Page 1 of 2 12 LastLast
Results 1 to 10 of 13

Thread: 3 Hidden folders

  1. #1
    Junior Member
    Join Date
    Nov 2012
    Posts
    20

    Default 3 Hidden folders

    Here are my results:

    RootAlyzer Quick Scan Results

    Files in Windows folder
    ----------------------------------------
    145 files were tested.
    No hidden files detected.
    ========================================

    Files in System folder
    ----------------------------------------
    3 hidden out of 2804 files were detected.
    Hidden files: 5-18,null,ޝ
    C:\Windows\System32\5-18
    C:\Windows\System32\null
    C:\Windows\System32\ޝ
    ========================================

    Global run entries
    ----------------------------------------

    No hidden entries detected.
    ========================================

    Winlogon entries
    ----------------------------------------

    No hidden entries detected.
    ========================================

    Invisible processes (from handles)
    ----------------------------------------
    0 handle process IDs for 84 processes.
    No hidden processes detected.
    ========================================

    Invisible processes (from threads)
    ----------------------------------------
    84 processes tested.
    No hidden processes detected.
    ========================================

    Master Boot Records
    ----------------------------------------
    2 MBRs checked.
    No unknown MBRs detected.
    ========================================

    // info: Rootkit removal help file
    // copyright: (c) 2008-2012 Safer-Networking Ltd. All rights reserved.

    :: RootAlyzer Results
    File:"Hidden file","C:\Windows\System32\5-18"
    File:"Hidden file","C:\Windows\System32\null"
    File:"Hidden file","C:\Windows\System32\ޝ"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{0309A9A2-E90E-4B47-9CC0-603E94EF27B1}-32475_10150224466860721_573800720_12972837_6783194_n_Underpainting_1 [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{037A0AA9-2BE0-4D6D-9969-41345A4C67A1}-n733135516_4033371_719_Cartoonizer_2 [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{056686A3-D0F8-4CD4-B5E7-42BA8243F89C}-Isza Lagce4.jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{0619EF6C-15E4-4A43-813E-CA6CE428FE8D}-Tony [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{06D77211-C508-4A2F-9D0B-B841A7C47523}-peinture [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{07338F92-5905-4194-8B8F-E813722D8D38}-Shandi2 [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{07679C4A-239C-4EA1-A760-E671AC03BC0A}-hotStufff4.jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{0ABB9406-53CC-43A1-A7D6-715E96BF829B}-Melissa Cote.jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{0ACD7377-87F2-422A-8749-5F3CB0D55763}-Kathleen [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{0D3AE1F8-4164-4C6F-87BC-336487FF10A9}-29136_1204209083615_1780271549_377410_7428358_n_Grunge_4 [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{0D434CAB-EEAA-4BCF-A5F2-BEDD7F1B1EC0}-Rachel [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{0E498728-83BC-42CE-AD2F-19D0C9FFE5D4}-n575780000_2700127_9391_Underpainting_1 [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{10063775-9A52-495E-AD0E-BE4B121F1622}-Katryna [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{10C2480D-B007-45DA-8B95-AA7545089088}-ClaudiaL [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{11071066-D777-43F8-98B7-3DDD714075D9}-Lorena [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{112D6BAB-E53D-4875-A5F4-670F08424773}-Fanny [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{11B84664-58B5-472B-8513-F559982AC943}-HotStufff5.jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{1377DDDB-5C8A-4286-8273-81239811E2D7}-befunky_artwork [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{1683575B-643A-4F23-9C0C-D4BBF88D4511}-Jessica Cullen.jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{16864F17-D542-45C2-96D9-0CFCDED2C48E}-Charlie [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{17D4D076-A66B-4F3F-8119-3D608E2B602C}-30129_10150219570445193_530450192_12986068_6014639_n_Underpainting_1 [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{1896F291-E33B-46C4-8368-2C4EFFB5DC91}-SAM_1568 [1600x1200].JPG:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{1AAA26E7-619F-45DD-A66B-79B0876A4ABE}-befunky_artwork [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{1D3FAF0D-91DF-4C1A-A537-302EBD5D631F}-Julie Comics.jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{1D95A805-608E-4854-AB94-CB621383D07C}-befunky_artwork [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{1E2E7444-90CD-4136-8626-DA1E0AE10251}-Josianne [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{1F8309C0-9297-4182-BFC0-DAE2082BFCAA}-6300_120708975893_712255893_2868198_4842978_n [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{20D417CA-7B7D-4ADF-B667-BC80693D0086}-Tania [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{222BEF4B-348D-461B-AA92-6D621E8C33F3}-goldfinger [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{22478CA3-CD22-473F-803D-CFB0D3CFF7F6}-Rachy [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{22E9C6C1-F7CD-442C-B75F-17389D93CACF}-Aryane Dery.jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{250252A1-22AF-4811-9596-631C7546DACF}-befunky_artwork [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{26409094-18E6-4129-B634-CCC8C7D357F9}-Isza [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{270C25B2-4D74-4B85-83E0-BF816F4C3318}-Julien [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{28F54EA6-BFCF-40DD-AC29-186D769418C4}-Manon Guay Robillard 2 [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{29FF7087-2424-4ACE-B152-F95CF0F27DF7}-befunky_artwork [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{2C15DACA-1353-4ED9-8349-17CE4C249A86}-Carianne Legare.jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{2DEBA30A-3EB1-4A27-ADBF-608D47680A29}-JessicaC [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{2EDF316B-9FAF-4C70-B795-713A03E769BF}-Christine Benjamin.jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{2EFF1978-75E7-4E4A-B613-88C9B73E6BB9}-befunky_artwork [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{2F0600AA-63BF-4FA8-9EF5-F597FFFE21FF}-6290_125502975046_563605046_2918249_5598068_n [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{2F99C606-C4A9-4F71-A4CD-AB3AE4A91384}-26693_134812806546260_100000526255100_272930_7822449_n [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{2FD10C1D-5925-4513-B748-9616CE5CC1B6}-Amilouis Bujold.jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{30B65421-F1DE-4106-A424-93FABE29A694}-32079_10150207737490193_530450192_12617558_6549675_n [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{30FF6953-2D52-4836-9182-1E7291118437}-Dave McLellan.jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{31F2A73D-E669-40A2-8540-B205FA26B8D2}-29445_443979009808_656964808_5621240_7406873_n_Grunge_7 [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{3473E0D4-4AB7-43EE-8081-19E8D6F02F59}-Jimmy [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{373E265E-EE40-4145-928F-24CCED42D491}-Philippe Valancourt.jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{37B9789C-D145-43F7-9668-CEF5B59BDBD8}-befunky_artwork [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{3848679F-770F-42CB-A5E5-D735C048CC4B}-befunky_artwork [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{39E9E454-56ED-4237-9F41-4096D8BADA1C}-Jolyne [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{3A7DDD45-D16A-42F0-B0C4-A0FBFF098E82}-Valery [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{3A9543CD-7A7C-4D35-BA58-B43CC961A822}-Tascha [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{3D10015F-3D52-4F1A-AB02-CCA4B4FF7F15}-coeur [1600x1200] (2).jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{3EAA8304-7D2C-4D9B-987F-D24BA19D4E66}-Myriam [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{3F5D3029-D095-4CC1-9740-A8965B858B48}-14349_180654726287_570841287_3517452_3357405_n [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{40735087-F687-4BA0-9C3F-9EFA786A79BD}-Dom H.jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{41E6E6FC-D261-438A-8BDE-2085412B2886}-hotStuff [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{43C1D3F0-D8CD-4D6A-BAD9-881B82CE7087}-Mandy Lussier.jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{44532E00-99C2-4733-90D4-D36F0E42BFFA}-Andrea [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{46467985-1A73-49CD-A63E-B848955E4D2A}-Bio Hazard.jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{4BE902BC-BEB4-4C92-8C39-82F799BC8DA0}-Fanny Wonder.jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{4E3A88B8-B869-45CD-9E74-1A0682F034C3}-Peter Parker.jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{4FAABA9C-90B9-47A7-8A9C-9C87864680DA}-Shandi [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{4FDD166A-07A9-4850-BE15-1AA7563A6981}-Steph Rock N Roll [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{51A655E9-9333-48F6-A9CE-0ED0CDB7B535}-Hotty Vaness [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{5645206C-520F-4487-9F2E-5574651A4949}-Dominique [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{5A70F5A4-ADB1-412C-A4C5-2A7404150AAC}-17069_244625307638_522837638_3399072_7792450_n [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{5CE59D89-6183-4BA6-827A-0FCCA11A4521}-Rebeca Tarta.jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{5D60F854-BE58-4959-834E-310BC113CAC4}-Anne-Sophie [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{5E34288A-F7BD-4387-8210-518E8AEB1952}-Karine Vandal.jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{5E83F947-723A-4D38-8C4E-887465CA5710}-SAM_1565 [1600x1200].JPG:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{5F45E5B6-C515-4DA6-9DD2-E016A5BEE6BD}-StephanieP [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{616741CE-06C8-4690-B3BF-C0D37D397F63}-Marie [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{61A0B21D-8864-4C22-B12D-49F0918C5966}-Ashley [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{65FC0D80-7A2B-42D2-9834-E61D2B06BC34}-Isza Lagce4.jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{662BE7F1-12BF-47CE-B370-D71A05BE552E}-24861_359871080078_607705078_4204839_6101661_n [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{691A5D4B-AE70-4E5A-B004-F39322E68D87}-Carolann [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{69FCD9AA-5516-46CE-9F39-2AB06AAE01C0}-Vero [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{6D085BD1-A8F7-4FB3-88B4-08604B327A01}-Tania [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{6DD935D5-240A-47B2-BF4C-03E8C7A84ECD}-28126_429024810029_634965029_5936947_2221121_n [1600x1200]_Sunburst_4 [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{6F37D3F5-6F29-4C8B-A91F-91DAE2C894A1}-Isza4 [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{6F7873E7-B078-47CB-87F1-C37FA7C87F68}-coeur [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{700027AF-783E-47BE-BD5B-96926BB325AE}-Tony [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{70CFF3F5-994C-430C-85E6-490F6AC9A008}-Isza Lagce4.jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{734D36BB-FC9F-4469-A24E-97291B5091E2}-Johnny [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{7680C6F8-2C28-49C8-BA31-DE16A3CBE148}-KaryneG [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{778CD583-D930-4934-AB64-3D7192D9696A}-JessicaH [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{7966021F-797F-4F9C-B1DF-AD199F15EBBC}-noncerner.jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{797A3286-DA3E-46C5-A5B5-8DE3A6B80392}-Fanny