Right on the money!!! Good job and thanks sooooo much!!!

You guys are great!

I have tried every one....none work.....???

ok, right now it is 1:44 P.M.  CST and it synced it with EST and it says it is 2:44 P.M.

It still is not working. Is there anything else you can think of?

I have my time zone set to Central time (US and Canada), but for some reason it is not working correctly. It says it is syncing correctly, but it keeps showing and hour behind. When I do it manually of course it works, but then when I put something in my outlook calendar connected to my exchange server it puts everything on my phone an hour ahead.

Please help me fix this problem

I have a big problem. I only have my background as my desktop. I can open applications and things from my start menu and I have the task bar available, but all my icons on my desktop are gone.
I try adding things to the desktop and I cannot see them on there. If I try to add a new thing to my desktop that was already there, it asks if I want to replace the existing one as if it is there somewhere.

I cannot drag anything either because it comes up with a circle and a / through it. So I am not sure what is wrong...it is almost like an image is covering the whole desktop. and everything I want is behind that image.

Please let me know what I can do.

Does anyone know how to block users from downloading anything on IE and firefox??
I am using netnanny for web filtering, but it does not block downloading stuff. Just wondering if there is a way to do it within IE and Firefox.

Thanks

I am sorry, but it still did not work.

[File String Scan - Non-Microsoft Only]
UPX! , UPX0 ,  -> %SystemRoot%\s17g.exe ->  [Ver =  | Size = 109056 bytes | Modified Date = 4/11/2007 1:13:00 AM | Attr =    ]
UPX! , UPX0 ,  -> %SystemRoot%\s2o8.exe ->  [Ver =  | Size = 109056 bytes | Modified Date = 4/11/2007 1:13:34 AM | Attr =    ]
UPX! , UPX0 ,  -> %System32%\audxlib.dll ->  [Ver =  | Size = 200192 bytes | Modified Date = 2/12/2007 2:21:22 PM | Attr =    ]
PEC2 ,  -> %System32%\dfrg.msc ->  [Ver =  | Size = 41397 bytes | Modified Date = 8/10/2004 6:00:00 AM | Attr =    ]
UPX! , UPX0 ,  -> %System32%\ffdshow.ax ->  [Ver = 1.0.3.911 | Size = 749568 bytes | Modified Date = 2/12/2007 2:21:22 PM | Attr =    ]
UPX! , UPX0 ,  -> %System32%\ff_kernelDeint.dll ->  [Ver =  | Size = 39424 bytes | Modified Date = 2/12/2007 2:21:22 PM | Attr =    ]
UPX! , UPX0 ,  -> %System32%\ff_liba52.dll ->  [Ver =  | Size = 19456 bytes | Modified Date = 2/12/2007 2:21:22 PM | Attr =    ]
UPX! , UPX0 ,  -> %System32%\ff_libdts.dll ->  [Ver =  | Size = 96256 bytes | Modified Date = 2/12/2007 2:21:22 PM | Attr =    ]
UPX! , UPX0 ,  -> %System32%\ff_libmad.dll ->  [Ver =  | Size = 54784 bytes | Modified Date = 2/12/2007 2:21:22 PM | Attr =    ]
UPX! , UPX0 ,  -> %System32%\ff_realaac.dll ->  [Ver =  | Size = 64000 bytes | Modified Date = 2/12/2007 2:21:22 PM | Attr =    ]
UPX! , UPX0 ,  -> %System32%\ff_theora.dll ->  [Ver =  | Size = 59904 bytes | Modified Date = 2/12/2007 2:21:22 PM | Attr =    ]
UPX! , UPX0 ,  -> %System32%\ff_wmv9.dll ->  [Ver =  | Size = 15360 bytes | Modified Date = 2/12/2007 2:21:22 PM | Attr =    ]
UPX! , UPX0 ,  -> %System32%\ff_x264.dll ->  [Ver =  | Size = 125952 bytes | Modified Date = 2/12/2007 2:21:22 PM | Attr =    ]
UPX! , UPX0 ,  -> %System32%\iviaudio.ax -> InterVideo Inc. [Ver = 7.0.27.191 | Size = 462848 bytes | Modified Date = 4/17/2006 8:37:08 AM | Attr =    ]
UPX! , UPX0 ,  -> %System32%\Ivinav.ax -> InterVideo Inc. [Ver = 7.0.27.172 | Size = 601600 bytes | Modified Date = 2/14/2006 4:12:54 PM | Attr =    ]
UPX! , UPX0 ,  -> %System32%\IVIVIDEO.ax ->  InterVideo Inc. [Ver = 7.0.27.191 | Size = 1089536 bytes | Modified Date = 4/17/2006 8:37:06 AM | Attr =    ]
UPX! , UPX0 ,  -> %System32%\libavcodec.dll ->  [Ver =  | Size = 1196544 bytes | Modified Date = 2/12/2007 2:21:22 PM | Attr =    ]
UPX! , UPX0 ,  -> %System32%\libmpeg2_ff.dll ->  [Ver =  | Size = 36352 bytes | Modified Date = 2/12/2007 2:21:22 PM | Attr =    ]
UPX! , UPX0 ,  -> %System32%\libmplayer.dll ->  [Ver =  | Size = 123904 bytes | Modified Date = 2/12/2007 2:21:22 PM | Attr =    ]
UPX! , UPX0 ,  -> %System32%\MODSource.ax ->  [Ver =  | Size = 70144 bytes | Modified Date = 12/10/2004 6:53:58 AM | Attr =    ]
UPX! , UPX0 ,  -> %System32%\MP3Source.ax ->  [Ver =  | Size = 61952 bytes | Modified Date = 12/10/2004 6:51:50 AM | Attr =    ]
Thawte Consulting ,  -> %System32%\Px.dll -> Sonic Solutions [Ver = 3.0.88.500 | Size = 452264 bytes | Modified Date = 12/14/2006 10:42:26 PM | Attr =    ]
Thawte Consulting ,  -> %System32%\pxcpya64.exe -> Sonic Solutions [Ver = 1.00.35a | Size = 63144 bytes | Modified Date = 12/14/2006 10:42:30 PM | Attr =    ]
Thawte Consulting ,  -> %System32%\pxcpyi64.exe -> Sonic Solutions [Ver = 1.00.35a | Size = 114856 bytes | Modified Date = 12/14/2006 10:42:30 PM | Attr =    ]
Thawte Consulting ,  -> %System32%\pxdrv.dll -> Sonic Solutions [Ver = 1.01.88a | Size = 472744 bytes | Modified Date = 12/14/2006 10:42:26 PM | Attr =    ]
Thawte Consulting ,  -> %System32%\pxinsa64.exe -> Sonic Solutions [Ver = 3.00.33a | Size = 62632 bytes | Modified Date = 12/14/2006 10:42:28 PM | Attr =    ]
Thawte Consulting ,  -> %System32%\pxinsi64.exe -> Sonic Solutions [Ver = 3.00.33a | Size = 115880 bytes | Modified Date = 12/14/2006 10:42:30 PM | Attr =    ]
Thawte Consulting ,  -> %System32%\PxMas.dll -> Sonic Solutions [Ver = 3.0.88.500 | Size = 181928 bytes | Modified Date = 12/14/2006 10:42:28 PM | Attr =    ]
Thawte Consulting ,  -> %System32%\PxSFS.DLL -> Sonic Solutions [Ver = 3.0.88.500 | Size = 1279656 bytes | Modified Date = 12/14/2006 10:42:28 PM | Attr =    ]
Thawte Consulting ,  -> %System32%\PxWave.dll -> Sonic Solutions [Ver = 3.0.88.500 | Size = 345768 bytes | Modified Date = 12/14/2006 10:42:28 PM | Attr =    ]
UPX! , UPX0 ,  -> %System32%\qtalt.ax -> Cyberlink [Ver = 1.00.1016 | Size = 28672 bytes | Modified Date = 4/30/2004 9:46:24 PM | Attr =    ]
UPX! , UPX0 ,  -> %System32%\rmalt.ax -> Gabest [Ver = 1, 0, 0, 4 | Size = 116224 bytes | Modified Date = 3/26/2004 4:32:36 PM | Attr =    ]
UPX! , UPX0 ,  -> %System32%\TomsMoComp_ff.dll ->  [Ver =  | Size = 38400 bytes | Modified Date = 2/12/2007 2:21:22 PM | Attr =    ]
Thawte Consulting ,  -> %System32%\VXBLOCK.dll -> Sonic Solutions [Ver = 1.00.69a | Size = 38568 bytes | Modified Date = 12/14/2006 10:42:28 PM | Attr =    ]
winsync ,  -> %System32%\wbdbase.deu ->  [Ver =  | Size = 1309184 bytes | Modified Date = 8/10/2004 6:00:00 AM | Attr =    ]
Thawte Consulting ,  -> %System32%\XceedFtp.dll -> Xceed Software Inc        (450) 442-2626        support@xceedsoft.com        www.xceedsoft.com [Ver = 1.0.42.0 | Size = 236576 bytes | Modified Date = 11/7/2003 11:25:22 AM | Attr =    ]
WSUD , UPX0 ,  -> %System32%\dllcache\hwxjpn.dll ->  [Ver =  | Size = 13463552 bytes | Modified Date = 8/10/2004 6:00:00 AM | Attr =    ]

