytes (Microsoft Corporation, DirectX Graphics Driver Thunk)
0xEEA41000 C:\WINDOWS\System32\Drivers\Null.SYS 4096 bytes (Microsoft Corporation, NULL Driver)
0xF7F0E000 C:\WINDOWS\system32\drivers\SENSUPGD.SYS 4096 bytes (Sensaura Ltd, Sensaura Upgrade)
==============================================
>Stealth
==============================================
==============================================
>Files
==============================================
!-->[Hidden] C:\Config.Msi
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\Adobe\Acrobat
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\Adobe\Acrobat(2)
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\Adobe\Updater6
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\AOL Downloads\updateni_setup90
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\AOL\AOL Spyware Protection
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\AOL\OptScan
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\toaster\aol.activeupdate
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\toaster\aol.aspApp
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\Apple Computer\Installer Cache\Safari 3.525.26.13
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\Apple Computer\Installer Cache\Safari 5.31.21.10
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\Apple\Installer Cache\Apple Mobile Device Support 2.1.1.13
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\Apple\Installer Cache\Apple Mobile Device Support 2.1.2.7
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\Apple\Installer Cache\AppleApplicationSupport 1.1.0
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\ArcSoft
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\CanonBJ
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\Citrix
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\Google
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\Google Updater
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\GTek
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\Intuit\Quicken\10696
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\Intuit\Quicken\Cache\Qps
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\Intuit\Quicken\Inet\0647a1f9a55c283c5bf2cbdd01f1
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\Microsoft\Media Player
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\Microsoft\WIA
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\MSN6
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\NortonInstaller\Logs\03-20-2009-19h40m32s
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\NortonInstaller\Logs\03-20-2009-19h40m40s
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\NortonInstaller\Logs\03-20-2009-19h40m47s
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\NortonInstaller\Logs\03-21-2009-09h45m48s
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\NortonInstaller\Logs\08-19-2009-07h59m28s
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\NortonInstaller\Logs\08-19-2009-07h59m31s
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\NortonInstaller\Logs\08-19-2009-07h59m33s
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\NortonInstaller\Logs\08-20-2009-08h30m07s
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\NortonInstaller\Logs\11-10-2008-17h29m09s
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\NortonInstaller\Logs\11-10-2008-17h29m11s
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\NortonInstaller\Logs\11-10-2008-17h29m19s
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\NortonInstaller\Logs\12-10-2008-20h46m10s
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\NortonInstaller\Logs\12-14-2008-08h15m58s
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\NortonInstaller\Logs\12-14-2008-08h16m33s
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\NortonInstaller\Logs\12-14-2008-09h01m21s
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\NortonInstaller\Logs\12-14-2008-09h01m39s
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\NortonInstaller\Logs\12-14-2008-09h01m47s
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\NortonInstaller\Logs\12-14-2008-09h04m17s
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\NortonInstaller\Logs\12-14-2008-09h04m26s
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\NortonInstaller\Logs\12-14-2008-09h04m32s
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\Norton\00000082
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\Office Genuine Advantage
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\Pure Networks
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\RapidSolution\Tunebite_2009\EncodingBackend
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\RapidSolution\Tunebite_2009\StandardProfiles\Restrictions
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\RapidSolution\Tunebite_2009\UserProfiles
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\Sun
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Media Player
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\{00D89592-F643-4D8D-8F0F-AFAE0F14D4C3}\x86
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}\x86
!-->[Hidden] C:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}\x86
!-->[Hidden] C:\Documents and Settings\All Users\Documents\D-Link docs
!-->[Hidden] C:\Documents and Settings\All Users\Documents\My Music\My Playlists
!-->[Hidden] C:\Documents and Settings\All Users\Documents\My Music\Sample Playlists
!-->[Hidden] C:\Documents and Settings\All Users\Documents\My Music\Sync Playlists
!-->[Hidden] C:\Documents and Settings\All Users\DRM\Cache
!-->[Hidden] C:\Documents and Settings\All Users\Start Menu\Programs\Adobe\Adobe Studio
!-->[Hidden] C:\Documents and Settings\All Users\Start Menu\Programs\AOL Instant Messenger
!-->[Hidden] C:\Documents and Settings\All Users\Start Menu\Programs\ArcSoft Connect
!-->[Hidden] C:\Documents and Settings\All Users\Start Menu\Programs\ArcSoft Magic-i 3
!-->[Hidden] C:\Documents and Settings\All Users\Start Menu\Programs\ArcSoft WebCam Companion 2
!-->[Hidden] C:\Documents and Settings\All Users\Start Menu\Programs\Avery Products
!-->[Hidden] C:\Documents and Settings\All Users\Start Menu\Programs\Avira
!-->[Hidden] C:\Documents and Settings\All Users\Start Menu\Programs\Canon iP1800 series
!-->[Hidden] C:\Documents and Settings\All Users\Start Menu\Programs\Chessmaster 9000
!-->[Hidden] C:\Documents and Settings\All Users\Start Menu\Programs\EPSON
!-->[Hidden] C:\Documents and Settings\All Users\Start Menu\Programs\FreshDevices
!-->[Hidden] C:\Documents and Settings\All Users\Start Menu\Programs\Google Chrome
!-->[Hidden] C:\Documents and Settings\All Users\Start Menu\Programs\Google Updater
!-->[Hidden] C:\Documents and Settings\All Users\Start Menu\Programs\Hewlett-Packard
!-->[Hidden] C:\Documents and Settings\All Users\Start Menu\Programs\iPod
!-->[Hidden] C:\Documents and Settings\All Users\Start Menu\Programs\iTunes
!-->[Hidden] C:\Documents and Settings\All Users\Start Menu\Programs\Logitech
!-->[Hidden] C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Silverlight
!-->[Hidden] C:\Documents and Settings\All Users\Start Menu\Programs\NStorm
!-->[Hidden] C:\Documents and Settings\All Users\Start Menu\Programs\QuickTime
!-->[Hidden] C:\Documents and Settings\All Users\Start Menu\Programs\Real Estate Transaction Viewer
!-->[Hidden] C:\Documents and Settings\All Users\Start Menu\Programs\Safari
!-->[Hidden] C:\Documents and Settings\All Users\Start Menu\Programs\Shutterfly
!-->[Hidden] C:\Documents and Settings\All Users\Start Menu\Programs\Sierra
!-->[Hidden] C:\Documents and Settings\All Users\Start Menu\Programs\ubi.com
!-->[Hidden] C:\Documents and Settings\All Users\Start Menu\Programs\WinZip
!-->[Hidden] C:\Documents and Settings\BB443B11-7D12-450c-9F85-2D32804655F9
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\.limewire\themes\classic_theme
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\AdobeAUM
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Adobe\Acrobat\7.0\Collab
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Adobe\Acrobat\7.0\JavaScripts
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Adobe\Acrobat\7.0\Preferences
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Adobe\Acrobat\7.0\Updater
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Adobe\Acrobat\9.0\JavaScripts
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Adobe\CameraRaw
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Adobe\Color
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Adobe\ESD
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Adobe\FileBrowser
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Adobe\ImageReady
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Adobe\Photoshop Album\3.0\browserCache
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Adobe\Photoshop Album\3.0\OLS\sessions
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Adobe\Photoshop\7.0\Adobe Photoshop 7.0 Settings
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Adobe\Photoshop\9.0\Adobe Photoshop CS2 Settings\WorkSpaces
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Adobe\Plugins
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Adobe\Updater
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Adobe\Workflow
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Amazon
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\AOL
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Apple Computer\QuickTime
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\ArcSoft\ArcSoft Magic-i
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\ArcSoft\ArcSoft Registration
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\ArcSoft\ArcSoft WebCam Companion
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\ArcSoft\log
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Google
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\GTek
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Lavasoft
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Learn2.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\#SharedObjects\LLNPYYPQ\a.blip.tv\scripts
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\#SharedObjects\LLNPYYPQ\a.espncdn.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\#SharedObjects\LLNPYYPQ\aa.online-metrix.net
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\#SharedObjects\LLNPYYPQ\admin.brightcove.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\#SharedObjects\LLNPYYPQ\adsatt.espn.go.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\#SharedObjects\LLNPYYPQ\assets.espn.go.com\espntv\2009\ESPNGuideLoader_10.swf