Lapointe.jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{7A098D52-D963-4BC7-810F-8B85D3747C56}-29136_1204209083615_1780271549_377410_7428358_n_Grunge_4 [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{7A9BEAF3-A2D6-499C-99A1-CF012F43EB7B}-Rachel Doyer.jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{7C79725F-F48D-4B22-ACC5-68038F8F0696}-Andrew Searles.jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{8094F38E-DFEB-45E6-99A1-89149CC9FD0C}-Stacey Shine.jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{863D4663-6B8A-4453-985B-5BAC7534C9DB}-5187_93420152985_513412985_2138705_6008627_n [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{86631D5C-830E-4600-85CA-22007F2E41B3}-Julie Pontbriand.jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{868F0314-2DCD-441B-AFF8-91F38E4ED2FA}-Mamzell NonNon.jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{87801F8E-BE86-4EF3-9E04-F18B514EC822}-Anny [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{880832E3-6E6D-444A-9D36-945134604143}-5774_123969658716_706618716_2503273_2563082_n (1) [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{88710021-F653-4BFE-9744-CFF431D680BD}-Julie Charbonneau [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{8AD0251C-B994-408B-B6FA-8A3177BE22F4}-Roxanne Vie.jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{8DDE6710-2CE7-4044-8CA0-5B79F7463A67}-n1048299949_30145876_9788 [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{8ECB50A3-B754-41E8-9C53-3FFC87FF0213}-Emilie [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{9043C6C5-F765-4A94-B71E-908C59FDF419}-Meow [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{9154FE71-9347-4391-AA6F-51CED23A75ED}-25919_377240012081_727872081_4705044_4567766_n_Underpainting_1 [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{92032CF6-B012-49DD-A0DB-DF1941B9BC33}-Isza Lagace 3.jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{9580A29D-ABC9-4294-B183-88DB60361916}-MelissaG [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{9B2EA937-27BF-4890-82C2-9E4C790FA671}-34218_411454081051_513686051_4402636_4848296_n_Sunburst_2 [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{9D7D9AFB-84BB-4C3A-B5FC-D3F21E6E4143}-NicolaB [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{9D8BFC65-5B34-4B4A-BA19-DF9D1FA25110}-SAM_0669_Cartoonizer_2 [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{9EC141D0-52B5-49E0-BD76-3DF37590C030}-Jonathan Latour.jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{9F705F08-98A1-406D-BEAB-06579D66BEE0}-Roxanne Vie.jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{9FF33A2A-C544-47B5-9F84-17DADAA8F27E}-Anne-Sophie Rivest [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{A158B4FE-B233-4C53-B930-EA69DF059086}-5180_103336466287_570841287_2590868_6926508_n [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{A2C6E346-50A9-43D3-9E3F-027D67DEE4F7}-Tony [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{A48DEE78-7925-4CF7-B934-F91F26351C83}-19051_466196125720_573800720_10780011_3238167_n [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{A5FE0248-EB03-4942-8F70-1B47CFCEFB8D}-Tasha [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{AAA6DADD-7B05-469C-A24D-6F13AF21FA89}-oops [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{AB13F844-5873-48FA-89E9-0725FBBCC5DD}-Anais [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{AB956BAB-A181-4248-B3DF-63C5033F2BA5}-28976_10150177967560542_691895541_12263889_285050_n_Underpainting_1 [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{ABBF77F0-F0E8-4795-9B92-5276CEE55B70}-befunky_artwork [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{ACC84FB7-4BE4-45CC-8BA7-9262ED5BA96F}-Veronique [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{ACDE46DD-1706-494F-A74F-C4C39B05A2F0}-Julie_Comics [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{AD6CC754-0ADE-408E-89F3-AC3A39AC7C6B}-Andrea [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{AEC5C334-AA49-40A7-8521-893D81EAD6C5}-Yann Roux Poulette.jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{B1B91330-F24F-48C5-9B99-92E36503CF9D}-Jimmy Black.jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{B2D5D9B0-A38F-4F14-BF8C-C84F42F2C99B}-Jamila [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{B2DF8C89-E8B6-4E1D-BD93-DAD05331F063}-Christelle [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{B2E6CDE4-7707-41BC-BCCA-458A53E9DA64}-32079_10150207737490193_530450192_12617558_6549675_n_Sunburst_4 [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{B318F3BE-D2C1-42BF-9BF4-E1583558903F}-Cyn [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{B5853C9F-C045-400F-8AB3-1088C2E46752}-ClaudiaLa [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{B5B22391-02AB-439E-BA84-FA7A1F078FAD}-Kath [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{B8E0D50F-575D-4BA3-A55D-3D9DA3817619}-Roxanne L [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{BCEC21FF-1E88-4E06-AFDE-DD3293213149}-STA70662_Cartoonizer_2 [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{BFAABC61-4EC2-4D57-BA72-4EAEABB1D670}-Kasia [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{C3BC5B16-9609-4EA9-8E04-ACD3874DC660}-Clara Officiel.jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{C54CE8DC-A4CF-4469-BB57-0F88DB398B23}-Isza Lagce4.jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{C5EBFAA3-133B-44A5-9F60-9BD22A656746}-JessicaH [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{C85AF807-BBD7-41AF-9D73-BEC6B7FF15AA}-Myriam [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{C88762C9-23DE-4A6E-B7B9-A8C99BAA21E4}-6656_133491224808_656964808_3071578_7338191_n [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{C9142A9F-EB06-408A-A36A-FDB32F935F9B}-Isza Lagce4 - Copy.jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{CA39E00F-5A5E-4595-8BFD-F4FD2017BE97}-befunky_artwork [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{CA49DCDF-82E0-408C-8D9F-68A1A4E6611D}-FannyL [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{CBE0BCA9-D250-4E79-9914-F16FFD65F765}-27873_10150165035055367_721165366_12213627_161534_n [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{CFC589D5-0ABE-443C-9926-8B85CDE93D60}-HotStufff3.jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{D167994B-7D7A-47FE-B14B-A6EEA67D4DB8}-Isza4 [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{D175E45C-C48C-4B1C-8173-1D91CE22005A}-Tania Wilson.jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{D197487D-A200-4584-9F9A-44C50E8D5159}-15010_102753249769399_100001041735820_18809_2346521_n_Underpainting_1 [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{D24E7F0A-1C66-4CBA-B614-D9D7E93B07D9}-Catherine Therrien.jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{D79913D8-46F5-4930-B653-59F8521D1352}-Hotstuff2 [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{DA410A49-DCC6-4157-ACDD-8BB06567EE36}-Test [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{DAA5D1A9-1A26-4186-B015-5B83883ADE6D}-pitoune [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{DABF0581-515A-410E-BE37-13AFFB0B33D2}-Bio [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{DCCF3D53-882D-462D-B5D5-B6108CE16F04}-Joyce [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{DD6AE7F5-BC5F-4E0D-A7B8-14D20A71636A}-Test [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{DFD6D035-68A7-42A6-B994-66EF2EA6B16F}-Vero [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{E50F7448-DF89-4521-B554-FAFD39E77399}-5650_109693505046_563605046_2673195_4186981_n [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{E55AD825-FC3F-4874-ACD6-B0021384C6E2}-befunky_artwork [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{E5E6851F-5F37-4C2B-90E7-E32CDE1A58BD}-Vanessa Essiambre.jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{E6C75920-81B6-4D23-8A70-5733A365344C}-Cover [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{E98AEC95-4930-40F1-BFA8-B4E9814E8B17}-Myriam_Calendar [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{EA874586-5550-4E7C-ABDE-AD9E9DB44918}-9035_178982596130_583511130_4196164_1520356_n_Underpainting_1 [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{EBDAECAF-9005-4842-B143-9BC2B7D6A676}-Charlie [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{EBF183CE-5600-4B30-A747-0AE716B0055C}-Anne-Sophie Rivest.jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{ECF05B7C-82D2-4B83-B96D-AEDB3C6B5773}-Isza2 [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{EF226893-D5DD-4DDB-8B48-EF6644727FE9}-Joanie [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{F4204042-6E25-4170-865C-9A47CDB7F68C}-30995_10150199442325721_573800720_12263465_44015040000_n_Underpainting_1 [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{FA2DF512-994C-4EC2-AAA9-29AAC1FA9C66}-JulieC [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{FCF44703-B5D5-47FE-A539-7B15F1A4C416}-Tania Wilson.jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{FE6F821C-4782-4AD2-A76D-FA09D5CB22FD}-RachelG [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{FFB2D9D1-F7EC-483F-86E2-8862302D3CEE}-Jo [1600x1200].jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\R0M\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{FFCFE5FB-878C-4898-A0F3-F96B7BBFDD95}-Tony Dinero.jpg:VsoSummaryInformation:$DATA"
    File:"Unknown ADS","C:\Users\All Users\TEMP:0B4227B4:$DATA"
    File:"Unknown ADS","C:\Users\All Users\TEMP:8FF81EB0:$DATA"
    File:"Unknown ADS","C:\Users\All Users\TEMP:D1B5B4F1:$DATA"
    File:"No admin in ACL","C:\Users\All Users\TuneUp Software\TuneUp Utilities 2012\TTUSvc.tt"
    File:"Unknown ADS","C:\Users\All Users\Symantec\hpc:2704092260:$DATA"
    File:"No admin in ACL","C:\Users\All Users\Cisco Systems\Cisco Connect\Log\logfile.CiscoConnect_exe.txt"
    File:"No admin in ACL","C:\ProgramData\TuneUp Software\TuneUp Utilities 2012\TTUSvc.tt"
    File:"Unknown ADS","C:\ProgramData\Symantec\hpc:2704092260:$DATA"
    File:"No admin in ACL","C:\ProgramData\Cisco Systems\Cisco Connect\Log\logfile.CiscoConnect_exe.txt"
    RegyValue:"Zero char in key name","HKEY_LOCAL_MACHINE","\SOFTWARE\Microsoft\","Environment\0"
    // Attention: entries with a zero character will not be displayed correctly and may not work!