< End of report >

[Files/Folders - Modified Within 30 days]
boot.ini -> %SystemDrive%\boot.ini ->  [Ver =  | Size = 209 bytes | Modified Date = 6/27/2007 10:20:06 PM | Attr =  HS]
c5dbbec5b7f99a71ee23e1b7f681 -> %SystemDrive%\c5dbbec5b7f99a71ee23e1b7f681 ->  [Folder | Modified Date = 6/27/2007 10:46:22 PM | Attr =    ]
Config.Msi -> %SystemDrive%\Config.Msi ->  [Folder | Modified Date = 7/10/2007 8:10:08 PM | Attr =  H ]
ConverterOutput -> %SystemDrive%\ConverterOutput ->  [Folder | Modified Date = 6/24/2007 6:51:50 PM | Attr =    ]
install.dat -> %SystemDrive%\install.dat ->  [Ver =  | Size = 164 bytes | Modified Date = 7/20/2007 6:53:26 PM | Attr =    ]
Program Files -> %ProgramFiles% ->  [Folder | Modified Date = 7/20/2007 6:56:38 PM | Attr = R  ]
RECYCLER -> %SystemDrive%\RECYCLER ->  [Folder | Modified Date = 7/13/2007 5:29:32 PM | Attr =  HS]
System Volume Information -> %SystemDrive%\System Volume Information ->  [Folder | Modified Date = 6/27/2007 10:36:48 PM | Attr =  HS]
TEMP -> %SystemDrive%\TEMP ->  [Folder | Modified Date = 6/22/2007 11:16:44 PM | Attr =    ]
tmp -> %SystemDrive%\tmp ->  [Folder | Modified Date = 7/2/2007 5:32:28 PM | Attr =    ]
WINDOWS -> %SystemRoot% ->  [Folder | Modified Date = 7/20/2007 8:18:44 PM | Attr =    ]
$hf_mig$ -> %SystemRoot%\$hf_mig$ ->  [Folder | Modified Date = 6/26/2007 3:05:50 AM | Attr =  H ]
$MSI31Uninstall_KB893803v2$ -> %SystemRoot%\$MSI31Uninstall_KB893803v2$ ->  [Folder | Modified Date = 6/21/2007 12:53:10 PM | Attr =  H ]
$NtUninstallKB835221WXP$ -> %SystemRoot%\$NtUninstallKB835221WXP$ ->  [Folder | Modified Date = 6/27/2007 10:46:24 PM | Attr =  H ]
AppPatch -> %SystemRoot%\AppPatch ->  [Folder | Modified Date = 6/27/2007 3:07:34 PM | Attr =    ]
bootstat.dat -> %SystemRoot%\bootstat.dat ->  [Ver =  | Size = 2048 bytes | Modified Date = 7/20/2007 6:58:20 PM | Attr =   S]
CSC -> %SystemRoot%\CSC ->  [Folder | Modified Date = 7/3/2007 6:20:46 PM | Attr =  HS]
Driver Cache -> %SystemRoot%\Driver Cache ->  [Folder | Modified Date = 6/27/2007 3:01:02 PM | Attr =    ]
ehome -> %SystemRoot%\ehome ->  [Folder | Modified Date = 6/27/2007 3:07:26 PM | Attr =    ]
Fonts -> %SystemRoot%\Fonts ->  [Folder | Modified Date = 6/27/2007 3:07:24 PM | Attr = R S]
Help -> %SystemRoot%\Help ->  [Folder | Modified Date = 6/27/2007 10:36:08 PM | Attr =    ]
hpntwksetup.ini -> %SystemRoot%\hpntwksetup.ini ->  [Ver =  | Size = 698 bytes | Modified Date = 6/22/2007 11:15:56 PM | Attr =    ]
hpoins05.dat -> %SystemRoot%\hpoins05.dat ->  [Ver =  | Size = 69372 bytes | Modified Date = 6/22/2007 11:28:24 PM | Attr =    ]
ime -> %SystemRoot%\ime ->  [Folder | Modified Date = 6/27/2007 3:07:24 PM | Attr =    ]
imsins.BAK -> %SystemRoot%\imsins.BAK ->  [Ver =  | Size = 1344 bytes | Modified Date = 6/27/2007 9:18:22 PM | Attr =    ]
inf -> %SystemRoot%\inf ->  [Folder | Modified Date = 7/10/2007 5:28:58 PM | Attr =  H ]
Installer -> %SystemRoot%\Installer ->  [Folder | Modified Date = 7/10/2007 8:10:08 PM | Attr =  HS]
Media -> %SystemRoot%\Media ->  [Folder | Modified Date = 6/27/2007 3:07:22 PM | Attr =    ]
msagent -> %SystemRoot%\msagent ->  [Folder | Modified Date = 6/27/2007 3:06:48 PM | Attr =    ]
mui -> %SystemRoot%\mui ->  [Folder | Modified Date = 6/27/2007 3:07:26 PM | Attr =    ]
NeroDigital.ini -> %SystemRoot%\NeroDigital.ini ->  [Ver =  | Size = 116 bytes | Modified Date = 6/28/2007 4:06:04 AM | Attr =    ]
ODBCINST.INI -> %SystemRoot%\ODBCINST.INI ->  [Ver =  | Size = 4161 bytes | Modified Date = 6/27/2007 10:25:06 PM | Attr =    ]
PeerNet -> %SystemRoot%\PeerNet ->  [Folder | Modified Date = 6/27/2007 3:07:10 PM | Attr =    ]
Prefetch -> %SystemRoot%\Prefetch ->  [Folder | Modified Date = 7/20/2007 9:40:54 PM | Attr =    ]
pss -> %SystemRoot%\pss ->  [Folder | Modified Date = 6/26/2007 8:40:24 PM | Attr =    ]
Registration -> %SystemRoot%\Registration ->  [Folder | Modified Date = 7/20/2007 6:58:42 PM | Attr =    ]
security -> %SystemRoot%\security ->  [Folder | Modified Date = 6/27/2007 10:43:40 PM | Attr =    ]
setupapi.old -> %SystemRoot%\setupapi.old ->  [Ver =  | Size = 391244 bytes | Modified Date = 6/26/2007 3:09:06 AM | Attr =    ]
SoftwareDistribution -> %SystemRoot%\SoftwareDistribution ->  [Folder | Modified Date = 6/27/2007 10:36:10 PM | Attr =    ]
system -> %SystemRoot%\system ->  [Folder | Modified Date = 6/27/2007 3:07:54 PM | Attr =    ]
system.ini -> %SystemRoot%\system.ini ->  [Ver =  | Size = 227 bytes | Modified Date = 6/27/2007 10:09:08 PM | Attr =    ]
system32 -> %System32% ->  [Folder | Modified Date = 7/20/2007 6:56:42 PM | Attr =    ]
Temp -> %SystemRoot%\Temp ->  [Folder | Modified Date = 7/20/2007 9:20:04 PM | Attr =    ]
twain_32 -> %SystemRoot%\twain_32 ->  [Folder | Modified Date = 6/27/2007 3:03:40 PM | Attr =    ]
Web -> %SystemRoot%\Web ->  [Folder | Modified Date = 6/27/2007 10:23:52 PM | Attr = R  ]
win.ini -> %SystemRoot%\win.ini ->  [Ver =  | Size = 750 bytes | Modified Date = 6/27/2007 10:23:32 PM | Attr =    ]
WindowsShell.Manifest -> %SystemRoot%\WindowsShell.Manifest ->  [Ver =  | Size = 749 bytes | Modified Date = 6/27/2007 10:23:44 PM | Attr = RH ]
WMSysPr9.prx -> %SystemRoot%\WMSysPr9.prx ->  [Ver =  | Size = 316640 bytes | Modified Date = 6/27/2007 10:25:12 PM | Attr =    ]
WRSetup.dll -> %SystemRoot%\WRSetup.dll -> Webroot Software, Inc. [Ver = 5,5,1,3356 | Size = 1520952 bytes | Modified Date = 6/21/2007 6:57:30 PM | Attr =    ]
AppleSoftwareUpdate.job -> %SystemRoot%\tasks\AppleSoftwareUpdate.job ->  [Ver =  | Size = 284 bytes | Modified Date = 6/30/2007 10:33:02 PM | Attr =    ]
SA.DAT -> %SystemRoot%\tasks\SA.DAT ->  [Ver =  | Size = 6 bytes | Modified Date = 7/20/2007 6:58:22 PM | Attr =  H ]
$winnt$.inf -> %System32%\$winnt$.inf ->  [Ver =  | Size = 264 bytes | Modified Date = 6/27/2007 10:32:14 PM | Attr =    ]
1033 -> %System32%\1033 ->  [Folder | Modified Date = 6/27/2007 3:02:08 PM | Attr =    ]
AddPort.ini -> %System32%\AddPort.ini ->  [Ver =  | Size = 147 bytes | Modified Date = 6/22/2007 11:16:00 PM | Attr =    ]
amcompat.tlb -> %System32%\amcompat.tlb ->  [Ver =  | Size = 16832 bytes | Modified Date = 6/27/2007 10:25:14 PM | Attr =    ]
CatRoot -> %System32%\CatRoot ->  [Folder | Modified Date = 6/27/2007 10:10:38 PM | Attr =    ]
CatRoot2 -> %System32%\CatRoot2 ->  [Folder | Modified Date = 7/13/2007 7:19:50 PM | Attr =    ]
cdplayer.exe.manifest -> %System32%\cdplayer.exe.manifest ->  [Ver =  | Size = 749 bytes | Modified Date = 6/27/2007 10:23:44 PM | Attr = RH ]
Com -> %System32%\Com ->  [Folder | Modified Date = 6/27/2007 10:21:48 PM | Attr =    ]
config -> %System32%\config ->  [Folder | Modified Date = 6/27/2007 10:33:02 PM | Attr =    ]
dllcache -> %System32%\dllcache ->  [Folder | Modified Date = 7/10/2007 5:29:04 PM | Attr = RHS]
drivers -> %System32%\drivers ->  [Folder | Modified Date = 7/20/2007 6:56:46 PM | Attr =    ]
emptyregdb.dat -> %System32%\emptyregdb.dat ->  [Ver =  | Size = 34344 bytes | Modified Date = 6/27/2007 10:21:46 PM | Attr =    ]
FNTCACHE.DAT -> %System32%\FNTCACHE.DAT ->  [Ver =  | Size = 309992 bytes | Modified Date = 6/27/2007 10:33:06 PM | Attr =    ]
ias -> %System32%\ias ->  [Folder | Modified Date = 6/27/2007 3:02:14 PM | Attr =    ]
icsxml -> %System32%\icsxml ->  [Folder | Modified Date = 6/27/2007 3:02:48 PM | Attr =    ]
logonui.exe.manifest -> %System32%\logonui.exe.manifest ->  [Ver =  | Size = 488 bytes | Modified Date = 6/27/2007 10:23:50 PM | Attr = RH ]
ncpa.cpl.manifest -> %System32%\ncpa.cpl.manifest ->  [Ver =  | Size = 749 bytes | Modified Date = 6/27/2007 10:23:44 PM | Attr = RH ]
npp -> %System32%\npp ->  [Folder | Modified Date = 6/27/2007 3:06:56 PM | Attr =    ]
nscompat.tlb -> %System32%\nscompat.tlb ->  [Ver =  | Size = 23392 bytes | Modified Date = 6/27/2007 10:25:14 PM | Attr =    ]
nwc.cpl.manifest -> %System32%\nwc.cpl.manifest ->  [Ver =  | Size = 749 bytes | Modified Date = 6/27/2007 10:23:44 PM | Attr = RH ]
oobe -> %System32%\oobe ->  [Folder | Modified Date = 6/27/2007 10:23:26 PM | Attr =    ]
perfc009.dat -> %System32%\perfc009.dat ->  [Ver =  | Size = 80190 bytes | Modified Date = 7/10/2007 4:55:52 PM | Attr =    ]
perfh009.dat -> %System32%\perfh009.dat ->  [Ver =  | Size = 448102 bytes | Modified Date = 7/10/2007 4:55:52 PM | Attr =    ]
PerfStringBackup.INI -> %System32%\PerfStringBackup.INI ->  [Ver =  | Size = 537134 bytes | Modified Date = 7/10/2007 4:55:52 PM | Attr =    ]
Restore -> %System32%\Restore ->  [Folder | Modified Date = 6/27/2007 10:36:48 PM | Attr =    ]
sapi.cpl.manifest -> %System32%\sapi.cpl.manifest ->  [Ver =  | Size = 749 bytes | Modified Date = 6/27/2007 10:23:44 PM | Attr = RH ]
Setup -> %System32%\Setup ->  [Folder | Modified Date = 6/27/2007 3:07:52 PM | Attr =    ]
ssiefr.EXE -> %System32%\ssiefr.EXE -> Webroot Software Inc (www.webroot.com) [Ver = 3.5.1.3356 | Size = 16184 bytes | Modified Date = 6/21/2007 6:43:52 PM | Attr =    ]
usmt -> %System32%\usmt ->  [Folder | Modified Date = 6/27/2007 3:07:44 PM | Attr =    ]
wbem -> %System32%\wbem ->  [Folder | Modified Date = 6/27/2007 10:20:40 PM | Attr =    ]
WDBtnMgr.exe -> %System32%\WDBtnMgr.exe -> Western Digital Technologies, Inc. [Ver = 2, 0, 4, 0 | Size = 339968 bytes | Modified Date = 7/10/2007 8:10:02 PM | Attr =    ]
WindowsLogon.manifest -> %System32%\WindowsLogon.manifest ->  [Ver =  | Size = 488 bytes | Modified Date = 6/27/2007 10:23:50 PM | Attr = RH ]
wpa.dbl -> %System32%\wpa.dbl ->  [Ver =  | Size = 2206 bytes | Modified Date = 7/20/2007 6:14:54 PM | Attr =    ]
WRLogonNtf.dll -> %System32%\WRLogonNtf.dll -> Webroot Software, Inc. [Ver = 3,5,1,3356 | Size = 219448 bytes | Modified Date = 6/21/2007 6:43:54 PM | Attr =    ]
wrlzma.dll -> %System32%\wrlzma.dll ->  [Ver =  | Size = 26424 bytes | Modified Date = 6/21/2007 6:43:54 PM | Attr =    ]
wuaucpl.cpl.manifest -> %System32%\wuaucpl.cpl.manifest ->  [Ver =  | Size = 749 bytes | Modified Date = 6/27/2007 10:23:44 PM | Attr = RH ]
SSFS0BB8.sys -> %System32%\drivers\SSFS0BB8.sys -> Webroot Software Inc (www.webroot.com) [Ver = 3.5.1.3356 | Size = 20280 bytes | Modified Date = 6/21/2007 6:43:52 PM | Attr =    ]
sshrmd.sys -> %System32%\drivers\sshrmd.sys -> Webroot Software Inc (www.webroot.com) [Ver = 3.5.1.3356 | Size = 21816 bytes | Modified Date = 6/21/2007 6:43:52 PM | Attr =    ]
ssidrv.sys -> %System32%\drivers\ssidrv.sys -> Webroot Software Inc (www.webroot.com) [Ver = 3.5.1.3356 | Size = 160056 bytes | Modified Date = 6/21/2007 6:43:52 PM | Attr =    ]
sskbfd.sys -> %System32%\drivers\sskbfd.sys -> Webroot Software Inc (www.webroot.com) [Ver = 3.5.1.3356 | Size = 23864 bytes | Modified Date = 6/21/2007 6:43:52 PM | Attr =    ]

c_20924.nls -> %System32%\dllcache\c_20924.nls ->  [Ver =  | Size = 66082 bytes | Created Date = 6/27/2007 9:26:10 PM | Attr =    ]
c_20932.nls -> %System32%\dllcache\c_20932.nls ->  [Ver =  | Size = 180770 bytes | Created Date = 6/27/2007 9:26:10 PM | Attr =    ]
c_20936.nls -> %System32%\dllcache\c_20936.nls ->  [Ver =  | Size = 173602 bytes | Created Date = 6/27/2007 9:26:10 PM | Attr =    ]
c_20949.nls -> %System32%\dllcache\c_20949.nls ->  [Ver =  | Size = 177698 bytes | Created Date = 6/27/2007 9:26:10 PM | Attr =    ]
c_21025.nls -> %System32%\dllcache\c_21025.nls ->  [Ver =  | Size = 66082 bytes | Created Date = 6/27/2007 9:26:10 PM | Attr =    ]
c_21027.nls -> %System32%\dllcache\c_21027.nls ->  [Ver =  | Size = 66082 bytes | Created Date = 6/27/2007 9:26:10 PM | Attr =    ]
c_28596.nls -> %System32%\dllcache\c_28596.nls ->  [Ver =  | Size = 66082 bytes | Created Date = 6/27/2007 9:26:11 PM | Attr =    ]
c_708.nls -> %System32%\dllcache\c_708.nls ->  [Ver =  | Size = 66082 bytes | Created Date = 6/27/2007 9:26:11 PM | Attr =    ]
c_720.nls -> %System32%\dllcache\c_720.nls ->  [Ver =  | Size = 66594 bytes | Created Date = 6/27/2007 9:26:11 PM | Attr =    ]
c_858.nls -> %System32%\dllcache\c_858.nls ->  [Ver =  | Size = 66594 bytes | Created Date = 6/27/2007 9:26:11 PM | Attr =    ]
c_862.nls -> %System32%\dllcache\c_862.nls ->  [Ver =  | Size = 66594 bytes | Created Date = 6/27/2007 9:26:11 PM | Attr =    ]
c_864.nls -> %System32%\dllcache\c_864.nls ->  [Ver =  | Size = 66594 bytes | Created Date = 6/27/2007 9:26:12 PM | Attr =    ]
c_870.nls -> %System32%\dllcache\c_870.nls ->  [Ver =  | Size = 66082 bytes | Created Date = 6/27/2007 9:26:12 PM | Attr =    ]
esucmd.dll -> %System32%\dllcache\esucmd.dll -> SEIKO EPSON CORP. [Ver = 1.00 | Size = 31744 bytes | Created Date = 6/27/2007 9:26:27 PM | Attr =    ]
esuimgd.dll -> %System32%\dllcache\esuimgd.dll -> SEIKO EPSON CORP. [Ver = 1.00 | Size = 57856 bytes | Created Date = 6/27/2007 9:26:27 PM | Attr =    ]
esunid.dll -> %System32%\dllcache\esunid.dll -> SEIKO EPSON CORP. [Ver = 1.00 | Size = 45056 bytes | Created Date = 6/27/2007 9:26:27 PM | Attr =    ]
FP4.CAT -> %System32%\dllcache\FP4.CAT ->  [Ver =  | Size = 31281 bytes | Created Date = 6/27/2007 7:12:21 PM | Attr =    ]
fpencode.dll -> %System32%\dllcache\fpencode.dll ->  [Ver =  | Size = 94208 bytes | Created Date = 6/27/2007 9:26:29 PM | Attr =    ]
hanja.lex -> %System32%\dllcache\hanja.lex ->  [Ver =  | Size = 108827 bytes | Created Date = 6/27/2007 9:26:34 PM | Attr =    ]
HPCRDP.CAT -> %System32%\dllcache\HPCRDP.CAT ->  [Ver =  | Size = 13472 bytes | Created Date = 6/27/2007 7:12:21 PM | Attr =    ]
hwxjpn.dll -> %System32%\dllcache\hwxjpn.dll ->  [Ver =  | Size = 13463552 bytes | Created Date = 6/27/2007 9:26:39 PM | Attr =    ]
IASNT4.CAT -> %System32%\dllcache\IASNT4.CAT ->  [Ver =  | Size = 8574 bytes | Created Date = 6/27/2007 7:12:21 PM | Attr =    ]
imekr.lex -> %System32%\dllcache\imekr.lex ->  [Ver =  | Size = 134339 bytes | Created Date = 6/27/2007 9:26:48 PM | Attr =    ]
imjpinst.exe -> %System32%\dllcache\imjpinst.exe ->  [Ver =  | Size = 196665 bytes | Created Date = 6/27/2007 9:26:49 PM | Attr =    ]
IMS.CAT -> %System32%\dllcache\IMS.CAT ->  [Ver =  | Size = 13753 bytes | Created Date = 6/27/2007 7:12:21 PM | Attr =    ]
imscinst.exe -> %System32%\dllcache\imscinst.exe ->  [Ver =  | Size = 59392 bytes | Created Date = 6/27/2007 9:26:50 PM | Attr =    ]
korwbrkr.lex -> %System32%\dllcache\korwbrkr.lex ->  [Ver =  | Size = 1158818 bytes | Created Date = 6/27/2007 9:26:59 PM | Attr =    ]
ksc.nls -> %System32%\dllcache\ksc.nls ->  [Ver =  | Size = 47066 bytes | Created Date = 6/27/2007 9:26:59 PM | Attr =    ]
MAPIMIG.CAT -> %System32%\dllcache\MAPIMIG.CAT ->  [Ver =  | Size = 399645 bytes | Created Date = 6/27/2007 7:12:21 PM | Attr =    ]
mediactr.cat -> %System32%\dllcache\mediactr.cat ->  [Ver =  | Size = 130715 bytes | Created Date = 6/27/2007 7:12:21 PM | Attr =    ]
mplayer2.exe -> %System32%\dllcache\mplayer2.exe ->  [Ver =  | Size = 4639 bytes | Created Date = 6/27/2007 9:25:56 PM | Attr =    ]
MSMSGS.CAT -> %System32%\dllcache\MSMSGS.CAT ->  [Ver =  | Size = 9581 bytes | Created Date = 6/27/2007 7:12:21 PM | Attr =    ]
msn7.cat -> %System32%\dllcache\msn7.cat ->  [Ver =  | Size = 24209 bytes | Created Date = 6/27/2007 7:12:21 PM | Attr =    ]
msn9.cat -> %System32%\dllcache\msn9.cat ->  [Ver =  | Size = 11651 bytes | Created Date = 6/27/2007 7:12:21 PM | Attr =    ]
MSTSWEB.CAT -> %System32%\dllcache\MSTSWEB.CAT ->  [Ver =  | Size = 7245 bytes | Created Date = 6/27/2007 7:12:21 PM | Attr =    ]
MW770.CAT -> %System32%\dllcache\MW770.CAT ->  [Ver =  | Size = 37484 bytes | Created Date = 6/27/2007 7:12:21 PM | Attr =    ]
netfx.cat -> %System32%\dllcache\netfx.cat ->  [Ver =  | Size = 141702 bytes | Created Date = 6/27/2007 7:12:21 PM | Attr =    ]
NT5.CAT -> %System32%\dllcache\NT5.CAT ->  [Ver =  | Size = 2008817 bytes | Created Date = 6/27/2007 7:12:20 PM | Attr =    ]
NT5IIS.CAT -> %System32%\dllcache\NT5IIS.CAT ->  [Ver =  | Size = 797189 bytes | Created Date = 6/27/2007 7:12:21 PM | Attr =    ]
NT5INF.CAT -> %System32%\dllcache\NT5INF.CAT ->  [Ver =  | Size = 505647 bytes | Created Date = 6/27/2007 7:12:20 PM | Attr =    ]
NTPRINT.CAT -> %System32%\dllcache\NTPRINT.CAT ->  [Ver =  | Size = 1086058 bytes | Created Date = 6/27/2007 7:12:21 PM | Attr =    ]
OEMBIOS.CAT -> %System32%\dllcache\OEMBIOS.CAT ->  [Ver =  | Size = 7710 bytes | Created Date = 6/27/2007 7:12:21 PM | Attr =    ]
pintlcsa.dll -> %System32%\dllcache\pintlcsa.dll ->  [Ver =  | Size = 175104 bytes | Created Date = 6/27/2007 9:27:24 PM | Attr =    ]
plus.cat -> %System32%\dllcache\plus.cat ->  [Ver =  | Size = 77881 bytes | Created Date = 6/27/2007 7:12:21 PM | Attr =    ]
prc.nls -> %System32%\dllcache\prc.nls ->  [Ver =  | Size = 83748 bytes | Created Date = 6/27/2007 9:27:25 PM | Attr =    ]
prcp.nls -> %System32%\dllcache\prcp.nls ->  [Ver =  | Size = 83748 bytes | Created Date = 6/27/2007 9:27:25 PM | Attr =    ]
rw330ext.dll -> %System32%\dllcache\rw330ext.dll -> Ricoh Co., Ltd. [Ver = 5, 0, 2419, 1 | Size = 26624 bytes | Created Date = 6/27/2007 9:27:31 PM | Attr =    ]
rwia001.dll -> %System32%\dllcache\rwia001.dll -> Ricoh Co., Ltd. [Ver = 5, 0, 2419, 1 | Size = 79872 bytes | Created Date = 6/27/2007 9:27:31 PM | Attr =    ]
rwia330.dll -> %System32%\dllcache\rwia330.dll -> Ricoh Co., Ltd. [Ver = 5, 0, 2419, 1 | Size = 79872 bytes | Created Date = 6/27/2007 9:27:31 PM | Attr =    ]
sonic.cat -> %System32%\dllcache\sonic.cat ->  [Ver =  | Size = 17916 bytes | Created Date = 6/27/2007 7:12:21 PM | Attr =    ]
SP2.CAT -> %System32%\dllcache\SP2.CAT ->  [Ver =  | Size = 106147 bytes | Created Date = 6/27/2007 7:12:21 PM | Attr =    ]
spxcoins.dll -> %System32%\dllcache\spxcoins.dll -> Perle Systems Ltd. [Ver = 1.0.0.0007 | Size = 24661 bytes | Created Date = 6/27/2007 7:12:25 PM | Attr =    ]
tabletpc.cat -> %System32%\dllcache\tabletpc.cat ->  [Ver =  | Size = 110116 bytes | Created Date = 6/27/2007 7:12:21 PM | Attr =    ]
xjis.nls -> %System32%\dllcache\xjis.nls ->  [Ver =  | Size = 28288 bytes | Created Date = 6/27/2007 9:28:05 PM | Attr =    ]
SSFS0BB8.sys -> %System32%\drivers\SSFS0BB8.sys -> Webroot Software Inc (www.webroot.com) [Ver = 3.5.1.3356 | Size = 20280 bytes | Created Date = 7/20/2007 5:56:45 PM | Attr =    ]
sshrmd.sys -> %System32%\drivers\sshrmd.sys -> Webroot Software Inc (www.webroot.com) [Ver = 3.5.1.3356 | Size = 21816 bytes | Created Date = 7/20/2007 5:56:45 PM | Attr =    ]
ssidrv.sys -> %System32%\drivers\ssidrv.sys -> Webroot Software Inc (www.webroot.com) [Ver = 3.5.1.3356 | Size = 160056 bytes | Created Date = 7/20/2007 5:56:45 PM | Attr =    ]
sskbfd.sys -> %System32%\drivers\sskbfd.sys -> Webroot Software Inc (www.webroot.com) [Ver = 3.5.1.3356 | Size = 23864 bytes | Created Date = 7/20/2007 5:56:45 PM | Attr =    ]

[Files/Folders - Created Within 30 days]
c5dbbec5b7f99a71ee23e1b7f681 -> %SystemDrive%\c5dbbec5b7f99a71ee23e1b7f681 ->  [Folder | Created Date = 6/27/2007 9:46:20 PM | Attr =    ]
Config.Msi -> %SystemDrive%\Config.Msi ->  [Folder | Created Date = 6/22/2007 10:14:02 PM | Attr =  H ]
TEMP -> %SystemDrive%\TEMP ->  [Folder | Created Date = 6/22/2007 10:15:20 PM | Attr =    ]
$NtUninstallKB835221WXP$ -> %SystemRoot%\$NtUninstallKB835221WXP$ ->  [Folder | Created Date = 6/27/2007 9:46:22 PM | Attr =  H ]
hpntwksetup.ini -> %SystemRoot%\hpntwksetup.ini ->  [Ver =  | Size = 698 bytes | Created Date = 6/22/2007 10:15:30 PM | Attr =    ]
hpoins05.dat -> %SystemRoot%\hpoins05.dat ->  [Ver =  | Size = 69372 bytes | Created Date = 6/22/2007 10:13:45 PM | Attr =    ]
hpomdl05.dat -> %SystemRoot%\hpomdl05.dat ->  [Ver =  | Size = 19696 bytes | Created Date = 6/22/2007 10:13:44 PM | Attr =    ]
Prefetch -> %SystemRoot%\Prefetch ->  [Folder | Created Date = 6/27/2007 9:33:39 PM | Attr =    ]
SET39.tmp -> %SystemRoot%\SET39.tmp ->  [Ver =  | Size = 106147 bytes | Created Date = 6/27/2007 7:25:49 PM | Attr = R  ]
SET3A.tmp -> %SystemRoot%\SET3A.tmp ->  [Ver =  | Size = 106147 bytes | Created Date = 6/27/2007 7:36:10 PM | Attr = R  ]
SET3B.tmp -> %SystemRoot%\SET3B.tmp ->  [Ver =  | Size = 106147 bytes | Created Date = 6/27/2007 8:17:56 PM | Attr = R  ]
SET3C.tmp -> %SystemRoot%\SET3C.tmp ->  [Ver =  | Size = 1086058 bytes | Created Date = 6/27/2007 7:25:50 PM | Attr = R  ]
SET3D.tmp -> %SystemRoot%\SET3D.tmp ->  [Ver =  | Size = 1086058 bytes | Created Date = 6/27/2007 7:36:10 PM | Attr = R  ]
SET3E.tmp -> %SystemRoot%\SET3E.tmp ->  [Ver =  | Size = 1086058 bytes | Created Date = 6/27/2007 8:17:57 PM | Attr = R  ]
SET3F.tmp -> %SystemRoot%\SET3F.tmp ->  [Ver =  | Size = 106147 bytes | Created Date = 6/27/2007 9:08:51 PM | Attr = R  ]
SET42.tmp -> %SystemRoot%\SET42.tmp ->  [Ver =  | Size = 1086058 bytes | Created Date = 6/27/2007 9:08:51 PM | Attr = R  ]
SET48.tmp -> %SystemRoot%\SET48.tmp ->  [Ver =  | Size = 13753 bytes | Created Date = 6/27/2007 7:25:51 PM | Attr = R  ]
SET49.tmp -> %SystemRoot%\SET49.tmp ->  [Ver =  | Size = 13753 bytes | Created Date = 6/27/2007 7:36:12 PM | Attr = R  ]
SET4A.tmp -> %SystemRoot%\SET4A.tmp ->  [Ver =  | Size = 13753 bytes | Created Date = 6/27/2007 8:17:58 PM | Attr = R  ]
SET51.tmp -> %SystemRoot%\SET51.tmp ->  [Ver =  | Size = 13753 bytes | Created Date = 6/27/2007 9:08:53 PM | Attr = R  ]
SET89.tmp -> %SystemRoot%\SET89.tmp ->  [Ver =  | Size = 106147 bytes | Created Date = 6/27/2007 7:12:14 PM | Attr = R  ]
SET8C.tmp -> %SystemRoot%\SET8C.tmp ->  [Ver =  | Size = 1086058 bytes | Created Date = 6/27/2007 7:12:14 PM | Attr = R  ]
SET99.tmp -> %SystemRoot%\SET99.tmp ->  [Ver =  | Size = 13753 bytes | Created Date = 6/27/2007 7:12:16 PM | Attr = R  ]
WindowsShell.Manifest -> %SystemRoot%\WindowsShell.Manifest ->  [Ver =  | Size = 749 bytes | Created Date = 6/27/2007 9:23:43 PM | Attr = RH ]
WRSetup.dll -> %SystemRoot%\WRSetup.dll -> Webroot Software, Inc. [Ver = 5,5,1,3356 | Size = 1520952 bytes | Created Date = 7/20/2007 5:56:37 PM | Attr =    ]
AddPort.ini -> %System32%\AddPort.ini ->  [Ver =  | Size = 147 bytes | Created Date = 6/22/2007 10:15:59 PM | Attr =    ]
hpgwiamd.dll -> %System32%\hpgwiamd.dll -> Hewlett-Packard [Ver = 3.2.2.789 | Size = 278528 bytes | Created Date = 6/22/2007 10:16:12 PM | Attr = R  ]
hpotscl.dll -> %System32%\hpotscl.dll -> Hewlett-Packard Co. [Ver = 45.0.99.000 | Size = 581632 bytes | Created Date = 6/22/2007 10:16:12 PM | Attr = R  ]
hpovst08.dll -> %System32%\hpovst08.dll -> Hewlett-Packard Co. [Ver = 45.0.99.000 | Size = 229376 bytes | Created Date = 6/22/2007 10:16:12 PM | Attr = R  ]
hptcpmib.dll -> %System32%\hptcpmib.dll -> Hewlett Packard [Ver = 2.51.01.006 | Size = 73728 bytes | Created Date = 6/22/2007 10:15:57 PM | Attr = R  ]
hptcpmon.dll -> %System32%\hptcpmon.dll -> Hewlett Packard [Ver = 2.51.01.006 | Size = 122880 bytes | Created Date = 6/22/2007 10:15:57 PM | Attr = R  ]
hptcpmon.ini -> %System32%\hptcpmon.ini ->  [Ver =  | Size = 3399 bytes | Created Date = 6/22/2007 10:15:59 PM | Attr = R  ]
hptcpmui.hlp -> %System32%\hptcpmui.hlp ->  [Ver =  | Size = 9864 bytes | Created Date = 6/22/2007 10:15:59 PM | Attr = R  ]
HPZc3212.dll -> %System32%\HPZc3212.dll -> Hewlett-Packard Co. [Ver = 9, 0, 0, 0 | Size = 274432 bytes | Created Date = 6/22/2007 10:16:12 PM | Attr = R  ]
HPZidr12.dll -> %System32%\HPZidr12.dll -> HP [Ver = 9, 0, 0, 0 | Size = 278584 bytes | Created Date = 6/22/2007 10:15:05 PM | Attr =    ]
HPZinw12.exe -> %System32%\HPZinw12.exe -> HP [Ver = 9, 0, 0, 0 | Size = 61440 bytes | Created Date = 6/22/2007 10:15:06 PM | Attr =    ]
HPZipm12.exe -> %System32%\HPZipm12.exe -> HP [Ver = 9, 0, 0, 0 | Size = 69632 bytes | Created Date = 6/22/2007 10:15:06 PM | Attr =    ]
HPZipr12.dll -> %System32%\HPZipr12.dll -> HP [Ver = 9, 0, 0, 0 | Size = 204800 bytes | Created Date = 6/22/2007 10:15:06 PM | Attr =    ]
HPZipt12.dll -> %System32%\HPZipt12.dll -> HP [Ver = 9, 0, 0, 0 | Size = 94208 bytes | Created Date = 6/22/2007 10:15:06 PM | Attr =    ]
HPZisn12.dll -> %System32%\HPZisn12.dll -> HP [Ver = 9, 0, 0, 0 | Size = 57344 bytes | Created Date = 6/22/2007 10:15:06 PM | Attr =    ]
hpzjfw01.dll -> %System32%\hpzjfw01.dll -> Hewlett-Packard [Ver = 4.02.009.0 | Size = 28672 bytes | Created Date = 6/22/2007 10:15:58 PM | Attr = R  ]
hpzjrd01.dll -> %System32%\hpzjrd01.dll -> Hewlett Packard [Ver = 1.00.01.006 | Size = 102400 bytes | Created Date = 6/22/2007 10:15:58 PM | Attr = R  ]
hpzjsn01.dll -> %System32%\hpzjsn01.dll -> Hewlett Packard Company [Ver = 1, 0, 0, 3 | Size = 98304 bytes | Created Date = 6/22/2007 10:15:58 PM | Attr = R  ]
hpzlnt12.dll -> %System32%\hpzlnt12.dll -> HP [Ver = 2.335.5.0 | Size = 139345 bytes | Created Date = 6/22/2007 10:16:33 PM | Attr =    ]
logonui.exe.manifest -> %System32%\logonui.exe.manifest ->  [Ver =  | Size = 488 bytes | Created Date = 6/27/2007 9:23:48 PM | Attr = RH ]
ncpa.cpl.manifest -> %System32%\ncpa.cpl.manifest ->  [Ver =  | Size = 749 bytes | Created Date = 6/27/2007 9:23:43 PM | Attr = RH ]
nwc.cpl.manifest -> %System32%\nwc.cpl.manifest ->  [Ver =  | Size = 749 bytes | Created Date = 6/27/2007 9:23:43 PM | Attr = RH ]
sapi.cpl.manifest -> %System32%\sapi.cpl.manifest ->  [Ver =  | Size = 749 bytes | Created Date = 6/27/2007 9:23:43 PM | Attr = RH ]
spr32d35.dll -> %System32%\spr32d35.dll -> FarPoint Technologies, Inc. [Ver = 3.5.02 | Size = 794624 bytes | Created Date = 6/21/2007 1:33:39 PM | Attr =    ]
spxcoins.dll -> %System32%\spxcoins.dll -> Perle Systems Ltd. [Ver = 1.0.0.0007 | Size = 24661 bytes | Created Date = 6/27/2007 7:12:25 PM | Attr =    ]
ssiefr.EXE -> %System32%\ssiefr.EXE -> Webroot Software Inc (www.webroot.com) [Ver = 3.5.1.3356 | Size = 16184 bytes | Created Date = 7/20/2007 5:56:37 PM | Attr =    ]
WDBtnMgr.exe -> %System32%\WDBtnMgr.exe -> Western Digital Technologies, Inc. [Ver = 2, 0, 4, 0 | Size = 339968 bytes | Created Date = 7/10/2007 4:31:37 PM | Attr =    ]
WRLogonNtf.dll -> %System32%\WRLogonNtf.dll -> Webroot Software, Inc. [Ver = 3,5,1,3356 | Size = 219448 bytes | Created Date = 7/20/2007 5:56:41 PM | Attr =    ]
wrlzma.dll -> %System32%\wrlzma.dll ->  [Ver =  | Size = 26424 bytes | Created Date = 7/20/2007 5:56:37 PM | Attr =    ]
wuaucpl.cpl.manifest -> %System32%\wuaucpl.cpl.manifest ->  [Ver =  | Size = 749 bytes | Created Date = 6/27/2007 9:23:43 PM | Attr = RH ]
big5.nls -> %System32%\dllcache\big5.nls ->  [Ver =  | Size = 66728 bytes | Created Date = 6/27/2007 9:26:05 PM | Attr =    ]
bopomofo.nls -> %System32%\dllcache\bopomofo.nls ->  [Ver =  | Size = 82172 bytes | Created Date = 6/27/2007 9:26:05 PM | Attr =    ]
cap7146.sys -> %System32%\dllcache\cap7146.sys -> Philips Semiconductors GmbH [Ver = 1.00 (XPClient.010817-1148) | Size = 54528 bytes | Created Date = 6/27/2007 9:26:13 PM | Attr =    ]
chtskf.dll -> %System32%\dllcache\chtskf.dll ->  [Ver =  | Size = 173568 bytes | Created Date = 6/27/2007 9:26:15 PM | Attr =    ]
c_10001.nls -> %System32%\dllcache\c_10001.nls ->  [Ver =  | Size = 162850 bytes | Created Date = 6/27/2007 9:26:06 PM | Attr =    ]
c_10002.nls -> %System32%\dllcache\c_10002.nls ->  [Ver =  | Size = 195618 bytes | Created Date = 6/27/2007 9:26:06 PM | Attr =    ]
c_10003.nls -> %System32%\dllcache\c_10003.nls ->  [Ver =  | Size = 177698 bytes | Created Date = 6/27/2007 9:26:06 PM | Attr =    ]
c_10004.nls -> %System32%\dllcache\c_10004.nls ->  [Ver =  | Size = 66082 bytes | Created Date = 6/27/2007 9:26:06 PM | Attr =    ]
c_10005.nls -> %System32%\dllcache\c_10005.nls ->  [Ver =  | Size = 66082 bytes | Created Date = 6/27/2007 9:26:06 PM | Attr =    ]
c_10008.nls -> %System32%\dllcache\c_10008.nls ->  [Ver =  | Size = 173602 bytes | Created Date = 6/27/2007 9:26:06 PM | Attr =    ]
c_10021.nls -> %System32%\dllcache\c_10021.nls ->  [Ver =  | Size = 66082 bytes | Created Date = 6/27/2007 9:26:06 PM | Attr =    ]
c_1047.nls -> %System32%\dllcache\c_1047.nls ->  [Ver =  | Size = 66082 bytes | Created Date = 6/27/2007 9:26:07 PM | Attr =    ]
c_1140.nls -> %System32%\dllcache\c_1140.nls ->  [Ver =  | Size = 66082 bytes | Created Date = 6/27/2007 9:26:07 PM | Attr =    ]
c_1141.nls -> %System32%\dllcache\c_1141.nls ->  [Ver =  | Size = 66082 bytes | Created Date = 6/27/2007 9:26:07 PM | Attr =    ]
c_1142.nls -> %System32%\dllcache\c_1142.nls ->  [Ver =  | Size = 66082 bytes | Created Date = 6/27/2007 9:26:07 PM | Attr =    ]
c_1143.nls -> %System32%\dllcache\c_1143.nls ->  [Ver =  | Size = 66082 bytes | Created Date = 6/27/2007 9:26:07 PM | Attr =    ]
c_1144.nls -> %System32%\dllcache\c_1144.nls ->  [Ver =  | Size = 66082 bytes | Created Date = 6/27/2007 9:26:07 PM | Attr =    ]
c_1145.nls -> %System32%\dllcache\c_1145.nls ->  [Ver =  | Size = 66082 bytes | Created Date = 6/27/2007 9:26:07 PM | Attr =    ]
c_1146.nls -> %System32%\dllcache\c_1146.nls ->  [Ver =  | Size = 66082 bytes | Created Date = 6/27/2007 9:26:07 PM | Attr =    ]
c_1147.nls -> %System32%\dllcache\c_1147.nls ->  [Ver =  | Size = 66082 bytes | Created Date = 6/27/2007 9:26:07 PM | Attr =    ]
c_1148.nls -> %System32%\dllcache\c_1148.nls ->  [Ver =  | Size = 66082 bytes | Created Date = 6/27/2007 9:26:07 PM | Attr =    ]
c_1149.nls -> %System32%\dllcache\c_1149.nls ->  [Ver =  | Size = 66082 bytes | Created Date = 6/27/2007 9:26:07 PM | Attr =    ]
c_1361.nls -> %System32%\dllcache\c_1361.nls ->  [Ver =  | Size = 189986 bytes | Created Date = 6/27/2007 9:26:08 PM | Attr =    ]
c_20000.nls -> %System32%\dllcache\c_20000.nls ->  [Ver =  | Size = 180258 bytes | Created Date = 6/27/2007 9:26:08 PM | Attr =    ]
c_20001.nls -> %System32%\dllcache\c_20001.nls ->  [Ver =  | Size = 186402 bytes | Created Date = 6/27/2007 9:26:08 PM | Attr =    ]
c_20002.nls -> %System32%\dllcache\c_20002.nls ->  [Ver =  | Size = 173602 bytes | Created Date = 6/27/2007 9:26:08 PM | Attr =    ]
c_20003.nls -> %System32%\dllcache\c_20003.nls ->  [Ver =  | Size = 185378 bytes | Created Date = 6/27/2007 9:26:08 PM | Attr =    ]
c_20004.nls -> %System32%\dllcache\c_20004.nls ->  [Ver =  | Size = 180258 bytes | Created Date = 6/27/2007 9:26:08 PM | Attr =    ]
c_20005.nls -> %System32%\dllcache\c_20005.nls ->  [Ver =  | Size = 187938 bytes | Created Date = 6/27/2007 9:26:08 PM | Attr =    ]
c_20105.nls -> %System32%\dllcache\c_20105.nls ->  [Ver =  | Size = 66082 bytes | Created Date = 6/27/2007 9:26:09 PM | Attr =    ]
c_20106.nls -> %System32%\dllcache\c_20106.nls ->  [Ver =  | Size = 66082 bytes | Created Date = 6/27/2007 9:26:09 PM | Attr =    ]
c_20107.nls -> %System32%\dllcache\c_20107.nls ->  [Ver =  | Size = 66082 bytes | Created Date = 6/27/2007 9:26:09 PM | Attr =    ]
c_20108.nls -> %System32%\dllcache\c_20108.nls ->  [Ver =  | Size = 66082 bytes | Created Date = 6/27/2007 9:26:09 PM | Attr =    ]
c_20269.nls -> %System32%\dllcache\c_20269.nls ->  [Ver =  | Size = 66082 bytes | Created Date = 6/27/2007 9:26:09 PM | Attr =    ]
c_20273.nls -> %System32%\dllcache\c_20273.nls ->  [Ver =  | Size = 66082 bytes | Created Date = 6/27/2007 9:26:09 PM | Attr =    ]
c_20277.nls -> %System32%\dllcache\c_20277.nls ->  [Ver =  | Size = 66082 bytes | Created Date = 6/27/2007 9:26:09 PM | Attr =    ]
c_20278.nls -> %System32%\dllcache\c_20278.nls ->  [Ver =  | Size = 66082 bytes | Created Date = 6/27/2007 9:26:09 PM | Attr =    ]
c_20280.nls -> %System32%\dllcache\c_20280.nls ->  [Ver =  | Size = 66082 bytes | Created Date = 6/27/2007 9:26:09 PM | Attr =    ]
c_20284.nls -> %System32%\dllcache\c_20284.nls ->  [Ver =  | Size = 66082 bytes | Created Date = 6/27/2007 9:26:09 PM | Attr =    ]
c_20285.nls -> %System32%\dllcache\c_20285.nls ->  [Ver =  | Size = 66082 bytes | Created Date = 6/27/2007 9:26:09 PM | Attr =    ]
c_20290.nls -> %System32%\dllcache\c_20290.nls ->  [Ver =  | Size = 66082 bytes | Created Date = 6/27/2007 9:26:09 PM | Attr =    ]
c_20297.nls -> %System32%\dllcache\c_20297.nls ->  [Ver =  | Size = 66082 bytes | Created Date = 6/27/2007 9:26:09 PM | Attr =    ]
c_20420.nls -> %System32%\dllcache\c_20420.nls ->  [Ver =  | Size = 66082 bytes | Created Date = 6/27/2007 9:26:09 PM | Attr =    ]
c_20423.nls -> %System32%\dllcache\c_20423.nls ->  [Ver =  | Size = 66082 bytes | Created Date = 6/27/2007 9:26:09 PM | Attr =    ]
c_20424.nls -> %System32%\dllcache\c_20424.nls ->  [Ver =  | Size = 66082 bytes | Created Date = 6/27/2007 9:26:10 PM | Attr =    ]
c_20833.nls -> %System32%\dllcache\c_20833.nls ->  [Ver =  | Size = 66082 bytes | Created Date = 6/27/2007 9:26:10 PM | Attr =    ]
c_20838.nls -> %System32%\dllcache\c_20838.nls ->  [Ver =  | Size = 66082 bytes | Created Date = 6/27/2007 9:26:10 PM | Attr =    ]
c_20871.nls -> %System32%\dllcache\c_20871.nls ->  [Ver =  | Size = 66082 bytes | Created Date = 6/27/2007 9:26:10 PM | Attr =    ]
c_20880.nls -> %System32%\dllcache\c_20880.nls ->  [Ver =  | Size = 66082 bytes | Created Date = 6/27/2007 9:26:10 PM | Attr =    ]

< Session Manager Environment Settings [HKLM] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Environment ->
ComSpec -> C:\WINDOWS\system32\cmd.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 388608 bytes | Modified Date = 8/10/2004 6:00:00 AM | Attr =    ]
TEMP -> %SystemRoot%\TEMP ->
TMP -> %SystemRoot%\TEMP ->
windir -> %SystemRoot% ->
*Path* -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Environment\\Path ->
%SystemRoot%\system32 ->  ->
%SystemRoot% ->  ->
%SystemRoot%\system32\WBEM ->  ->
C:\Program Files\Common Files\Roxio Shared\DLLShared\ ->  ->
C:\Program Files\Microsoft SQL Server\90\Tools\binn\ ->  ->
C:\Program Files\Common Files\Adobe\AGL ->  ->
C:\Program Files\QuickTime\QTSystem\ ->  ->
*PATHEXT* -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Environment\\PATHEXT ->
.COM ->  ->
.EXE ->  ->
.BAT ->  ->
.CMD ->  ->
.VBS ->  ->
.VBE ->  ->
.JS ->  ->
.JSE ->  ->
.WSF ->  ->
.WSH ->  ->
< Software Policy Settings [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\policies\ ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Adobe\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Adobe\Acrobat Reader\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Adobe\Acrobat Reader\8.0\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Adobe\Acrobat Reader\8.0\FeatureLockdown\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Adobe\Acrobat Reader\8.0\FeatureLockdown\cDefaultExecMenuItems\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Adobe\Acrobat Reader\8.0\FeatureLockdown\cDefaultExecMenuItems\\tWhiteList -> Close|GeneralInfo|Quit|FirstPage|PrevPage|NextPage|LastPage|ActualSize|FitPage|FitWidth|FitHeight|SinglePage|OneColumn|TwoPages|TwoColumns|ZoomViewIn|ZoomViewOut|ShowHideBookmarks|ShowHideThumbnails|Print|GoToPage|ZoomTo|GeneralPrefs|SaveAs|FullScreen|OpenOrganizer|Scan|Web2PDF:OpnURL|AcroSendMail:SendMail|Spelling:Check Spelling|PageSetup|Find|FindSearch|GoBack|GoForward|FitVisible|ShowHideToolbarEditing|ShowHideToolbarCommenting|ShowHideToolbarEdit|ShowHideToolbarFile|ShowHideToolbarFind|ShowHideToolbarForms|ShowHideToolbarMeasuring|ShowHideToolbarData|ShowHideToolbarPageDisplay|ShowHideToolbarNavigation|ShowHideToolbarPrintProduction|ShowHideToolbarRedaction|ShowHideToolbarBasicTools|ShowHideToolbarTasks|ShowHideToolbarTypewriter|PropertyToolbar|ShowHideArticles|ShowHideFileAttachment|ShowHideAnnotManager|ShowHideFields|ShowHideOptCont|ShowHideModelTree|ShowHideSignatures|InsertPages|ExtractPages|ReplacePages|DeletePages|CropPages|RotatePages|AddFileAttachment|FindCurrentBookmark|BookmarkShowLocation|GoBackDoc|GoForwardDoc|HelpUserGuide|HelpReader ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Adobe\Acrobat Reader\8.0\FeatureLockdown\cDefaultLaunchAttachmentPerms\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Adobe\Acrobat Reader\8.0\FeatureLockdown\cDefaultLaunchAttachmentPerms\\tBuiltInPermList -> version:1|.ade:3|.adp:3|.app:3|.asp:3|.bas:3|.bat:3|.bz:3|.bz2:3|.chm:3|.class:3|.cmd:3|.com:3|.command:3|.cpl:3|.crt:3|.csh:3|.desktop:3|.exe:3|.fxp:3|.gz:3|.hex:3|.hlp:3|.hqx:3|.hta:3|.inf:3|.ini:3|.ins:3|.isp:3|.its:3|.job:3|.js:3|.jse:3|.ksh:3|.lnk:3|.lzh:3|.mad:3|.maf:3|.mag:3|.mam:3|.maq:3|.mar:3|.mas:3|.mat:3|.mau:3|.mav:3|.maw:3|.mda:3|.mde:3|.mdt:3|.mdw:3|.mdz:3|.msc:3|.msi:3|.msp:3|.mst:3|.ocx:3|.ops:3|.pcd:3|.pi:3|.pif:3|.prf:3|.prg:3|.pst:3|.rar:3|.reg:3|.scf:3|.scr:3|.sct:3|.sea:3|.shb:3|.shs:3|.sit:3|.tar:3|.tgz:3|.tmp:3|.url:3|.vb:3|.vbe:3|.vbs:3|.vsmacros:3|.vss:3|.vst:3|.vsw:3|.webloc:3|.ws:3|.wsc:3|.wsf:3|.wsh:3|.zip:3|.zlo:3|.zoo:3|.pdf:2|.fdf:2 ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Adobe\Acrobat Reader\8.0\FeatureLockdown\cDefaultLaunchURLPerms\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Adobe\Acrobat Reader\8.0\FeatureLockdown\cDefaultLaunchURLPerms\\tSchemePerms -> version:1|shell:3|hcp:3|ms-help:3|ms-its:3|ms-itss:3|its:3|mk:3|mhtml:3|help:3|disk:3|afp:3|disks:3|telnet:3|ssh:3|acrobat:2|mailto:2|file:1 ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Conferencing\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\DriverSearching\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\DriverSearching\\DontSearchWindowsUpdate -> 0 ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\DriverSearching\\DontPromptForWindowsUpdate -> 1 ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Installer\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Installer\\EnableAdminTSRemote -> 1 ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\NetCache\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\\ExecutableTypes -> ADE;ADP;BAS;BAT;CHM;CMD;COM;CPL;CRT;EXE;HLP;HTA;INF;INS;ISP;LNK;MDB;MDE;MSC;MSI;MSP;MST;OCX;PCD;PIF;REG;SCR;SHS;URL;VB;WSC; ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\\TransparentEnabled -> 1 ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\\DefaultLevel -> 262144 ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\\AuthenticodeEnabled -> 0 ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\\PolicyScope -> 0 ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{349d35ab-37b5-462f-9b89-edd5fbde1328}\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{349d35ab-37b5-462f-9b89-edd5fbde1328}\\Description -> Stop the download of this file ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{349d35ab-37b5-462f-9b89-edd5fbde1328}\\FriendlyName -> Mdac11.cab ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{349d35ab-37b5-462f-9b89-edd5fbde1328}\\SaferFlags -> 0 ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{349d35ab-37b5-462f-9b89-edd5fbde1328}\\HashAlg -> 32771 ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{349d35ab-37b5-462f-9b89-edd5fbde1328}\\ItemData -> ^«0O•zI‰j
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{349d35ab-37b5-462f-9b89-edd5fbde1328}\\LastModified ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{349d35ab-37b5-462f-9b89-edd5fbde1328}\\ItemSize -> ; ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{7fb9cd2e-3076-4df9-a57b-b813f72dbb91}\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{7fb9cd2e-3076-4df9-a57b-b813f72dbb91}\\Description -> Stop the download of this file ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{7fb9cd2e-3076-4df9-a57b-b813f72dbb91}\\FriendlyName -> mdac20.cab ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{7fb9cd2e-3076-4df9-a57b-b813f72dbb91}\\SaferFlags -> 0 ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{7fb9cd2e-3076-4df9-a57b-b813f72dbb91}\\HashAlg -> 32771 ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{7fb9cd2e-3076-4df9-a57b-b813f72dbb91}\\ItemData -> g°Ô‹4:?Ó¼éÜdgó” ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{7fb9cd2e-3076-4df9-a57b-b813f72dbb91}\\LastModified ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{7fb9cd2e-3076-4df9-a57b-b813f72dbb91}\\ItemSize -> ; ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{81d1fe15-dd9d-4762-b16d-7c29ddecae3f}\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{81d1fe15-dd9d-4762-b16d-7c29ddecae3f}\\Description -> Stop the download of this file ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{81d1fe15-dd9d-4762-b16d-7c29ddecae3f}\\FriendlyName -> mdac20_a.cab ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{81d1fe15-dd9d-4762-b16d-7c29ddecae3f}\\SaferFlags -> 0 ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{81d1fe15-dd9d-4762-b16d-7c29ddecae3f}\\HashAlg -> 32771 ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{81d1fe15-dd9d-4762-b16d-7c29ddecae3f}\\ItemData -> 2xÜþøÈ“ÜŠ°Ý„} ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{81d1fe15-dd9d-4762-b16d-7c29ddecae3f}\\LastModified ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{81d1fe15-dd9d-4762-b16d-7c29ddecae3f}\\ItemSize -> –; ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{94e3e076-8f53-42a5-8411-085bcc18a68d}\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{94e3e076-8f53-42a5-8411-085bcc18a68d}\\Description -> Stop the download of this file ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{94e3e076-8f53-42a5-8411-085bcc18a68d}\\FriendlyName -> _msadc10.cab ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{94e3e076-8f53-42a5-8411-085bcc18a68d}\\SaferFlags -> 0 ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{94e3e076-8f53-42a5-8411-085bcc18a68d}\\HashAlg -> 32771 ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{94e3e076-8f53-42a5-8411-085bcc18a68d}\\ItemData -> ½š*ÛBëØV%Mø/g ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{94e3e076-8f53-42a5-8411-085bcc18a68d}\\LastModified ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{94e3e076-8f53-42a5-8411-085bcc18a68d}\\ItemSize -> å; ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{dc971ee5-44eb-4fe4-ae2e-b91490411bfc}\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{dc971ee5-44eb-4fe4-ae2e-b91490411bfc}\\Description -> Stop the download of this file ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{dc971ee5-44eb-4fe4-ae2e-b91490411bfc}\\FriendlyName -> msadc11.cab ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{dc971ee5-44eb-4fe4-ae2e-b91490411bfc}\\SaferFlags -> 0 ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{dc971ee5-44eb-4fe4-ae2e-b91490411bfc}\\HashAlg -> 32771 ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{dc971ee5-44eb-4fe4-ae2e-b91490411bfc}\\ItemData -> 8k_„ìöiÓk•j"À€ ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{dc971ee5-44eb-4fe4-ae2e-b91490411bfc}\\LastModified ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Hashes\{dc971ee5-44eb-4fe4-ae2e-b91490411bfc}\\ItemSize -> r
; ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dda3f824-d8cb-441b-834d-be2efd2c1a33}\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dda3f824-d8cb-441b-834d-be2efd2c1a33}\\Description ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dda3f824-d8cb-441b-834d-be2efd2c1a33}\\SaferFlags -> 0 ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dda3f824-d8cb-441b-834d-be2efd2c1a33}\\ItemData -> %HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Cache%OLK* ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dda3f824-d8cb-441b-834d-be2efd2c1a33}\\LastModified ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows NT\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows NT\Terminal Services\ ->  ->
< Software Policy Settings [HKCU] > -> HKEY_CURRENT_USER\SOFTWARE\policies\ ->
HKEY_CURRENT_USER\Software\Policies\ ->  ->
HKEY_CURRENT_USER\Software\Policies\Microsoft\ ->  ->
HKEY_CURRENT_USER\Software\Policies\Microsoft\WindowsMediaPlayer\ ->  ->
HKEY_CURRENT_USER\Software\Policies\Microsoft\WindowsMediaPlayer\\NoCodecDownload -> 1 ->

[Registry - Additional Scans - Non-Microsoft Only]
< Security Settings > ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\FirstRunDisabled -> 1 ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\AntiVirusDisableNotify -> 1 ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\FirewallDisableNotify -> 1 ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\UpdatesDisableNotify -> 0 ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\AntiVirusOverride -> 0 ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\\FirewallOverride -> 0 ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall\ ->  ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\ ->  ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\Type -> 32 ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\Start -> 3 ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\ErrorControl -> 1 ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\ImagePath -> %SystemRoot%\system32\svchost.exe -k netsvcs ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\DisplayName -> Background Intelligent Transfer Service ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\DependOnService -> RpcSs; ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\DependOnGroup ->  ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\ObjectName -> LocalSystem ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\Description -> Transfers data between clients and servers in the background. If BITS is disabled, features such as Windows Update will not work correctly. ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\\FailureActions ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Parameters\ ->  ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Parameters\\ServiceDll -> C:\WINDOWS\system32\qmgr.dll ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Security\ ->  ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Security\\Security ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Enum\ ->  ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Enum\\0 -> Root\LEGACY_BITS\0000 ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Enum\\Count -> 1 ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Enum\\NextInstance -> 1 ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\ ->  ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\DependOnGroup ->  ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\DependOnService -> Netman;WinMgmt; ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\Description -> Provides network address translation, addressing, name resolution and/or intrusion prevention services for a home or small office network. ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\DisplayName -> Windows Firewall/Internet Connection Sharing (ICS) ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\ErrorControl -> 1 ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\ImagePath -> %SystemRoot%\system32\svchost.exe -k netsvcs ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\ObjectName -> LocalSystem ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\Start -> 2 ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\\Type -> 32 ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch\ ->  ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch\\Epoch -> 2289 ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\ ->  ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\\ServiceDll -> %SystemRoot%\System32\ipnathlp.dll ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\ ->  ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\ ->  ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\ ->  ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\ ->  ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\\%windir%\system32\sessmgr.exe -> %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\ ->  ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\ ->  ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\139:TCP -> 139:TCP:*:Enabled:@xpsp2res.dll,-22004 ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\445:TCP -> 445:TCP:*:Enabled:@xpsp2res.dll,-22005 ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\137:UDP -> 137:UDP:*:Enabled:@xpsp2res.dll,-22001 ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\138:UDP -> 138:UDP:*:Enabled:@xpsp2res.dll,-22002 ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\ ->  ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\\EnableFirewall -> 1 ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\ ->  ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\ ->  ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\%windir%\system32\sessmgr.exe -> %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\BearShare\BearShare.exe -> C:\Program Files\BearShare\BearShare.exe:*:Enabled:BearShare ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\World of Warcraft\WoW-2.0.4.6314-to-2.0.5.6320-enUS-downloader.exe -> C:\Program Files\World of Warcraft\WoW-2.0.4.6314-to-2.0.5.6320-enUS-downloader.exe:*:Enabled:Blizzard Downloader ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\World of Warcraft\WoW-2.0.5.6320-to-2.0.6.6337-enUS-downloader.exe -> C:\Program Files\World of Warcraft\WoW-2.0.5.6320-to-2.0.6.6337-enUS-downloader.exe:*:Enabled:Blizzard Downloader ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Macromedia\Dreamweaver 8\Dreamweaver.exe -> C:\Program Files\Macromedia\Dreamweaver 8\Dreamweaver.exe:*:Enabled:Dreamweaver 8 ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Intuit\QuickBooks 2006\QBDBMgrN.exe -> C:\Program Files\Intuit\QuickBooks 2006\QBDBMgrN.exe:*:Enabled:QuickBooks 2006 Data Manager ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\World of Warcraft\WoW-2.0.6.6337-to-2.0.7.6383-enUS-downloader.exe -> C:\Program Files\World of Warcraft\WoW-2.0.6.6337-to-2.0.7.6383-enUS-downloader.exe:*:Enabled:Blizzard Downloader ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\World of Warcraft\WoW-2.0.7.6383-to-2.0.8.6403-enUS-downloader.exe -> C:\Program Files\World of Warcraft\WoW-2.0.7.6383-to-2.0.8.6403-enUS-downloader.exe:*:Enabled:Blizzard Downloader ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\World of Warcraft\WoW-2.0.8.6403-to-2.0.10.6448-enUS-downloader.exe -> C:\Program Files\World of Warcraft\WoW-2.0.8.6403-to-2.0.10.6448-enUS-downloader.exe:*:Enabled:Blizzard Downloader ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Common Files\AOL\Loader\aolload.exe -> C:\Program Files\Common Files\AOL\Loader\aolload.exe:*:Enabled:AOL Loader ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Messenger\msmsgs.exe -> C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\iTunes\iTunes.exe -> C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\D:\Setup\HPZnet01.exe -> D:\Setup\HPZnet01.exe:*:Enabled:Install Consumer Experience Network Plug in ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe -> C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:Embedded Web Server Link application ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Roxio\Easy Media Creator 8\Digital Home\RoxUpnpServer.exe -> C:\Program Files\Roxio\Easy Media Creator 8\Digital Home\RoxUpnpServer.exe:*:Enabled:Roxio Upnp Service ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\ ->  ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\ ->  ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\1900:UDP -> 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007 ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\2869:TCP -> 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008 ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\139:TCP -> 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004 ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\445:TCP -> 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005 ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\137:UDP -> 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001 ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\138:UDP -> 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002 ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Setup\ ->  ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Setup\\ServiceUpgrade -> 1 ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Setup\InterfacesUnfirewalledAtUpdate\ ->  ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Setup\InterfacesUnfirewalledAtUpdate\\{FD112EA1-9CAA-4808-9E06-E9F939445A9D} -> 1 ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Enum\ ->  ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Enum\\0 -> Root\LEGACY_SHAREDACCESS\0000 ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Enum\\Count -> 1 ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Enum\\NextInstance -> 1 ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\ ->  ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\Type -> 32 ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\Start -> 2 ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\ErrorControl -> 1 ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\ImagePath -> %systemroot%\system32\svchost.exe -k netsvcs ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\DisplayName -> Automatic Updates ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\ObjectName -> LocalSystem ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\\Description -> Enables the download and installation of Windows updates. If this service is disabled, this computer will not be able to use the Automatic Updates feature or the Windows Update Web site. ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Parameters\ ->  ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Parameters\\ServiceDll -> C:\WINDOWS\system32\wuauserv.dll ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Security\ ->  ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Security\\Security ->

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Enum\ ->  ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Enum\\0 -> Root\LEGACY_WUAUSERV\0000 ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Enum\\Count -> 1 ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\Enum\\NextInstance -> 1 ->
< Session Manager Settings [HKLM] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager ->
BootExecute -> autocheck autochk *; ->

WinPFind3 logfile created on: 7/20/2007 9:42:06 PM
WinPFind3U by OldTimer - Version 1.0.39   Folder = C:\Documents and Settings\Evan\Desktop\3333\WinPFind3u\
Microsoft Windows XP Service Pack 2 (Version = 5.1.2600)
Internet Explorer (Version = 6.0.2900.2180)
 
2.00 Gb Total Physical Memory | 1.45 Gb Available Physical Memory | 72.43% Memory free
3.85 Gb Paging File | 3.52 Gb Available in Paging File | 91.43% Paging File free
Paging file location(s): c:\pagefile.sys 2046 4092;
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 149.00 Gb Total Space | 98.92 Gb Free Space | 66.39% Space Free
D: Drive not present or media not loaded
E: Drive not present or media not loaded
Drive F: | 465.65 Gb Total Space | 420.98 Gb Free Space | 90.41% Space Free

Computer Name: ULTIMATE
Current User Name: Evan
Logged in as Administrator.
Current Boot Mode: Normal


[Processes - Non-Microsoft Only]
ati2evxx.exe -> %System32%\ati2evxx.exe -> ATI Technologies Inc. [Ver = 6.14.10.4114 | Size = 360448 bytes | Modified Date = 10/15/2006 4:22:00 PM | Attr = R  ]
brmfrmps.exe -> %System32%\Brmfrmps.exe -> Brother Industries, Ltd. [Ver = 1.10.10.144 | Size = 65536 bytes | Modified Date = 5/5/2003 8:30:22 PM | Attr =    ]
brss01a.exe -> %System32%\brss01a.exe -> brother Industries Ltd [Ver = 1.004 | Size = 45056 bytes | Modified Date = 12/13/2001 1:01:00 AM | Attr =    ]
brsvc01a.exe -> %System32%\brsvc01a.exe -> brother Industries Ltd [Ver = 1, 0, 0, 3 | Size = 57344 bytes | Modified Date = 4/12/2002 1:00:00 AM | Attr =    ]
hpzipm12.exe -> %System32%\HPZipm12.exe -> HP [Ver = 9, 0, 0, 0 | Size = 69632 bytes | Modified Date = 9/29/2004 12:14:36 PM | Attr =    ]
roxio_central.exe -> %CommonProgramFiles%\Roxio Shared\Roxio Central\Main\Roxio_Central.exe ->  [Ver = 3.00.90a | Size = 2285568 bytes | Modified Date = 10/5/2005 4:00:00 AM | Attr =    ]
roxmediadb.exe -> %CommonProgramFiles%\Roxio Shared\SharedCOM8\RoxMediaDB.exe -> Sonic Solutions [Ver = 8.0.2.16 | Size = 856064 bytes | Modified Date = 10/11/2005 7:48:00 AM | Attr =    ]
roxwatch.exe -> %CommonProgramFiles%\Roxio Shared\SharedCOM8\RoxWatch.exe -> Sonic Solutions [Ver = 8.0.2.16 | Size = 155648 bytes | Modified Date = 10/11/2005 7:45:10 AM | Attr =    ]
spysweeper.exe -> %ProgramFiles%\Webroot\Spy Sweeper\SpySweeper.exe -> Webroot Software, Inc. [Ver = 3,5,1,3356 | Size = 3562296 bytes | Modified Date = 6/21/2007 6:57:28 PM | Attr =    ]
spysweeperui.exe -> %ProgramFiles%\Webroot\Spy Sweeper\SpySweeperUI.exe -> Webroot Software, Inc. [Ver = 5,5,1,3356 | Size = 5355832 bytes | Modified Date = 6/21/2007 6:57:32 PM | Attr =    ]
ssu.exe -> %ProgramFiles%\Webroot\Spy Sweeper\ssu.exe ->  [Ver =  | Size = 206136 bytes | Modified Date = 6/21/2007 6:43:52 PM | Attr =    ]
stsystra.exe -> %SystemRoot%\stsystra.exe -> SigmaTel, Inc. [Ver = 1.0.4450.0  nd83 cp1 | Size = 339968 bytes | Modified Date = 3/22/2005 5:20:44 PM | Attr =    ]
wdbtnmgr.exe -> %System32%\WDBtnMgr.exe -> Western Digital Technologies, Inc. [Ver = 2, 0, 4, 0 | Size = 339968 bytes | Modified Date = 7/10/2007 8:10:02 PM | Attr =    ]
winpfind3u.exe -> %UserDesktop%\3333\WinPFind3u\WinPFind3U.exe -> OldTimer Tools [Ver = 1.0.38.0 | Size = 322048 bytes | Modified Date = 6/23/2007 3:15:54 PM | Attr =    ]