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\#SharedObjects\LLNPYYPQ\assets.espn.go.com\espnvideo\mpf32\prod\r_3_2_0_10\ESPN_Player.swf
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\#SharedObjects\LLNPYYPQ\assets.espn.go.com\espnvideo\mpf32\prod\r_3_2_0_12
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\#SharedObjects\LLNPYYPQ\assets.espn.go.com\espnvideo\mpf32\prod\r_3_2_0_13
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\#SharedObjects\LLNPYYPQ\assets.newsinc.com\[[IMPORT]]
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\#SharedObjects\LLNPYYPQ\cache.vindicosuite.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\#SharedObjects\LLNPYYPQ\cdn-akm.vmixcore.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\#SharedObjects\LLNPYYPQ\cdn-video.adconion.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\#SharedObjects\LLNPYYPQ\cdn.abclocal.go.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\#SharedObjects\LLNPYYPQ\cdn.gourmandia.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\#SharedObjects\LLNPYYPQ\cdn2.telemetryverification.net
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\#SharedObjects\LLNPYYPQ\d1.scribdassets.com\ScribdViewer.swf
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\#SharedObjects\LLNPYYPQ\galleries.payserve.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\#SharedObjects\LLNPYYPQ\grfx.cstv.com\#gametracker
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\#SharedObjects\LLNPYYPQ\grfx.cstv.com\flash
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\#SharedObjects\LLNPYYPQ\grfx.cstv.com\[[IMPORT]]
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\#SharedObjects\LLNPYYPQ\i.cdn.turner.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\#SharedObjects\LLNPYYPQ\images.ibsys.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\#SharedObjects\LLNPYYPQ\img.widgets.video.s-msn.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\#SharedObjects\LLNPYYPQ\kiks.yandex.ru
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\#SharedObjects\LLNPYYPQ\media1.break.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\#SharedObjects\LLNPYYPQ\msnbcmedia.msn.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\#SharedObjects\LLNPYYPQ\pfiles.5min.com\FlexPlayers\SmartPlayer_141.swf
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\#SharedObjects\LLNPYYPQ\player.cdn.targetspot.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\#SharedObjects\LLNPYYPQ\pvs.gotuit.com\4.2
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\#SharedObjects\LLNPYYPQ\pvs.gotuit.com\turner_si
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\#SharedObjects\LLNPYYPQ\secure.harryreid.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\#SharedObjects\LLNPYYPQ\static.awempire.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\#SharedObjects\LLNPYYPQ\static.foxsports.com\content\fscom\flash\2010\09\23
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\#SharedObjects\LLNPYYPQ\webdata2.vidz.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\#SharedObjects\LLNPYYPQ\www.analyticnet.info\analytics
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\#SharedObjects\LLNPYYPQ\www.blogtalkradio.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\#SharedObjects\LLNPYYPQ\www.caforward.org
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\#SharedObjects\LLNPYYPQ\www.directorslive.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\#SharedObjects\LLNPYYPQ\www.mevio.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\#SharedObjects\LLNPYYPQ\www.pornkeeper.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\#SharedObjects\LLNPYYPQ\www.stormmedia.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\#SharedObjects\LLNPYYPQ\www.theonion.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#a.espncdn.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#aa.online-metrix.net
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#admin.brightcove.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#adsatt.espn.go.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#assets.newsinc.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cache.vindicosuite.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cdn-video.adconion.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cdn.abclocal.go.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cdn.gourmandia.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cdn2.telemetryverification.net
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#d1.scribdassets.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#galleries.payserve.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#grfx.cstv.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#i.cdn.turner.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#images-na.ssl-images-amazon.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#images.ibsys.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#img.widgets.video.s-msn.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#kiks.yandex.ru
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#mauthstudios.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#media1.break.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#media1.clubpenguin.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#msnbcmedia.msn.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#my.screenname.aol.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#player.cdn.targetspot.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pvs.gotuit.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#secure.harryreid.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#static.awempire.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#webdata2.vidz.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.am600kogo.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.analyticnet.info
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.blogtalkradio.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.caforward.org
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.directorslive.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.getscorecash.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.mevio.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.pornkeeper.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.stormmedia.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Macromedia\Shockwave Player
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Microsoft\Clip Organizer
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Microsoft\CLR Security Config\v2.0.50727.42
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Microsoft\Excel
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Microsoft\Forms
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Microsoft\Media Player
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Microsoft\Office\Actors
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Microsoft\Speech\Files\UserLexicons
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Microsoft\Templates\Avery
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Move Networks\QMCache00
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Move Networks\temp
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Mozilla
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\MozillaControl\profiles\MozillaControl\6yqfsoyv.slt
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\MSN6
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Real\Msg
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Real\RealOne Player\DRM
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Real\RealOne Player\ErrorLogs
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Real\RealOne Player\library
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Real\RealOne Player\skins\data
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Skype\Content
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Skype\jack.fischer321\chatsync\c8
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Sun\Java\Deployment
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Sun\Java\jre1.6.0_11
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Sun\Java\jre1.6.0_14
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Talkback
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Thunderbird\Profiles\dbgu6lan.default\extensions\{58D4392A-842E-11DE-B51A-C7B855D89593}\chrome
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Thunderbird\Profiles\dbgu6lan.default\extensions\{58D4392A-842E-11DE-B51A-C7B855D89593}\defaults
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Thunderbird\Profiles\dbgu6lan.default\Mail\Local Folders\Piezography.sbd
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\Thunderbird\Profiles\dbgu6lan.default\minidumps
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\ubi.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\vlc
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Application Data\You've Got Pictures Screensaver\PictureDir
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Desktop\antique bottle
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Desktop\AOL Saved PFC
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Desktop\Downloads
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Desktop\image0
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Desktop\Unused Desktop Shortcuts
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Desktop\Win32
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Favorites\Adobe Studio
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Favorites\Microsoft Websites
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Favorites\Real Estate
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Adobe\Acrobat\7.0
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Adobe\Acrobat\9.0
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Adobe\Fonts
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Adobe\Reader 9.1
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Adobe\TypeSpt
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Adobe\Updater6
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\00
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\01\05
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\01\06
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\01\08
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\01\14
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\02\01
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\02\03
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\02\11
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\02\12
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\02\15
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\03\05
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\03\08
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\03\11
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\03\15
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\04\00
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\04\01
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\04\03
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\04\11
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\04\14
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\05\01
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\05\02
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\05\04
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\05\06
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\05\08
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\05\09
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\05\10
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\05\15
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\06\05
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\07\04
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\07\07
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\07\09
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\07\10
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\07\12
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\07\13
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\08\03
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\08\05
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\08\06
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\08\07
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\08\10
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\08\15
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\09\04
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\09\06
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\09\07
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\09\10
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\09\12
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\09\14
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\10\05
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\10\08
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\10\13
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\10\14
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\11
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\12
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\13\02
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\13\03
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\13\04
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\13\11
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\13\12
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\13\15
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\14\00
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\14\06
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\14\12
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\14\13
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\15\04
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\15\11
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\15\12
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Apple Computer\QuickTime\downloads\15\13
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\ArcSoft
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Citrix
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Google\Google Desktop\b277f1ec2a0f\icons
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Google\Google Desktop\b277f1ec2a0f\safeweb
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Graboid
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Graboid_Inc
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Learn2.com
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Microsoft\Feeds
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Microsoft\Feeds Cache
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Microsoft\Internet Explorer\Services
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Microsoft\Media Player
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Microsoft\OFFICE\12.0
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Microsoft\Silverlight
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Microsoft\Windows Live OneCare safety scanner\BackUp
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Microsoft\Windows Media\10.0
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Microsoft\Windows Media\11.0
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\Mozilla\Firefox\Profiles\q8ifr7p2.default\Cache\FCCC8CF8d01
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\RapidSolution\Tunebite_2009\Log\EncodingBackend
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\RapidSolution\Tunebite_2009\Log\EncodingProfiles
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Application Data\WMTools Downloaded Files
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\History\History.IE5\MSHist012010110120101108
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Temp\183.tmp
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Temp\7.dir
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Temp\A.dir
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Temp\MFPrint_PCL5c_3812
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Temp\plugtmp-10
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Temp\plugtmp-12
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Temp\plugtmp-15
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Temp\plugtmp-20
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Temp\plugtmp-21
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Temp\plugtmp-22
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Temp\plugtmp-23
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Temp\plugtmp-24
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Temp\plugtmp-9
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Temp\WER08d2.dir00
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Temp\WER0c1f.dir00
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Temp\WER2e2f.dir00
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Local Settings\Temp\~nsu.tmp
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\My
Redirect Problems in San Jose, CA
Second half:
Documents\AdobeStockPhotos
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\My Documents\Art
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\My Documents\BirthdayCandlesMain
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\My Documents\Chessmaster 9000
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\My Documents\download
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\My Documents\filelib
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\My Documents\My Downloads
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\My Documents\My Google Gadgets
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\My Documents\My Pictures\Adobe
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\My Documents\sculpture
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\My Documents\Updater
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\My Documents\vim
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\My Documents\WebCam Albums
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\My Documents\WebCam Media
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\My Documents\Words\All Mercury News stories\1986
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\My Documents\Words\All Mercury News stories\1987
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\My Documents\Words\All Mercury News stories\1988
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\My Documents\Words\All Mercury News stories\1989
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\My Documents\Words\All Mercury News stories\1990
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\My Documents\Words\All Mercury News stories\1991
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\My Documents\Words\All Mercury News stories\1992
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\My Documents\Words\All Mercury News stories\1993
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\My Documents\Words\All Mercury News stories\1994
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\My Documents\Words\All Mercury News stories\1995
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\My Documents\Words\All Mercury News stories\1996
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\My Documents\Words\All Mercury News stories\1997
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\My Documents\Words\All Mercury News stories\1998
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\My Documents\Words\All Mercury News stories\1999
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\My Documents\Words\All Mercury News stories\2000
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\My Documents\Words\All Mercury News stories\2001
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\My Documents\Words\All Mercury News stories\2002
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\My Documents\Words\All Mercury News stories\2003
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\My Documents\Words\All Mercury News stories\2004
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\My Documents\Words\All Mercury News stories\2005
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\My Documents\Words\All Mercury News stories\2006
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\My Documents\Words\All Mercury News stories\Jack
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\My Documents\Words\Books
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\My Documents\Words\Mailing labels
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\My Documents\Words\Paul estate business
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\My Documents\Words\Rental properties
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\NetHood\c on Dell
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\NetHood\My Documents on Dell
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\NetHood\SharedDocs on Dell
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\PrivacIE
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Recent\c on Dell
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Recent\john's docs on 1.7 GHz Celeron, 256 MB DDR, 60GB (Johns)
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Recent\My Documents on Dell
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Recent\temp on 1.7 GHz Celeron, 256 MB DDR, 60GB (Johns)
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Recent\temp on 1.7 GHz Celeron, 256 MB DDR, 60GB (Johns) (2)
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Start Menu\Programs\Accessories\System Tools
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Start Menu\Programs\Jack
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Start Menu\Programs\QuadToneRIP
!-->[Hidden] C:\Documents and Settings\Joycellen Floyd\Start Menu\Programs\REAP LITE
!-->[Hidden] C:\Documents and Settings\LocalService\Application Data\Microsoft\HTML Help
!-->[Hidden] C:\Documents and Settings\LocalService\Application Data\Symantec
!-->[Hidden] C:\Documents and Settings\LocalService\Desktop
!-->[Hidden] C:\Documents and Settings\LocalService\IETldCache
!-->[Hidden] C:\Documents and Settings\LocalService\Local Settings\Application Data\AOL
!-->[Hidden] C:\Documents and Settings\LocalService\Local Settings\Application Data\Google
!-->[Hidden] C:\Documents and Settings\LocalService\My Documents
!-->[Hidden] C:\Documents and Settings\NetworkService\IETldCache
!-->[Hidden] C:\Documents and Settings\NetworkService\Local Settings\Application Data\Apple
!-->[Hidden] C:\Documents and Settings\NetworkService\Local Settings\Application Data\Google
!-->[Hidden] C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Silverlight
!-->[Hidden] C:\epson
!-->[Hidden] C:\Graphs
!-->[Hidden] C:\hegames
!-->[Hidden] C:\My Downloads\grc
!-->[Hidden] C:\Netgear
!-->[Hidden] C:\Program Files\3DGroove
!-->[Hidden] C:\Program Files\Actiontec
!-->[Hidden] C:\Program Files\Adobe\Acrobat 7.0\ActiveX
!-->[Hidden] C:\Program Files\Adobe\Acrobat 7.0\Esl
!-->[Hidden] C:\Program Files\Adobe\Acrobat 7.0\Help
!-->[Hidden] C:\Program Files\Adobe\Acrobat 7.0\Reader
!-->[Hidden] C:\Program Files\Adobe\Acrobat 7.0\Resource
!-->[Hidden] C:\Program Files\Adobe\Acrobat 7.0\Update
!-->[Hidden] C:\Program Files\Adobe\Adobe Stock Photos\Help
!-->[Hidden] C:\Program Files\Adobe\Adobe Stock Photos\Resources\da_DK
!-->[Hidden] C:\Program Files\Adobe\Adobe Studio
!-->[Hidden] C:\Program Files\Adobe\Photoshop 7.0
!-->[Hidden] C:\Program Files\Adobe\Reader 9.0\Reader\Browser
!-->[Hidden] C:\Program Files\Adobe\Reader 9.0\Reader\IDTemplates
!-->[Hidden] C:\Program Files\Adobe\Reader 9.0\Reader\Javascripts
!-->[Hidden] C:\Program Files\Adobe\Reader 9.0\Reader\Legal
!-->[Hidden] C:\Program Files\Adobe\Reader 9.0\Reader\Optional
!-->[Hidden] C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\AcroForm
!-->[Hidden] C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\Annotations
!-->[Hidden] C:\Program Files\Adobe\Reader 9.0\Reader\Tracker
!-->[Hidden] C:\Program Files\Adobe\Reader 9.0\Resource\CMap
!-->[Hidden] C:\Program Files\Adobe\Reader 9.0\Resource\Font
!-->[Hidden] C:\Program Files\Adobe\Reader 9.0\Resource\SaslPrep
!-->[Hidden] C:\Program Files\Adobe\Reader 9.0\Resource\TypeSupport
!-->[Hidden] C:\Program Files\AIM
!-->[Hidden] C:\Program Files\Amazon
!-->[Hidden] C:\Program Files\Apple Software Update\plugins
!-->[Hidden] C:\Program Files\Apple Software Update\SoftwareUpdate.Resources\zh_CN.lproj
!-->[Hidden] C:\Program Files\Apple Software Update\SoftwareUpdate.Resources\zh_TW.lproj
!-->[Hidden] C:\Program Files\Apple Software Update\SoftwareUpdateFiles.Resources
!-->[Hidden] C:\Program Files\ArcSoft\Magic-i 3
!-->[Hidden] C:\Program Files\Audible\Bin\HTML
!-->[Hidden] C:\Program Files\Avery Wizard
!-->[Hidden] C:\Program Files\Avira\AntiVir Desktop\EVENTDB
!-->[Hidden] C:\Program Files\Avira\AntiVir Desktop\FAILSAFE
!-->[Hidden] C:\Program Files\CanonBJ
!-->[Hidden] C:\Program Files\CASIO
!-->[Hidden] C:\Program Files\Citrix\GoToAssist
!-->[Hidden] C:\Program Files\Citrix\icaweb32
!-->[Hidden] C:\Program Files\Common Files\Adobe\Calibration
!-->[Hidden] C:\Program Files\Common Files\Adobe\Color\Profiles
!-->[Hidden] C:\Program Files\Common Files\Adobe\Color\Settings
!-->[Hidden] C:\Program Files\Common Files\Adobe\Fonts
!-->[Hidden] C:\Program Files\Common Files\Adobe\Legal
!-->[Hidden] C:\Program Files\Common Files\Adobe\PDFL
!-->[Hidden] C:\Program Files\Common Files\Adobe\TypeSpt\Unicode
!-->[Hidden] C:\Program Files\Common Files\Adobe\Updater6
!-->[Hidden] C:\Program Files\Common Files\Adobe\Web
!-->[Hidden] C:\Program Files\Common Files\Adobe\Workflow
!-->[Hidden] C:\Program Files\Common Files\AOL\AOL Spyware Protection
!-->[Hidden] C:\Program Files\Common Files\AOL\Screensaver
!-->[Hidden] C:\Program Files\Common Files\AOL\System Information
!-->[Hidden] C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServicesUI.resources
!-->[Hidden] C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServices\Schemas\Bookmarks.syncschema\Contents\Resources\fr.lproj
!-->[Hidden] C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServices\Schemas\Bookmarks.syncschema\Contents\Resources\it.lproj
!-->[Hidden] C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServices\Schemas\Bookmarks.syncschema\Contents\Resources\ja.lproj
!-->[Hidden] C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServices\Schemas\Bookmarks.syncschema\Contents\Resources\nb.lproj
!-->[Hidden] C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServices\Schemas\Bookmarks.syncschema\Contents\Resources\nl.lproj
!-->[Hidden] C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServices\Schemas\Bookmarks.syncschema\Contents\Resources\pt.lproj
!-->[Hidden] C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServices\Schemas\Calendars.syncschema\Contents\Resources\de.lproj
!-->[Hidden] C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServices\Schemas\Calendars.syncschema\Contents\Resources\es.lproj
!-->[Hidden] C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServices\Schemas\Calendars.syncschema\Contents\Resources\fr.lproj
!-->[Hidden] C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServices\Schemas\Calendars.syncschema\Contents\Resources\it.lproj
!-->[Hidden] C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServices\Schemas\Calendars.syncschema\Contents\Resources\ja.lproj
!-->[Hidden] C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServices\Schemas\Calendars.syncschema\Contents\Resources\nb.lproj
!-->[Hidden] C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServices\Schemas\Calendars.syncschema\Contents\Resources\nl.lproj
!-->[Hidden] C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServices\Schemas\Calendars.syncschema\Contents\Resources\pt.lproj
!-->[Hidden] C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServices\Schemas\Contacts.syncschema\Contents\Resources\de.lproj
!-->[Hidden] C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServices\Schemas\Contacts.syncschema\Contents\Resources\es.lproj
!-->[Hidden] C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServices\Schemas\Contacts.syncschema\Contents\Resources\fr.lproj
!-->[Hidden] C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServices\Schemas\Contacts.syncschema\Contents\Resources\it.lproj
!-->[Hidden] C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServices\Schemas\Contacts.syncschema\Contents\Resources\ja.lproj
!-->[Hidden] C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServices\Schemas\Contacts.syncschema\Contents\Resources\nb.lproj
!-->[Hidden] C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServices\Schemas\Contacts.syncschema\Contents\Resources\nl.lproj
!-->[Hidden] C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServices\Schemas\Contacts.syncschema\Contents\Resources\pt.lproj
!-->[Hidden] C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServices\Schemas\MailAccounts.syncschema\Contents\Resources\de.lproj
!-->[Hidden] C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServices\Schemas\MailAccounts.syncschema\Contents\Resources\es.lproj
!-->[Hidden] C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServices\Schemas\MailAccounts.syncschema\Contents\Resources\fr.lproj
!-->[Hidden] C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServices\Schemas\MailAccounts.syncschema\Contents\Resources\it.lproj
!-->[Hidden] C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServices\Schemas\MailAccounts.syncschema\Contents\Resources\ja.lproj
!-->[Hidden] C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServices\Schemas\MailAccounts.syncschema\Contents\Resources\nb.lproj
!-->[Hidden] C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServices\Schemas\MailAccounts.syncschema\Contents\Resources\nl.lproj
!-->[Hidden] C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServices\Schemas\MailAccounts.syncschema\Contents\Resources\pt.lproj
!-->[Hidden] C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServices\Schemas\Notes.syncschema\Contents\Resources\de.lproj
!-->[Hidden] C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServices\Schemas\Notes.syncschema\Contents\Resources\es.lproj
!-->[Hidden] C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServices\Schemas\Notes.syncschema\Contents\Resources\fr.lproj
!-->[Hidden] C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServices\Schemas\Notes.syncschema\Contents\Resources\it.lproj
!-->[Hidden] C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServices\Schemas\Notes.syncschema\Contents\Resources\ja.lproj
!-->[Hidden] C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServices\Schemas\Notes.syncschema\Contents\Resources\nb.lproj
!-->[Hidden] C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServices\Schemas\Notes.syncschema\Contents\Resources\nl.lproj
!-->[Hidden] C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServices\Schemas\Notes.syncschema\Contents\Resources\pt.lproj
!-->[Hidden] C:\Program Files\Common Files\Apple\Mobile Device Support\SyncUICore.resources
!-->[Hidden] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\doc
!-->[Hidden] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\UI
!-->[Hidden] C:\Program Files\Common Files\InstallShield\Driver\9
!-->[Hidden] C:\Program Files\Common Files\InstallShield\Professional
!-->[Hidden] C:\Program Files\Common Files\Java
!-->[Hidden] C:\Program Files\Common Files\Logitech
!-->[Hidden] C:\Program Files\Common Files\Microsoft Shared\DW\1025
!-->[Hidden] C:\Program Files\Common Files\Microsoft Shared\DW\1028
!-->[Hidden] C:\Program Files\Common Files\Microsoft Shared\DW\1031
!-->[Hidden] C:\Program Files\Common Files\Microsoft Shared\DW\1036
!-->[Hidden] C:\Program Files\Common Files\Microsoft Shared\DW\1040
!-->[Hidden] C:\Program Files\Common Files\Microsoft Shared\DW\1041
!-->[Hidden] C:\Program Files\Common Files\Microsoft Shared\DW\1042
!-->[Hidden] C:\Program Files\Common Files\Microsoft Shared\DW\2052
!-->[Hidden] C:\Program Files\Common Files\Microsoft Shared\DW\3082
!-->[Hidden] C:\Program Files\Common Files\Microsoft Shared\OFFICE12
!-->[Hidden] C:\Program Files\Common Files\Microsoft Shared\VC
!-->[Hidden] C:\Program Files\Common Files\Nullsoft\ActiveX\2.0
!-->[Hidden] C:\Program Files\Common Files\PC Tools
!-->[Hidden] C:\Program Files\Common Files\PocketSoft
!-->[Hidden] C:\Program Files\Common Files\Real\GToolbar
!-->[Hidden] C:\Program Files\Common Files\xing shared
!-->[Hidden] C:\Program Files\CONEXANT
!-->[Hidden] C:\Program Files\DivX
!-->[Hidden] C:\Program Files\DS_Dual3\EasyScan\Progress
!-->[Hidden] C:\Program Files\DS_Dual3\Prefs\Calibration
!-->[Hidden] C:\Program Files\DS_Dual3\Prefs\EasyScan
!-->[Hidden] C:\Program Files\DS_Dual3\Prefs\standard
!-->[Hidden] C:\Program Files\EPSON Software
!-->[Hidden] C:\Program Files\EPSON\EPSON CardMonitor
!-->[Hidden] C:\Program Files\EPSON\EPSON PictureMate
!-->[Hidden] C:\Program Files\EPSON\guide
!-->[Hidden] C:\Program Files\EPSON\PrinterDriverTemp\PMATE
!-->[Hidden] C:\Program Files\EPSON\PrinterDriverTemp\SC60
!-->[Hidden] C:\Program Files\EPSON\PrinterDriverTemp\SP1280
!-->[Hidden] C:\Program Files\File Scanner Library (Spybot - Search & Destroy)
!-->[Hidden] C:\Program Files\FreshDevices
!-->[Hidden] C:\Program Files\GameSpy Arcade
!-->[Hidden] C:\Program Files\Google\Chrome
!-->[Hidden] C:\Program Files\Google\Common
!-->[Hidden] C:\Program Files\Google\CrashReports
!-->[Hidden] C:\Program Files\Google\Google Desktop Search
!-->[Hidden] C:\Program Files\Google\Google Toolbar
!-->[Hidden] C:\Program Files\Google\Google Updater
!-->[Hidden] C:\Program Files\Google\GoogleToolbarNotifier
!-->[Hidden] C:\Program Files\Google\Update
!-->[Hidden] C:\Program Files\Griffin Technology
!-->[Hidden] C:\Program Files\HarvEX
!-->[Hidden] C:\Program Files\Hewlett-Packard
!-->[Hidden] C:\Program Files\InstallShield Installation Information\{109D28C7-FB38-483A-9C91-001CB59E2699}
!-->[Hidden] C:\Program Files\InstallShield Installation Information\{146ED22B-BC11-4017-BBE8-E393848AA92A}
!-->[Hidden] C:\Program Files\InstallShield Installation Information\{3CB41017-F5CA-4C56-934C-ED02156251E6}
!-->[Hidden] C:\Program Files\InstallShield Installation Information\{73006B34-9743-4A39-AC37-38EDFCEB6DCE}
!-->[Hidden] C:\Program Files\InstallShield Installation Information\{9692FD03-6662-4E62-B08C-30DFF51651E1}
!-->[Hidden] C:\Program Files\InstallShield Installation Information\{AEDDF5A3-29CE-11D5-A8C2-000102246AAE}
!-->[Hidden] C:\Program Files\InstallShield Installation Information\{B9987754-9A14-4B61-ABB3-73A79503238D}
!-->[Hidden] C:\Program Files\InstallShield Installation Information\{D94B11F6-EDA8-466D-9E0F-5D49DED06FA0}
!-->[Hidden] C:\Program Files\InstallShield Installation Information\{DB978C71-BB58-4F94-AE95-18C119196937}
!-->[Hidden] C:\Program Files\InstallShield Installation Information\{FA86DB6D-DD7B-46A2-8FB1-6B33460D03A4}
!-->[Hidden] C:\Program Files\Internet Explorer\en-US
!-->[Hidden] C:\Program Files\iPod\iPod for Windows User guide
!-->[Hidden] C:\Program Files\iPod\Updater_2.0.1
!-->[Hidden] C:\Program Files\iTunes\iTunes.Resources\fi.lproj\WelcomeWindow.nib
!-->[Hidden] C:\Program Files\iTunes\iTunes.Resources\fr.lproj
!-->[Hidden] C:\Program Files\iTunes\iTunes.Resources\it.lproj
!-->[Hidden] C:\Program Files\iTunes\iTunes.Resources\ja.lproj
!-->[Hidden] C:\Program Files\iTunes\iTunes.Resources\ko.lproj
!-->[Hidden] C:\Program Files\iTunes\iTunes.Resources\nb.lproj
!-->[Hidden] C:\Program Files\iTunes\iTunes.Resources\nl.lproj
!-->[Hidden] C:\Program Files\iTunes\iTunes.Resources\pl.lproj
!-->[Hidden] C:\Program Files\iTunes\iTunes.Resources\pt.lproj
!-->[Hidden] C:\Program Files\iTunes\iTunes.Resources\pt_PT.lproj
!-->[Hidden] C:\Program Files\iTunes\iTunes.Resources\ru.lproj
!-->[Hidden] C:\Program Files\iTunes\iTunes.Resources\sv.lproj
!-->[Hidden] C:\Program Files\iTunes\iTunes.Resources\zh_CN.lproj
!-->[Hidden] C:\Program Files\iTunes\iTunes.Resources\zh_TW.lproj
!-->[Hidden] C:\Program Files\iTunes\iTunesHelper.Resources
!-->[Hidden] C:\Program Files\iTunes\iTunesMiniPlayer.Resources
!-->[Hidden] C:\Program Files\iTunes\Mozilla Plugins
!-->[Hidden] C:\Program Files\KODAK
!-->[Hidden] C:\Program Files\Logitech\Desktop Messenger\8876480\InitData
!-->[Hidden] C:\Program Files\Logitech\Desktop Messenger\8876480\Users\Joycellen Floyd\Data\57b6\a9a3e36
!-->[Hidden] C:\Program Files\Logitech\Desktop Messenger\8876480\Users\Joycellen Floyd\Data\57b6\a9a3e54
!-->[Hidden] C:\Program Files\Logitech\Desktop Messenger\8876480\Users\Joycellen Floyd\Data\57b6\a9a3ef0
!-->[Hidden] C:\Program Files\Logitech\Desktop Messenger\8876480\Users\Joycellen Floyd\Data\57b6\a9a3f17
!-->[Hidden] C:\Program Files\Microsoft Games
!-->[Hidden] C:\Program Files\Microsoft Office\Office12
!-->[Hidden] C:\Program Files\Microsoft Silverlight
!-->[Hidden] C:\Program Files\Misc. Support Library (Spybot - Search & Destroy)
!-->[Hidden] C:\Program Files\Mozilla Firefox\dictionaries
!-->[Hidden] C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}\chrome
!-->[Hidden] C:\Program Files\Mozilla Firefox\modules
!-->[Hidden] C:\Program Files\Mozilla Thunderbird\dictionaries
!-->[Hidden] C:\Program Files\Mozilla Thunderbird\isp
!-->[Hidden] C:\Program Files\Mozilla Thunderbird\modules
!-->[Hidden] C:\Program Files\Mozilla Thunderbird\res\fonts
!-->[Hidden] C:\Program Files\Mozilla Thunderbird\res\html
!-->[Hidden] C:\Program Files\MSECache
!-->[Hidden] C:\Program Files\MsnMusic
!-->[Hidden] C:\Program Files\MSN\MSNCoreFiles\install
!-->[Hidden] C:\Program Files\MSN\MSNCoreFiles\oobe
!-->[Hidden] C:\Program Files\MSXML 4.0
!-->[Hidden] C:\Program Files\MusicMatch\MusicMatch Jukebox\CDArt
!-->[Hidden] C:\Program Files\MusicMatch\MusicMatch Jukebox\Plugins\Portables\Apple_2
!-->[Hidden] C:\Program Files\MusicMatch\MusicMatch Jukebox\Skins\Apple iPod
!-->[Hidden] C:\Program Files\MusicMatch\MusicMatch Jukebox\Skins\Phoenix
!-->[Hidden] C:\Program Files\MusicMatch\MUSICMATCH Update\MMJB.tmp
!-->[Hidden] C:\Program Files\MusicMatch\MUSICMATCH Update\MMJB\Images
!-->[Hidden] C:\Program Files\MusicMatch\MUSICMATCH Update\MMJB\sonic
!-->[Hidden] C:\Program Files\MusicMatch\MUSICMATCH Update\MMJB\WMFDist9_5
!-->[Hidden] C:\Program Files\MusicMatch\MUSICMATCH Update\MMJB_\partitions
!-->[Hidden] C:\Program Files\MusicMatch\MUSICMATCH Update\UPSELL\.castanet
!-->[Hidden] C:\Program Files\Nstorm
!-->[Hidden] C:\Program Files\PixiePack Codec Pack
!-->[Hidden] C:\Program Files\PopCap Games
!-->[Hidden] C:\Program Files\Pure Networks
!-->[Hidden] C:\Program Files\QuadToneRIP\icc
!-->[Hidden] C:\Program Files\QuadToneRIP\Profiles
!-->[Hidden] C:\Program Files\QuadToneRIP\QuadTone\Quad9500-K6
!-->[Hidden] C:\Program Files\QuadToneRIP\QuadTone\Quad9600
!-->[Hidden] C:\Program Files\QuadToneRIP\QuadTone\Quad9600-K7
!-->[Hidden] C:\Program Files\QuadToneRIP\QuadTone\Quad980
!-->[Hidden] C:\Program Files\QuadToneRIP\QuadTone\Quad9800
!-->[Hidden] C:\Program Files\QuadToneRIP\QuadTone\Quad9800-K7
!-->[Hidden] C:\Program Files\QuadToneRIP\QuadTone\Quad9880
!-->[Hidden] C:\Program Files\QuadToneRIP\QuadTone\QuadEX
!-->[Hidden] C:\Program Files\QuadToneRIP\QuadTone\QuadR1800
!-->[Hidden] C:\Program Files\QuadToneRIP\QuadTone\QuadR1800-3MK
!-->[Hidden] C:\Program Files\QuadToneRIP\QuadTone\QuadR1800-K7
!-->[Hidden] C:\Program Files\QuadToneRIP\QuadTone\QuadR200-GQ
!-->[Hidden] C:\Program Files\QuadToneRIP\QuadTone\QuadR200-K6
!-->[Hidden] C:\Program Files\QuadToneRIP\QuadTone\QuadR220-GQ
!-->[Hidden] C:\Program Files\QuadToneRIP\QuadTone\QuadR220-K6
!-->[Hidden] C:\Program Files\QuadToneRIP\QuadTone\QuadR2400
!-->[Hidden] C:\Program Files\QuadToneRIP\QuadTone\QuadR2400-K7
!-->[Hidden] C:\Program Files\QuadToneRIP\QuadTone\QuadR260
!-->[Hidden] C:\Program Files\QuadToneRIP\QuadTone\QuadR260-MIS
!-->[Hidden] C:\Program Files\QuadToneRIP\QuadTone\QuadR280
!-->[Hidden] C:\Program Files\QuadToneRIP\QuadTone\QuadR280-MIS
!-->[Hidden] C:\Program Files\QuadToneRIP\QuadTone\QuadR300-GQ
!-->[Hidden] C:\Program Files\QuadToneRIP\QuadTone\QuadR300-K6
!-->[Hidden] C:\Program Files\QuadToneRIP\QuadTone\QuadR320-GQ
!-->[Hidden] C:\Program Files\QuadToneRIP\QuadTone\QuadR320-K6
!-->[Hidden] C:\Program Files\QuadToneRIP\QuadTone\QuadR340-GQ
!-->[Hidden] C:\Program Files\QuadToneRIP\QuadTone\QuadR340-K6
!-->[Hidden] C:\Program Files\QuadToneRIP\QuadTone\QuadR380
!-->[Hidden] C:\Program Files\QuadToneRIP\QuadTone\QuadR380-MIS
!-->[Hidden] C:\Program Files\QuadToneRIP\QuadTone\QuadR800
!-->[Hidden] C:\Program Files\QuadToneRIP\QuadTone\QuadR800-3MK
!-->[Hidden] C:\Program Files\QuadToneRIP\QuadTone\QuadR800-K7
!-->[Hidden] C:\Program Files\QuickTime\Plugins
!-->[Hidden] C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\zh_CN.lproj
!-->[Hidden] C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\zh_TW.lproj
!-->[Hidden] C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources
!-->[Hidden] C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources
!-->[Hidden] C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources
!-->[Hidden] C:\Program Files\Real\RealPlayer\cache_db
!-->[Hidden] C:\Program Files\Real\RealPlayer\DataCache\Formats
!-->[Hidden] C:\Program Files\Real\RealPlayer\DataCache\GetMedia
!-->[Hidden] C:\Program Files\Real\RealPlayer\DataCache\GPFeat
!-->[Hidden] C:\Program Files\Real\RealPlayer\DataCache\Help
!-->[Hidden] C:\Program Files\Real\RealPlayer\DataCache\howto
!-->[Hidden] C:\Program Files\Real\RealPlayer\DataCache\keywords
!-->[Hidden] C:\Program Files\Real\RealPlayer\DataCache\library
!-->[Hidden] C:\Program Files\Real\RealPlayer\DataCache\Login
!-->[Hidden] C:\Program Files\Real\RealPlayer\DataCache\mstore
!-->[Hidden] C:\Program Files\Real\RealPlayer\DataCache\musicguide
!-->[Hidden] C:\Program Files\Real\RealPlayer\DataCache\prefs
!-->[Hidden] C:\Program Files\Real\RealPlayer\DataCache\Radio
!-->[Hidden] C:\Program Files\Real\RealPlayer\DataCache\search
!-->[Hidden] C:\Program Files\Real\RealPlayer\DataCache\sendlink
!-->[Hidden] C:\Program Files\Real\RealPlayer\DataCache\web
!-->[Hidden] C:\Program Files\Real\RealPlayer\DataCache\webresources
!-->[Hidden] C:\Program Files\Real\RealPlayer\Firstrun
!-->[Hidden] C:\Program Files\Real\RealPlayer\Producer
!-->[Hidden] C:\Program Files\REAPLITE
!-->[Hidden] C:\Program Files\Safari\PubSub.resources\Framework\pt.lproj
!-->[Hidden] C:\Program Files\Safari\PubSub.resources\pt.lproj
!-->[Hidden] C:\Program Files\Safari\Safari.resources\BookmarkChooser
!-->[Hidden] C:\Program Files\Safari\Safari.resources\Help\pt.lproj
!-->[Hidden] C:\Program Files\SDHelper (Spybot - Search & Destroy)
!-->[Hidden] C:\Program Files\Shutterfly
!-->[Hidden] C:\Program Files\TeaTimer (Spybot - Search & Destroy)
!-->[Hidden] C:\Program Files\THQ
!-->[Hidden] C:\Program Files\Transaction Viewer
!-->[Hidden] C:\Program Files\TryMedia
!-->[Hidden] C:\Program Files\ubi.com
!-->[Hidden] C:\Program Files\Uninstall Information\mupdate
!-->[Hidden] C:\Program Files\Windows Live Safety Center
!-->[Hidden] C:\Program Files\Windows Media Connect 2
!-->[Hidden] C:\Program Files\Windows Media Player\Installer
!-->[Hidden] C:\Program Files\Windows Media Player\Network Sharing
!-->[Hidden] C:\Program Files\WinZip
!-->[Hidden] C:\SIERRA
!-->[Hidden] C:\System Volume Information\_restore{34009F4D-3D27-46D3-B070-BF2BE740FDE8}\RP1616\snapshot\Repository
!-->[Hidden] C:\System Volume Information\_restore{34009F4D-3D27-46D3-B070-BF2BE740FDE8}\RP1619\snapshot\Repository
!-->[Hidden] C:\System Volume Information\_restore{34009F4D-3D27-46D3-B070-BF2BE740FDE8}\RP1620\snapshot
!-->[Hidden] C:\System Volume Information\_restore{34009F4D-3D27-46D3-B070-BF2BE740FDE8}\RP1621
!-->[Hidden] C:\System Volume Information\_restore{34009F4D-3D27-46D3-B070-BF2BE740FDE8}\RP1622
!-->[Hidden] C:\System Volume Information\_restore{34009F4D-3D27-46D3-B070-BF2BE740FDE8}\RP1623
!-->[Hidden] C:\System Volume Information\_restore{34009F4D-3D27-46D3-B070-BF2BE740FDE8}\RP1624
!-->[Hidden] C:\System Volume Information\_restore{34009F4D-3D27-46D3-B070-BF2BE740FDE8}\RP1625
!-->[Hidden] C:\System Volume Information\_restore{34009F4D-3D27-46D3-B070-BF2BE740FDE8}\RP1626
!-->[Hidden] C:\System Volume Information\_restore{34009F4D-3D27-46D3-B070-BF2BE740FDE8}\RP1627\snapshot\Repository
!-->[Hidden] C:\System Volume Information\_restore{34009F4D-3D27-46D3-B070-BF2BE740FDE8}\RP1635
!-->[Hidden] C:\System Volume Information\_restore{34009F4D-3D27-46D3-B070-BF2BE740FDE8}\RP1637
!-->[Hidden] C:\System Volume Information\_restore{34009F4D-3D27-46D3-B070-BF2BE740FDE8}\RP1641
!-->[Hidden] C:\System Volume Information\_restore{34009F4D-3D27-46D3-B070-BF2BE740FDE8}\RP1642\snapshot\Repository
!-->[Hidden] C:\System Volume Information\_restore{34009F4D-3D27-46D3-B070-BF2BE740FDE8}\RP1643
!-->[Hidden] C:\System Volume Information\_restore{34009F4D-3D27-46D3-B070-BF2BE740FDE8}\RP1645
!-->[Hidden] C:\System Volume Information\_restore{34009F4D-3D27-46D3-B070-BF2BE740FDE8}\RP1646
!-->[Hidden] C:\System Volume Information\_restore{34009F4D-3D27-46D3-B070-BF2BE740FDE8}\RP1647\snapshot\Repository
!-->[Hidden] C:\System Volume Information\_restore{34009F4D-3D27-46D3-B070-BF2BE740FDE8}\RP1648
!-->[Hidden] C:\System Volume Information\_restore{34009F4D-3D27-46D3-B070-BF2BE740FDE8}\RP1653
!-->[Hidden] C:\System Volume Information\_restore{34009F4D-3D27-46D3-B070-BF2BE740FDE8}\RP1656
!-->[Hidden] C:\System Volume Information\_restore{34009F4D-3D27-46D3-B070-BF2BE740FDE8}\RP1657\snapshot\Repository
!-->[Hidden] C:\System Volume Information\_restore{34009F4D-3D27-46D3-B070-BF2BE740FDE8}\RP1658
!-->[Hidden] C:\System Volume Information\_restore{34009F4D-3D27-46D3-B070-BF2BE740FDE8}\RP1662
!-->[Hidden] C:\System Volume Information\_restore{34009F4D-3D27-46D3-B070-BF2BE740FDE8}\RP1665\snapshot\Repository
!-->[Hidden] C:\System Volume Information\_restore{34009F4D-3D27-46D3-B070-BF2BE740FDE8}\RP1666
!-->[Hidden] C:\System Volume Information\_restore{34009F4D-3D27-46D3-B070-BF2BE740FDE8}\RP1667
!-->[Hidden] C:\System Volume Information\_restore{34009F4D-3D27-46D3-B070-BF2BE740FDE8}\RP1668
!-->[Hidden] C:\System Volume Information\_restore{34009F4D-3D27-46D3-B070-BF2BE740FDE8}\RP1669
!-->[Hidden] C:\System Volume Information\_restore{34009F4D-3D27-46D3-B070-BF2BE740FDE8}\RP1670
!-->[Hidden] C:\System Volume Information\_restore{34009F4D-3D27-46D3-B070-BF2BE740FDE8}\RP1671
!-->[Hidden] C:\WINDOWS\$hf_mig$
!-->[Hidden] C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB2121546$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB2141007$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB2158563$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB2229593$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB2259922$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB2279986$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB2296011$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB2345886$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB2347290$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB2378111_WM9$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB2387149$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB826942$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB828028$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB833987$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB839645$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB840315$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB840374$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB840987$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB841356$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB841533$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB841873$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB842773$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB873333_0$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB873339_0$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB873376$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB885492$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB885835_0$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB885836_0$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB888113_0$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB888302_0$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB890046_0$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB890859_0$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB891781_0$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB893066_0$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB893086_0$\spuninst
!-->[Hidden] C:\WINDOWS\$NtUninstallKB893756_0$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB896358_0$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB896422_0$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB896423_0$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB896426$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB896727-IE6SP1-20050719.165959$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB897715-OE6SP1-20050503.210336$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB898461$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB899587_0$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB899588_0$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB899591_0$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB900485$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB901214_0$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB904942$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB908531$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB911562$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB911567$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB912812$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB913580$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB914388$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB914440$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB915865$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB916595$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB917159$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB917422$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB918118$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB918899$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB920213$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB920214$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB920670$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB920683$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB921398$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB921503$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB921883$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB922616$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB922760$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB923561$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB923980$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB924270$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB924667$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB926239$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB926436$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB927779$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB927802$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB928090$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB928255$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB928843$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB929123$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB929969$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB930916$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB931768$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB931836$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB933360$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB933566$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB933729$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB935839$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB935840$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB936021$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB936357$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB936782_WMP11$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB937143$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB938127$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB938828$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB938829$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB939653$\spuninst
!-->[Hidden] C:\WINDOWS\$NtUninstallKB939683$\spuninst
!-->[Hidden] C:\WINDOWS\$NtUninstallKB941568$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB941569$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB941644$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB941693$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB942615$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB942763$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB942840$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB943055$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB943460$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB943485$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB944338$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB944533$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB944653$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB945553$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB946026$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB946648_0$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB947864$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB948590$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB948881$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB950749$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB950759$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB950759_0$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB950762$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB950762_0$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB950974$\spuninst
!-->[Hidden] C:\WINDOWS\$NtUninstallKB950974_0$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB951066$\spuninst
!-->[Hidden] C:\WINDOWS\$NtUninstallKB951066_0$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB951072-v2$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB951376-v2$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB951376-v2_0$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB951698$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB951698_0$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB951748$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB951978$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB952004$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB952069_WM9$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB952287$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB952287_0$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB952954$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB952954_0$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB953838$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB953838_0$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB953839$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB954211_0$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB954459$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB954600$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB955069$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB955839$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB956390$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB956391$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB956572$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB956744$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB956803$\spuninst
!-->[Hidden] C:\WINDOWS\$NtUninstallKB956803_0$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB956841$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB957095$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB957095_0$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB957097$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB958215$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB958644$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB958644_0$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB959426$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB960225$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB960714$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB960803$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB960859$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB961118$\spuninst
!-->[Hidden] C:\WINDOWS\$NtUninstallKB961373$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB961501$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB963027$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB968537$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB970238$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB970653-v3$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB971557$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB971633$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB971657$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB973346$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB973354$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB973507$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB973540_WM9$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB973815$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB973869$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB975558_WM8$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB979687$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB981322$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB982132$
!-->[Hidden] C:\WINDOWS\$NtUninstallKB982802$
!-->[Hidden] C:\WINDOWS\$NtUninstallMSCompPackV1$
!-->[Hidden] C:\WINDOWS\$NtUninstallQ327979$
!-->[Hidden] C:\WINDOWS\$NtUninstallWdf01005$
!-->[Hidden] C:\WINDOWS\$NtUninstallWMFDist11$
!-->[Hidden] C:\WINDOWS\$NtUninstallwmp11$
!-->[Hidden] C:\WINDOWS\$NtUninstallWudf01000$
!-->[Hidden] C:\WINDOWS\.file_store_32
!-->[Hidden] C:\WINDOWS\.jagex_cache_32
!-->[Hidden] C:\WINDOWS\assembly
!-->[Hidden] C:\WINDOWS\Debug\Setup
!-->[Hidden] C:\WINDOWS\Debug\WPD
!-->[Hidden] C:\WINDOWS\Downloaded Installations\{4C797164-EDB9-458E-B3BA-3E7790D30CF5}
!-->[Hidden] C:\WINDOWS\Downloaded Installations\{628E8630-7947-49EA-BE90-7F8BFF77A79C}
!-->[Hidden] C:\WINDOWS\Downloaded Installations\{8A232810-B5F1-48DD-A63D-B439D7680D94}
!-->[Hidden] C:\WINDOWS\Downloaded Installations\{918E420F-2FF7-4EB4-A5C3-B02DA887D83F}
!-->[Hidden] C:\WINDOWS\EPSON CardMonitor Essential
!-->[Hidden] C:\WINDOWS\ie8
!-->[Hidden] C:\WINDOWS\ie8updates
!-->[Hidden] C:\WINDOWS\inf\IEM
!-->[Hidden] C:\WINDOWS\Installer\$PatchCache$\Managed\26DDC2EC4210AC63483DF9D4FCC5B59D
!-->[Hidden] C:\WINDOWS\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0400000010
!-->[Hidden] C:\WINDOWS\Installer\$PatchCache$\Managed\D7314F9862C648A4DB8BE2A5B47BE100
!-->[Hidden] C:\WINDOWS\Installer\$PatchCache$\Managed\DC3BF90CC0D3D2F398A9A6D1762F70F3
!-->[Hidden] C:\WINDOWS\Installer\tsclientmsitrans
!-->[Hidden] C:\WINDOWS\Installer\{216AB108-2AE1-4130-B3D5-20B2C4C80F8F}
!-->[Hidden] C:\WINDOWS\Installer\{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
!-->[Hidden] C:\WINDOWS\Installer\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
!-->[Hidden] C:\WINDOWS\Installer\{8DC42D05-680B-41B0-8878-6C14D24602DB}
!-->[Hidden] C:\WINDOWS\Installer\{91F7F3F3-CE80-48C3-8327-7D24A0A5716A}
!-->[Hidden] C:\WINDOWS\Installer\{95A890AA-B3B1-44B6-9C18-A8F7AB3EE7FC}
!-->[Hidden] C:\WINDOWS\Installer\{AC76BA86-7AD7-1033-7B44-A70000000000}
!-->[Hidden] C:\WINDOWS\Installer\{B9987754-9A14-4B61-ABB3-73A79503238D}
!-->[Hidden] C:\WINDOWS\Installer\{C04E32E0-0416-434D-AFB9-6969D703A9EF}
!-->[Hidden] C:\WINDOWS\Installer\{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}
!-->[Hidden] C:\WINDOWS\Installer\{E7004147-2CCA-431C-AA05-2AB166B9785D}
!-->[Hidden] C:\WINDOWS\Installer\{EAC1077D-EB12-4515-B8B1-2E55AA026D3E}
!-->[Hidden] C:\WINDOWS\Installer\{EAE92D24-1E4B-4B3B-894D-622E942939DA}
!-->[Hidden] C:\WINDOWS\Installer\{EE0D5DCD-2B97-4473-98DF-E93C0BD92F7A}
!-->[Hidden] C:\WINDOWS\Installer\{F958CA02-BB40-4007-894B-258729456EE4}
!-->[Hidden] C:\WINDOWS\Installer\{FA86DB6D-DD7B-46A2-8FB1-6B33460D03A4}
!-->[Hidden] C:\WINDOWS\l2schemas
!-->[Hidden] C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files
!-->[Hidden] C:\WINDOWS\Minidump
!-->[Hidden] C:\WINDOWS\network diagnostic
!-->[Hidden] C:\WINDOWS\PCHEALTH\ErrorRep\UserDumps
!-->[Hidden] C:\WINDOWS\PCHEALTH\HELPCTR\Config\News
!-->[Hidden] C:\WINDOWS\Performance\WinSAT
!-->[Hidden] C:\WINDOWS\RegisteredPackages\{077ACEC7-979C-40AB-9835-435BA1511E0D}
!-->[Hidden] C:\WINDOWS\RegisteredPackages\{077ACEC7-979C-40AB-9835-435BA1511E0D}$BACKUP$
!-->[Hidden] C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}
!-->[Hidden] C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}$BACKUP$
!-->[Hidden] C:\WINDOWS\RegisteredPackages\{3FDF25EE-E592-4495-8391-6E9C504DAC2B}
!-->[Hidden] C:\WINDOWS\RegisteredPackages\{3FDF25EE-E592-4495-8391-6E9C504DAC2B}$BACKUP$
!-->[Hidden] C:\WINDOWS\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}
!-->[Hidden] C:\WINDOWS\RegisteredPackages\{60204BB3-7078-4F70-8F69-68297621941C}
!-->[Hidden] C:\WINDOWS\RegisteredPackages\{60204BB3-7078-4F70-8F69-68297621941C}$BACKUP$
!-->[Hidden] C:\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}
!-->[Hidden] C:\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}$BACKUP$
!-->[Hidden] C:\WINDOWS\RegisteredPackages\{A47B3654-48EE-48A5-B629-97D70175E58F}
!-->[Hidden] C:\WINDOWS\RegisteredPackages\{A47B3654-48EE-48A5-B629-97D70175E58F}$BACKUP$
!-->[Hidden] C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}
!-->[Hidden] C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}$BACKUP$
!-->[Hidden] C:\WINDOWS\RegisteredPackages\{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}
!-->[Hidden] C:\WINDOWS\RegisteredPackages\{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}$BACKUP$
!-->[Hidden] C:\WINDOWS\RegisteredPackages\{CAC24AF7-5447-4F19-9FA6-F6E6E69D395E}
!-->[Hidden] C:\WINDOWS\RegisteredPackages\{CFB4B314-0328-45E1-94AF-45A3F5F48E0B}
!-->[Hidden] C:\WINDOWS\RegisteredPackages\{CFB4B314-0328-45E1-94AF-45A3F5F48E0B}$BACKUP$
!-->[Hidden] C:\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}
!-->[Hidden] C:\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}$BACKUP$
!-->[Hidden] C:\WINDOWS\ServicePackFiles\ServicePackCache
!-->[Hidden] C:\WINDOWS\SoftwareDistribution\AuthCabs\7971f918-a847-4430-9279-4a52d1efe18d
!-->[Hidden] C:\WINDOWS\SoftwareDistribution\AuthCabs\Downloaded
!-->[Hidden] C:\WINDOWS\SoftwareDistribution\AuthCabs\Redir
!-->[Hidden] C:\WINDOWS\SoftwareDistribution\Download\0facce6115ab861022eae3087e064a2a
!-->[Hidden] C:\WINDOWS\SoftwareDistribution\Download\355f788b6de8a3ec79e9aa172e6317f1
!-->[Hidden] C:\WINDOWS\SoftwareDistribution\Download\398f0c45cd46f045925de8cfce3ac8c4
!-->[Hidden] C:\WINDOWS\SoftwareDistribution\Download\8a4341850daecfe5fcade73622025bbf
!-->[Hidden] C:\WINDOWS\SoftwareDistribution\Download\94076d2dfaa176bbb2083a92af29814c
!-->[Hidden] C:\WINDOWS\SoftwareDistribution\Download\c9057d3faf4a326a2fefff7bde9fec31\backup
!-->[Hidden] C:\WINDOWS\SoftwareDistribution\Download\c9057d3faf4a326a2fefff7bde9fec31\sp1qfe
!-->[Hidden] C:\WINDOWS\SoftwareDistribution\Download\c9057d3faf4a326a2fefff7bde9fec31\sp2gdr
!-->[Hidden] C:\WINDOWS\SoftwareDistribution\Download\c9057d3faf4a326a2fefff7bde9fec31\sp2qfe
!-->[Hidden] C:\WINDOWS\SoftwareDistribution\Download\c9057d3faf4a326a2fefff7bde9fec31\update
!-->[Hidden] C:\WINDOWS\SoftwareDistribution\Download\d0cba3879be069dcb3baf4851afcf42d
!-->[Hidden] C:\WINDOWS\SoftwareDistribution\Download\f393f65782d41e425cfd1141aa65e1b5
!-->[Hidden] C:\WINDOWS\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D
!-->[Hidden] C:\WINDOWS\Sun
!-->[Hidden] C:\WINDOWS\SxsCaPendDel
!-->[Hidden] C:\WINDOWS\system32\bits
!-->[Hidden] C:\WINDOWS\system32\CanonIJ Uninstaller Information
!-->[Hidden] C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache
!-->[Hidden] C:\WINDOWS\system32\config\systemprofile\Application Data\Symantec
!-->[Hidden] C:\WINDOWS\system32\drivers\UMDF
!-->[Hidden] C:\WINDOWS\system32\DRVSTORE
!-->[Hidden] C:\WINDOWS\system32\en
!-->[Hidden] C:\WINDOWS\system32\en-US
!-->[Hidden] C:\WINDOWS\system32\LogFiles\WUDF
!-->[Hidden] C:\WINDOWS\system32\Macromed
!-->[Hidden] C:\WINDOWS\system32\Microsoft\Crypto
!-->[Hidden] C:\WINDOWS\system32\PreInstall
!-->[Hidden] C:\WINDOWS\system32\ReinstallBackups\0003\DriverFiles\i386
!-->[Hidden] C:\WINDOWS\system32\ReinstallBackups\0004
!-->[Hidden] C:\WINDOWS\system32\ReinstallBackups\0005
!-->[Hidden] C:\WINDOWS\system32\ReinstallBackups\0006
!-->[Hidden] C:\WINDOWS\system32\ReinstallBackups\0007
!-->[Hidden] C:\WINDOWS\system32\ReinstallBackups\0008
!-->[Hidden] C:\WINDOWS\system32\ReinstallBackups\0009
!-->[Hidden] C:\WINDOWS\system32\ReinstallBackups\0010
!-->[Hidden] C:\WINDOWS\system32\Resource
!-->[Hidden] C:\WINDOWS\system32\scripting
!-->[Hidden] C:\WINDOWS\system32\SoftwareDistribution
!-->[Hidden] C:\WINDOWS\system32\spool\drivers\w32x86\canonip1800_series47d4
!-->[Hidden] C:\WINDOWS\system32\spool\drivers\w32x86\epsonpicturemateda58
!-->[Hidden] C:\WINDOWS\system32\spool\drivers\w32x86\epsonstylus_photo_1243d9
!-->[Hidden] C:\WINDOWS\system32\spool\drivers\WIN40
!-->[Hidden] C:\WINDOWS\temp\Cookies
!-->[Hidden] C:\WINDOWS\temp\CR_11.tmp
!-->[Hidden] C:\WINDOWS\temp\CR_19.tmp
!-->[Hidden] C:\WINDOWS\temp\CR_248.tmp
!-->[Hidden] C:\WINDOWS\temp\History
!-->[Hidden] C:\WINDOWS\temp\Temporary Internet Files
!-->[Hidden] C:\WINDOWS\WBEM
!-->[Hidden] C:\WINDOWS\WinSxS\Policies\x86_policy.4.20.Microsoft.MSXML2_6bd6b9abf345378f_x-ww_88e8eab8
!-->[Hidden] C:\WINDOWS\WinSxS\Policies\x86_policy.6.0.Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_x-ww_527a1c68
!-->[Hidden] C:\WINDOWS\WinSxS\Policies\x86_policy.8.0.Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_x-ww_5f0bbcff
!-->[Hidden] C:\WINDOWS\WinSxS\Policies\x86_policy.8.0.Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_x-ww_77c24773
!-->[Hidden] C:\WINDOWS\WinSxS\Policies\x86_policy.8.0.Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_x-ww_caeee150
!-->[Hidden] C:\WINDOWS\WinSxS\Policies\x86_policy.8.0.Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_x-ww_0f75c32e
!-->[Hidden] C:\WINDOWS\WinSxS\Policies\x86_policy.8.0.Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_x-ww_7d81c9f9
!-->[Hidden] C:\WINDOWS\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_9e7eb501
!-->[Hidden] C:\WINDOWS\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_b7353f75
!-->[Hidden] C:\WINDOWS\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.DebugCRT_1fc8b3b9a1e18e3b_x-ww_037be232
!-->[Hidden] C:\WINDOWS\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.DebugMFC_1fc8b3b9a1e18e3b_x-ww_9b2f5ded
!-->[Hidden] C:\WINDOWS\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_x-ww_b8438ace
!-->[Hidden] C:\WINDOWS\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_x-ww_4ee8bb30
!-->[Hidden] C:\WINDOWS\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_x-ww_6ad67377
!-->[Hidden] C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2R_6bd6b9abf345378f_4.1.0.0_x-ww_29c3ad6a
!-->[Hidden] C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.1.0.0_x-ww_b319d8da
!-->[Hidden] C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9841.0_x-ww_18171213
!-->[Hidden] C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9848.0_x-ww_1b897e9a
!-->[Hidden] C:\WINDOWS\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a
!-->[Hidden] C:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_473666fd
!-->[Hidden] C:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_6e805841
!-->[Hidden] C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca
!-->[Hidden] C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd
!-->[Hidden] C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0
!-->[Hidden] C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_dec6ddd2
!-->[Hidden] C:\WINDOWS\WinSxS\x86_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0ee63867
!-->[Hidden] C:\WINDOWS\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_353599c2
!-->[Hidden] C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963e
!-->[Hidden] C:\WINDOWS\WinSxS\x86_Microsoft.VC90.DebugCRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_f863c71f
!-->[Hidden] C:\WINDOWS\WinSxS\x86_Microsoft.VC90.DebugMFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_c94a3a24
!-->[Hidden] C:\WINDOWS\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03
!-->[Hidden] C:\WINDOWS\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_405b0943
!-->[Hidden] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.1579_x-ww_7bbf8d08
!-->[Hidden] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.1643_x-ww_7c3a9bc6
!-->[Hidden] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83
!-->[Hidden] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202
!-->[Hidden] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63
!-->[Hidden] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.1360_x-ww_24a2ed47
!-->[Hidden] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c
!-->[Hidden] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5581_x-ww_dfbc4fc4
!-->[Hidden] C:\_OTM\MovedFiles\06052010_174150\C_Program Files\Common Files\Symantec Shared\VirusDefs\20070530.020
!-->[Hidden] C:\_OTM\MovedFiles\06052010_174150\C_Program Files\Common Files\Symantec Shared\VirusDefs\tmp5a02.tmp
!-->[Hidden] C:\_OTM\MovedFiles\06052010_174150\C_Program Files\Common Files\Symantec Shared\VirusDefs\tmp60f8.tmp
==============================================
>Hooks
==============================================
ntoskrnl.exe+0x00004AA2, Type: Inline - RelativeJump 0x804DBAA2-->804DBAA9 [ntoskrnl.exe]
[1488]firefox.exe-->ntdll.dll-->LdrLoadDll, Type: Inline - RelativeJump 0x7C9163C3-->00000000 [firefox.exe]
[1604]explorer.exe-->advapi32.dll-->kernel32.dll-->GetProcAddress, Type: IAT modification 0x77DD1218-->00000000 [shimeng.dll]
[1604]explorer.exe-->gdi32.dll-->kernel32.dll-->GetProcAddress, Type: IAT modification 0x77F110B4-->00000000 [shimeng.dll]
[1604]explorer.exe-->kernel32.dll-->GetProcAddress, Type: IAT modification 0x01001268-->00000000 [shimeng.dll]
[1604]explorer.exe-->shell32.dll-->kernel32.dll-->GetProcAddress, Type: IAT modification 0x7C9C15A4-->00000000 [shimeng.dll]
[1604]explorer.exe-->user32.dll-->kernel32.dll-->GetProcAddress, Type: IAT modification 0x7E41133C-->00000000 [shimeng.dll]
[1604]explorer.exe-->wininet.dll-->kernel32.dll-->GetProcAddress, Type: IAT modification 0x3D9314B0-->00000000 [shimeng.dll]
[1604]explorer.exe-->ws2_32.dll-->kernel32.dll-->GetProcAddress, Type: IAT modification 0x71AB109C-->00000000 [shimeng.dll]
[3904]plugin-container.exe-->user32.dll-->TrackPopupMenu, Type: Inline - RelativeJump 0x7E46531E-->00000000 [xul.dll]
[436]Skype.exe-->kernel32.dll-->GetModuleHandleA, Type: IAT modification 0x0101B0A0-->00000000 [unknown_code_page]
[436]Skype.exe-->kernel32.dll-->GetProcAddress, Type: IAT modification 0x0101B0A4-->00000000 [unknown_code_page]
Hello Jack
Check some files with OTL
- Double click on OTL.exe to run it.
- Make sure all the None options is checked (ticked). There are eight of them.
- Copy and paste the following into the white box under Custom Scans/Fixes:
Code:%systemroot%\system32\*.dll /lockedfiles C:\WINDOWS\system32\DRIVERS\avgntflt.sys /md5 C:\WINDOWS\system32\drivers\wdmaud.sys /md5 C:\WINDOWS\System32\Drivers\IdeChnDr.sys /md5- Click on Run Scan at the top left hand corner. This might take a while.
- When done, the OTL.txt file will open. Please post back the contents of this log.
--------------------
The Rootkit Unhooker log is not yielding the result I need. Please try GMER in Safe Mode. I will repeat the steps here. I have to be sure what we are dealing with to plan my approach and reduce the risk of any unforeseen circumstances.
Rerun GMER in Safe Mode
- Please disable your real time protection of any Antivirus, Antispyware or Antimalware programs temporarily when running GMER. They may cause the computer to freeze.
- If you need help to disable your protection programs see here and here.
- Double click the .exe file. If asked to allow the gmer driver file with a sys extension to load, please consent.
- If it gives you a warning about rootkit activity and asks if you want to run scan, click on No.
- In the right panel, you will see several boxes that have been checked (ticked).
- Uncheck IAT/EAT
- Uncheck All other Drives/Partitions except C:\ (leave C:\ checked)
- Uncheck Show All (don't miss this one)
- Then click the Scan button and wait for it to finish.
- Once done, click on the Save... button and save it as "Gmer.txt" at a convenient location. Post the contents of that report.
- Enable back your security softwares as soon as you completed the GMER steps.
Rootkit scans often produce false positives. Do NOT take any action on any "<--- ROOKIT" entries.
--------------------
Does the redirect happen when you use both Firefox and Internet Explorer? Or only specific one browser?
--------------------
Please post back:
1. OTL result
2. GMER log
3. the answer to my question about the redirect
Jack&Jill
MRU Teacher of Malware Removal University.
Member of ASAP and UNITE.
Your donation helps in improving Spybot-S&D!
Posting Permissions