    http://forums.spybot.info/showthread...534#post433534
    Last edited by tashi; 2012-11-23 at 23:13. Reason: Added link to malware forum thread

  2. #2
    Senior Member
    Join Date
    Oct 2005
    Location
    Germany
    Posts
    5,263

    Default

    Hello,

    I would recommend to remove these three:
    C:\Windows\System32\5-18
    C:\Windows\System32\null
    C:\Windows\System32\ޝ

    The other items seem to be just pictures.

    Our Rootkit Scanner tool shows anything that uses certain rootkit technologies. But items with rootkit properties detected here are not necessarily malware. Sometimes, legit software uses rootkit technologies to hide registration data or other things it does not want the user to see in any case. So please keep in mind that the Rootkit Scanner only flags suspicious stuff, not identifying just bad stuff.

    Best regards
    Sandra
    Team Spybot

  3. #3
    Junior Member
    Join Date
    Nov 2012
    Posts
    20

    Default

    Hi i deleted several files in system32 pointing to those, but now i am getting this:


    Master Boot Records
    ----------------------------------------
    7 MBRs checked.
    Unkown MBRs: PhysicalDrive2,PhysicalDrive3,PhysicalDrive4,PhysicalDrive5
    PhysicalDrive2
    PhysicalDrive3
    PhysicalDrive4
    PhysicalDrive5

    Now what?

  4. #4
    Senior Member
    Join Date
    Oct 2005
    Location
    Germany
    Posts
    5,263

    Default

    Hello,

    That sounds like you did delete several other files, besides the ones that were found. And probably needed system files.
    Have you tried to boot your pc in safe mode?
    Do you have a system restore point?

    Best regards
    Sandra
    Team Spybot

  5. #5
    Member of Team Spybot PepiMK's Avatar
    Join Date
    Oct 2005
    Location
    Planet Earth
    Posts
    3,601

    Default

    Unknown Master Boot Records are not necessarily bad, MBR detection is new in RootAlyzer... do you remember which tools you used to add these additional harddisks (e.g. are you also a Linux user, or if just Windows, which Windows version was installed when you added those harddisks? In that case we can check whether we've got the MBR associated with that version on our list).
    Just remember, love is life, and hate is living death.
    Treat your life for what it's worth, and live for every breath
    (Black Sabbath: A National Acrobat)

  6. #6
    Junior Member
    Join Date
    Nov 2012
    Posts
    20

    Default

    Nope not using Linux, i just used regular Windows Vista, the weird part they showed up as unknown after i deleted those files in system32 null, 5-11 and the other invalid character one, there were several files with extention null, 5-11 and invalid characters, i sure hope i can get into safe mode, i just do not want to try until i get confirmation what i am dealing with...

    Btw i am still getting lag on facebook, lag to open any application, lag in youtube, system is slowing down, etc...

    Thanks,
    Last edited by oyehia; 2012-12-06 at 23:05.

  7. #7
    Junior Member
    Join Date
    Nov 2012
    Posts
    20

    Default

    Ran ComboFix cos i was getting frustrated and here is what came up:

    (((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

    [Edit] -Removed log.

    i am still lagging though, so we started on something, i hope... please help!

    Regards,
    Last edited by tashi; 2012-12-14 at 09:16. Reason: edit

  8. #8
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    30,955

    Default

    Hello oyehia,

    FYI.

    Please DO NOT RUN ComboFix without being asked also such logs are to be posted only in the Malware Removal Forum if requested by a volunteer analyst.

    What is the situation with the computer at this time?

    Best regards.
    Microsoft MVP Reconnect 2018-
    Windows Insider MVP 2016-2018
    Microsoft Consumer Security MVP 2006-2016

  9. #9
    Junior Member
    Join Date
    Nov 2012
    Posts
    20

    Default

    Still lagging, a lot of times i get application not responding also, i am also lagging as i type this, any suggestions?

    Thanks,

  10. #10
    Junior Member
    Join Date
    Nov 2012
    Posts
    20

    Default

    I think you guys forgot me here, perhaps i should seek help elsewhere...

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •