Page 1 of 2 12 LastLast
Results 1 to 10 of 17

Thread: "Project 11" PC Startup Invasion with Crashes

  1. #1
    Junior Member TionPri's Avatar
    Join Date
    Oct 2011
    Posts
    12

    Cool "Project 11" PC Startup Invasion with Crashes

    Is your PC workin? Not mine well atleast the best it can......I need a Volunteer Helper to save my day. I made one very big mistake before I read the post instructions and that's no to use the fix from someone else's thread or computer... what I did was run Combofix before I made my post. I need your help, Thank You in advance. Sorry. but I did it correct this time here is my DSS:

    .
    DDS (Ver_2011-08-26.01) - NTFSx86
    Internet Explorer: 8.0.7600.16385
    Run by TionPri at 6:38:23 on 2011-10-28
    Microsoft Windows 7 Ultimate 6.1.7600.0.1252.1.1033.18.2038.1135 [GMT -4:00]
    .
    SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    .
    ============== Running Processes ===============
    .
    C:\Windows\system32\wininit.exe
    C:\Windows\system32\lsm.exe
    C:\Windows\system32\svchost.exe -k DcomLaunch
    C:\Windows\system32\svchost.exe -k RPCSS
    C:\Windows\system32\Ati2evxx.exe
    C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
    C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
    C:\Windows\system32\svchost.exe -k netsvcs
    C:\Windows\system32\svchost.exe -k LocalService
    C:\Windows\system32\svchost.exe -k NetworkService
    C:\Windows\system32\Ati2evxx.exe
    C:\Windows\System32\spoolsv.exe
    C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
    C:\Windows\system32\AppleOSSMgr.exe
    C:\Windows\system32\AppleTimeSrv.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\Windows\system32\svchost.exe -k imgsvc
    C:\Windows\system32\svchost.exe -k bthsvcs
    C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
    C:\Windows\system32\Dwm.exe
    C:\Windows\system32\taskhost.exe
    C:\Program Files\Syncrosoft\POS\H2O\cledx.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\Boot Camp\Bootcamp.exe
    C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
    C:\Windows\system32\SearchIndexer.exe
    C:\Windows\System32\svchost.exe -k secsvcs
    C:\Windows\explorer.exe
    C:\Windows\system32\prevhost.exe
    C:\Program Files\Windows NT\Accessories\WORDPAD.EXE
    C:\Windows\system32\DllHost.exe
    C:\Windows\system32\conhost.exe
    C:\Windows\system32\wbem\wmiprvse.exe
    .
    ============== Pseudo HJT Report ===============
    .
    uStart Page = hxxp://www.google.com/
    uInternet Settings,ProxyOverride = *.local
    BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
    BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\googletoolbar1.dll
    BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\2.0.301.7164\swg.dll
    TB: &Google: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\googletoolbar1.dll
    mRun: [DVD or CD Sharing] "c:\program files\dvd or cd sharing\ODSAgent.exe"
    mRun: [H2O] c:\program files\syncrosoft\pos\h2o\cledx.exe
    mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
    mRun: [Apple_KbdMgr] c:\program files\boot camp\Bootcamp.exe
    mRun: [AdobeCS4ServiceManager] "c:\program files\common files\adobe\cs4servicemanager\CS4ServiceManager.exe" -launchedbylogin
    mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 10.0\reader\Reader_sl.exe"
    mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\kill.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat011308 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat011400 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat011403 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat011404 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat011405 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat011406 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat011407 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat011409 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat011500 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat011501 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat011502 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat011503 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat011504 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat011505 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat011506 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat011507 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat011508 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat011509 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat011600 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat011601 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat011602 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat011603 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat011604 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat011605 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat011606 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat011607 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat011609 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat012400 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat012500 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat012509 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat013001 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat013004 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat013104 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat013208 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat013302 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat013306 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat020000 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat020004 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat020209 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat020306 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat020902 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat025700 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat025807 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat025809 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat030301 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat030406 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat030506 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat030508 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat030801 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat030802 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat030803 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat030807 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat031103 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat031107 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat031301 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat031406 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat031605 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat031901 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat031902 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat031904 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat031905 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat031906 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat032006 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat032103 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat032104 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat032109 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat032203 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat032300 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat032304 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat032400 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat032404 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat032405 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat035200 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat035500 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat035503 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat040102 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat040202 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat040206 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat040209 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat040408 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat042300 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat042405 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat042409 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat042509 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat042701 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat042706 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat042802 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat042905 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat043004 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat074102 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat074106 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat074108 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat075202 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat075805 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat075900 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat075904 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat080105 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat080200 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat080204 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat080208 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat094900 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat095500 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat095609 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat095800 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat100505 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat100506 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat100507 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat104332 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat104336 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat104409 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat104412 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat104417 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat104447 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat104448 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat104516 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat104540 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat104616 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat104626 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat104631 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat104633 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat104634 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat104639 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat104719 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat105224 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat105228 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat105249 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat105328 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat105347 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat105417 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat105430 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat105437 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat105446 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat105448 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat105449 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat105450 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat105556 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat105621 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat105630 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat105638 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat105642 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat110343 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat111410 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat111411 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat111412 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat111413 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat111414 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat111416 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat111417 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat111513 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat111514 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat111515 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat111516 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat111517 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat111518 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat111519 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat111610 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat111700 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat111724 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat111737 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat111846 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat111848 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat112001 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat112028 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat112039 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat112045 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat112055 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat112109 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat112110 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat112111 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat112113 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat112122 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat112152 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat112156 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat112158 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat112200 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat112221 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat112230 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat112237 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat112244 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat112255 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat112324 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat112336 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat113011 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat113012 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat113113 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat113115 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat113219 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat113311 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat113312 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat113316 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat113319 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat113442 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat115343 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat115612 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat115615 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat115617 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat115619 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat120010 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat120015 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat120116 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat120215 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat120217 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat120813 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat120817 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat120819 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat121012 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat125435 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat125436 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat125440 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat125443 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat125444 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat125445 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat125449 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat125451 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat125509 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat125521 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat125528 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat125616 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat125618 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat125628 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat125631 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat125634 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat125636 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat125637 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat125713 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat125744 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat125919 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat130318 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat130319 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat130515 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat130519 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat130718 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat130814 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat130818 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat130819 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat131116 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat131118 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat131414 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat131710 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat131913 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat132011 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat132012 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat132013 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat132111 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat132117 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat132310 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat132311 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat132311 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat132312 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat132314 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat132314 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat132316 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat132317 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat132319 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat132319 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat132416 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat132516 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat135114 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat135119 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat135215 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat135516 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat140213 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat140214 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat140218 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat140310 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat140312 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat140417 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat142518 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat142614 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat142719 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat143314 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat174113 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat175312 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat175414 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat175415 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat175416 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat175417 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat175418 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat175419 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat175911 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat175914 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat175917 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat180113 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat180211 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat180213 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat180218 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat195217 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat195219 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat195310 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat195314 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat195316 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat195416 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat195613 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat195616 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat195714 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat195719 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat195813 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat195817 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat195912 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat211329 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat211426 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat211520 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat211521 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat211522 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat211523 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat211524 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat211525 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat211526 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat211527 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat211528 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat211529 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat212325 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat212526 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat213028 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat213128 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat213320 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat213321 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat213322 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat213328 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat215727 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat220220 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat220225 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat220229 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat220323 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat220722 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat220820 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat220828 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat225620 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat225921 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat225923 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat230022 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat230029 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat230521 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat230526 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat230720 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat230726 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat230821 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat230826 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat231122 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat231128 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat231825 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat231827 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat231924 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat232029 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat232128 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat232227 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat232320 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat232321 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat232321 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat232324 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat232325 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat232329 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat235122 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat235124 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat235220 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat235325 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat235529 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat240023 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat240123 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat240126 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat240426 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat240429 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat241127 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat242026 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat242329 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat242620 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat242723 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat242926 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat242927 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat243020 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat243021 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat243028 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat243124 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat243326 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat243329 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat275224 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat275225 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat275420 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat275421 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat275422 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat275423 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat275424 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat275425 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat275426 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat275427 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat275428 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat275429 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat275828 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat275829 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat275926 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat280026 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat280129 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat280228 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat280321 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat294727 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat295623 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat295728 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat295824 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat311431 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat311434 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat311438 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat311531 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat311532 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat311533 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat311534 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat311535 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat311537 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat311538 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat311539 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat312439 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat313034 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat313330 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat315833 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat320736 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat320832 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat320833 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat320835 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat320837 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat320838 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat321434 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat321435 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat321436 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat321437 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat321438 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat325637 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat325839 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat325932 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat325935 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat330034 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat330432 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat330435 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat330437 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat330539 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat330735 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat330830 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat331538 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat331834 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat332031 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat332038 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat332133 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat332139 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat332232 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat332337 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat332339 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat332531 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat332533 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat335132 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat335135 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat335138 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat340131 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat340133 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat340138 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat340237 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat340334 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat340336 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat342030 PM.bat
    .