[Win32 Services - Non-Microsoft Only]
(Adobe LM Service) Adobe LM Service [Win32_Own | On_Demand | Stopped] -> %CommonProgramFiles%\Adobe Systems Shared\Service\Adobelmsvc.exe -> Adobe Systems [Ver = 2.67.010 | Size = 72704 bytes | Modified Date = 1/25/2007 12:34:16 AM | Attr =    ]
(Ati HotKey Poller) Ati HotKey Poller [Win32_Own | Auto | Running] -> %System32%\ati2evxx.exe -> ATI Technologies Inc. [Ver = 6.14.10.4114 | Size = 360448 bytes | Modified Date = 10/15/2006 4:22:00 PM | Attr = R  ]
(brmfrmps) Brother Popup Suspend service for Resource manager [Win32_Own | Auto | Running] -> %System32%\Brmfrmps.exe -> Brother Industries, Ltd. [Ver = 1.10.10.144 | Size = 65536 bytes | Modified Date = 5/5/2003 8:30:22 PM | Attr =    ]
(Brother XP spl Service) BrSplService [Win32_Own | Auto | Running] -> %System32%\brsvc01a.exe -> brother Industries Ltd [Ver = 1, 0, 0, 3 | Size = 57344 bytes | Modified Date = 4/12/2002 1:00:00 AM | Attr =    ]
(dmadmin) Logical Disk Manager Administrative Service [Win32_Shared | On_Demand | Stopped] -> %System32%\dmadmin.exe -> Microsoft Corp., Veritas Software [Ver = 2600.2180.503.0 | Size = 224768 bytes | Modified Date = 8/10/2004 6:00:00 AM | Attr =    ]
(IDriverT) InstallDriver Table Manager [Win32_Own | On_Demand | Stopped] -> %CommonProgramFiles%\InstallShield\Driver\1050\Intel 32\IDriverT.exe -> Macrovision Corporation [Ver = 10.50.125 | Size = 73728 bytes | Modified Date = 10/22/2004 4:24:18 AM | Attr =    ]
(iPod Service) iPod Service [Win32_Own | On_Demand | Stopped] -> %ProgramFiles%\iPod\bin\iPodService.exe -> Apple Inc. [Ver = 7.2.0.34 | Size = 501312 bytes | Modified Date = 5/26/2007 12:45:46 PM | Attr =    ]
(NAIMServInst) NAI ePO Agent Install [Win32_Own | On_Demand | Stopped] ->  -> File not found
(Pml Driver HPZ12) Pml Driver HPZ12 [Win32_Own | Auto | Running] -> %System32%\HPZipm12.exe -> HP [Ver = 9, 0, 0, 0 | Size = 69632 bytes | Modified Date = 9/29/2004 12:14:36 PM | Attr =    ]
(RoxLiveShare) LiveShare P2P Server [Win32_Own | Auto | Stopped] -> %CommonProgramFiles%\Roxio Shared\SharedCOM8\RoxLiveShare.exe -> Sonic Solutions [Ver = 8.0.2.16 | Size = 229376 bytes | Modified Date = 10/11/2005 7:49:20 AM | Attr =    ]
(RoxMediaDB) RoxMediaDB [Win32_Own | On_Demand | Running] -> %CommonProgramFiles%\Roxio Shared\SharedCOM8\RoxMediaDB.exe -> Sonic Solutions [Ver = 8.0.2.16 | Size = 856064 bytes | Modified Date = 10/11/2005 7:48:00 AM | Attr =    ]
(RoxUPnPRenderer) RoxUPnPRenderer [Win32_Own | On_Demand | Stopped] -> %CommonProgramFiles%\Roxio Shared\SharedCom\RoxUpnpRenderer.exe -> Sonic Solutions [Ver = 8.0.0.212  | Size = 45056 bytes | Modified Date = 10/11/2005 12:58:00 AM | Attr =    ]
(RoxUpnpServer) RoxUpnpServer [Win32_Own | Auto | Stopped] -> %ProgramFiles%\Roxio\Easy Media Creator 8\Digital Home\RoxUpnpServer.exe -> Sonic Solutions [Ver = 8.0.1.93 | Size = 401408 bytes | Modified Date = 10/11/2005 12:57:18 AM | Attr =    ]
(RoxWatch) Roxio Hard Drive Watcher [Win32_Own | Auto | Running] -> %CommonProgramFiles%\Roxio Shared\SharedCOM8\RoxWatch.exe -> Sonic Solutions [Ver = 8.0.2.16 | Size = 155648 bytes | Modified Date = 10/11/2005 7:45:10 AM | Attr =    ]
(WebrootSpySweeperService) Webroot Spy Sweeper Engine [Win32_Own | Auto | Running] -> %ProgramFiles%\Webroot\Spy Sweeper\SpySweeper.exe -> Webroot Software, Inc. [Ver = 3,5,1,3356 | Size = 3562296 bytes | Modified Date = 6/21/2007 6:57:28 PM | Attr =    ]

[Registry - Non-Microsoft Only]
< Run [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ->
SigmatelSysTrayApp -> %SystemRoot%\stsystra.exe -> SigmaTel, Inc. [Ver = 1.0.4450.0  nd83 cp1 | Size = 339968 bytes | Modified Date = 3/22/2005 5:20:44 PM | Attr =    ]
SpySweeper -> %ProgramFiles%\Webroot\Spy Sweeper\SpySweeperUI.exe -> Webroot Software, Inc. [Ver = 5,5,1,3356 | Size = 5355832 bytes | Modified Date = 6/21/2007 6:57:32 PM | Attr =    ]
WD Button Manager -> %System32%\WDBtnMgr.exe -> Western Digital Technologies, Inc. [Ver = 2, 0, 4, 0 | Size = 339968 bytes | Modified Date = 7/10/2007 8:10:02 PM | Attr =    ]
< OptionalComponents [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\ ->
IMAIL -> Installed = 1 ->
MAPI -> Installed = 1 ->
MSFS -> Installed = 1 ->
< SecurityProviders [HKLM] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\\SecurityProviders ->
< Winlogon settings [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon ->
< Winlogon settings [HKCU] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon ->
< Winlogon\Notify settings [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ ->
WRNotifier -> %System32%\WRLogonNTF.dll -> Webroot Software, Inc. [Ver = 3,5,1,3356 | Size = 219448 bytes | Modified Date = 6/21/2007 6:43:54 PM | Attr =    ]
< CurrentVersion Policy Settings [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\\{BDEADF00-C265-11D0-BCED-00A0C90AB50F} -> 1 ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\\{6DFD7C5C-2451-11d3-A299-00C04F8EF6AF} -> 1073741857 ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum\\{0DF44EAA-FF21-4412-828E-260A8728E7F1} -> 32 ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\dontdisplaylastusername -> 0 ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\legalnoticecaption ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\legalnoticetext ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\shutdownwithoutlogon -> 1 ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\undockwithoutlogon -> 1 ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\InstallVisualStyle -> C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\\InstallTheme -> C:\WINDOWS\Resources\Themes\Royale.theme ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\ ->  ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\\NoCDBurning -> 0 ->
< CurrentVersion Policy Settings [HKCU] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ ->
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ ->  ->
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\ ->  ->
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun -> 145 ->
< HOSTS File > (764 bytes) -> C:\WINDOWS\System32\drivers\etc\Hosts ->
127.0.0.1       localhost ->  ->
192.168.1.100 HP00187161A603 ->  ->
< Internet Explorer Settings > ->  ->
HKLM: Default_Page_URL -> http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome ->
HKLM: Main\\Default_Search_URL -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch ->
HKLM: Local Page -> %SystemRoot%\system32\blank.htm ->
HKLM: Search Page -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch ->
HKLM: Start Page -> http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home ->
HKLM: CustomizeSearch -> http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm ->
HKLM: SearchAssistant -> http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm ->
HKCU: ProxyEnable -> 0 ->
< Trusted Sites > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ ->
msn.com [ - ] ->  ->
online_musicmatch.com [https] ->  ->
< BHO's > -> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ ->
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} [HKLM] -> %CommonProgramFiles%\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [Adobe PDF Reader Link Helper] -> Adobe Systems Incorporated [Ver = 8.0.0.2006102200 | Size = 62080 bytes | Modified Date = 10/22/2006 11:08:42 PM | Attr =    ]
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} [HKLM] -> %ProgramFiles%\Java\jre1.5.0_09\bin\ssv.dll [SSVHelper Class] -> Sun Microsystems, Inc. [Ver = 5.0.90.3 | Size = 434279 bytes | Modified Date = 10/12/2006 4:25:44 AM | Attr =    ]
{AE7CD045-E861-484f-8273-0445EE161910} [HKLM] -> %ProgramFiles%\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [AcroIEToolbarHelper Class] -> Adobe Systems Incorporated [Ver = 7.0.5.2005092300 | Size = 231160 bytes | Modified Date = 9/24/2005 12:41:42 AM | Attr =    ]
< Internet Explorer Bars [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\ ->
{182EC0BE-5110-49C8-A062-BEB1D02A220B} [HKLM] -> %ProgramFiles%\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [Adobe PDF] -> Adobe Systems Incorporated [Ver = 7.0.5.2005092300 | Size = 231160 bytes | Modified Date = 9/24/2005 12:41:42 AM | Attr =    ]
< Internet Explorer ToolBars [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar ->
{47833539-D0C5-4125-9FA8-0819E2EAAC93} [HKLM] -> %ProgramFiles%\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [Adobe PDF] -> Adobe Systems Incorporated [Ver = 7.0.5.2005092300 | Size = 231160 bytes | Modified Date = 9/24/2005 12:41:42 AM | Attr =    ]
< Internet Explorer ToolBars [HKCU] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ ->
ShellBrowser\\{C4069E3A-68F1-403E-B40E-20066696354B} [HKLM] -> Reg Data - Key not found [Reg Data - Key not found] -> File not found
WebBrowser\\{47833539-D0C5-4125-9FA8-0819E2EAAC93} [HKLM] -> %ProgramFiles%\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [Adobe PDF] -> Adobe Systems Incorporated [Ver = 7.0.5.2005092300 | Size = 231160 bytes | Modified Date = 9/24/2005 12:41:42 AM | Attr =    ]
< Internet Explorer Extensions [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\ ->
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} [HKLM] -> %ProgramFiles%\Java\jre1.5.0_09\bin\npjpi150_09.dll [MenuText: Sun Java Console] -> Sun Microsystems, Inc. [Ver = 5.0.90.3 | Size = 69746 bytes | Modified Date = 10/12/2006 4:25:44 AM | Attr =    ]
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} [HKCU] -> %ProgramFiles%\Java\jre1.5.0_09\bin\ssv.dll [MenuText: Sun Java Console] -> Sun Microsystems, Inc. [Ver = 5.0.90.3 | Size = 434279 bytes | Modified Date = 10/12/2006 4:25:44 AM | Attr =    ]
{92780B2