    Too big so I attached it I thought I guess I'm lost again trying to post the results....can I get direct help cause it's not working for me

    Is there a way that I can get the information to help
    Last edited by tashi; 2011-10-28 at 17:49. Reason: Merged 4 posts-as per forum FAQ, please don't add more posts. ;-)

  2. #2
    Emeritus
    Join Date
    Apr 2011
    Location
    USA
    Posts
    1,038

    Default

    Hi and Welcome!! My name is Jeff. I would be more than happy to take a look at your malware results logs and help you with solving any malware problems you might have. Logs can take a while to research, so please be patient and know that I am working hard to get you a clean and functional system back in your hands. I'd be grateful if you would note the following:
    • The fixes are specific to your problem and should only be used for the issues on this machine.
    • It's often worth reading through these instructions and printing them for ease of reference.
    • If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
    • Please reply to this thread. Do not start a new topic.

    IMPORTANT NOTE : Please do not delete, download or install anything unless instructed to do so.
    DO NOT use any TOOLS such as Combofix or HijackThis fixes without supervision. Doing so could make your system inoperable and could require a full reinstall of your Operating System and losing all your programs and data.


    Having said that....Let's get going!! :thumbup:
    ----------

    Download GMER Rootkit Scanner from here or here.
    • Extract the contents of the zipped file to desktop.
    • Right-click and Run as Administrator GMER.exe. If asked to allow gmer.sys driver to load, please consent .
    • If it gives you a warning about rootkit activity and asks if you want to run scan...click on NO.


      Click the image to enlarge it
    • In the right panel, you will see several boxes that have been checked. Uncheck the following ...
      • IAT/EAT
      • Drives/Partition other than Systemdrive (typically C:\)
      • Show All (don't miss this one)
    • Then click the Scan button & wait for it to finish.
    • Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post.
    • Save it where you can easily find it, such as your desktop, and attach it in your reply.


    **Caution**
    Rootkit scans often produce false positives. Do NOT take any action on any "<--- ROOKIT" entries
    .
    ----------

    I made one very big mistake before I read the post instructions and that's no to use the fix from someone else's thread or computer... what I did was run Combofix before I made my post.
    Well lets take a look at some things shall we...if you ran ComboFix, it should have made a log that would be found at C:\Combofix.txt Please post that into your next reply.

    If you could, please attach the DDS log that was too large following these steps...
    As you are typing now there is a section below labeled Attach Files. Press Manage Attachments > Choose File > Locate DDS.txt and select > Open > Upload
    -----------------

    In your next reply please post the log from GMER, ComboFix (if found) and attach the DDS.txt log

  3. #3
    Junior Member TionPri's Avatar
    Join Date
    Oct 2011
    Posts
    12

    Default OK Here you go

    OK not at my Partitioned Mac but I will be tonight then I will send you the files per instructions

  4. #4
    Junior Member TionPri's Avatar
    Join Date
    Oct 2011
    Posts
    12

    Default DSS and ComboFix

    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat340336 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat342030 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat342033 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat342034 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat342338 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat342634 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat342639 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat342839 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat342932 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat342935 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat343134 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat343331 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat343332 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat343334 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat343438 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat375231 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat375233 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat375338 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat375430 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat375431 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat375432 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat375433 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat375434 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat375435 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat375436 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat375437 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat375438 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat375835 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat375935 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat380036 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat380231 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat380232 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat380235 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat380238 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat385138 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat395239 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat395338 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat395535 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat395633 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat395638 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat395730 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat395737 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat395832 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat395835 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat395837 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat395839 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat410947 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat410948 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat410949 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat411440 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat411441 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat411442 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat411443 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat411445 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat411446 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat411447 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat411448 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat411540 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat411541 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat411542 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat411543 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat411546 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat411547 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat411548 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat411549 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat412348 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat412445 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat412448 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat412449 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat413046 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat413047 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat413147 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat413148 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat413248 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat415643 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat415749 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat420243 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat420248 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat420842 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat420843 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat425649 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat425843 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat425941 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat425944 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat425945 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat430441 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat430448 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat430648 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat430741 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat430746 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat430749 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat431248 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat431249 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat431641 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat431841 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat431941 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat431944 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat431946 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat432043 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat432241 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat432244 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat432246 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat432247 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat432345 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat432349 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat432349 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat432444 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat435347 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat435947 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat440145 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat440148 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat440345 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat440349 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat442041 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat442047 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat442340 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat442541 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat442841 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat442942 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat443141 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat443448 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat475440 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat475649 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat480046 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat480142 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat494643 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat494941 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat494947 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat495145 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat495147 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat495642 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat495646 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat495648 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat495843 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat495846 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat510950 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat510951 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat510952 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat510953 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat510954 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat510955 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat510956 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat510957 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat511355 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat511450 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat511451 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat511452 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat511455 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat511456 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat511457 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat511458 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat511459 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat511550 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat511551 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat511552 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat511553 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat511554 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat511555 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat511556 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat511557 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat512350 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat512355 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat512356 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat512357 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat512358 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat512453 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat512454 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat512455 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat512458 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat512955 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat512956 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat512957 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat512958 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat515552 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat515854 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat515950 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat515956 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat525655 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat525853 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat525954 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat530254 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat530356 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat530454 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat530457 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat530459 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat530558 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat530653 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat530752 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat530753 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat530759 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat531253 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat531255 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat531256 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat531452 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat531453 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat531556 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat531855 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat531858 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat531950 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat532051 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat532252 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat532255 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat532351 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat532351 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat532352 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat532353 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat532355 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat532357 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat532453 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat535150 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat535156 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat535157 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat535350 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat535450 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat535455 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat535456 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat540050 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat540051 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat540151 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat540155 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat540354 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat540358 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat540359 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat542452 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat542458 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat542550 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat542758 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat542850 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat542951 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat542952 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat542953 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat542955 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat542956 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat543152 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat543154 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat574059 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat575256 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat575752 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat575851 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat575852 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat575951 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat580056 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat580150 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat580157 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat580258 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat590458 AM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat594658 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat594659 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat594753 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat594853 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat594951 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat594955 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat594957 PM.bat
    StartupFolder: c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat595756 PM.bat
    mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
    mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
    mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
    .
    ============= SERVICES / DRIVERS ===============
    .
    R0 AppleHFS;AppleHFS;c:\windows\system32\drivers\AppleHFS.sys [2009-7-22 48000]
    R0 AppleMNT;AppleMNT;c:\windows\system32\drivers\AppleMNT.sys [2009-7-22 5120]
    R2 AppleOSSMgr;Apple OS Switch Manager;c:\windows\system32\AppleOSSMgr.exe [2009-7-22 136496]
    R2 AppleTimeSrv;Apple Time Service;c:\windows\system32\AppleTimeSrv.exe [2009-7-22 99632]
    R2 KeyAgent;KeyAgent;c:\windows\system32\drivers\KeyAgent.sys [2009-7-22 5760]
    R2 MacHALDriver;Mac HAL;c:\windows\system32\drivers\MacHALDriver.sys [2009-7-22 8576]
    R3 applebt;Apple Built-in Bluetooth;c:\windows\system32\drivers\applebt.sys [2011-9-22 9088]
    R3 AppleDisplayFlt;Apple Display Driver;c:\windows\system32\drivers\aaplmonf.sys [2011-9-22 9088]
    R3 CLEDX;Team H2O CLEDX service;c:\windows\system32\drivers\cledx.sys [2011-9-16 33792]
    R3 KeyMagic;USB Keyboard HID Filter;c:\windows\system32\drivers\KeyMagic.sys [2011-9-22 23552]
    R3 US122;US122 Driver;c:\windows\system32\drivers\US122.sys [2011-9-20 131968]
    R3 Us122WdmService;US122 Wdm Audio;c:\windows\system32\drivers\US122Wdm.sys [2011-9-20 39168]
    S2 mi-raysat_3dsmax2011_32;mental ray 3.8 Satellite for Autodesk 3ds Max 2011 32-bit 32-bit;c:\program files\autodesk\3ds max 2011\mentalimages\satellite\raysat_3dsmax2011_32server.exe [2010-3-10 86016]
    S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]
    S3 BthKicker;Apple Bluetooth Device Driver;c:\windows\system32\drivers\BthKicker.sys [2011-9-16 7424]
    S3 US122DL;US122 Firmware Downloader;c:\windows\system32\drivers\US122DL.sys [2011-9-20 18304]
    S3 YMIDUSBW;Yamaha USB-MIDI Driver (WDM);c:\windows\system32\drivers\ymidusbw.sys [2011-1-31 34280]
    .
    =============== Created Last 30 ================
    .
    2011-10-28 09:24:21 -------- d-sh--w- C:\$RECYCLE.BIN
    2011-10-28 09:24:19 -------- d-----w- c:\users\tionpri\appdata\local\temp
    2011-10-28 08:34:48 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat443448 AM.bat
    2011-10-28 08:34:38 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat343438 AM.bat
    2011-10-28 08:34:28 98816 ----a-w- c:\windows\sed.exe
    2011-10-28 08:34:28 518144 ----a-w- c:\windows\SWREG.exe
    2011-10-28 08:34:28 256000 ----a-w- c:\windows\PEV.exe
    2011-10-28 08:34:28 208896 ----a-w- c:\windows\MBR.exe
    2011-10-28 08:33:34 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat343334 AM.bat
    2011-10-28 08:33:32 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat343332 AM.bat
    2011-10-28 08:33:31 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat343331 AM.bat
    2011-10-28 08:33:29 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat243329 AM.bat
    2011-10-28 08:33:26 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat243326 AM.bat
    2011-10-28 08:33:14 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat143314 AM.bat
    2011-10-28 08:11:36 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat241127 AM.bat
    2011-10-28 08:04:29 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat240429 AM.bat
    2011-10-28 08:04:26 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat240426 AM.bat
    2011-10-28 08:04:17 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat140417 AM.bat
    2011-10-28 08:04:08 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat040408 AM.bat
    2011-10-28 08:03:59 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat540359 AM.bat
    2011-10-28 08:03:58 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat540358 AM.bat
    2011-10-28 08:03:54 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat540354 AM.bat
    2011-10-28 08:03:49 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat440349 AM.bat
    2011-10-28 08:03:45 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat440345 AM.bat
    2011-10-28 08:03:36 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat340336 AM.bat
    2011-10-28 08:03:34 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat340334 AM.bat
    2011-10-28 08:03:12 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat140312 AM.bat
    2011-10-28 08:03:10 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat140310 AM.bat
    2011-10-28 08:02:37 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat340237 AM.bat
    2011-10-28 08:02:18 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat140218 AM.bat
    2011-10-28 08:02:14 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat140214 AM.bat
    2011-10-28 08:02:13 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat140213 AM.bat
    2011-10-28 08:02:09 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat040209 AM.bat
    2011-10-28 08:02:06 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat040206 AM.bat
    2011-10-28 08:02:02 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat040202 AM.bat
    2011-10-28 08:01:55 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat540155 AM.bat
    2011-10-28 08:01:51 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat540151 AM.bat
    2011-10-28 08:01:48 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat440148 AM.bat
    2011-10-28 08:01:45 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat440145 AM.bat
    2011-10-28 08:01:38 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat340138 AM.bat
    2011-10-28 08:01:33 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat340133 AM.bat
    2011-10-28 08:01:31 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat340131 AM.bat
    2011-10-28 08:01:26 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat240126 AM.bat
    2011-10-28 08:01:23 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat240123 AM.bat
    2011-10-28 08:01:02 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat040102 AM.bat
    2011-10-28 08:00:51 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat540051 AM.bat
    2011-10-28 08:00:50 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat540050 AM.bat
    2011-10-28 08:00:23 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat240023 AM.bat
    2011-10-28 07:59:47 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat435947 AM.bat
    2011-10-28 07:55:29 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat235529 AM.bat
    2011-10-28 07:55:16 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat135516 AM.bat
    2011-10-28 07:55:03 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat035503 AM.bat
    2011-10-28 07:55:00 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat035500 AM.bat
    2011-10-28 07:54:56 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat535456 AM.bat
    2011-10-28 07:54:55 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat535455 AM.bat
    2011-10-28 07:54:50 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat535450 AM.bat
    2011-10-28 07:53:50 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat535350 AM.bat
    2011-10-28 07:53:47 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat435347 AM.bat
    2011-10-28 07:53:25 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat235325 AM.bat
    2011-10-28 07:52:20 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat235220 AM.bat
    2011-10-28 07:52:15 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat135215 AM.bat
    2011-10-28 07:52:00 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat035200 AM.bat
    2011-10-28 07:51:57 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat535157 AM.bat
    2011-10-28 07:51:56 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat535156 AM.bat
    2011-10-28 07:51:50 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat535150 AM.bat
    2011-10-28 07:51:38 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat335138 AM.bat
    2011-10-28 07:51:35 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat335135 AM.bat
    2011-10-28 07:51:32 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat335132 AM.bat
    2011-10-28 07:51:24 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat235124 AM.bat
    2011-10-28 07:51:22 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat235122 AM.bat
    2011-10-28 07:51:19 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat135119 AM.bat
    2011-10-28 07:51:14 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat135114 AM.bat
    2011-10-28 07:25:33 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat332533 AM.bat
    2011-10-28 07:25:31 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat332531 AM.bat
    2011-10-28 07:25:16 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat132516 AM.bat
    2011-10-28 07:24:53 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat532453 AM.bat
    2011-10-28 07:24:44 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat432444 AM.bat
    2011-10-28 07:24:05 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat032405 AM.bat
    2011-10-28 07:24:00 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat032400 AM.bat
    2011-10-28 07:22:55 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat532255 AM.bat
    2011-10-28 07:22:52 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat532252 AM.bat
    2011-10-28 07:22:47 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat432247 AM.bat
    2011-10-28 07:22:44 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat432244 AM.bat
    2011-10-28 07:22:27 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat232227 AM.bat
    2011-10-28 07:22:03 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat032203 AM.bat
    2011-10-28 07:21:39 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat332139 AM.bat
    2011-10-28 07:21:33 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat332133 AM.bat
    2011-10-28 07:21:11 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat132111 AM.bat
    2011-10-28 07:21:09 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat032109 AM.bat
    2011-10-28 07:21:04 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat032104 AM.bat
    2011-10-28 07:21:03 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat032103 AM.bat
    2011-10-28 07:20:51 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat532051 AM.bat
    2011-10-28 07:20:43 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat432043 AM.bat
    2011-10-28 07:20:38 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat332038 AM.bat
    2011-10-28 07:20:29 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat232029 AM.bat
    2011-10-28 07:20:13 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat132013 AM.bat
    2011-10-28 07:19:46 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat431946 AM.bat
    2011-10-28 07:19:24 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat231924 AM.bat
    2011-10-28 07:19:13 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat131913 AM.bat
    2011-10-28 07:17:10 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat131710 AM.bat
    2011-10-28 07:16:41 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat431641 AM.bat
    2011-10-28 07:16:05 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat031605 AM.bat
    2011-10-28 07:15:56 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat531556 AM.bat
    2011-10-28 07:15:38 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat331538 AM.bat
    2011-10-28 07:14:52 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat531452 AM.bat
    2011-10-28 07:12:53 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat531253 AM.bat
    2011-10-28 07:08:30 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat330830 AM.bat
    2011-10-28 07:08:26 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat230826 AM.bat
    2011-10-28 07:08:21 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat230821 AM.bat
    2011-10-28 07:08:19 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat130819 AM.bat
    2011-10-28 07:08:18 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat130818 AM.bat
    2011-10-28 07:08:14 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat130814 AM.bat
    2011-10-28 07:08:07 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat030807 AM.bat
    2011-10-28 07:08:03 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat030803 AM.bat
    2011-10-28 07:08:02 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat030802 AM.bat
    2011-10-28 07:08:01 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat030801 AM.bat
    2011-10-28 07:07:59 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat530759 AM.bat
    2011-10-28 07:07:53 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat530753 AM.bat
    2011-10-28 07:07:52 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat530752 AM.bat
    2011-10-28 07:07:49 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat430749 AM.bat
    2011-10-28 07:07:46 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat430746 AM.bat
    2011-10-28 07:07:41 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat430741 AM.bat
    2011-10-28 07:07:35 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat330735 AM.bat
    2011-10-28 07:07:26 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat230726 AM.bat
    2011-10-28 07:07:20 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat230720 AM.bat
    2011-10-28 07:07:18 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat130718 AM.bat
    2011-10-28 07:06:53 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat530653 AM.bat
    2011-10-28 07:06:48 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat430648 AM.bat
    2011-10-28 07:05:58 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat530558 AM.bat
    2011-10-28 07:05:39 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat330539 AM.bat
    2011-10-28 07:05:26 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat230526 AM.bat
    2011-10-28 07:05:21 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat230521 AM.bat
    2011-10-28 07:05:19 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat130519 AM.bat
    2011-10-28 07:05:15 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat130515 AM.bat
    2011-10-28 07:05:08 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat030508 AM.bat
    2011-10-28 07:05:06 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat030506 AM.bat
    2011-10-28 07:04:59 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat530459 AM.bat
    2011-10-28 07:04:57 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat530457 AM.bat
    2011-10-28 07:04:54 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat530454 AM.bat
    2011-10-28 07:04:48 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat430448 AM.bat
    2011-10-28 07:04:41 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat430441 AM.bat
    2011-10-28 07:04:37 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat330437 AM.bat
    2011-10-28 07:04:35 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat330435 AM.bat
    2011-10-28 07:04:32 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat330432 AM.bat
    2011-10-28 07:04:06 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat030406 AM.bat
    2011-10-28 07:03:56 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat530356 AM.bat
    2011-10-28 07:03:19 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat130319 AM.bat
    2011-10-28 07:03:18 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat130318 AM.bat
    2011-10-28 07:03:01 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat030301 AM.bat
    2011-10-28 07:02:54 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat530254 AM.bat
    2011-10-28 07:00:34 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat330034 AM.bat
    2011-10-28 07:00:29 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat230029 AM.bat
    2011-10-28 07:00:22 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat230022 AM.bat
    2011-10-28 06:59:54 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat525954 AM.bat
    2011-10-28 06:59:45 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat425945 AM.bat
    2011-10-28 06:59:44 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat425944 AM.bat
    2011-10-28 06:59:41 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat425941 AM.bat
    2011-10-28 06:59:35 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat325935 AM.bat
    2011-10-28 06:59:32 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat325932 AM.bat
    2011-10-28 06:59:23 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat225923 AM.bat
    2011-10-28 06:59:21 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat225921 AM.bat
    2011-10-28 06:59:19 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat125919 AM.bat
    2011-10-28 06:58:53 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat525853 AM.bat
    2011-10-28 06:58:43 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat425843 AM.bat
    2011-10-28 06:58:39 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat325839 AM.bat
    2011-10-28 06:58:09 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat025809 AM.bat
    2011-10-28 06:58:07 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat025807 AM.bat
    2011-10-28 06:57:13 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat125713 AM.bat
    2011-10-28 06:57:00 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat025700 AM.bat
    2011-10-28 06:56:55 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat525655 AM.bat
    2011-10-28 06:56:49 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat425649 AM.bat
    2011-10-28 06:56:37 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat325637 AM.bat
    2011-10-28 06:56:20 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat225620 AM.bat
    2011-10-28 06:56:18 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat125618 AM.bat
    2011-10-28 06:56:16 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat125616 AM.bat
    2011-10-28 03:23:36 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat112336 PM.bat
    2011-10-28 03:23:24 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat112324 PM.bat
    2011-10-28 03:22:55 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat112255 PM.bat
    2011-10-28 03:22:44 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat112244 PM.bat
    2011-10-28 03:22:37 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat112237 PM.bat
    2011-10-28 03:22:30 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat112230 PM.bat
    2011-10-28 03:22:21 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat112221 PM.bat
    2011-10-28 03:22:00 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat112200 PM.bat
    2011-10-28 03:21:58 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat112158 PM.bat
    2011-10-28 03:21:56 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat112156 PM.bat
    2011-10-28 03:21:52 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat112152 PM.bat
    2011-10-28 03:21:13 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat112113 PM.bat
    2011-10-28 03:21:09 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat112109 PM.bat
    2011-10-28 03:20:55 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat112055 PM.bat
    2011-10-28 03:20:45 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat112045 PM.bat
    2011-10-28 03:20:39 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat112039 PM.bat
    2011-10-28 03:20:28 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat112028 PM.bat
    2011-10-28 03:20:01 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat112001 PM.bat
    2011-10-28 03:18:48 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat111848 PM.bat
    2011-10-28 03:18:46 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat111846 PM.bat
    2011-10-28 03:17:37 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat111737 PM.bat
    2011-10-28 03:17:24 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat111724 PM.bat
    2011-10-28 03:17:00 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat111700 PM.bat
    2011-10-28 02:56:42 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat105642 PM.bat
    2011-10-28 02:56:38 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat105638 PM.bat
    2011-10-28 02:56:30 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat105630 PM.bat
    2011-10-28 02:56:21 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat105621 PM.bat
    2011-10-28 02:55:56 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat105556 PM.bat
    20

  5. #5
    Junior Member TionPri's Avatar
    Join Date
    Oct 2011
    Posts
    12

    Default Last for DSS

    2011-10-28 02:54:50 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat105450 PM.bat
    2011-10-28 02:54:49 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat105449 PM.bat
    2011-10-28 02:54:48 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat105448 PM.bat
    2011-10-28 02:54:46 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat105446 PM.bat
    2011-10-28 02:54:37 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat105437 PM.bat
    2011-10-28 02:54:30 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat105430 PM.bat
    2011-10-28 02:54:17 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat105417 PM.bat
    2011-10-28 02:53:47 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat105347 PM.bat
    2011-10-28 02:53:28 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat105328 PM.bat
    2011-10-28 02:52:49 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat105249 PM.bat
    2011-10-28 02:52:28 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat105228 PM.bat
    2011-10-28 02:52:24 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat105224 PM.bat
    2011-10-28 02:47:19 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat104719 PM.bat
    2011-10-28 02:46:39 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat104639 PM.bat
    2011-10-28 02:46:34 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat104634 PM.bat
    2011-10-28 02:46:33 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat104633 PM.bat
    2011-10-28 02:46:31 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat104631 PM.bat
    2011-10-28 02:46:26 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat104626 PM.bat
    2011-10-28 02:46:16 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat104616 PM.bat
    2011-10-28 02:45:40 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat104540 PM.bat
    2011-10-28 02:45:16 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat104516 PM.bat
    2011-10-28 02:44:49 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat104448 PM.bat
    2011-10-28 02:44:47 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat104447 PM.bat
    2011-10-28 02:44:17 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat104417 PM.bat
    2011-10-28 02:44:12 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat104412 PM.bat
    2011-10-28 02:44:09 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat104409 PM.bat
    2011-10-28 02:43:36 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat104336 PM.bat
    2011-10-28 02:43:32 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat104332 PM.bat
    2011-10-28 01:59:12 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat195912 PM.bat
    2011-10-28 01:58:46 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat495846 PM.bat
    2011-10-28 01:58:43 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat495843 PM.bat
    2011-10-28 01:58:39 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat395839 PM.bat
    2011-10-28 01:58:37 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat395837 PM.bat
    2011-10-28 01:58:35 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat395835 PM.bat
    2011-10-28 01:58:32 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat395832 PM.bat
    2011-10-28 01:58:24 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat295824 PM.bat
    2011-10-28 01:58:17 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat195817 PM.bat
    2011-10-28 01:58:13 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat195813 PM.bat
    2011-10-28 01:58:00 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat095800 PM.bat
    2011-10-28 01:57:56 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat595756 PM.bat
    2011-10-28 01:57:37 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat395737 PM.bat
    2011-10-28 01:57:30 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat395730 PM.bat
    2011-10-28 01:57:28 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat295728 PM.bat
    2011-10-28 01:57:19 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat195719 PM.bat
    2011-10-28 01:57:14 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat195714 PM.bat
    2011-10-28 01:56:48 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat495648 PM.bat
    2011-10-28 01:56:46 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat495646 PM.bat
    2011-10-28 01:56:42 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat495642 PM.bat
    2011-10-28 01:56:38 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat395638 PM.bat
    2011-10-28 01:56:33 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat395633 PM.bat
    2011-10-28 01:56:23 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat295623 PM.bat
    2011-10-28 01:56:16 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat195616 PM.bat
    2011-10-28 01:56:13 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat195613 PM.bat
    2011-10-28 01:56:09 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat095609 PM.bat
    2011-10-28 01:55:35 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat395535 PM.bat
    2011-10-28 01:55:00 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat095500 PM.bat
    2011-10-28 01:54:16 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat195416 PM.bat
    2011-10-28 01:53:38 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat395338 PM.bat
    2011-10-28 01:53:16 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat195316 PM.bat
    2011-10-28 01:53:14 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat195314 PM.bat
    2011-10-28 01:53:10 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat195310 PM.bat
    2011-10-28 01:52:39 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat395239 PM.bat
    2011-10-28 01:52:19 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat195219 PM.bat
    2011-10-28 01:52:17 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat195217 PM.bat
    2011-10-28 01:49:57 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat594957 PM.bat
    2011-10-28 01:49:55 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat594955 PM.bat
    2011-10-28 01:49:51 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat594951 PM.bat
    2011-10-28 01:49:47 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat494947 PM.bat
    2011-10-28 01:49:41 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat494941 PM.bat
    2011-10-28 01:49:00 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat094900 PM.bat
    2011-10-28 01:48:53 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat594853 PM.bat
    2011-10-28 01:47:53 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat594753 PM.bat
    2011-10-28 01:47:27 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat294727 PM.bat
    2011-10-28 01:46:59 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat594659 PM.bat
    2011-10-28 01:46:58 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat594658 PM.bat
    2011-10-28 01:46:43 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat494643 PM.bat
    2011-10-28 00:03:21 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat280321 PM.bat
    2011-10-28 00:02:58 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat580258 PM.bat
    2011-10-28 00:02:38 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat380238 PM.bat
    2011-10-28 00:02:35 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat380235 PM.bat
    2011-10-28 00:02:32 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat380232 PM.bat
    2011-10-28 00:02:31 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat380231 PM.bat
    2011-10-28 00:02:28 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat280228 PM.bat
    2011-10-28 00:02:18 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat180218 PM.bat
    2011-10-28 00:02:13 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat180213 PM.bat
    2011-10-28 00:02:11 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat180211 PM.bat
    2011-10-28 00:02:08 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat080208 PM.bat
    2011-10-28 00:02:04 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat080204 PM.bat
    2011-10-28 00:02:00 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat080200 PM.bat
    2011-10-28 00:01:57 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat580157 PM.bat
    2011-10-28 00:01:50 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat580150 PM.bat
    2011-10-28 00:01:42 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat480142 PM.bat
    2011-10-28 00:01:29 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat280129 PM.bat
    2011-10-28 00:01:13 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat180113 PM.bat
    2011-10-28 00:01:05 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat080105 PM.bat
    2011-10-28 00:00:56 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat580056 PM.bat
    2011-10-28 00:00:46 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat480046 PM.bat
    2011-10-28 00:00:36 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat380036 PM.bat
    2011-10-28 00:00:26 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat280026 PM.bat
    2011-10-27 23:59:51 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat575951 PM.bat
    2011-10-27 23:59:35 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat375935 PM.bat
    2011-10-27 23:59:26 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat275926 PM.bat
    2011-10-27 23:59:17 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat175917 PM.bat
    2011-10-27 23:59:14 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat175914 PM.bat
    2011-10-27 23:59:11 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat175911 PM.bat
    2011-10-27 23:59:04 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat075904 PM.bat
    2011-10-27 23:59:00 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat075900 PM.bat
    2011-10-27 23:58:52 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat575852 PM.bat
    2011-10-27 23:58:51 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat575851 PM.bat
    2011-10-27 23:58:35 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat375835 PM.bat
    2011-10-27 23:58:29 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat275829 PM.bat
    2011-10-27 23:58:28 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat275828 PM.bat
    2011-10-27 23:58:05 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat075805 PM.bat
    2011-10-27 23:57:52 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat575752 PM.bat
    2011-10-27 23:56:49 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat475649 PM.bat
    2011-10-27 23:54:40 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat475440 PM.bat
    2011-10-27 23:53:38 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat375338 PM.bat
    2011-10-27 23:53:12 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat175312 PM.bat
    2011-10-27 23:52:56 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat575256 PM.bat
    2011-10-27 23:52:33 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat375233 PM.bat
    2011-10-27 23:52:31 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat375231 PM.bat
    2011-10-27 23:52:25 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat275225 PM.bat
    2011-10-27 23:52:24 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat275224 PM.bat
    2011-10-27 23:52:02 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat075202 PM.bat
    2011-10-27 20:35:55 -------- d-----w- c:\windows\pss
    2011-10-27 20:31:54 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat543154 PM.bat
    2011-10-27 20:31:52 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat543152 PM.bat
    2011-10-27 20:31:41 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat443141 PM.bat
    2011-10-27 20:31:35 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat343134 PM.bat
    2011-10-27 20:31:24 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat243124 PM.bat
    2011-10-27 20:30:28 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat243028 PM.bat
    2011-10-27 20:30:21 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat243021 PM.bat
    2011-10-27 20:30:20 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat243020 PM.bat
    2011-10-27 20:30:04 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat043004 PM.bat
    2011-10-27 20:29:56 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat542956 PM.bat
    2011-10-27 20:29:55 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat542955 PM.bat
    2011-10-27 20:29:53 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat542953 PM.bat
    2011-10-27 20:29:52 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat542952 PM.bat
    2011-10-27 20:29:51 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat542951 PM.bat
    2011-10-27 20:29:42 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat442942 PM.bat
    2011-10-27 20:29:35 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat342935 PM.bat
    2011-10-27 20:29:32 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat342932 PM.bat
    2011-10-27 20:29:27 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat242927 PM.bat
    2011-10-27 20:29:26 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat242926 PM.bat
    2011-10-27 20:29:05 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat042905 PM.bat
    2011-10-27 20:28:50 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat542850 PM.bat
    2011-10-27 20:28:41 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat442841 PM.bat
    2011-10-27 20:28:39 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat342839 PM.bat
    2011-10-27 20:28:02 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat042802 PM.bat
    2011-10-27 20:27:58 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat542758 PM.bat
    2011-10-27 20:27:23 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat242723 PM.bat
    2011-10-27 20:27:19 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat142719 PM.bat
    2011-10-27 20:27:06 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat042706 PM.bat
    2011-10-27 20:27:01 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat042701 PM.bat
    2011-10-27 20:26:39 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat342639 PM.bat
    2011-10-27 20:26:34 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat342634 PM.bat
    2011-10-27 20:26:20 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat242620 PM.bat
    2011-10-27 20:26:14 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat142614 PM.bat
    2011-10-27 20:25:50 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat542550 PM.bat
    2011-10-27 20:25:41 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat442541 PM.bat
    2011-10-27 20:25:18 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat142518 PM.bat
    2011-10-27 20:25:09 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat042509 PM.bat
    2011-10-27 20:24:58 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat542458 PM.bat
    2011-10-27 20:24:52 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat542452 PM.bat
    2011-10-27 20:24:09 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat042409 PM.bat
    2011-10-27 20:24:05 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat042405 PM.bat
    2011-10-27 20:23:40 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat442340 PM.bat
    2011-10-27 20:23:38 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat342338 PM.bat
    2011-10-27 20:23:29 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat242329 PM.bat
    2011-10-27 20:23:00 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat042300 PM.bat
    2011-10-27 20:20:47 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat442047 PM.bat
    2011-10-27 20:20:41 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat442041 PM.bat
    2011-10-27 20:20:34 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat342034 PM.bat
    2011-10-27 20:20:33 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat342033 PM.bat
    2011-10-27 20:20:30 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat342030 PM.bat
    2011-10-27 20:20:26 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat242026 PM.bat
    2011-10-27 19:24:16 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat132416 PM.bat
    2011-10-27 19:24:04 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat032404 PM.bat
    2011-10-27 19:22:46 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat432246 PM.bat
    2011-10-27 19:22:41 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat432241 PM.bat
    2011-10-27 19:22:32 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat332232 PM.bat
    2011-10-27 19:21:28 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat232128 PM.bat
    2011-10-27 19:21:17 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat132117 PM.bat
    2011-10-27 19:20:31 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat332031 PM.bat
    2011-10-27 19:20:12 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat132012 PM.bat
    2011-10-27 19:20:11 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat132011 PM.bat
    2011-10-27 19:20:06 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat032006 PM.bat
    2011-10-27 19:19:50 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat531950 PM.bat
    2011-10-27 19:19:44 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat431944 PM.bat
    2011-10-27 19:19:41 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat431941 PM.bat
    2011-10-27 19:19:06 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat031906 PM.bat
    2011-10-27 19:19:05 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat031905 PM.bat
    2011-10-27 19:19:04 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat031904 PM.bat
    2011-10-27 19:19:02 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat031902 PM.bat
    2011-10-27 19:19:01 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat031901 PM.bat
    2011-10-27 19:18:58 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat531858 PM.bat
    2011-10-27 19:18:55 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat531855 PM.bat
    2011-10-27 19:18:41 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat431841 PM.bat
    2011-10-27 19:18:34 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat331834 PM.bat
    2011-10-27 19:18:27 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat231827 PM.bat
    2011-10-27 19:18:25 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat231825 PM.bat
    2011-10-27 19:14:53 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat531453 PM.bat
    2011-10-27 19:14:14 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat131414 PM.bat
    2011-10-27 19:14:06 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat031406 PM.bat
    2011-10-27 19:13:01 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat031301 PM.bat
    2011-10-27 19:12:56 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat531256 PM.bat
    2011-10-27 19:12:55 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat531255 PM.bat
    2011-10-27 19:12:49 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat431249 PM.bat
    2011-10-27 19:12:48 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat431248 PM.bat
    2011-10-27 19:11:28 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat231128 PM.bat
    2011-10-27 19:11:22 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat231122 PM.bat
    2011-10-27 19:11:18 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat131118 PM.bat
    2011-10-27 19:11:16 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat131116 PM.bat
    2011-10-27 19:11:07 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat031107 PM.bat
    2011-10-27 19:11:03 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat031103 PM.bat
    2011-10-27 18:09:02 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat020902 PM.bat
    2011-10-27 18:08:43 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat420843 PM.bat
    2011-10-27 18:08:42 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat420842 PM.bat
    2011-10-27 18:08:38 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat320838 PM.bat
    2011-10-27 18:08:37 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat320837 PM.bat
    2011-10-27 18:08:35 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat320835 PM.bat
    2011-10-27 18:08:33 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat320833 PM.bat
    2011-10-27 18:08:32 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat320832 PM.bat
    2011-10-27 18:08:28 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat220828 PM.bat
    2011-10-27 18:08:20 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat220820 PM.bat
    2011-10-27 18:08:19 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat120819 PM.bat
    2011-10-27 18:08:17 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat120817 PM.bat
    2011-10-27 18:08:13 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat120813 PM.bat
    2011-10-27 18:07:36 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat320736 PM.bat
    2011-10-27 18:07:22 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat220722 PM.bat
    2011-10-27 18:03:23 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat220323 PM.bat
    2011-10-27 18:03:06 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat020306 PM.bat
    2011-10-27 18:02:48 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat420248 PM.bat
    2011-10-27 18:02:43 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat420243 PM.bat
    2011-10-27 18:02:29 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat220229 PM.bat
    2011-10-27 18:02:25 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat220225 PM.bat
    2011-10-27 18:02:20 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat220220 PM.bat
    2011-10-27 18:02:17 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat120217 PM.bat
    2011-10-27 18:02:15 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat120215 PM.bat
    2011-10-27 18:02:09 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat020209 PM.bat
    2011-10-27 18:00:15 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat120015 PM.bat
    2011-10-27 18:00:10 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat120010 PM.bat
    2011-10-27 18:00:04 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat020004 PM.bat
    2011-10-27 18:00:00 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat020000 PM.bat
    2011-10-27 17:59:56 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat515956 PM.bat
    2011-10-27 17:59:50 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat515950 PM.bat
    2011-10-27 17:58:54 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat515854 PM.bat
    2011-10-27 17:58:33 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat315833 PM.bat
    2011-10-27 17:57:49 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat415749 PM.bat
    2011-10-27 17:57:27 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat215727 PM.bat
    2011-10-27 17:56:44 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat415643 PM.bat
    2011-10-27 17:56:19 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat115619 PM.bat
    2011-10-27 17:56:17 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat115617 PM.bat
    2011-10-27 17:56:15 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat115615 PM.bat
    2011-10-27 17:56:12 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat115612 PM.bat
    2011-10-27 17:55:53 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat515552 PM.bat
    2011-10-26 17:33:30 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat313330 PM.bat
    2011-10-26 17:33:28 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat213328 PM.bat
    2011-10-26 17:33:22 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat213322 PM.bat
    2011-10-26 17:33:21 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat213321 PM.bat
    2011-10-26 17:33:20 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat213320 PM.bat
    2011-10-26 17:33:19 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat113319 PM.bat
    2011-10-26 17:33:16 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat113316 PM.bat
    2011-10-26 17:33:12 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat113312 PM.bat
    2011-10-26 17:33:11 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat113311 PM.bat
    2011-10-26 17:33:06 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat013306 PM.bat
    2011-10-26 17:33:02 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat013302 PM.bat
    2011-10-26 17:32:48 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat413248 PM.bat
    2011-10-26 17:32:19 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat113219 PM.bat
    2011-10-26 17:32:08 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat013208 PM.bat
    2011-10-26 17:31:48 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat413148 PM.bat
    2011-10-26 17:31:47 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat413147 PM.bat
    2011-10-26 17:31:28 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat213128 PM.bat
    2011-10-26 17:31:15 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat113115 PM.bat
    2011-10-26 17:31:13 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat113113 PM.bat
    2011-10-26 17:31:04 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat013104 PM.bat
    2011-10-26 17:30:47 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat413047 PM.bat
    2011-10-26 17:30:46 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat413046 PM.bat
    2011-10-26 17:30:34 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat313034 PM.bat
    2011-10-26 17:30:28 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat213028 PM.bat
    2011-10-26 17:30:12 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat113012 PM.bat
    2011-10-26 17:30:11 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat113011 PM.bat
    2011-10-26 17:30:04 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat013004 PM.bat
    2011-10-26 17:30:01 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat013001 PM.bat
    2011-10-26 17:29:58 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat512958 PM.bat
    2011-10-26 17:29:57 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat512957 PM.bat
    2011-10-26 17:29:56 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat512956 PM.bat
    2011-10-26 17:29:55 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat512955 PM.bat
    2011-10-26 17:25:26 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat212526 PM.bat
    2011-10-26 17:25:09 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat012509 PM.bat
    2011-10-26 17:25:00 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat012500 PM.bat
    2011-10-26 17:24:58 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat512458 PM.bat
    2011-10-26 17:24:55 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat512455 PM.bat
    2011-10-26 17:24:54 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat512454 PM.bat
    2011-10-26 17:24:53 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat512453 PM.bat
    2011-10-26 17:24:49 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat412449 PM.bat
    2011-10-26 17:24:48 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat412448 PM.bat
    2011-10-26 17:24:45 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat412445 PM.bat
    2011-10-26 17:24:39 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat312439 PM.bat
    2011-10-26 17:24:00 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat012400 PM.bat
    2011-10-26 17:23:58 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat512358 PM.bat
    2011-10-26 17:23:57 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat512357 PM.bat
    2011-10-26 17:23:56 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat512356 PM.bat
    2011-10-26 17:23:55 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat512355 PM.bat
    2011-10-26 17:23:50 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat512350 PM.bat
    2011-10-26 17:23:48 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat412348 PM.bat
    2011-10-26 17:23:25 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat212325 PM.bat
    2011-10-26 17:21:11 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat112111 PM.bat
    2011-10-26 17:21:10 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat112110 PM.bat
    2011-10-26 17:16:11 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat111610 PM.bat
    2011-10-26 17:16:09 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat011609 PM.bat
    2011-10-26 17:16:07 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat011607 PM.bat
    2011-10-26 17:16:07 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat011606 PM.bat
    2011-10-26 17:16:06 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat011605 PM.bat
    2011-10-26 17:16:04 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat011604 PM.bat
    2011-10-26 17:16:03 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat011603 PM.bat
    2011-10-26 17:16:03 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat011602 PM.bat
    2011-10-26 17:16:01 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat011601 PM.bat
    2011-10-26 17:16:00 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat011600 PM.bat
    2011-10-26 17:14:59 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat511459 PM.bat
    2011-10-26 17:13:57 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat511355 PM.bat
    2011-10-26 17:13:49 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat211329 PM.bat
    2011-10-26 17:13:08 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat011308 PM.bat
    2011-10-26 16:57:44 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat125744 PM.bat
    2011-10-26 16:56:37 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat125637 PM.bat
    2011-10-26 16:56:36 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat125636 PM.bat
    2011-10-26 16:55:28 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat125528 PM.bat
    2011-10-26 16:55:21 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat125521 PM.bat
    2011-10-26 16:55:09 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat125509 PM.bat
    2011-10-26 16:54:51 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat125451 PM.bat
    2011-10-26 16:54:49 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat125449 PM.bat
    2011-10-26 16:54:45 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat125445 PM.bat
    2011-10-26 16:54:44 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat125444 PM.bat
    2011-10-26 16:54:43 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat125443 PM.bat
    2011-10-26 16:54:40 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat125440 PM.bat
    2011-10-26 16:54:36 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat125436 PM.bat
    2011-10-26 16:54:35 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat125435 PM.bat
    2011-10-26 06:39:41 -------- d-----w- c:\programdata\boost_interprocess
    2011-10-26 05:48:08 -------- d-----w- c:\program files\common files\Topaz Labs
    2011-10-26 03:27:28 -------- d-----w- c:\programdata\Digital Anarchy
    2011-10-26 01:44:41 -------- d-----w- c:\program files\BlitzMax
    2011-10-26 00:03:28 -------- d-----w- c:\program files\The Foundry
    2011-10-25 23:41:13 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat174113 PM.bat
    2011-10-25 23:41:08 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat074108 PM.bat
    2011-10-25 23:41:06 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat074106 PM.bat
    2011-10-25 23:41:02 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat074102 PM.bat
    2011-10-25 23:40:59 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat574059 PM.bat
    2011-10-25 17:28:32 -------- d-----w- c:\program files\LooksBuilder
    2011-10-25 17:17:41 -------- d-----w- c:\program files\Trapcode
    2011-10-25 17:09:57 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat510957 PM.bat
    2011-10-25 17:09:56 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat510956 PM.bat
    2011-10-25 17:09:55 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat510955 PM.bat
    2011-10-25 17:09:54 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat510954 PM.bat
    2011-10-25 17:09:53 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat510953 PM.bat
    2011-10-25 17:09:52 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat510952 PM.bat
    2011-10-25 17:09:51 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat510951 PM.bat
    2011-10-25 17:09:50 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat510950 PM.bat
    2011-10-25 17:09:49 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat410949 PM.bat
    2011-10-25 17:09:48 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat410948 PM.bat
    2011-10-25 17:09:47 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat410947 PM.bat
    2011-10-25 16:56:34 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat125634 PM.bat
    2011-10-25 16:56:31 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat125631 PM.bat
    2011-10-25 16:56:28 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat125628 PM.bat
    2011-10-25 06:58:25 90112 ----a-w- c:\windows\unvise32.exe
    2011-10-25 06:41:38 -------- d-----w- c:\program files\Tansee iPhone Transfer SMS
    2011-10-25 06:14:38 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat321438 AM.bat
    2011-10-25 06:14:37 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat321437 AM.bat
    2011-10-25 06:14:36 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat321436 AM.bat
    2011-10-25 06:14:35 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat321435 AM.bat
    2011-10-25 06:14:34 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat321434 AM.bat
    2011-10-25 06:01:16 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat120116 AM.bat
    2011-10-13 02:05:07 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat100507 PM.bat
    2011-10-13 02:05:06 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat100506 PM.bat
    2011-10-13 02:05:05 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat100505 PM.bat
    2011-10-13 02:04:02 -------- d-----w- C:\dell
    2011-10-13 02:01:59 -------- d-----w- c:\program files\IDT
    2011-10-13 02:01:55 -------- d-----w- C:\swsetup
    2011-10-13 01:51:47 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat495147 PM.bat
    2011-10-13 01:51:45 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat495145 PM.bat
    2011-10-09 16:10:12 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat121012 PM.bat
    2011-10-09 15:53:43 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat115343 AM.bat
    2011-10-09 15:34:42 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat113442 AM.bat
    2011-10-09 15:21:22 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat112122 AM.bat
    2011-10-08 15:03:43 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat110343 AM.bat
    2011-10-08 13:04:58 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat590458 AM.bat
    2011-10-08 12:51:38 42 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\kill.bat
    2011-10-08 12:51:38 145 --sh--w- c:\users\tionpri\appdata\roaming\microsoft\windows\start menu\programs\startup\mel.bat385138 AM.bat
    2011-10-07 12:57:39 696320 ----a-w- c:\program files\common files\installshield\professional\runtime\0701\intel32\iKe446A.tmp
    2011-10-07 12:57:30 696320 ----a-w- c:\program files\common files\installshield\professional\runtime\0701\intel32\iKe1E63.tmp
    2011-10-07 12:57:14 237568 ----a-w- c:\program files\common files\installshield\professional\runtime\0701\intel32\iscript.dll
    2011-10-07 12:57:14 155648 ----a-w- c:\program files\common files\installshield\professional\runtime\0701\intel32\iuser.dll
    2011-10-07 12:57:13 696320 ----a-w- c:\program files\common files\installshield\professional\runtime\0701\intel32\iKernel.dll
    2011-10-07 12:57:13 57344 ----a-w- c:\program files\common files\installshield\professional\runtime\0701\intel32\ctor.dll
    2011-10-07 12:57:13 5632 ----a-w- c:\program files\common files\installshield\professional\runtime\0701\intel32\DotNetInstaller.exe
    2011-10-07 12:57:13 282756 ----a-w- c:\program files\common files\installshield\professional\runtime\0701\intel32\setup.dll
    2011-10-07 12:57:13 163972 ----a-w- c:\program files\common files\installshield\professional\runtime\0701\intel32\iGdi.dll
    2011-10-07 12:56:45 -------- d-----w- c:\program files\NVIDIA Corporation
    2011-10-07 12:56:23 151552 ----a-w- c:\windows\system32\nvRegDev.dll
    2011-10-07 12:56:12 729088 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\iKernel.dll
    2011-10-07 12:56:12 69715 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\ctor.dll
    2011-10-07 12:56:12 5632 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\DotNetInstaller.exe
    2011-10-07 12:56:12 266240 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\iscript.dll
    2011-10-07 12:56:12 192512 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\iuser.dll
    2011-10-07 12:56:12 188548 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\iGdi.dll
    2011-10-07 12:56:11 311428 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\setup.dll
    2011-10-07 12:30:58 417792 ----a-r- c:\users\tionpri\appdata\roaming\microsoft\installer\{2023d8de-cd8e-4958-b831-9db3166d1b07}\NewShortcut5_FA22C8B36029437A9646719DBA760EAE.exe
    2011-10-07 12:30:58 417792 ----a-r- c:\users\tionpri\appdata\roaming\microsoft\installer\{2023d8de-cd8e-4958-b831-9db3166d1b07}\ARPPRODUCTICON.exe
    2011-10-07 12:30:52 -------- d-----w- c:\program files\Electric Rain
    2011-10-06 21:38:22 1409 ----a-w- c:\windows\QTFont.for
    2011-10-06 21:28:35 -------- d-----w- C:\Softimage
    2011-10-06 17:21:41 -------- d-----w- C:\MoTemp
    2011-10-06 13:57:09 -------- d-----w- c:\users\tionpri\Autodesk
    2011-10-06 13:45:58 -------- d-----w- c:\program files\common files\Softimage
    2011-10-06 13:44:43 57344 ------w- c:\windows\system32\XSIChooser.exe
    2011-10-06 07:54:49 -------- d-----w- c:\program files\PhotomatixPro3
    2011-10-03 12:39:12 -------- d-----w- c:\windows\system32\Adobe
    2011-10-01 15:33:20 -------- d---a-w- c:\users\tionpri\appdata\local\Diagnostics
    2011-10-01 15:11:17 -------- d---a-w- c:\users\tionpri\appdata\local\Apps
    2011-10-01 10:16:35 -------- d-----w- c:\program files\MSECACHE
    2011-09-28 23:15:10 -------- d-----w- c:\program files\Adobe Reader
    .
    ==================== Find3M ====================
    .
    2011-09-20 13:16:32 347648 ----a-w- c:\windows\system32\RTEEP32A.dll
    2011-09-20 13:16:28 290304 ----a-w- c:\windows\system32\RP3DAA32.dll
    2011-09-20 13:15:44 164864 ----a-w- c:\windows\system32\RTEED32A.dll
    2011-09-20 13:15:42 73216 ----a-w- c:\windows\system32\RTEEL32A.dll
    2011-09-20 13:15:40 290304 ----a-w- c:\windows\system32\RP3DHT32.dll
    2011-09-20 13:15:00 59392 ----a-w- c:\windows\system32\RTEEG32A.dll
    2011-09-16 16:44:25 319456 ----a-w- c:\windows\DIFxAPI.dll
    2011-09-16 16:13:13 0 ----a-w- c:\windows\ativpsrm.bin
    2007-07-17 17:13:45 61440 ----a-w- c:\program files\RGSGrowBounds.aex
    2003-11-03 21:07:06 499712 ----a-w- c:\program files\msvcp71.dll
    2003-11-03 21:07:06 348160 ----a-w- c:\program files\msvcr71.dll
    2003-05-30 13:22:06 344064 ----a-r- c:\program files\msvcr70.dll
    2002-01-05 07:40:18 487424 ----a-w- c:\program files\msvcp70.dll
    .
    ============= FINISH: 6:38:35.17 ===============

  6. #6
    Junior Member TionPri's Avatar
    Join Date
    Oct 2011
    Posts
    12

    Default Combo Fix

    The text that you have entered is too long (590223 characters). Please shorten it to 64000 characters long

    Needs another way to send you this. Maybe email?

  7. #7
    Junior Member TionPri's Avatar
    Join Date
    Oct 2011
    Posts
    12

    Default Here is my GMER

    MER 1.0.15.15641 - http://www.gmer.net
    Rootkit scan 2011-10-30 10:54:31
    Windows 6.1.7600 Harddisk2\DR2 -> \Device\Ide\IdeDeviceP3T0L0-4 WDC_WD10EADS-22M2B0 rev.01.00A01
    Running: gmer.exe; Driver: C:\Users\TionPri\AppData\Local\Temp\pxlirfow.sys


    ---- Kernel code sections - GMER 1.0.15 ----

    .text ntkrnlpa.exe!ZwSaveKeyEx + 13AD 82C85579 1 Byte [06]
    .text ntkrnlpa.exe!KiDispatchInterrupt + 5A2 82CA9F52 19 Bytes [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}
    .text C:\Windows\system32\DRIVERS\atikmdag.sys section is writeable [0x8E01F000, 0x241AC8, 0xE8000020]

    ---- Devices - GMER 1.0.15 ----

    Device \Driver\ACPI_HAL \Device\00000047 halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)

    AttachedDevice \Driver\volmgr \Device\HarddiskVolume1 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
    AttachedDevice \Driver\volmgr \Device\HarddiskVolume2 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
    AttachedDevice \Driver\volmgr \Device\HarddiskVolume3 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
    AttachedDevice \Driver\volmgr \Device\HarddiskVolume4 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
    AttachedDevice \Driver\volmgr \Device\HarddiskVolume5 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)

    Device \Driver\BTHUSB \Device\00000075 bthport.sys (Bluetooth Bus Driver/Microsoft Corporation)

    AttachedDevice \Driver\volmgr \Device\HarddiskVolume6 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
    AttachedDevice \Driver\volmgr \Device\HarddiskVolume7 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)

    Device \Driver\BTHUSB \Device\00000077 bthport.sys (Bluetooth Bus Driver/Microsoft Corporation)

    AttachedDevice \Driver\volmgr \Device\HarddiskVolume8 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
    AttachedDevice \Driver\volmgr \Device\HarddiskVolume9 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
    AttachedDevice \Driver\volmgr \Device\HarddiskVolume10 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
    AttachedDevice \FileSystem\fastfat \Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)

    ---- Threads - GMER 1.0.15 ----

    Thread System [4:1824] 98967F2E

    ---- Registry - GMER 1.0.15 ----

    Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\001f5be34c82
    Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\001f5be34c82 (not active ControlSet)
    Reg HKLM\SOFTWARE\Microsoft\Windows\Current Version\{8AC25C6A-D4B3-FF2F-2A61-C75CA1DB6116}\Install
    Reg HKLM\SOFTWARE\Microsoft\Windows\Current Version\{8AC25C6A-D4B3-FF2F-2A61-C75CA1DB6116}\Install\VxDs
    Reg HKLM\SOFTWARE\Microsoft\Windows\Current Version\{8AC25C6A-D4B3-FF2F-2A61-C75CA1DB6116}\Install\VxDs@CTE_32 Name 2455860:{301564B2-67A6-1A66-9C4E-A1FE91DE9752}
    Reg HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Install
    Reg HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Install\xga-1-{311B9F4C-B38E-F781-370B-FB15D348DF1C}
    Reg HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Install\xga-1-{311B9F4C-B38E-F781-370B-FB15D348DF1C}\Version 1.1
    Reg HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Install\xga-1-{311B9F4C-B38E-F781-370B-FB15D348DF1C}\Version 1.1@dat 806585365:{4A3594FF-AD15-723A-D857-D896BD733C5E}
    Reg HKLM\SOFTWARE\Microsoft\Windows Install VBX
    Reg HKLM\SOFTWARE\Microsoft\Windows Install VBX\Current
    Reg HKLM\SOFTWARE\Microsoft\Windows Install VBX\Current\Install
    Reg HKLM\SOFTWARE\Microsoft\Windows Install VBX\Current\Install\xga-1-{311B9F4C-B38E-F781-370B-FB15D348DF1C}
    Reg HKLM\SOFTWARE\Microsoft\Windows Install VBX\Current\Install\xga-1-{311B9F4C-B38E-F781-370B-FB15D348DF1C}\Version 3.x
    Reg HKLM\SOFTWARE\Microsoft\Windows Install VBX\Current\Install\xga-1-{311B9F4C-B38E-F781-370B-FB15D348DF1C}\Version 3.x@dat 1767914624:{75B6DF7A-5344-CA0F-6677-A2C7793BAE37}
    Reg HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@J:\After Effects Inputs\AE Files\AE plugins\Trapcode\instan HD\xb2 + keygen\Instant HD Advanced.exe 1
    Reg HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@J:\After Effects Inputs\AE Files\AE plugins\Trapcode\instan HD\xb2 + keygen\InstantHD After Effects.exe 1

    ---- EOF - GMER 1.0.15 ----

  8. #8
    Emeritus
    Join Date
    Apr 2011
    Location
    USA
    Posts
    1,038

    Default

    Hi TionPri,

    This seems to be a heavily infected machine. Please do the following...

    Please download Malwarebytes' Anti-Malware to your desktop.

    • Double-click mbam-setup.exe and follow the prompts to install the program.
    • At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
    • If an update is found, it will download and install the latest version.
    • Once the program has loaded, select Perform quick scan, then click Scan as shown below.


    • When the scan is complete, click OK, then Show Results to view the results.
    • Be sure that everything is checked, and click Remove Selected.
    • When completed, a log will open in Notepad. Please save it to a convenient location and post the results.



    The log can also be found here:
    C:\Documents and Settings\<User name>\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-date (time).txt
    ----------

    Now please run DDS once more and post both of the newly created logs into your next reply.
    ----------

    In your next reply please post the logs created by Malwarebytes and DDS.

  9. #9
    Junior Member TionPri's Avatar
    Join Date
    Oct 2011
    Posts
    12

    Default Malware Malbytes Attached

    I zipped this file up so you can access it better

  10. #10
    Junior Member TionPri's Avatar
    Join Date
    Oct 2011
    Posts
    12

    Default Malware Bytes log from today the other is yesterday's cleaning

    Malware Bytes log from today the other is yesterday's cleaning

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •