Skip to main content
Start a Conversation

Unsolved

This post is more than 5 years old

jusmille

13 Posts

2668

April 18th, 2008 01:00

nt authority system shutdown svc host

Internet not working and nt authority system shutdown with one minute clock

svc host in task manager processes  

 

 

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:56:37 PM, on 4/17/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Messenger\MSMSGS.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\taskmgr.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/ie/defaults/sb/yme/*http://www.yahoo.com/ext/search/search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/ie/defaults/su/yme/*http://www.yahoo.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb10.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [SMSTray] C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [VerizonServicepoint.exe] "C:\Program Files\Verizon\VSP\VerizonServicepoint.exe" /AUTORUN
O4 - HKLM\..\Run: [ddoctorv2] "C:\Program Files\Comcast\Desktop Doctor\bin\sprtcmd.exe" /P ddoctorv2
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [Verizon Custom Uninstall Tracking] C:\DOCUME~1\Jay\LOCALS~1\Temp\InstallHelper.exe /uninstalltrackingvendor=Verizon
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\MSMSGS.EXE" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - HKCU\..\Run: [CTSyncU.exe] "C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Nero PhotoShow Media Manager] C:\PROGRA~1\Nero\NEROPH~1\data\Xtras\mssysmgr.exe
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User '?')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User '?')
O4 - HKUS\S-1-5-21-1757981266-484061587-725345543-1004\..\Run: [MSMSGS] "C:\Program Files\Messenger\MSMSGS.EXE" /background (User '?')
O4 - HKUS\S-1-5-21-1757981266-484061587-725345543-1004\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1 (User '?')
O4 - HKUS\S-1-5-21-1757981266-484061587-725345543-1004\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE" (User '?')
O4 - HKUS\S-1-5-21-1757981266-484061587-725345543-1004\..\Run: [CTSyncU.exe] "C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe" (User '?')
O4 - HKUS\S-1-5-21-1757981266-484061587-725345543-1004\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe (User '?')
O4 - HKUS\S-1-5-21-1757981266-484061587-725345543-1004\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" (User '?')
O4 - HKUS\S-1-5-21-1757981266-484061587-725345543-1004\..\Run: [Nero PhotoShow Media Manager] C:\PROGRA~1\Nero\NEROPH~1\data\Xtras\mssysmgr.exe (User '?')
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User '?')
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
O4 - S-1-5-21-1757981266-484061587-725345543-1004 Startup: LimeWire On Startup.lnk = C:\Program Files\LimeWire\LimeWire.exe (User '?')
O4 - Startup: LimeWire On Startup.lnk = C:\Program Files\LimeWire\LimeWire.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - https://activatemydsl.verizon.net/sdcCommon/download/DSL/tgctlcm.cab
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/15031/CTSUEng.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase370.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/FacebookPhotoUploader.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1150031887796
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://sdlc-esd.sun.com/ESD40/JSCDL/jre/6u5-b19/jinstall-6u5-windows-i586-jc.cab?AuthParam=1208371036_735056a7581e41591dd07c569025390b&GroupName=JSC&BHost=javadl.sun.com&FilePath=/ESD40/JSCDL/jre/6u5-b19/jinstall-6u5-windows-i586-jc.cab&File=jinstall-6u5-windows-i586-jc.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/15033/CTPID.cab
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: SupportSoft Sprocket Service (ddoctorv2) (sprtsvc_ddoctorv2) - SupportSoft, Inc. - C:\Program Files\Comcast\Desktop Doctor\bin\sprtsvc.exe

--
End of file - 10137 bytes

bamajim

10.4K Posts

April 18th, 2008 15:00

jusmille

Your problem may or may not be infection related, but let's check

To stop the shutdown clock while we are working on the PC do this

Click Start ->> Run ->> and type in shutdown -a (there is a space betweeen n and - ) O.k.

2. Go HERE and download File Lister.
  • Save it to your Desktop
    Rt Click ->> Extract all ->> And extract it to your Desktop
    Additional help on extracting zip files can be found HERE
    Open the File Lister Folder.
    Rt Click FileLister.vbe ->>Select Open Then Open to confirm.
    As the program runs, it will appear that nothing is happening.
    When the program is fnished it will produce a log for you C:\Files.txt






Copy and paste the contents of that log in your reply













Microsoft MVP Consumer-Security

 


"The world is what you make of it"




jusmille

13 Posts

April 26th, 2008 13:00

way to big to post what part to you need ?

bamajim

10.4K Posts

April 26th, 2008 22:00

jusmille

 

I need to see it all. If it is too large for one post then divide into parts and post it in multiple replies.

 



 

Microsoft MVP Consumer-Security

 


"The world is what you make of it"


jusmille

13 Posts

May 17th, 2008 22:00

+++++++++++++++++++++++++++++++++
+
+ File Lister
+
+ Version 1.0.1
+
+  By bamajim
+
+++++++++++++++++++++++++++++++++

=== Values under HKLM\~\Run ======

REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AlcxMonitor"="ALCXMNTR.EXE"
"VTTimer"="VTTimer.exe"
"AGRSMMSG"="AGRSMMSG.exe"
"HPDJ Taskbar Utility"="C:\\WINDOWS\\System32\\spool\\drivers\\w32x86\\3\\hpztsb10.exe"
"Adobe Photo Downloader"="\"C:\\Program Files\\Adobe\\Photoshop Album Starter Edition\\3.0\\Apps\\apdproxy.exe\""
"SMSTray"="C:\\Program Files\\Samsung\\Samsung Media Studio 5\\SMSTray.exe"
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\""
"VerizonServicepoint.exe"="\"C:\\Program Files\\Verizon\\VSP\\VerizonServicepoint.exe\" /AUTORUN"
"ddoctorv2"="\"C:\\Program Files\\Comcast\\Desktop Doctor\\bin\\sprtcmd.exe\" /P ddoctorv2"
@=""
"AVG7_CC"="C:\\PROGRA~1\\Grisoft\\AVG7\\avgcc.exe /STARTUP"
"Verizon Custom Uninstall Tracking"="C:\\DOCUME~1\\Jay\\LOCALS~1\\Temp\\InstallHelper.exe /uninstalltrackingvendor=Verizon"
"NeroFilterCheck"="C:\\Program Files\\Common Files\\Ahead\\Lib\\NeroCheck.exe"
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.6.0_05\\bin\\jusched.exe\""


=== Values under HKCU\~\Run ======

REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="\"C:\\Program Files\\Messenger\\MSMSGS.EXE\" /background"
"swg"="C:\\Program Files\\Google\\GoogleToolbarNotifier\\GoogleToolbarNotifier.exe"
"ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe"
"updateMgr"="\"C:\\Program Files\\Adobe\\Acrobat 7.0\\Reader\\AdobeUpdateManager.exe\" AcRdB7_0_9 -reboot 1"
"H/PC Connection Agent"="\"C:\\Program Files\\Microsoft ActiveSync\\WCESCOMM.EXE\""
"CTSyncU.exe"="\"C:\\Program Files\\Creative\\Sync Manager Unicode\\CTSyncU.exe\""
"WMPNSCFG"="C:\\Program Files\\Windows Media Player\\WMPNSCFG.exe"
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="\"C:\\Program Files\\Common Files\\Ahead\\Lib\\NMBgMonitor.exe\""
"Nero PhotoShow Media Manager"="C:\\PROGRA~1\\Nero\\NEROPH~1\\data\\Xtras\\mssysmgr.exe"


=== Folders and Files from "C:\" and "C:\Windows" Created Last 30 Days ======

4/26/2008 9:26:25 AM    50859    32    C:\Files.txt
4/9/2008 3:02:35 AM    2439735    C:\WINDOWS\$NtUninstallKB941693$
4/9/2008 3:02:35 AM    596151    C:\WINDOWS\$NtUninstallKB941693$\spuninst
4/9/2008 3:00:38 AM    790724    C:\WINDOWS\$NtUninstallKB945553$
4/9/2008 3:00:38 AM    596676    C:\WINDOWS\$NtUninstallKB945553$\spuninst
4/9/2008 3:02:04 AM    878132    C:\WINDOWS\$NtUninstallKB948590$
4/9/2008 3:02:04 AM    596020    C:\WINDOWS\$NtUninstallKB948590$\spuninst
4/9/2008 3:02:40 AM    693469    C:\WINDOWS\$NtUninstallKB948881$
4/9/2008 3:02:40 AM    595165    C:\WINDOWS\$NtUninstallKB948881$\spuninst
4/9/2008 2:40:45 AM    27335    32    C:\WINDOWS\KB941693.log
4/9/2008 2:39:13 AM    21340    32    C:\WINDOWS\KB945553.log
4/9/2008 3:02:07 AM    29787    32    C:\WINDOWS\KB947864-IE7.log
4/9/2008 2:39:20 AM    21332    32    C:\WINDOWS\KB948590.log
4/9/2008 3:02:39 AM    18202    32    C:\WINDOWS\KB948881.log
4/8/2008 6:59:37 PM    28    32    C:\WINDOWS\pdf995.ini
4/26/2008 8:47:28 AM    1409    32    C:\WINDOWS\QTFont.for
4/26/2008 8:47:28 AM    54156    34    C:\WINDOWS\QTFont.qfn
4/16/2008 1:50:28 PM    135168    32    C:\WINDOWS\system32\java.exe
4/16/2008 1:50:28 PM    69632    32    C:\WINDOWS\system32\javacpl.cpl
4/16/2008 1:50:28 PM    135168    32    C:\WINDOWS\system32\javaw.exe
4/16/2008 1:50:28 PM    139264    32    C:\WINDOWS\system32\javaws.exe
4/3/2008 2:12:26 PM    44544    0    C:\WINDOWS\system32\msxml4a.dll
4/3/2008 2:11:56 PM    110592    32    C:\WINDOWS\system32\TG_DUMP0708.DLL

=== Files under "\Administrator\Startup" Last 30 Days======

4/16/2008 1:50:28 PM    135168    32    C:\WINDOWS\system32\java.exe
4/16/2008 1:50:28 PM    69632    32    C:\WINDOWS\system32\javacpl.cpl
4/16/2008 1:50:28 PM    135168    32    C:\WINDOWS\system32\javaw.exe
4/16/2008 1:50:28 PM    139264    32    C:\WINDOWS\system32\javaws.exe
4/3/2008 2:12:26 PM    44544    0    C:\WINDOWS\system32\msxml4a.dll
4/3/2008 2:11:56 PM    110592    32    C:\WINDOWS\system32\TG_DUMP0708.DLL

=== Files under "All Users\Startup" Last 30 Days======


=== Folders under "\Program Files" Last 30 Days======

4/8/2008 4:43:39 PM    52125139    C:\Program Files\DeductionPro 2007
4/8/2008 4:43:39 PM    71140    C:\Program Files\DeductionPro 2007\Fonts
4/8/2008 4:43:39 PM    100712    C:\Program Files\DeductionPro 2007\form8283
4/8/2008 4:43:52 PM    2044629    C:\Program Files\DeductionPro 2007\Images
4/8/2008 4:43:52 PM    743799    C:\Program Files\DeductionPro 2007\Images\Buttons
4/8/2008 4:43:39 PM    43858183    C:\Program Files\DeductionPro 2007\jre
4/8/2008 4:43:44 PM    6176758    C:\Program Files\DeductionPro 2007\jre\bin
4/8/2008 4:43:44 PM    1218052    C:\Program Files\DeductionPro 2007\jre\bin\client
4/8/2008 4:43:45 PM    1770770    C:\Program Files\DeductionPro 2007\jre\javaws
4/8/2008 4:43:51 PM    98008    C:\Program Files\DeductionPro 2007\jre\javaws\resources
4/8/2008 4:43:42 PM    35107691    C:\Program Files\DeductionPro 2007\jre\lib
4/8/2008 4:43:44 PM    493589    C:\Program Files\DeductionPro 2007\jre\lib\audio
4/8/2008 4:43:44 PM    477754    C:\Program Files\DeductionPro 2007\jre\lib\cmm
4/8/2008 4:43:45 PM    937979    C:\Program Files\DeductionPro 2007\jre\lib\ext
4/8/2008 4:43:45 PM    2068932    C:\Program Files\DeductionPro 2007\jre\lib\fonts
4/8/2008 4:43:45 PM    671    C:\Program Files\DeductionPro 2007\jre\lib\i386
4/8/2008 4:43:45 PM    18380    C:\Program Files\DeductionPro 2007\jre\lib\im
4/8/2008 4:43:44 PM    2410    C:\Program Files\DeductionPro 2007\jre\lib\images
4/8/2008 4:43:45 PM    2410    C:\Program Files\DeductionPro 2007\jre\lib\images\cursors
4/8/2008 4:43:46 PM    41829    C:\Program Files\DeductionPro 2007\jre\lib\security
4/8/2008 4:43:42 PM    239871    C:\Program Files\DeductionPro 2007\jre\lib\zi
4/8/2008 4:43:42 PM    8309    C:\Program Files\DeductionPro 2007\jre\lib\zi\Africa
4/8/2008 4:43:42 PM    79934    C:\Program Files\DeductionPro 2007\jre\lib\zi\America
4/8/2008 4:43:43 PM    1311    C:\Program Files\DeductionPro 2007\jre\lib\zi\America\Indiana
4/8/2008 4:43:43 PM    1260    C:\Program Files\DeductionPro 2007\jre\lib\zi\America\Kentucky
4/8/2008 4:43:43 PM    1276    C:\Program Files\DeductionPro 2007\jre\lib\zi\America\North_Dakota
4/8/2008 4:43:43 PM    2755    C:\Program Files\DeductionPro 2007\jre\lib\zi\Antarctica
4/8/2008 4:43:43 PM    51040    C:\Program Files\DeductionPro 2007\jre\lib\zi\Asia
4/8/2008 4:43:43 PM    8762    C:\Program Files\DeductionPro 2007\jre\lib\zi\Atlantic
4/8/2008 4:43:43 PM    7888    C:\Program Files\DeductionPro 2007\jre\lib\zi\Australia
4/8/2008 4:43:42 PM    783    C:\Program Files\DeductionPro 2007\jre\lib\zi\Etc
4/8/2008 4:43:43 PM    55696    C:\Program Files\DeductionPro 2007\jre\lib\zi\Europe
4/8/2008 4:43:43 PM    663    C:\Program Files\DeductionPro 2007\jre\lib\zi\Indian
4/8/2008 4:43:43 PM    6568    C:\Program Files\DeductionPro 2007\jre\lib\zi\Pacific
4/8/2008 4:43:52 PM    1909853    C:\Program Files\DeductionPro 2007\lib
4/8/2008 4:43:56 PM    3877    C:\Program Files\DeductionPro 2007\NPS
4/8/2008 4:43:56 PM    2516700    C:\Program Files\DeductionPro 2007\WebHelp
4/8/2008 4:43:57 PM    4060    C:\Program Files\DeductionPro 2007\WebHelp\images
4/8/2008 4:43:57 PM    284082    C:\Program Files\DeductionPro 2007\WebHelp\whdata
4/8/2008 4:43:57 PM    852685    C:\Program Files\DeductionPro 2007\WebHelp\whgdata
4/8/2008 4:43:56 PM    675090    C:\Program Files\DeductionPro 2007\XMLDB

jusmille

13 Posts

May 17th, 2008 22:00

4/8/2008 4:47:09 PM    17481    C:\Program Files\TaxCut07\Help\MM\Us\irs\f1099r
4/8/2008 4:47:09 PM    134926    C:\Program Files\TaxCut07\Help\MM\Us\irs\f1116
4/8/2008 4:47:09 PM    102101    C:\Program Files\TaxCut07\Help\MM\Us\irs\f1120s
4/8/2008 4:47:09 PM    9960    C:\Program Files\TaxCut07\Help\MM\Us\irs\f1310
4/8/2008 4:47:09 PM    50004    C:\Program Files\TaxCut07\Help\MM\Us\irs\f2106
4/8/2008 4:47:09 PM    18584    C:\Program Files\TaxCut07\Help\MM\Us\irs\f2106ez
4/8/2008 4:47:09 PM    6762    C:\Program Files\TaxCut07\Help\MM\Us\irs\f2120
4/8/2008 4:47:09 PM    44171    C:\Program Files\TaxCut07\Help\MM\Us\irs\f2210
4/8/2008 4:47:09 PM    14424    C:\Program Files\TaxCut07\Help\MM\Us\irs\f2210ai
4/8/2008 4:47:08 PM    11902    C:\Program Files\TaxCut07\Help\MM\Us\irs\F2439
4/8/2008 4:47:09 PM    30213    C:\Program Files\TaxCut07\Help\MM\Us\irs\f2441
4/8/2008 4:47:09 PM    86375    C:\Program Files\TaxCut07\Help\MM\Us\irs\f2555
4/8/2008 4:47:09 PM    23064    C:\Program Files\TaxCut07\Help\MM\Us\irs\f2555ez
4/8/2008 4:47:09 PM    29360    C:\Program Files\TaxCut07\Help\MM\Us\irs\f3468
4/8/2008 4:47:09 PM    19156    C:\Program Files\TaxCut07\Help\MM\Us\irs\f3800
4/8/2008 4:47:09 PM    13713    C:\Program Files\TaxCut07\Help\MM\Us\irs\f3903
4/8/2008 4:47:09 PM    42095    C:\Program Files\TaxCut07\Help\MM\Us\irs\f4136
4/8/2008 4:47:09 PM    11702    C:\Program Files\TaxCut07\Help\MM\Us\irs\f4137
4/8/2008 4:47:09 PM    124264    C:\Program Files\TaxCut07\Help\MM\Us\irs\f4562
4/8/2008 4:47:09 PM    34319    C:\Program Files\TaxCut07\Help\MM\Us\irs\f4684
4/8/2008 4:47:09 PM    72072    C:\Program Files\TaxCut07\Help\MM\Us\irs\f4797
4/8/2008 4:47:09 PM    13323    C:\Program Files\TaxCut07\Help\MM\Us\irs\f4835
4/8/2008 4:47:09 PM    27841    C:\Program Files\TaxCut07\Help\MM\Us\irs\f4868
4/8/2008 4:47:09 PM    16128    C:\Program Files\TaxCut07\Help\MM\Us\irs\f4952
4/8/2008 4:47:09 PM    28344    C:\Program Files\TaxCut07\Help\MM\Us\irs\f4972
4/8/2008 4:47:09 PM    44682    C:\Program Files\TaxCut07\Help\MM\Us\irs\f5329
4/8/2008 4:47:09 PM    23445    C:\Program Files\TaxCut07\Help\MM\Us\irs\f5695
4/8/2008 4:47:09 PM    53874    C:\Program Files\TaxCut07\Help\MM\Us\irs\f6198
4/8/2008 4:47:09 PM    86446    C:\Program Files\TaxCut07\Help\MM\Us\irs\f6251
4/8/2008 4:47:09 PM    23452    C:\Program Files\TaxCut07\Help\MM\Us\irs\f6252
4/8/2008 4:47:09 PM    21897    C:\Program Files\TaxCut07\Help\MM\Us\irs\f6781
4/8/2008 4:47:09 PM    46206    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8283
4/8/2008 4:47:09 PM    10079    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8332
4/8/2008 4:47:09 PM    18326    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8379
4/8/2008 4:47:09 PM    10170    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8396
4/8/2008 4:47:09 PM    11966    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8453ol
4/8/2008 4:47:09 PM    93092    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8582
4/8/2008 4:47:09 PM    8271    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8586
4/8/2008 4:47:09 PM    63645    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8606
4/8/2008 4:47:09 PM    35341    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8609a
4/8/2008 4:47:09 PM    30470    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8615
4/8/2008 4:47:09 PM    31101    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8801
4/8/2008 4:47:09 PM    14241    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8812
4/8/2008 4:47:09 PM    15511    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8814
4/8/2008 4:47:09 PM    15404    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8815
4/8/2008 4:47:09 PM    3095    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8818
4/8/2008 4:47:08 PM    12008    C:\Program Files\TaxCut07\Help\MM\Us\irs\F8822
4/8/2008 4:47:09 PM    30775    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8824
4/8/2008 4:47:09 PM    28803    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8829
4/8/2008 4:47:09 PM    36918    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8839
4/8/2008 4:47:10 PM    48542    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8853
4/8/2008 4:47:08 PM    7440    C:\Program Files\TaxCut07\Help\MM\Us\irs\F8859
4/8/2008 4:47:10 PM    8392    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8862
4/8/2008 4:47:10 PM    16474    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8863
4/8/2008 4:47:08 PM    8771    C:\Program Files\TaxCut07\Help\MM\Us\irs\F8880
4/8/2008 4:47:10 PM    22660    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8885
4/8/2008 4:47:10 PM    14611    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8888
4/8/2008 4:47:10 PM    39199    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8889
4/8/2008 4:47:10 PM    8957    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8901
4/8/2008 4:47:10 PM    67504    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8903
4/8/2008 4:47:10 PM    18267    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8910
4/8/2008 4:47:10 PM    21154    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8915
4/8/2008 4:47:10 PM    13362    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8917
4/8/2008 4:47:10 PM    30775    C:\Program Files\TaxCut07\Help\MM\Us\irs\f9465
4/8/2008 4:47:10 PM    45125    C:\Program Files\TaxCut07\Help\MM\Us\irs\fss4
4/8/2008 4:47:10 PM    13798    C:\Program Files\TaxCut07\Help\MM\Us\irs\ftd90
4/8/2008 4:47:10 PM    8884    C:\Program Files\TaxCut07\Help\MM\Us\irs\fw10
4/8/2008 4:47:10 PM    116344    C:\Program Files\TaxCut07\Help\MM\Us\irs\fw2
4/8/2008 4:47:10 PM    7051    C:\Program Files\TaxCut07\Help\MM\Us\irs\fw2g
4/8/2008 4:47:10 PM    19125    C:\Program Files\TaxCut07\Help\MM\Us\irs\fw4
4/8/2008 4:47:10 PM    7741    C:\Program Files\TaxCut07\Help\MM\Us\irs\sched1
4/8/2008 4:47:10 PM    26569    C:\Program Files\TaxCut07\Help\MM\Us\irs\sched2
4/8/2008 4:47:10 PM    18465    C:\Program Files\TaxCut07\Help\MM\Us\irs\sched3
4/8/2008 4:47:10 PM    156526    C:\Program Files\TaxCut07\Help\MM\Us\irs\scheda
4/8/2008 4:47:10 PM    12904    C:\Program Files\TaxCut07\Help\MM\Us\irs\schedb
4/8/2008 4:47:10 PM    94996    C:\Program Files\TaxCut07\Help\MM\Us\irs\schedc
4/8/2008 4:47:10 PM    8818    C:\Program Files\TaxCut07\Help\MM\Us\irs\schedcez
4/8/2008 4:47:10 PM    85932    C:\Program Files\TaxCut07\Help\MM\Us\irs\schedd
4/8/2008 4:47:10 PM    55711    C:\Program Files\TaxCut07\Help\MM\Us\irs\schede
4/8/2008 4:47:10 PM    10889    C:\Program Files\TaxCut07\Help\MM\Us\irs\schedeic
4/8/2008 4:47:10 PM    56386    C:\Program Files\TaxCut07\Help\MM\Us\irs\schedf
4/8/2008 4:47:10 PM    49189    C:\Program Files\TaxCut07\Help\MM\Us\irs\schedh
4/8/2008 4:47:10 PM    57661    C:\Program Files\TaxCut07\Help\MM\Us\irs\schedj
4/8/2008 4:47:10 PM    18708    C:\Program Files\TaxCut07\Help\MM\Us\irs\schedr
4/8/2008 4:47:10 PM    32186    C:\Program Files\TaxCut07\Help\MM\Us\irs\schedse
4/8/2008 4:47:10 PM    3233707    C:\Program Files\TaxCut07\Help\MM\Us\pub
4/8/2008 4:47:11 PM    1870316    C:\Program Files\TaxCut07\Help\MM\Us\tips
4/8/2008 4:47:11 PM    154170    C:\Program Files\TaxCut07\Help\MM\Us\tips\Business
4/8/2008 4:47:11 PM    74556    C:\Program Files\TaxCut07\Help\MM\Us\tips\Business\Expenses
4/8/2008 4:47:11 PM    3593    C:\Program Files\TaxCut07\Help\MM\Us\tips\Business\Farm
4/8/2008 4:47:11 PM    41900    C:\Program Files\TaxCut07\Help\MM\Us\tips\Business\Income
4/8/2008 4:47:11 PM    22416    C:\Program Files\TaxCut07\Help\MM\Us\tips\Business\Rental
4/8/2008 4:47:11 PM    11681    C:\Program Files\TaxCut07\Help\MM\Us\tips\Business\Taxes
4/8/2008 4:47:11 PM    239157    C:\Program Files\TaxCut07\Help\MM\Us\tips\Deductions_Credits
4/8/2008 4:47:12 PM    17378    C:\Program Files\TaxCut07\Help\MM\Us\tips\Deductions_Credits\Casualty
4/8/2008 4:47:12 PM    19573    C:\Program Files\TaxCut07\Help\MM\Us\tips\Deductions_Credits\Charitable
4/8/2008 4:47:12 PM    24670    C:\Program Files\TaxCut07\Help\MM\Us\tips\Deductions_Credits\Child
4/8/2008 4:47:12 PM    65360    C:\Program Files\TaxCut07\Help\MM\Us\tips\Deductions_Credits\Education
4/8/2008 4:47:12 PM    6244    C:\Program Files\TaxCut07\Help\MM\Us\tips\Deductions_Credits\EIC
4/8/2008 4:47:12 PM    18722    C:\Program Files\TaxCut07\Help\MM\Us\tips\Deductions_Credits\Job_Related
4/8/2008 4:47:12 PM    10044    C:\Program Files\TaxCut07\Help\MM\Us\tips\Deductions_Credits\Medical
4/8/2008 4:47:12 PM    26873    C:\Program Files\TaxCut07\Help\MM\Us\tips\Deductions_Credits\Mortgage
4/8/2008 4:47:12 PM    24749    C:\Program Files\TaxCut07\Help\MM\Us\tips\Deductions_Credits\Other
4/8/2008 4:47:13 PM    4240    C:\Program Files\TaxCut07\Help\MM\Us\tips\Deductions_Credits\Property
4/8/2008 4:47:13 PM    16600    C:\Program Files\TaxCut07\Help\MM\Us\tips\Deductions_Credits\StandardVsItemized
4/8/2008 4:47:13 PM    4680    C:\Program Files\TaxCut07\Help\MM\Us\tips\Deductions_Credits\StateLocal_Tax
4/8/2008 4:47:13 PM    74378    C:\Program Files\TaxCut07\Help\MM\Us\tips\Filing
4/8/2008 4:47:13 PM    10914    C:\Program Files\TaxCut07\Help\MM\Us\tips\Filing\Amended
4/8/2008 4:47:13 PM    10098    C:\Program Files\TaxCut07\Help\MM\Us\tips\Filing\Electronic
4/8/2008 4:47:13 PM    49861    C:\Program Files\TaxCut07\Help\MM\Us\tips\Filing\Other
4/8/2008 4:47:13 PM    3481    C:\Program Files\TaxCut07\Help\MM\Us\tips\Filing\Paper
4/8/2008 4:47:13 PM    135557    C:\Program Files\TaxCut07\Help\MM\Us\tips\Glossary
4/8/2008 4:47:13 PM    254503    C:\Program Files\TaxCut07\Help\MM\Us\tips\Income
4/8/2008 4:47:13 PM    22506    C:\Program Files\TaxCut07\Help\MM\Us\tips\Income\Interest_Dividends
4/8/2008 4:47:13 PM    90956    C:\Program Files\TaxCut07\Help\MM\Us\tips\Income\Mutual_Funds
4/8/2008 4:47:13 PM    49507    C:\Program Files\TaxCut07\Help\MM\Us\tips\Income\Other_Income
4/8/2008 4:47:13 PM    4481    C:\Program Files\TaxCut07\Help\MM\Us\tips\Income\Other_Invest
4/8/2008 4:47:13 PM    7643    C:\Program Files\TaxCut07\Help\MM\Us\tips\Income\Sale_Home
4/8/2008 4:47:13 PM    7638    C:\Program Files\TaxCut07\Help\MM\Us\tips\Income\State_Gov_Payments
4/8/2008 4:47:13 PM    26954    C:\Program Files\TaxCut07\Help\MM\Us\tips\Income\Stock_Options
4/8/2008 4:47:13 PM    19729    C:\Program Files\TaxCut07\Help\MM\Us\tips\Income\Stock_Sales
4/8/2008 4:47:13 PM    25065    C:\Program Files\TaxCut07\Help\MM\Us\tips\Income\Wages
4/8/2008 4:47:13 PM    57720    C:\Program Files\TaxCut07\Help\MM\Us\tips\Personal_Dependents
4/8/2008 4:47:13 PM    30314    C:\Program Files\TaxCut07\Help\MM\Us\tips\Personal_Dependents\Dependents
4/8/2008 4:47:14 PM    27382    C:\Program Files\TaxCut07\Help\MM\Us\tips\Personal_Dependents\Personal
4/8/2008 4:47:14 PM    25130    C:\Program Files\TaxCut07\Help\MM\Us\tips\Planning
4/8/2008 4:47:14 PM    81876    C:\Program Files\TaxCut07\Help\MM\Us\tips\Retirement
4/8/2008 4:47:14 PM    10597    C:\Program Files\TaxCut07\Help\MM\Us\tips\Retirement\Distributions
4/8/2008 4:47:14 PM    51098    C:\Program Files\TaxCut07\Help\MM\Us\tips\Retirement\IRAs
4/8/2008 4:47:14 PM    13299    C:\Program Files\TaxCut07\Help\MM\Us\tips\Retirement\Penalty
4/8/2008 4:47:14 PM    6858    C:\Program Files\TaxCut07\Help\MM\Us\tips\Retirement\SocialSecurity
4/8/2008 4:47:14 PM    17616    C:\Program Files\TaxCut07\Help\MM\Us\tips\Taxes
4/8/2008 4:47:14 PM    811711    C:\Program Files\TaxCut07\Help\MM\Us\vid
4/8/2008 4:47:14 PM    1463643    C:\Program Files\TaxCut07\Help\MM\Us\whdata
4/8/2008 4:47:14 PM    1635318    C:\Program Files\TaxCut07\Help\MM\Us\xpl
4/8/2008 5:03:48 PM    39805    C:\Program Files\TaxCut07\Help\MM\vhl
4/8/2008 4:47:15 PM    407435    C:\Program Files\TaxCut07\Images
4/8/2008 4:47:16 PM    2148171    C:\Program Files\TaxCut07\Navigation
4/8/2008 4:47:27 PM    8986200    C:\Program Files\TaxCut07\PDF995
4/8/2008 4:47:27 PM    38480699    C:\Program Files\TaxCut07\Program
4/8/2008 4:47:28 PM    11262982    C:\Program Files\TaxCut07\Program\Bmp256
4/8/2008 4:47:31 PM    14185476    C:\Program Files\TaxCut07\Program\US
4/8/2008 4:47:31 PM    1031490    C:\Program Files\TaxCut07\Program\US\HDL
4/8/2008 4:47:32 PM    2883745    C:\Program Files\TaxCut07\Program\US\Screens
4/8/2008 4:47:33 PM    594131    C:\Program Files\TaxCut07\Program\US\Scripts
4/8/2008 4:47:35 PM    710284    C:\Program Files\TaxCut07\Program\US\TaxFormDisplayLists
4/8/2008 4:47:37 PM    482156    C:\Program Files\TaxCut07\Program\US\TaxForms
4/8/2008 4:47:38 PM    78039    C:\Program Files\TaxCut07\Program\US\TifMaps
4/8/2008 4:47:38 PM    2393    C:\Program Files\TaxCut07\Scripts
4/8/2008 4:47:38 PM    309607    C:\Program Files\TaxCut07\Stylesheets
4/8/2008 4:47:38 PM    152    C:\Program Files\TaxCut07\Stylesheets\Edition
4/8/2008 4:47:38 PM    8146    C:\Program Files\TaxCut07\Stylesheets\FAQ
4/8/2008 4:47:38 PM    17945    C:\Program Files\TaxCut07\Stylesheets\Global
4/8/2008 4:47:38 PM    264121    C:\Program Files\TaxCut07\Stylesheets\Images
4/8/2008 4:47:38 PM    5649    C:\Program Files\TaxCut07\Stylesheets\ScreenType
4/8/2008 4:47:38 PM    13570    C:\Program Files\TaxCut07\Stylesheets\Templates
4/8/2008 4:47:38 PM    6370    C:\Program Files\TaxCut07\Templates
4/8/2008 4:47:38 PM    6422846    C:\Program Files\TaxCut07\Video

jusmille

13 Posts

May 17th, 2008 22:00

=== Uninstall List From Registry ======

AC3Filter (remove only)
Adobe Flash Player ActiveX
Adobe Download Manager 2.0 (Remove Only)
Agere Systems PCI Soft Modem
Any Video Converter 2.5.2
AudibleManager
AVG 7.5
Comcast High-Speed Internet Install Wizard
DeductionPro 2006
dvdSanta 4.00
Game Elements PC Recoil Pad
HijackThis 2.0.2
Microsoft Internationalized Domain Names Mitigation APIs
Windows Internet Explorer 7
IrfanView (remove only)
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB885250
Windows XP Hotfix - KB885835
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB887472
Windows XP Hotfix - KB887742
Windows XP Hotfix - KB888113
Windows XP Hotfix - KB888302
Security Update for Windows XP (KB890046)
Windows XP Hotfix - KB890859
Windows XP Hotfix - KB891781
Windows Genuine Advantage Validation Tool (KB892130)
Security Update for Windows XP (KB893756)
Windows Installer 3.1 (KB893803)
Security Update for Windows XP (KB896358)
Security Update for Windows XP (KB896422)
Security Update for Windows XP (KB896423)
Security Update for Windows XP (KB896424)
Security Update for Windows XP (KB896428)
Update for Windows XP (KB898461)
Security Update for Windows XP (KB899587)
Security Update for Windows XP (KB899591)
Update for Windows XP (KB900485)
Security Update for Windows XP (KB900725)
Security Update for Windows XP (KB901017)
Security Update for Windows XP (KB901214)
Security Update for Windows XP (KB902400)
Security Update for Windows XP (KB904706)
Update for Windows XP (KB904942)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB905749)
Security Update for Windows XP (KB908519)
Update for Windows XP (KB908531)
Update for Windows XP (KB910437)
Security Update for Windows XP (KB911280)
Security Update for Windows XP (KB911562)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player 10 (KB911565)
Security Update for Windows XP (KB911567)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB912812)
Security Update for Windows XP (KB912919)
Security Update for Windows XP (KB913446)
Security Update for Windows XP (KB913580)
Security Update for Windows XP (KB914388)
Security Update for Windows XP (KB914389)
Hotfix for Windows XP (KB914440)
Update for Windows XP (KB914882)
Hotfix for Windows XP (KB915865)
Security Update for Windows XP (KB916281)
Update for Windows XP (KB916595)
Security Update for Windows XP (KB917159)
Security Update for Windows XP (KB917344)
Security Update for Windows XP (KB917422)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows XP (KB917953)
Security Update for Windows XP (KB918118)
Security Update for Windows XP (KB918439)
Security Update for Windows XP (KB918899)
Security Update for Windows XP (KB919007)
Security Update for Windows XP (KB920213)
Security Update for Windows XP (KB920214)
Security Update for Windows XP (KB920670)
Security Update for Windows XP (KB920683)
Security Update for Windows XP (KB920685)
Update for Windows XP (KB920872)
Security Update for Windows XP (KB921398)
Security Update for Windows XP (KB921503)
Security Update for Windows XP (KB921883)
Update for Windows XP (KB922582)
Security Update for Windows XP (KB922616)
Security Update for Windows XP (KB922760)
Security Update for Windows XP (KB922819)
Security Update for Windows XP (KB923191)
Security Update for Windows XP (KB923414)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB923694)
Update for Windows XP (KB923845)
Security Update for Windows XP (KB923980)
Security Update for Windows XP (KB924191)
Security Update for Windows XP (KB924270)
Security Update for Windows XP (KB924496)
Security Update for Windows XP (KB924667)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows XP (KB925454)
Security Update for Windows XP (KB925486)
Security Update for Windows XP (KB925902)
Hotfix for Windows XP (KB926239)
Security Update for Windows XP (KB926255)
Security Update for Windows XP (KB926436)
Security Update for Windows XP (KB927779)
Security Update for Windows XP (KB927802)
Update for Windows XP (KB927891)
Security Update for Windows Internet Explorer 7 (KB928090)
Security Update for Windows XP (KB928255)
Security Update for Windows XP (KB928843)
Security Update for Windows XP (KB929123)
Update for Windows XP (KB929338)
Hotfix for Windows Media Format 11 SDK (KB929399)
Security Update for Windows Internet Explorer 7 (KB929969)
Security Update for Windows XP (KB930178)
Update for Windows XP (KB930916)
Security Update for Windows XP (KB931261)
Security Update for Windows Internet Explorer 7 (KB931768)
Security Update for Windows XP (KB931784)
Update for Windows XP (KB931836)
Security Update for CAPICOM (KB931906)
Security Update for Windows XP (KB932168)
Update for Windows XP (KB933360)
Security Update for Windows Internet Explorer 7 (KB933566)
Security Update for Windows XP (KB933729)
Security Update for Windows XP (KB935839)
Security Update for Windows XP (KB935840)
Security Update for Windows XP (KB936021)
Security Update for Windows Media Player 10 (KB936782)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Internet Explorer 7 (KB937143)
Security Update for Windows Internet Explorer 7 (KB938127)
Update for Windows XP (KB938828)
Security Update for Windows XP (KB938829)
Security Update for Windows Internet Explorer 7 (KB939653)
Hotfix for Windows Media Player 11 (KB939683)
Security Update for Windows XP (KB941202)
Security Update for Windows XP (KB941568)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB941644)
Security Update for Windows XP (KB941693)
Security Update for Windows Internet Explorer 7 (KB942615)
Update for Windows XP (KB942763)
Security Update for Windows XP (KB943055)
Security Update for Windows XP (KB943460)
Security Update for Windows XP (KB943485)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows XP (KB944653)
Security Update for Windows XP (KB945553)
Security Update for Windows XP (KB946026)
Hotfix for Windows Internet Explorer 7 (KB947864)
Security Update for Windows XP (KB948590)
Security Update for Windows XP (KB948881)
Lame ACM MP3 Codec
LimeWire 4.16.6
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft National Language Support Downlevel APIs
Pdf995 (installed by TaxCut)
PdfEdit995 (installed by TaxCut)
VIA/S3G Display Driver
Superbike 2001
TaxCut Premium 2006
VIA/S3G Display Driver
VideoLAN VLC media player 0.8.6c
VIA Rhine-Family Fast Ethernet Adapter
S3 S3Display
S3 S3Gamma2
S3 S3Info2
S3 S3Overlay
Windows Genuine Advantage Validation Tool (KB892130)
Windows Genuine Advantage Notifications (KB905474)
Microsoft ActiveSync 3.7
Windows XP Service Pack 2
Microsoft User-Mode Driver Framework Feature Pack 1.0
Xvid 1.1.3 final uninstall
Nero 7 Essentials
QuickTime
Security Update for CAPICOM (KB931906)
AutoUpdate
Google Toolbar for Internet Explorer
S3GSetup
Java(TM) 6 Update 5
WebFldrs XP
TaxCut Premium 2007
Adobe® Photoshop® Album Starter Edition 3.0
Creative ZEN Vision W
iTunes
Microsoft Works 7.0
DivX Codec
DeductionPro 2007
DivX Player
Microsoft Application Error Reporting
Adobe Reader 7.0.9
DivX Converter
Microsoft .NET Framework 2.0 Service Pack 1
DivX Web Player
Apple Software Update
Creative MediaSource 5
MSXML 4.0 SP2 (KB936181)
Samsung Media Studio
USB Driver
MSN Messenger 7.5
DivX Content Uploader
Desktop Doctor
Realtek AC'97 Audio

jusmille

13 Posts

May 17th, 2008 22:00

+++++++++++++++++++++++++++++++++
+
+ File Lister
+
+ Version 1.0.1
+
+  By bamajim
+
+++++++++++++++++++++++++++++++++

=== Values under HKLM\~\Run ======

REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AlcxMonitor"="ALCXMNTR.EXE"
"VTTimer"="VTTimer.exe"
"AGRSMMSG"="AGRSMMSG.exe"
"HPDJ Taskbar Utility"="C:\\WINDOWS\\System32\\spool\\drivers\\w32x86\\3\\hpztsb10.exe"
"Adobe Photo Downloader"="\"C:\\Program Files\\Adobe\\Photoshop Album Starter Edition\\3.0\\Apps\\apdproxy.exe\""
"SMSTray"="C:\\Program Files\\Samsung\\Samsung Media Studio 5\\SMSTray.exe"
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\""
"VerizonServicepoint.exe"="\"C:\\Program Files\\Verizon\\VSP\\VerizonServicepoint.exe\" /AUTORUN"
"ddoctorv2"="\"C:\\Program Files\\Comcast\\Desktop Doctor\\bin\\sprtcmd.exe\" /P ddoctorv2"
@=""
"AVG7_CC"="C:\\PROGRA~1\\Grisoft\\AVG7\\avgcc.exe /STARTUP"
"Verizon Custom Uninstall Tracking"="C:\\DOCUME~1\\Jay\\LOCALS~1\\Temp\\InstallHelper.exe /uninstalltrackingvendor=Verizon"
"NeroFilterCheck"="C:\\Program Files\\Common Files\\Ahead\\Lib\\NeroCheck.exe"
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.6.0_05\\bin\\jusched.exe\""


=== Values under HKCU\~\Run ======

REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="\"C:\\Program Files\\Messenger\\MSMSGS.EXE\" /background"
"swg"="C:\\Program Files\\Google\\GoogleToolbarNotifier\\GoogleToolbarNotifier.exe"
"ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe"
"updateMgr"="\"C:\\Program Files\\Adobe\\Acrobat 7.0\\Reader\\AdobeUpdateManager.exe\" AcRdB7_0_9 -reboot 1"
"H/PC Connection Agent"="\"C:\\Program Files\\Microsoft ActiveSync\\WCESCOMM.EXE\""
"CTSyncU.exe"="\"C:\\Program Files\\Creative\\Sync Manager Unicode\\CTSyncU.exe\""
"WMPNSCFG"="C:\\Program Files\\Windows Media Player\\WMPNSCFG.exe"
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="\"C:\\Program Files\\Common Files\\Ahead\\Lib\\NMBgMonitor.exe\""
"Nero PhotoShow Media Manager"="C:\\PROGRA~1\\Nero\\NEROPH~1\\data\\Xtras\\mssysmgr.exe"


=== Folders and Files from "C:\" and "C:\Windows" Created Last 30 Days ======

4/26/2008 9:26:25 AM    0    32    C:\Files.txt
4/9/2008 3:02:35 AM    2439735    C:\WINDOWS\$NtUninstallKB941693$
4/9/2008 3:02:35 AM    596151    C:\WINDOWS\$NtUninstallKB941693$\spuninst
4/9/2008 3:00:38 AM    790724    C:\WINDOWS\$NtUninstallKB945553$
4/9/2008 3:00:38 AM    596676    C:\WINDOWS\$NtUninstallKB945553$\spuninst
4/9/2008 3:02:04 AM    878132    C:\WINDOWS\$NtUninstallKB948590$
4/9/2008 3:02:04 AM    596020    C:\WINDOWS\$NtUninstallKB948590$\spuninst
4/9/2008 3:02:40 AM    693469    C:\WINDOWS\$NtUninstallKB948881$
4/9/2008 3:02:40 AM    595165    C:\WINDOWS\$NtUninstallKB948881$\spuninst
4/9/2008 2:40:45 AM    27335    32    C:\WINDOWS\KB941693.log
4/9/2008 2:39:13 AM    21340    32    C:\WINDOWS\KB945553.log
4/9/2008 3:02:07 AM    29787    32    C:\WINDOWS\KB947864-IE7.log
4/9/2008 2:39:20 AM    21332    32    C:\WINDOWS\KB948590.log
4/9/2008 3:02:39 AM    18202    32    C:\WINDOWS\KB948881.log
4/8/2008 6:59:37 PM    28    32    C:\WINDOWS\pdf995.ini
4/26/2008 8:47:28 AM    1409    32    C:\WINDOWS\QTFont.for
4/26/2008 8:47:28 AM    54156    34    C:\WINDOWS\QTFont.qfn
4/16/2008 1:50:28 PM    135168    32    C:\WINDOWS\system32\java.exe
4/16/2008 1:50:28 PM    69632    32    C:\WINDOWS\system32\javacpl.cpl
4/16/2008 1:50:28 PM    135168    32    C:\WINDOWS\system32\javaw.exe
4/16/2008 1:50:28 PM    139264    32    C:\WINDOWS\system32\javaws.exe
4/3/2008 2:12:26 PM    44544    0    C:\WINDOWS\system32\msxml4a.dll
4/3/2008 2:11:56 PM    110592    32    C:\WINDOWS\system32\TG_DUMP0708.DLL

=== Files under "\Administrator\Startup" Last 30 Days======

4/16/2008 1:50:28 PM    135168    32    C:\WINDOWS\system32\java.exe
4/16/2008 1:50:28 PM    69632    32    C:\WINDOWS\system32\javacpl.cpl
4/16/2008 1:50:28 PM    135168    32    C:\WINDOWS\system32\javaw.exe
4/16/2008 1:50:28 PM    139264    32    C:\WINDOWS\system32\javaws.exe
4/3/2008 2:12:26 PM    44544    0    C:\WINDOWS\system32\msxml4a.dll
4/3/2008 2:11:56 PM    110592    32    C:\WINDOWS\system32\TG_DUMP0708.DLL

=== Files under "All Users\Startup" Last 30 Days======


=== Folders under "\Program Files" Last 30 Days======

4/8/2008 4:43:39 PM    52125139    C:\Program Files\DeductionPro 2007
4/8/2008 4:43:39 PM    71140    C:\Program Files\DeductionPro 2007\Fonts
4/8/2008 4:43:39 PM    100712    C:\Program Files\DeductionPro 2007\form8283
4/8/2008 4:43:52 PM    2044629    C:\Program Files\DeductionPro 2007\Images
4/8/2008 4:43:52 PM    743799    C:\Program Files\DeductionPro 2007\Images\Buttons
4/8/2008 4:43:39 PM    43858183    C:\Program Files\DeductionPro 2007\jre
4/8/2008 4:43:44 PM    6176758    C:\Program Files\DeductionPro 2007\jre\bin
4/8/2008 4:43:44 PM    1218052    C:\Program Files\DeductionPro 2007\jre\bin\client
4/8/2008 4:43:45 PM    1770770    C:\Program Files\DeductionPro 2007\jre\javaws
4/8/2008 4:43:51 PM    98008    C:\Program Files\DeductionPro 2007\jre\javaws\resources
4/8/2008 4:43:42 PM    35107691    C:\Program Files\DeductionPro 2007\jre\lib
4/8/2008 4:43:44 PM    493589    C:\Program Files\DeductionPro 2007\jre\lib\audio
4/8/2008 4:43:44 PM    477754    C:\Program Files\DeductionPro 2007\jre\lib\cmm
4/8/2008 4:43:45 PM    937979    C:\Program Files\DeductionPro 2007\jre\lib\ext
4/8/2008 4:43:45 PM    2068932    C:\Program Files\DeductionPro 2007\jre\lib\fonts
4/8/2008 4:43:45 PM    671    C:\Program Files\DeductionPro 2007\jre\lib\i386
4/8/2008 4:43:45 PM    18380    C:\Program Files\DeductionPro 2007\jre\lib\im
4/8/2008 4:43:44 PM    2410    C:\Program Files\DeductionPro 2007\jre\lib\images
4/8/2008 4:43:45 PM    2410    C:\Program Files\DeductionPro 2007\jre\lib\images\cursors
4/8/2008 4:43:46 PM    41829    C:\Program Files\DeductionPro 2007\jre\lib\security
4/8/2008 4:43:42 PM    239871    C:\Program Files\DeductionPro 2007\jre\lib\zi
4/8/2008 4:43:42 PM    8309    C:\Program Files\DeductionPro 2007\jre\lib\zi\Africa
4/8/2008 4:43:42 PM    79934    C:\Program Files\DeductionPro 2007\jre\lib\zi\America
4/8/2008 4:43:43 PM    1311    C:\Program Files\DeductionPro 2007\jre\lib\zi\America\Indiana
4/8/2008 4:43:43 PM    1260    C:\Program Files\DeductionPro 2007\jre\lib\zi\America\Kentucky
4/8/2008 4:43:43 PM    1276    C:\Program Files\DeductionPro 2007\jre\lib\zi\America\North_Dakota
4/8/2008 4:43:43 PM    2755    C:\Program Files\DeductionPro 2007\jre\lib\zi\Antarctica
4/8/2008 4:43:43 PM    51040    C:\Program Files\DeductionPro 2007\jre\lib\zi\Asia
4/8/2008 4:43:43 PM    8762    C:\Program Files\DeductionPro 2007\jre\lib\zi\Atlantic
4/8/2008 4:43:43 PM    7888    C:\Program Files\DeductionPro 2007\jre\lib\zi\Australia
4/8/2008 4:43:42 PM    783    C:\Program Files\DeductionPro 2007\jre\lib\zi\Etc
4/8/2008 4:43:43 PM    55696    C:\Program Files\DeductionPro 2007\jre\lib\zi\Europe
4/8/2008 4:43:43 PM    663    C:\Program Files\DeductionPro 2007\jre\lib\zi\Indian
4/8/2008 4:43:43 PM    6568    C:\Program Files\DeductionPro 2007\jre\lib\zi\Pacific
4/8/2008 4:43:52 PM    1909853    C:\Program Files\DeductionPro 2007\lib
4/8/2008 4:43:56 PM    3877    C:\Program Files\DeductionPro 2007\NPS
4/8/2008 4:43:56 PM    2516700    C:\Program Files\DeductionPro 2007\WebHelp
4/8/2008 4:43:57 PM    4060    C:\Program Files\DeductionPro 2007\WebHelp\images
4/8/2008 4:43:57 PM    284082    C:\Program Files\DeductionPro 2007\WebHelp\whdata
4/8/2008 4:43:57 PM    852685    C:\Program Files\DeductionPro 2007\WebHelp\whgdata
4/8/2008 4:43:56 PM    675090    C:\Program Files\DeductionPro 2007\XMLDB
4/8/2008 4:47:05 PM    15386253    C:\Program Files\PDF995
4/8/2008 4:48:04 PM    14984317    C:\Program Files\PDF995\res
4/8/2008 4:48:16 PM    8003117    C:\Program Files\PDF995\res\convert
4/8/2008 4:48:20 PM    5210582    C:\Program Files\PDF995\res\drivedir
4/8/2008 4:48:37 PM    1749393    C:\Program Files\PDF995\res\utilities
4/8/2008 4:47:05 PM    79406676    C:\Program Files\TaxCut07
4/8/2008 4:47:05 PM    22642955    C:\Program Files\TaxCut07\Help
4/8/2008 4:47:05 PM    22631897    C:\Program Files\TaxCut07\Help\MM
4/8/2008 4:47:05 PM    22592068    C:\Program Files\TaxCut07\Help\MM\Us
4/8/2008 4:47:06 PM    834059    C:\Program Files\TaxCut07\Help\MM\Us\ask
4/8/2008 4:47:06 PM    3179824    C:\Program Files\TaxCut07\Help\MM\Us\hlp
4/8/2008 4:47:06 PM    167658    C:\Program Files\TaxCut07\Help\MM\Us\hlp\Dialog_Boxes_cs
4/8/2008 4:47:06 PM    27054    C:\Program Files\TaxCut07\Help\MM\Us\hlp\Error_check
4/8/2008 4:47:06 PM    66166    C:\Program Files\TaxCut07\Help\MM\Us\hlp\Extensions
4/8/2008 4:47:06 PM    68738    C:\Program Files\TaxCut07\Help\MM\Us\hlp\FAQs
4/8/2008 4:47:06 PM    269059    C:\Program Files\TaxCut07\Help\MM\Us\hlp\Filing
4/8/2008 4:47:06 PM    103874    C:\Program Files\TaxCut07\Help\MM\Us\hlp\Forms
4/8/2008 4:47:06 PM    94873    C:\Program Files\TaxCut07\Help\MM\Us\hlp\Getting_Started
4/8/2008 4:47:06 PM    168532    C:\Program Files\TaxCut07\Help\MM\Us\hlp\Importing
4/8/2008 4:47:06 PM    69605    C:\Program Files\TaxCut07\Help\MM\Us\hlp\Interview
4/8/2008 4:47:07 PM    83732    C:\Program Files\TaxCut07\Help\MM\Us\hlp\Managing
4/8/2008 4:47:07 PM    51842    C:\Program Files\TaxCut07\Help\MM\Us\hlp\Planning
4/8/2008 4:47:07 PM    36126    C:\Program Files\TaxCut07\Help\MM\Us\hlp\Printing
4/8/2008 4:47:07 PM    58815    C:\Program Files\TaxCut07\Help\MM\Us\hlp\Reviewing
4/8/2008 4:47:07 PM    45997    C:\Program Files\TaxCut07\Help\MM\Us\hlp\State
4/8/2008 4:47:07 PM    55970    C:\Program Files\TaxCut07\Help\MM\Us\hlp\Tax_Help
4/8/2008 4:47:07 PM    71265    C:\Program Files\TaxCut07\Help\MM\Us\hlp\Tools
4/8/2008 4:47:07 PM    121679    C:\Program Files\TaxCut07\Help\MM\Us\hlp\Troubleshooting
4/8/2008 4:47:07 PM    731750    C:\Program Files\TaxCut07\Help\MM\Us\hlp\What_Help_cs
4/8/2008 4:47:07 PM    49056    C:\Program Files\TaxCut07\Help\MM\Us\hlp\What_Help_cs\Adjustments
4/8/2008 4:47:07 PM    105539    C:\Program Files\TaxCut07\Help\MM\Us\hlp\What_Help_cs\Credits
4/8/2008 4:47:07 PM    85237    C:\Program Files\TaxCut07\Help\MM\Us\hlp\What_Help_cs\Deductions
4/8/2008 4:47:07 PM    5716    C:\Program Files\TaxCut07\Help\MM\Us\hlp\What_Help_cs\Dependents
4/8/2008 4:47:07 PM    5022    C:\Program Files\TaxCut07\Help\MM\Us\hlp\What_Help_cs\Error_Check
4/8/2008 4:47:07 PM    46817    C:\Program Files\TaxCut07\Help\MM\Us\hlp\What_Help_cs\File
4/8/2008 4:47:07 PM    6021    C:\Program Files\TaxCut07\Help\MM\Us\hlp\What_Help_cs\Getting_To_Know
4/8/2008 4:47:07 PM    9044    C:\Program Files\TaxCut07\Help\MM\Us\hlp\What_Help_cs\Import
4/8/2008 4:47:07 PM    182477    C:\Program Files\TaxCut07\Help\MM\Us\hlp\What_Help_cs\Income
4/8/2008 4:47:07 PM    35804    C:\Program Files\TaxCut07\Help\MM\Us\hlp\What_Help_cs\IncomeGateways
4/8/2008 4:47:07 PM    60123    C:\Program Files\TaxCut07\Help\MM\Us\hlp\What_Help_cs\Miscellaneous
4/8/2008 4:47:07 PM    26432    C:\Program Files\TaxCut07\Help\MM\Us\hlp\What_Help_cs\Plan
4/8/2008 4:47:07 PM    5624    C:\Program Files\TaxCut07\Help\MM\Us\hlp\What_Help_cs\Review
4/8/2008 4:47:07 PM    5291    C:\Program Files\TaxCut07\Help\MM\Us\hlp\What_Help_cs\State
4/8/2008 4:47:08 PM    17711    C:\Program Files\TaxCut07\Help\MM\Us\hlp\What_Help_cs\SuperC
4/8/2008 4:47:08 PM    54122    C:\Program Files\TaxCut07\Help\MM\Us\hlp\What_Help_cs\Tax_Penalties
4/8/2008 4:47:08 PM    15647    C:\Program Files\TaxCut07\Help\MM\Us\hlp\What_Help_cs\Welcome
4/8/2008 4:47:08 PM    5431782    C:\Program Files\TaxCut07\Help\MM\Us\irs
4/8/2008 4:47:08 PM    547410    C:\Program Files\TaxCut07\Help\MM\Us\irs\f1040
4/8/2008 4:47:08 PM    453927    C:\Program Files\TaxCut07\Help\MM\Us\irs\f1040a
4/8/2008 4:47:08 PM    51995    C:\Program Files\TaxCut07\Help\MM\Us\irs\f1040es
4/8/2008 4:47:08 PM    224016    C:\Program Files\TaxCut07\Help\MM\Us\irs\f1040ez
4/8/2008 4:47:08 PM    9936    C:\Program Files\TaxCut07\Help\MM\Us\irs\f1040v
4/8/2008 4:47:08 PM    54598    C:\Program Files\TaxCut07\Help\MM\Us\irs\f1040x
4/8/2008 4:47:08 PM    13563    C:\Program Files\TaxCut07\Help\MM\Us\irs\f1041k1
4/8/2008 4:47:08 PM    129741    C:\Program Files\TaxCut07\Help\MM\Us\irs\f1065k1
4/8/2008 4:47:08 PM    18086    C:\Program Files\TaxCut07\Help\MM\Us\irs\f1098e
4/8/2008 4:47:08 PM    9952    C:\Program Files\TaxCut07\Help\MM\Us\irs\f1099div
4/8/2008 4:47:09 PM    8822    C:\Program Files\TaxCut07\Help\MM\Us\irs\f1099g
4/8/2008 4:47:09 PM    9283    C:\Program Files\TaxCut07\Help\MM\Us\irs\f1099int
4/8/2008 4:47:09 PM    7466    C:\Program Files\TaxCut07\Help\MM\Us\irs\f1099m

jusmille

13 Posts

May 17th, 2008 22:00

4/16/2008 1:51:05 PM    57414398    C:\Program Files\Three Rings Design
4/16/2008 1:51:05 PM    57414398    C:\Program Files\Three Rings Design\Puzzle Pirates
4/16/2008 2:21:16 PM    6557412    C:\Program Files\Three Rings Design\Puzzle Pirates\code
4/16/2008 2:23:51 PM    0    C:\Program Files\Three Rings Design\Puzzle Pirates\narcache
4/16/2008 2:21:35 PM    48560991    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc
4/16/2008 2:21:35 PM    48556683    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles
4/16/2008 2:21:35 PM    20729219    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components
4/16/2008 2:21:35 PM    554176    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face
4/16/2008 2:21:35 PM    22762    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face\animal
4/16/2008 2:21:35 PM    2801    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face\animal\fbigcat
4/16/2008 2:21:35 PM    2744    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face\animal\fcat
4/16/2008 2:21:37 PM    3255    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face\animal\fcrab
4/16/2008 2:21:36 PM    3390    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face\animal\felephant
4/16/2008 2:21:36 PM    2516    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face\animal\fpig
4/16/2008 2:21:37 PM    2435    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face\animal\frat
4/16/2008 2:21:36 PM    2743    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face\animal\fsheep
4/16/2008 2:21:36 PM    2878    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face\animal\fwolf
4/16/2008 2:21:37 PM    119745    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face\ffemale
4/16/2008 2:21:38 PM    118863    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face\fmale
4/16/2008 2:21:39 PM    268389    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face\kings
4/16/2008 2:21:41 PM    36766    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face\kings\azarbad
4/16/2008 2:21:40 PM    57497    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face\kings\barnabas
4/16/2008 2:21:41 PM    34918    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face\kings\brynhild
4/16/2008 2:21:39 PM    36498    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face\kings\finius
4/16/2008 2:21:39 PM    34408    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face\kings\gretchen
4/16/2008 2:21:40 PM    33286    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face\kings\vargas
4/16/2008 2:21:39 PM    35016    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face\kings\widow_queen
4/16/2008 2:21:38 PM    24417    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face\monster
4/16/2008 2:21:39 PM    3164    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face\monster\fatlantean
4/16/2008 2:21:38 PM    21253    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face\monster\fskeleton
4/16/2008 2:21:41 PM    16795478    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\pirate
4/16/2008 2:21:41 PM    945683    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\pirate\animal
4/16/2008 2:21:41 PM    118577    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\pirate\animal\bigcat
4/16/2008 2:21:42 PM    75470    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\pirate\animal\cat
4/16/2008 2:21:46 PM    121141    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\pirate\animal\crab
4/16/2008 2:21:42 PM    198865    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\pirate\animal\elephant
4/16/2008 2:21:43 PM    98509    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\pirate\animal\pig
4/16/2008 2:21:45 PM    50838    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\pirate\animal\rat
4/16/2008 2:21:44 PM    157217    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\pirate\animal\sheep
4/16/2008 2:21:44 PM    125066    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\pirate\animal\wolf
4/16/2008 2:21:46 PM    7256052    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\pirate\female
4/16/2008 2:22:03 PM    7933275    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\pirate\male
4/16/2008 2:22:22 PM    660468    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\pirate\monster
4/16/2008 2:22:22 PM    272047    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\pirate\monster\atlantean
4/16/2008 2:22:22 PM    388421    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\pirate\monster\skeleton
4/16/2008 2:22:24 PM    3375973    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\vessel
4/16/2008 2:22:31 PM    15032828    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\media
4/16/2008 2:23:10 PM    12794636    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles
4/16/2008 2:23:10 PM    648011    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\adventure
4/16/2008 2:23:10 PM    319698    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\adventure\props
4/16/2008 2:23:11 PM    328313    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\adventure\structures
4/16/2008 2:23:12 PM    4793675    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\buildings
4/16/2008 2:23:12 PM    4793675    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\buildings\caribbean
4/16/2008 2:23:23 PM    258158    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\fringe
4/16/2008 2:23:24 PM    738296    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\furniture
4/16/2008 2:23:26 PM    67041    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\indoors
4/16/2008 2:23:26 PM    67041    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\indoors\base
4/16/2008 2:23:26 PM    1840747    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\outdoors
4/16/2008 2:23:26 PM    243695    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\outdoors\base
4/16/2008 2:23:27 PM    1212095    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\outdoors\props
4/16/2008 2:23:30 PM    384957    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\outdoors\structures
4/16/2008 2:23:32 PM    733764    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\props
4/16/2008 2:23:32 PM    166376    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\props\containers
4/16/2008 2:23:32 PM    60882    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\props\desktop
4/16/2008 2:23:32 PM    446390    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\props\misc
4/16/2008 2:23:34 PM    60116    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\props\monuments
4/16/2008 2:23:34 PM    199488    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\sea
4/16/2008 2:23:34 PM    137916    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\sea\battle
4/16/2008 2:23:34 PM    50330    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\sea\battle\atlantis
4/16/2008 2:23:35 PM    53440    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\sea\islands
4/16/2008 2:23:35 PM    8132    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\sea\sailing
4/16/2008 2:23:35 PM    1183295    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\structures
4/16/2008 2:23:35 PM    326585    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\structures\bar
4/16/2008 2:23:36 PM    136097    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\structures\doors
4/16/2008 2:23:37 PM    115101    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\structures\misc
4/16/2008 2:23:37 PM    266491    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\structures\stairs
4/16/2008 2:23:38 PM    257073    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\structures\walls
4/16/2008 2:23:39 PM    81948    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\structures\windows
4/16/2008 2:23:39 PM    673744    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\treasures
4/16/2008 2:23:39 PM    53431    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\treasures\artifacts
4/16/2008 2:23:39 PM    531562    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\treasures\misc
4/16/2008 2:23:41 PM    88751    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\treasures\paintings
4/16/2008 2:23:41 PM    1658417    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\vessel
4/16/2008 2:23:41 PM    12935    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\vessel\base
4/16/2008 2:23:42 PM    1645482    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\vessel\object
4/16/2008 2:23:45 PM    4308    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\config
4/16/2008 2:23:45 PM    4308    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\config\resource
4/17/2008 8:56:24 PM    406427    C:\Program Files\Trend Micro
4/17/2008 8:56:24 PM    406427    C:\Program Files\Trend Micro\HijackThis

jusmille

13 Posts

May 17th, 2008 22:00

4/8/2008 4:47:05 PM    15386253    C:\Program Files\PDF995
4/8/2008 4:48:04 PM    14984317    C:\Program Files\PDF995\res
4/8/2008 4:48:16 PM    8003117    C:\Program Files\PDF995\res\convert
4/8/2008 4:48:20 PM    5210582    C:\Program Files\PDF995\res\drivedir
4/8/2008 4:48:37 PM    1749393    C:\Program Files\PDF995\res\utilities
4/8/2008 4:47:05 PM    79406676    C:\Program Files\TaxCut07
4/8/2008 4:47:05 PM    22642955    C:\Program Files\TaxCut07\Help
4/8/2008 4:47:05 PM    22631897    C:\Program Files\TaxCut07\Help\MM
4/8/2008 4:47:05 PM    22592068    C:\Program Files\TaxCut07\Help\MM\Us
4/8/2008 4:47:06 PM    834059    C:\Program Files\TaxCut07\Help\MM\Us\ask
4/8/2008 4:47:06 PM    3179824    C:\Program Files\TaxCut07\Help\MM\Us\hlp
4/8/2008 4:47:06 PM    167658    C:\Program Files\TaxCut07\Help\MM\Us\hlp\Dialog_Boxes_cs
4/8/2008 4:47:06 PM    27054    C:\Program Files\TaxCut07\Help\MM\Us\hlp\Error_check
4/8/2008 4:47:06 PM    66166    C:\Program Files\TaxCut07\Help\MM\Us\hlp\Extensions
4/8/2008 4:47:06 PM    68738    C:\Program Files\TaxCut07\Help\MM\Us\hlp\FAQs
4/8/2008 4:47:06 PM    269059    C:\Program Files\TaxCut07\Help\MM\Us\hlp\Filing
4/8/2008 4:47:06 PM    103874    C:\Program Files\TaxCut07\Help\MM\Us\hlp\Forms
4/8/2008 4:47:06 PM    94873    C:\Program Files\TaxCut07\Help\MM\Us\hlp\Getting_Started
4/8/2008 4:47:06 PM    168532    C:\Program Files\TaxCut07\Help\MM\Us\hlp\Importing
4/8/2008 4:47:06 PM    69605    C:\Program Files\TaxCut07\Help\MM\Us\hlp\Interview
4/8/2008 4:47:07 PM    83732    C:\Program Files\TaxCut07\Help\MM\Us\hlp\Managing
4/8/2008 4:47:07 PM    51842    C:\Program Files\TaxCut07\Help\MM\Us\hlp\Planning
4/8/2008 4:47:07 PM    36126    C:\Program Files\TaxCut07\Help\MM\Us\hlp\Printing
4/8/2008 4:47:07 PM    58815    C:\Program Files\TaxCut07\Help\MM\Us\hlp\Reviewing
4/8/2008 4:47:07 PM    45997    C:\Program Files\TaxCut07\Help\MM\Us\hlp\State
4/8/2008 4:47:07 PM    55970    C:\Program Files\TaxCut07\Help\MM\Us\hlp\Tax_Help
4/8/2008 4:47:07 PM    71265    C:\Program Files\TaxCut07\Help\MM\Us\hlp\Tools
4/8/2008 4:47:07 PM    121679    C:\Program Files\TaxCut07\Help\MM\Us\hlp\Troubleshooting
4/8/2008 4:47:07 PM    731750    C:\Program Files\TaxCut07\Help\MM\Us\hlp\What_Help_cs
4/8/2008 4:47:07 PM    49056    C:\Program Files\TaxCut07\Help\MM\Us\hlp\What_Help_cs\Adjustments
4/8/2008 4:47:07 PM    105539    C:\Program Files\TaxCut07\Help\MM\Us\hlp\What_Help_cs\Credits
4/8/2008 4:47:07 PM    85237    C:\Program Files\TaxCut07\Help\MM\Us\hlp\What_Help_cs\Deductions
4/8/2008 4:47:07 PM    5716    C:\Program Files\TaxCut07\Help\MM\Us\hlp\What_Help_cs\Dependents
4/8/2008 4:47:07 PM    5022    C:\Program Files\TaxCut07\Help\MM\Us\hlp\What_Help_cs\Error_Check
4/8/2008 4:47:07 PM    46817    C:\Program Files\TaxCut07\Help\MM\Us\hlp\What_Help_cs\File
4/8/2008 4:47:07 PM    6021    C:\Program Files\TaxCut07\Help\MM\Us\hlp\What_Help_cs\Getting_To_Know
4/8/2008 4:47:07 PM    9044    C:\Program Files\TaxCut07\Help\MM\Us\hlp\What_Help_cs\Import
4/8/2008 4:47:07 PM    182477    C:\Program Files\TaxCut07\Help\MM\Us\hlp\What_Help_cs\Income
4/8/2008 4:47:07 PM    35804    C:\Program Files\TaxCut07\Help\MM\Us\hlp\What_Help_cs\IncomeGateways
4/8/2008 4:47:07 PM    60123    C:\Program Files\TaxCut07\Help\MM\Us\hlp\What_Help_cs\Miscellaneous
4/8/2008 4:47:07 PM    26432    C:\Program Files\TaxCut07\Help\MM\Us\hlp\What_Help_cs\Plan
4/8/2008 4:47:07 PM    5624    C:\Program Files\TaxCut07\Help\MM\Us\hlp\What_Help_cs\Review
4/8/2008 4:47:07 PM    5291    C:\Program Files\TaxCut07\Help\MM\Us\hlp\What_Help_cs\State
4/8/2008 4:47:08 PM    17711    C:\Program Files\TaxCut07\Help\MM\Us\hlp\What_Help_cs\SuperC
4/8/2008 4:47:08 PM    54122    C:\Program Files\TaxCut07\Help\MM\Us\hlp\What_Help_cs\Tax_Penalties
4/8/2008 4:47:08 PM    15647    C:\Program Files\TaxCut07\Help\MM\Us\hlp\What_Help_cs\Welcome
4/8/2008 4:47:08 PM    5431782    C:\Program Files\TaxCut07\Help\MM\Us\irs
4/8/2008 4:47:08 PM    547410    C:\Program Files\TaxCut07\Help\MM\Us\irs\f1040
4/8/2008 4:47:08 PM    453927    C:\Program Files\TaxCut07\Help\MM\Us\irs\f1040a
4/8/2008 4:47:08 PM    51995    C:\Program Files\TaxCut07\Help\MM\Us\irs\f1040es
4/8/2008 4:47:08 PM    224016    C:\Program Files\TaxCut07\Help\MM\Us\irs\f1040ez
4/8/2008 4:47:08 PM    9936    C:\Program Files\TaxCut07\Help\MM\Us\irs\f1040v
4/8/2008 4:47:08 PM    54598    C:\Program Files\TaxCut07\Help\MM\Us\irs\f1040x
4/8/2008 4:47:08 PM    13563    C:\Program Files\TaxCut07\Help\MM\Us\irs\f1041k1
4/8/2008 4:47:08 PM    129741    C:\Program Files\TaxCut07\Help\MM\Us\irs\f1065k1
4/8/2008 4:47:08 PM    18086    C:\Program Files\TaxCut07\Help\MM\Us\irs\f1098e
4/8/2008 4:47:08 PM    9952    C:\Program Files\TaxCut07\Help\MM\Us\irs\f1099div
4/8/2008 4:47:09 PM    8822    C:\Program Files\TaxCut07\Help\MM\Us\irs\f1099g
4/8/2008 4:47:09 PM    9283    C:\Program Files\TaxCut07\Help\MM\Us\irs\f1099int
4/8/2008 4:47:09 PM    7466    C:\Program Files\TaxCut07\Help\MM\Us\irs\f1099m
4/8/2008 4:47:09 PM    17481    C:\Program Files\TaxCut07\Help\MM\Us\irs\f1099r
4/8/2008 4:47:09 PM    134926    C:\Program Files\TaxCut07\Help\MM\Us\irs\f1116
4/8/2008 4:47:09 PM    102101    C:\Program Files\TaxCut07\Help\MM\Us\irs\f1120s
4/8/2008 4:47:09 PM    9960    C:\Program Files\TaxCut07\Help\MM\Us\irs\f1310
4/8/2008 4:47:09 PM    50004    C:\Program Files\TaxCut07\Help\MM\Us\irs\f2106
4/8/2008 4:47:09 PM    18584    C:\Program Files\TaxCut07\Help\MM\Us\irs\f2106ez
4/8/2008 4:47:09 PM    6762    C:\Program Files\TaxCut07\Help\MM\Us\irs\f2120
4/8/2008 4:47:09 PM    44171    C:\Program Files\TaxCut07\Help\MM\Us\irs\f2210
4/8/2008 4:47:09 PM    14424    C:\Program Files\TaxCut07\Help\MM\Us\irs\f2210ai
4/8/2008 4:47:08 PM    11902    C:\Program Files\TaxCut07\Help\MM\Us\irs\F2439
4/8/2008 4:47:09 PM    30213    C:\Program Files\TaxCut07\Help\MM\Us\irs\f2441
4/8/2008 4:47:09 PM    86375    C:\Program Files\TaxCut07\Help\MM\Us\irs\f2555
4/8/2008 4:47:09 PM    23064    C:\Program Files\TaxCut07\Help\MM\Us\irs\f2555ez
4/8/2008 4:47:09 PM    29360    C:\Program Files\TaxCut07\Help\MM\Us\irs\f3468
4/8/2008 4:47:09 PM    19156    C:\Program Files\TaxCut07\Help\MM\Us\irs\f3800
4/8/2008 4:47:09 PM    13713    C:\Program Files\TaxCut07\Help\MM\Us\irs\f3903
4/8/2008 4:47:09 PM    42095    C:\Program Files\TaxCut07\Help\MM\Us\irs\f4136
4/8/2008 4:47:09 PM    11702    C:\Program Files\TaxCut07\Help\MM\Us\irs\f4137
4/8/2008 4:47:09 PM    124264    C:\Program Files\TaxCut07\Help\MM\Us\irs\f4562
4/8/2008 4:47:09 PM    34319    C:\Program Files\TaxCut07\Help\MM\Us\irs\f4684
4/8/2008 4:47:09 PM    72072    C:\Program Files\TaxCut07\Help\MM\Us\irs\f4797
4/8/2008 4:47:09 PM    13323    C:\Program Files\TaxCut07\Help\MM\Us\irs\f4835
4/8/2008 4:47:09 PM    27841    C:\Program Files\TaxCut07\Help\MM\Us\irs\f4868
4/8/2008 4:47:09 PM    16128    C:\Program Files\TaxCut07\Help\MM\Us\irs\f4952
4/8/2008 4:47:09 PM    28344    C:\Program Files\TaxCut07\Help\MM\Us\irs\f4972
4/8/2008 4:47:09 PM    44682    C:\Program Files\TaxCut07\Help\MM\Us\irs\f5329
4/8/2008 4:47:09 PM    23445    C:\Program Files\TaxCut07\Help\MM\Us\irs\f5695
4/8/2008 4:47:09 PM    53874    C:\Program Files\TaxCut07\Help\MM\Us\irs\f6198
4/8/2008 4:47:09 PM    86446    C:\Program Files\TaxCut07\Help\MM\Us\irs\f6251
4/8/2008 4:47:09 PM    23452    C:\Program Files\TaxCut07\Help\MM\Us\irs\f6252
4/8/2008 4:47:09 PM    21897    C:\Program Files\TaxCut07\Help\MM\Us\irs\f6781
4/8/2008 4:47:09 PM    46206    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8283
4/8/2008 4:47:09 PM    10079    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8332
4/8/2008 4:47:09 PM    18326    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8379
4/8/2008 4:47:09 PM    10170    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8396
4/8/2008 4:47:09 PM    11966    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8453ol
4/8/2008 4:47:09 PM    93092    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8582
4/8/2008 4:47:09 PM    8271    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8586
4/8/2008 4:47:09 PM    63645    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8606
4/8/2008 4:47:09 PM    35341    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8609a
4/8/2008 4:47:09 PM    30470    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8615
4/8/2008 4:47:09 PM    31101    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8801
4/8/2008 4:47:09 PM    14241    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8812
4/8/2008 4:47:09 PM    15511    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8814
4/8/2008 4:47:09 PM    15404    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8815
4/8/2008 4:47:09 PM    3095    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8818
4/8/2008 4:47:08 PM    12008    C:\Program Files\TaxCut07\Help\MM\Us\irs\F8822
4/8/2008 4:47:09 PM    30775    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8824
4/8/2008 4:47:09 PM    28803    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8829
4/8/2008 4:47:09 PM    36918    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8839
4/8/2008 4:47:10 PM    48542    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8853
4/8/2008 4:47:08 PM    7440    C:\Program Files\TaxCut07\Help\MM\Us\irs\F8859
4/8/2008 4:47:10 PM    8392    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8862
4/8/2008 4:47:10 PM    16474    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8863
4/8/2008 4:47:08 PM    8771    C:\Program Files\TaxCut07\Help\MM\Us\irs\F8880
4/8/2008 4:47:10 PM    22660    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8885
4/8/2008 4:47:10 PM    14611    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8888
4/8/2008 4:47:10 PM    39199    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8889

jusmille

13 Posts

May 17th, 2008 22:00

=== Files under "\System32\Drivers" Last 30 Days======

4/26/2008 8:47:00 AM    12160    32    C:\WINDOWS\system32\drivers\mouhid.sys

=== Files under "\User\Local Settings\Temp" Last 30 Days======

4/3/2008 2:07:00 PM    108    32    C:\Documents and Settings\Jay\Local Settings\Temp\2f6_appcompat.txt
4/4/2008 2:22:33 PM    49458    32    C:\Documents and Settings\Jay\Local Settings\Temp\db68_appcompat.txt
4/3/2008 6:46:32 PM    1994    32    C:\Documents and Settings\Jay\Local Settings\Temp\IMT61.xml
4/3/2008 6:46:32 PM    426    32    C:\Documents and Settings\Jay\Local Settings\Temp\IMT62.xml
4/3/2008 6:46:32 PM    707340    32    C:\Documents and Settings\Jay\Local Settings\Temp\IMT63.xml
4/16/2008 1:37:16 PM    1201    32    C:\Documents and Settings\Jay\Local Settings\Temp\java_install_sp.log
4/26/2008 8:54:16 AM    0    32    C:\Documents and Settings\Jay\Local Settings\Temp\JET7792.tmp
4/5/2008 11:48:27 AM    0    32    C:\Documents and Settings\Jay\Local Settings\Temp\JETAEDD.tmp
4/15/2008 10:36:46 PM    0    32    C:\Documents and Settings\Jay\Local Settings\Temp\JETF026.tmp
4/2/2008 3:35:44 PM    585269    32    C:\Documents and Settings\Jay\Local Settings\Temp\rings.exe
4/16/2008 11:30:35 AM    116880    33    C:\Documents and Settings\Jay\Local Settings\Temp\set30.tmp
4/16/2008 11:31:16 AM    116880    33    C:\Documents and Settings\Jay\Local Settings\Temp\set33.tmp
4/16/2008 11:19:59 AM    116880    32    C:\Documents and Settings\Jay\Local Settings\Temp\SETC.tmp
4/3/2008 12:34:03 AM    32768    32    C:\Documents and Settings\Jay\Local Settings\Temp\swt-awt-win32-3346.dll
4/3/2008 12:34:03 AM    307200    32    C:\Documents and Settings\Jay\Local Settings\Temp\swt-win32-3346.dll

=== Files and Folders under "All Users\Application Data" Last 30 Days======

3/29/2008 2:44:44 PM    2066944    C:\Documents and Settings\All Users\Application Data\Apple
3/29/2008 2:44:44 PM    2066944    C:\Documents and Settings\All Users\Application Data\Apple\Installer Cache
3/29/2008 2:44:44 PM    2066944    C:\Documents and Settings\All Users\Application Data\Apple\Installer Cache\Apple Software Update 2.0.2.92
4/8/2008 4:45:45 PM    67860111    C:\Documents and Settings\All Users\Application Data\TaxCut
4/8/2008 4:45:45 PM    67860111    C:\Documents and Settings\All Users\Application Data\TaxCut\2007
4/8/2008 4:45:45 PM    34250240    C:\Documents and Settings\All Users\Application Data\TaxCut\2007\cache
4/8/2008 4:45:45 PM    34250240    C:\Documents and Settings\All Users\Application Data\TaxCut\2007\cache\{20FBF9A3-2FEB-4F29-9815-B0474711FF21}
4/8/2008 4:55:38 PM    33605521    C:\Documents and Settings\All Users\Application Data\TaxCut\2007\Update

=== Values under HKLM\Software\microsoft\shared tools\msconfig\startupreg ======

HKLM\Software\microsoft\shared tools\msconfig\startupreg\


=== BHO's under HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects ======

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}


HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}


HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}


HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}

 

=== Running Processes ======

System Idle Process   [0]  
System   [4]  
smss.exe   [572]   \SystemRoot\System32\smss.exe
csrss.exe   [636]  
winlogon.exe   [660]   winlogon.exe
services.exe   [704]   C:\WINDOWS\system32\services.exe
lsass.exe   [716]   C:\WINDOWS\system32\lsass.exe
svchost.exe   [868]   C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe   [944]  
svchost.exe   [1040]   C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe   [1076]   C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe   [1196]  
svchost.exe   [1308]  
spoolsv.exe   [1464]   C:\WINDOWS\system32\spoolsv.exe
avgamsvr.exe   [1600]   C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
avgupsvc.exe   [1616]   C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
avgemc.exe   [1628]   C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
CTSVCCDA.EXE   [1672]   C:\WINDOWS\system32\CTsvcCDA.exe
sprtsvc.exe   [1772]   "C:\Program Files\Comcast\Desktop Doctor\bin\sprtsvc.exe" /service /P ddoctorv2
wdfmgr.exe   [1864]  
alg.exe   [592]  
explorer.exe   [828]   C:\WINDOWS\Explorer.EXE
ALCXMNTR.EXE   [1932]   "C:\WINDOWS\ALCXMNTR.EXE"
VTTimer.exe   [1956]   "C:\WINDOWS\system32\VTTimer.exe"
AGRSMMSG.exe   [1960]   "C:\WINDOWS\AGRSMMSG.exe"
hpztsb10.exe   [1304]   "C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb10.exe"
apdproxy.exe   [224]   "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
SMSTray.exe   [296]   "C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe"
qttask.exe   [544]   "C:\Program Files\QuickTime\qttask.exe" -atboottime
iTunesHelper.exe   [556]   "C:\Program Files\iTunes\iTunesHelper.exe"
VerizonServicepoint.exe   [560]   "C:\Program Files\Verizon\VSP\VerizonServicepoint.exe" /AUTORUN
sprtcmd.exe   [832]   "C:\Program Files\Comcast\Desktop Doctor\bin\sprtcmd.exe" /P ddoctorv2
avgcc.exe   [1164]   "C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" /STARTUP
jusched.exe   [364]   "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
msmsgs.exe   [1296]   "C:\Program Files\Messenger\MSMSGS.EXE" /background
GoogleToolbarNotifier.exe   [1336]   "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
ctfmon.exe   [1400]   "C:\WINDOWS\system32\ctfmon.exe"
WCESCOMM.EXE   [1896]   "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
CTSyncU.exe   [1740]   "C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe"
NMBgMonitor.exe   [1112]   "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
LimeWire.exe   [2076]   "C:\Program Files\LimeWire\LimeWire.exe" -startup
iPodService.exe   [2340]   "C:\Program Files\iPod\bin\iPodService.exe"
svchost.exe   [2600]   C:\WINDOWS\System32\svchost.exe -k imgsvc
svchost.exe   [2644]   C:\WINDOWS\System32\svchost.exe -k HTTPFilter
iexplore.exe   [3452]   "C:\Program Files\Internet Explorer\iexplore.exe"
wscript.exe   [696]   "C:\WINDOWS\System32\WScript.exe" "C:\DOCUME~1\Jay\LOCALS~1\Temp\Temporary Directory 1 for FileLister[1].zip\FileLister.vbe"
wmiprvse.exe   [1576]  
wmiprvse.exe   [2440]  

jusmille

13 Posts

May 17th, 2008 23:00

4/8/2008 4:47:10 PM    8957    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8901
4/8/2008 4:47:10 PM    67504    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8903
4/8/2008 4:47:10 PM    18267    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8910
4/8/2008 4:47:10 PM    21154    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8915
4/8/2008 4:47:10 PM    13362    C:\Program Files\TaxCut07\Help\MM\Us\irs\f8917
4/8/2008 4:47:10 PM    30775    C:\Program Files\TaxCut07\Help\MM\Us\irs\f9465
4/8/2008 4:47:10 PM    45125    C:\Program Files\TaxCut07\Help\MM\Us\irs\fss4
4/8/2008 4:47:10 PM    13798    C:\Program Files\TaxCut07\Help\MM\Us\irs\ftd90
4/8/2008 4:47:10 PM    8884    C:\Program Files\TaxCut07\Help\MM\Us\irs\fw10
4/8/2008 4:47:10 PM    116344    C:\Program Files\TaxCut07\Help\MM\Us\irs\fw2
4/8/2008 4:47:10 PM    7051    C:\Program Files\TaxCut07\Help\MM\Us\irs\fw2g
4/8/2008 4:47:10 PM    19125    C:\Program Files\TaxCut07\Help\MM\Us\irs\fw4
4/8/2008 4:47:10 PM    7741    C:\Program Files\TaxCut07\Help\MM\Us\irs\sched1
4/8/2008 4:47:10 PM    26569    C:\Program Files\TaxCut07\Help\MM\Us\irs\sched2
4/8/2008 4:47:10 PM    18465    C:\Program Files\TaxCut07\Help\MM\Us\irs\sched3
4/8/2008 4:47:10 PM    156526    C:\Program Files\TaxCut07\Help\MM\Us\irs\scheda
4/8/2008 4:47:10 PM    12904    C:\Program Files\TaxCut07\Help\MM\Us\irs\schedb
4/8/2008 4:47:10 PM    94996    C:\Program Files\TaxCut07\Help\MM\Us\irs\schedc
4/8/2008 4:47:10 PM    8818    C:\Program Files\TaxCut07\Help\MM\Us\irs\schedcez
4/8/2008 4:47:10 PM    85932    C:\Program Files\TaxCut07\Help\MM\Us\irs\schedd
4/8/2008 4:47:10 PM    55711    C:\Program Files\TaxCut07\Help\MM\Us\irs\schede
4/8/2008 4:47:10 PM    10889    C:\Program Files\TaxCut07\Help\MM\Us\irs\schedeic
4/8/2008 4:47:10 PM    56386    C:\Program Files\TaxCut07\Help\MM\Us\irs\schedf
4/8/2008 4:47:10 PM    49189    C:\Program Files\TaxCut07\Help\MM\Us\irs\schedh
4/8/2008 4:47:10 PM    57661    C:\Program Files\TaxCut07\Help\MM\Us\irs\schedj
4/8/2008 4:47:10 PM    18708    C:\Program Files\TaxCut07\Help\MM\Us\irs\schedr
4/8/2008 4:47:10 PM    32186    C:\Program Files\TaxCut07\Help\MM\Us\irs\schedse
4/8/2008 4:47:10 PM    3233707    C:\Program Files\TaxCut07\Help\MM\Us\pub
4/8/2008 4:47:11 PM    1870316    C:\Program Files\TaxCut07\Help\MM\Us\tips
4/8/2008 4:47:11 PM    154170    C:\Program Files\TaxCut07\Help\MM\Us\tips\Business
4/8/2008 4:47:11 PM    74556    C:\Program Files\TaxCut07\Help\MM\Us\tips\Business\Expenses
4/8/2008 4:47:11 PM    3593    C:\Program Files\TaxCut07\Help\MM\Us\tips\Business\Farm
4/8/2008 4:47:11 PM    41900    C:\Program Files\TaxCut07\Help\MM\Us\tips\Business\Income
4/8/2008 4:47:11 PM    22416    C:\Program Files\TaxCut07\Help\MM\Us\tips\Business\Rental
4/8/2008 4:47:11 PM    11681    C:\Program Files\TaxCut07\Help\MM\Us\tips\Business\Taxes
4/8/2008 4:47:11 PM    239157    C:\Program Files\TaxCut07\Help\MM\Us\tips\Deductions_Credits
4/8/2008 4:47:12 PM    17378    C:\Program Files\TaxCut07\Help\MM\Us\tips\Deductions_Credits\Casualty
4/8/2008 4:47:12 PM    19573    C:\Program Files\TaxCut07\Help\MM\Us\tips\Deductions_Credits\Charitable
4/8/2008 4:47:12 PM    24670    C:\Program Files\TaxCut07\Help\MM\Us\tips\Deductions_Credits\Child
4/8/2008 4:47:12 PM    65360    C:\Program Files\TaxCut07\Help\MM\Us\tips\Deductions_Credits\Education
4/8/2008 4:47:12 PM    6244    C:\Program Files\TaxCut07\Help\MM\Us\tips\Deductions_Credits\EIC
4/8/2008 4:47:12 PM    18722    C:\Program Files\TaxCut07\Help\MM\Us\tips\Deductions_Credits\Job_Related
4/8/2008 4:47:12 PM    10044    C:\Program Files\TaxCut07\Help\MM\Us\tips\Deductions_Credits\Medical
4/8/2008 4:47:12 PM    26873    C:\Program Files\TaxCut07\Help\MM\Us\tips\Deductions_Credits\Mortgage
4/8/2008 4:47:12 PM    24749    C:\Program Files\TaxCut07\Help\MM\Us\tips\Deductions_Credits\Other
4/8/2008 4:47:13 PM    4240    C:\Program Files\TaxCut07\Help\MM\Us\tips\Deductions_Credits\Property
4/8/2008 4:47:13 PM    16600    C:\Program Files\TaxCut07\Help\MM\Us\tips\Deductions_Credits\StandardVsItemized
4/8/2008 4:47:13 PM    4680    C:\Program Files\TaxCut07\Help\MM\Us\tips\Deductions_Credits\StateLocal_Tax
4/8/2008 4:47:13 PM    74378    C:\Program Files\TaxCut07\Help\MM\Us\tips\Filing
4/8/2008 4:47:13 PM    10914    C:\Program Files\TaxCut07\Help\MM\Us\tips\Filing\Amended
4/8/2008 4:47:13 PM    10098    C:\Program Files\TaxCut07\Help\MM\Us\tips\Filing\Electronic
4/8/2008 4:47:13 PM    49861    C:\Program Files\TaxCut07\Help\MM\Us\tips\Filing\Other
4/8/2008 4:47:13 PM    3481    C:\Program Files\TaxCut07\Help\MM\Us\tips\Filing\Paper
4/8/2008 4:47:13 PM    135557    C:\Program Files\TaxCut07\Help\MM\Us\tips\Glossary
4/8/2008 4:47:13 PM    254503    C:\Program Files\TaxCut07\Help\MM\Us\tips\Income
4/8/2008 4:47:13 PM    22506    C:\Program Files\TaxCut07\Help\MM\Us\tips\Income\Interest_Dividends
4/8/2008 4:47:13 PM    90956    C:\Program Files\TaxCut07\Help\MM\Us\tips\Income\Mutual_Funds
4/8/2008 4:47:13 PM    49507    C:\Program Files\TaxCut07\Help\MM\Us\tips\Income\Other_Income
4/8/2008 4:47:13 PM    4481    C:\Program Files\TaxCut07\Help\MM\Us\tips\Income\Other_Invest
4/8/2008 4:47:13 PM    7643    C:\Program Files\TaxCut07\Help\MM\Us\tips\Income\Sale_Home
4/8/2008 4:47:13 PM    7638    C:\Program Files\TaxCut07\Help\MM\Us\tips\Income\State_Gov_Payments
4/8/2008 4:47:13 PM    26954    C:\Program Files\TaxCut07\Help\MM\Us\tips\Income\Stock_Options
4/8/2008 4:47:13 PM    19729    C:\Program Files\TaxCut07\Help\MM\Us\tips\Income\Stock_Sales
4/8/2008 4:47:13 PM    25065    C:\Program Files\TaxCut07\Help\MM\Us\tips\Income\Wages
4/8/2008 4:47:13 PM    57720    C:\Program Files\TaxCut07\Help\MM\Us\tips\Personal_Dependents
4/8/2008 4:47:13 PM    30314    C:\Program Files\TaxCut07\Help\MM\Us\tips\Personal_Dependents\Dependents
4/8/2008 4:47:14 PM    27382    C:\Program Files\TaxCut07\Help\MM\Us\tips\Personal_Dependents\Personal
4/8/2008 4:47:14 PM    25130    C:\Program Files\TaxCut07\Help\MM\Us\tips\Planning
4/8/2008 4:47:14 PM    81876    C:\Program Files\TaxCut07\Help\MM\Us\tips\Retirement
4/8/2008 4:47:14 PM    10597    C:\Program Files\TaxCut07\Help\MM\Us\tips\Retirement\Distributions
4/8/2008 4:47:14 PM    51098    C:\Program Files\TaxCut07\Help\MM\Us\tips\Retirement\IRAs
4/8/2008 4:47:14 PM    13299    C:\Program Files\TaxCut07\Help\MM\Us\tips\Retirement\Penalty
4/8/2008 4:47:14 PM    6858    C:\Program Files\TaxCut07\Help\MM\Us\tips\Retirement\SocialSecurity
4/8/2008 4:47:14 PM    17616    C:\Program Files\TaxCut07\Help\MM\Us\tips\Taxes
4/8/2008 4:47:14 PM    811711    C:\Program Files\TaxCut07\Help\MM\Us\vid
4/8/2008 4:47:14 PM    1463643    C:\Program Files\TaxCut07\Help\MM\Us\whdata
4/8/2008 4:47:14 PM    1635318    C:\Program Files\TaxCut07\Help\MM\Us\xpl
4/8/2008 5:03:48 PM    39805    C:\Program Files\TaxCut07\Help\MM\vhl
4/8/2008 4:47:15 PM    407435    C:\Program Files\TaxCut07\Images
4/8/2008 4:47:16 PM    2148171    C:\Program Files\TaxCut07\Navigation
4/8/2008 4:47:27 PM    8986200    C:\Program Files\TaxCut07\PDF995
4/8/2008 4:47:27 PM    38480699    C:\Program Files\TaxCut07\Program
4/8/2008 4:47:28 PM    11262982    C:\Program Files\TaxCut07\Program\Bmp256
4/8/2008 4:47:31 PM    14185476    C:\Program Files\TaxCut07\Program\US
4/8/2008 4:47:31 PM    1031490    C:\Program Files\TaxCut07\Program\US\HDL
4/8/2008 4:47:32 PM    2883745    C:\Program Files\TaxCut07\Program\US\Screens
4/8/2008 4:47:33 PM    594131    C:\Program Files\TaxCut07\Program\US\Scripts
4/8/2008 4:47:35 PM    710284    C:\Program Files\TaxCut07\Program\US\TaxFormDisplayLists
4/8/2008 4:47:37 PM    482156    C:\Program Files\TaxCut07\Program\US\TaxForms
4/8/2008 4:47:38 PM    78039    C:\Program Files\TaxCut07\Program\US\TifMaps
4/8/2008 4:47:38 PM    2393    C:\Program Files\TaxCut07\Scripts
4/8/2008 4:47:38 PM    309607    C:\Program Files\TaxCut07\Stylesheets
4/8/2008 4:47:38 PM    152    C:\Program Files\TaxCut07\Stylesheets\Edition
4/8/2008 4:47:38 PM    8146    C:\Program Files\TaxCut07\Stylesheets\FAQ
4/8/2008 4:47:38 PM    17945    C:\Program Files\TaxCut07\Stylesheets\Global
4/8/2008 4:47:38 PM    264121    C:\Program Files\TaxCut07\Stylesheets\Images
4/8/2008 4:47:38 PM    5649    C:\Program Files\TaxCut07\Stylesheets\ScreenType
4/8/2008 4:47:38 PM    13570    C:\Program Files\TaxCut07\Stylesheets\Templates
4/8/2008 4:47:38 PM    6370    C:\Program Files\TaxCut07\Templates
4/8/2008 4:47:38 PM    6422846    C:\Program Files\TaxCut07\Video
4/16/2008 1:51:05 PM    57414398    C:\Program Files\Three Rings Design
4/16/2008 1:51:05 PM    57414398    C:\Program Files\Three Rings Design\Puzzle Pirates
4/16/2008 2:21:16 PM    6557412    C:\Program Files\Three Rings Design\Puzzle Pirates\code
4/16/2008 2:23:51 PM    0    C:\Program Files\Three Rings Design\Puzzle Pirates\narcache
4/16/2008 2:21:35 PM    48560991    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc
4/16/2008 2:21:35 PM    48556683    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles
4/16/2008 2:21:35 PM    20729219    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components
4/16/2008 2:21:35 PM    554176    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face
4/16/2008 2:21:35 PM    22762    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face\animal

jusmille

13 Posts

May 17th, 2008 23:00

=== Files and Folders under "All Users\Application Data" Last 30 Days======

3/29/2008 2:44:44 PM    2066944    C:\Documents and Settings\All Users\Application Data\Apple
3/29/2008 2:44:44 PM    2066944    C:\Documents and Settings\All Users\Application Data\Apple\Installer Cache
3/29/2008 2:44:44 PM    2066944    C:\Documents and Settings\All Users\Application Data\Apple\Installer Cache\Apple Software Update 2.0.2.92
4/8/2008 4:45:45 PM    67860111    C:\Documents and Settings\All Users\Application Data\TaxCut
4/8/2008 4:45:45 PM    67860111    C:\Documents and Settings\All Users\Application Data\TaxCut\2007
4/8/2008 4:45:45 PM    34250240    C:\Documents and Settings\All Users\Application Data\TaxCut\2007\cache
4/8/2008 4:45:45 PM    34250240    C:\Documents and Settings\All Users\Application Data\TaxCut\2007\cache\{20FBF9A3-2FEB-4F29-9815-B0474711FF21}
4/8/2008 4:55:38 PM    33605521    C:\Documents and Settings\All Users\Application Data\TaxCut\2007\Update

=== Values under HKLM\Software\microsoft\shared tools\msconfig\startupreg ======

HKLM\Software\microsoft\shared tools\msconfig\startupreg\


=== BHO's under HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects ======

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}


HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}


HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}


HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}

 

=== Running Processes ======

System Idle Process   [0]  
System   [4]  
smss.exe   [572]   \SystemRoot\System32\smss.exe
csrss.exe   [636]  
winlogon.exe   [660]   winlogon.exe
services.exe   [704]   C:\WINDOWS\system32\services.exe
lsass.exe   [716]   C:\WINDOWS\system32\lsass.exe
svchost.exe   [868]   C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe   [944]  
svchost.exe   [1040]   C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe   [1076]   C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe   [1196]  
svchost.exe   [1308]  
spoolsv.exe   [1464]   C:\WINDOWS\system32\spoolsv.exe
avgamsvr.exe   [1600]   C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
avgupsvc.exe   [1616]   C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
avgemc.exe   [1628]   C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
CTSVCCDA.EXE   [1672]   C:\WINDOWS\system32\CTsvcCDA.exe
sprtsvc.exe   [1772]   "C:\Program Files\Comcast\Desktop Doctor\bin\sprtsvc.exe" /service /P ddoctorv2
wdfmgr.exe   [1864]  
alg.exe   [592]  
explorer.exe   [828]   C:\WINDOWS\Explorer.EXE
ALCXMNTR.EXE   [1932]   "C:\WINDOWS\ALCXMNTR.EXE"
VTTimer.exe   [1956]   "C:\WINDOWS\system32\VTTimer.exe"
AGRSMMSG.exe   [1960]   "C:\WINDOWS\AGRSMMSG.exe"
hpztsb10.exe   [1304]   "C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb10.exe"
apdproxy.exe   [224]   "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
SMSTray.exe   [296]   "C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe"
qttask.exe   [544]   "C:\Program Files\QuickTime\qttask.exe" -atboottime
iTunesHelper.exe   [556]   "C:\Program Files\iTunes\iTunesHelper.exe"
VerizonServicepoint.exe   [560]   "C:\Program Files\Verizon\VSP\VerizonServicepoint.exe" /AUTORUN
sprtcmd.exe   [832]   "C:\Program Files\Comcast\Desktop Doctor\bin\sprtcmd.exe" /P ddoctorv2
avgcc.exe   [1164]   "C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" /STARTUP
jusched.exe   [364]   "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
msmsgs.exe   [1296]   "C:\Program Files\Messenger\MSMSGS.EXE" /background
GoogleToolbarNotifier.exe   [1336]   "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
ctfmon.exe   [1400]   "C:\WINDOWS\system32\ctfmon.exe"
WCESCOMM.EXE   [1896]   "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
CTSyncU.exe   [1740]   "C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe"
NMBgMonitor.exe   [1112]   "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
LimeWire.exe   [2076]   "C:\Program Files\LimeWire\LimeWire.exe" -startup
iPodService.exe   [2340]   "C:\Program Files\iPod\bin\iPodService.exe"
svchost.exe   [2600]   C:\WINDOWS\System32\svchost.exe -k imgsvc
svchost.exe   [2644]   C:\WINDOWS\System32\svchost.exe -k HTTPFilter
iexplore.exe   [3452]   "C:\Program Files\Internet Explorer\iexplore.exe"
wmiprvse.exe   [1576]  
wmiprvse.exe   [2440]  
wscript.exe   [2888]   "C:\WINDOWS\System32\WScript.exe" "C:\DOCUME~1\Jay\LOCALS~1\Temp\Temporary Directory 2 for FileLister[1].zip\FileLister.vbe"

 

jusmille

13 Posts

May 17th, 2008 23:00

4/16/2008 2:21:35 PM    2801    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face\animal\fbigcat
4/16/2008 2:21:35 PM    2744    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face\animal\fcat
4/16/2008 2:21:37 PM    3255    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face\animal\fcrab
4/16/2008 2:21:36 PM    3390    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face\animal\felephant
4/16/2008 2:21:36 PM    2516    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face\animal\fpig
4/16/2008 2:21:37 PM    2435    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face\animal\frat
4/16/2008 2:21:36 PM    2743    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face\animal\fsheep
4/16/2008 2:21:36 PM    2878    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face\animal\fwolf
4/16/2008 2:21:37 PM    119745    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face\ffemale
4/16/2008 2:21:38 PM    118863    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face\fmale
4/16/2008 2:21:39 PM    268389    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face\kings
4/16/2008 2:21:41 PM    36766    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face\kings\azarbad
4/16/2008 2:21:40 PM    57497    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face\kings\barnabas
4/16/2008 2:21:41 PM    34918    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face\kings\brynhild
4/16/2008 2:21:39 PM    36498    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face\kings\finius
4/16/2008 2:21:39 PM    34408    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face\kings\gretchen
4/16/2008 2:21:40 PM    33286    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face\kings\vargas
4/16/2008 2:21:39 PM    35016    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face\kings\widow_queen
4/16/2008 2:21:38 PM    24417    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face\monster
4/16/2008 2:21:39 PM    3164    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face\monster\fatlantean
4/16/2008 2:21:38 PM    21253    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\face\monster\fskeleton
4/16/2008 2:21:41 PM    16795478    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\pirate
4/16/2008 2:21:41 PM    945683    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\pirate\animal
4/16/2008 2:21:41 PM    118577    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\pirate\animal\bigcat
4/16/2008 2:21:42 PM    75470    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\pirate\animal\cat
4/16/2008 2:21:46 PM    121141    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\pirate\animal\crab
4/16/2008 2:21:42 PM    198865    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\pirate\animal\elephant
4/16/2008 2:21:43 PM    98509    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\pirate\animal\pig
4/16/2008 2:21:45 PM    50838    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\pirate\animal\rat
4/16/2008 2:21:44 PM    157217    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\pirate\animal\sheep
4/16/2008 2:21:44 PM    125066    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\pirate\animal\wolf
4/16/2008 2:21:46 PM    7256052    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\pirate\female
4/16/2008 2:22:03 PM    7933275    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\pirate\male
4/16/2008 2:22:22 PM    660468    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\pirate\monster
4/16/2008 2:22:22 PM    272047    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\pirate\monster\atlantean
4/16/2008 2:22:22 PM    388421    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\pirate\monster\skeleton
4/16/2008 2:22:24 PM    3375973    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\components\vessel
4/16/2008 2:22:31 PM    15032828    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\media
4/16/2008 2:23:10 PM    12794636    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles
4/16/2008 2:23:10 PM    648011    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\adventure
4/16/2008 2:23:10 PM    319698    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\adventure\props
4/16/2008 2:23:11 PM    328313    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\adventure\structures
4/16/2008 2:23:12 PM    4793675    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\buildings
4/16/2008 2:23:12 PM    4793675    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\buildings\caribbean
4/16/2008 2:23:23 PM    258158    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\fringe
4/16/2008 2:23:24 PM    738296    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\furniture
4/16/2008 2:23:26 PM    67041    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\indoors
4/16/2008 2:23:26 PM    67041    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\indoors\base
4/16/2008 2:23:26 PM    1840747    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\outdoors
4/16/2008 2:23:26 PM    243695    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\outdoors\base
4/16/2008 2:23:27 PM    1212095    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\outdoors\props
4/16/2008 2:23:30 PM    384957    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\outdoors\structures
4/16/2008 2:23:32 PM    733764    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\props
4/16/2008 2:23:32 PM    166376    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\props\containers
4/16/2008 2:23:32 PM    60882    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\props\desktop
4/16/2008 2:23:32 PM    446390    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\props\misc
4/16/2008 2:23:34 PM    60116    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\props\monuments
4/16/2008 2:23:34 PM    199488    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\sea
4/16/2008 2:23:34 PM    137916    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\sea\battle
4/16/2008 2:23:34 PM    50330    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\sea\battle\atlantis
4/16/2008 2:23:35 PM    53440    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\sea\islands
4/16/2008 2:23:35 PM    8132    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\sea\sailing
4/16/2008 2:23:35 PM    1183295    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\structures
4/16/2008 2:23:35 PM    326585    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\structures\bar
4/16/2008 2:23:36 PM    136097    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\structures\doors
4/16/2008 2:23:37 PM    115101    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\structures\misc
4/16/2008 2:23:37 PM    266491    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\structures\stairs
4/16/2008 2:23:38 PM    257073    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\structures\walls
4/16/2008 2:23:39 PM    81948    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\structures\windows
4/16/2008 2:23:39 PM    673744    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\treasures
4/16/2008 2:23:39 PM    53431    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\treasures\artifacts
4/16/2008 2:23:39 PM    531562    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\treasures\misc
4/16/2008 2:23:41 PM    88751    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\treasures\paintings
4/16/2008 2:23:41 PM    1658417    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\vessel
4/16/2008 2:23:41 PM    12935    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\vessel\base
4/16/2008 2:23:42 PM    1645482    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\bundles\tiles\vessel\object
4/16/2008 2:23:45 PM    4308    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\config
4/16/2008 2:23:45 PM    4308    C:\Program Files\Three Rings Design\Puzzle Pirates\rsrc\config\resource
4/17/2008 8:56:24 PM    406427    C:\Program Files\Trend Micro
4/17/2008 8:56:24 PM    406427    C:\Program Files\Trend Micro\HijackThis

=== Files under "\System32\Drivers" Last 30 Days======

4/26/2008 8:47:00 AM    12160    32    C:\WINDOWS\system32\drivers\mouhid.sys

=== Files under "\User\Local Settings\Temp" Last 30 Days======

4/3/2008 2:07:00 PM    108    32    C:\Documents and Settings\Jay\Local Settings\Temp\2f6_appcompat.txt
4/4/2008 2:22:33 PM    49458    32    C:\Documents and Settings\Jay\Local Settings\Temp\db68_appcompat.txt
4/3/2008 6:46:32 PM    1994    32    C:\Documents and Settings\Jay\Local Settings\Temp\IMT61.xml
4/3/2008 6:46:32 PM    426    32    C:\Documents and Settings\Jay\Local Settings\Temp\IMT62.xml
4/3/2008 6:46:32 PM    707340    32    C:\Documents and Settings\Jay\Local Settings\Temp\IMT63.xml
4/16/2008 1:37:16 PM    1201    32    C:\Documents and Settings\Jay\Local Settings\Temp\java_install_sp.log
4/26/2008 8:54:16 AM    0    32    C:\Documents and Settings\Jay\Local Settings\Temp\JET7792.tmp
4/5/2008 11:48:27 AM    0    32    C:\Documents and Settings\Jay\Local Settings\Temp\JETAEDD.tmp
4/15/2008 10:36:46 PM    0    32    C:\Documents and Settings\Jay\Local Settings\Temp\JETF026.tmp
4/2/2008 3:35:44 PM    585269    32    C:\Documents and Settings\Jay\Local Settings\Temp\rings.exe
4/16/2008 11:30:35 AM    116880    33    C:\Documents and Settings\Jay\Local Settings\Temp\set30.tmp
4/16/2008 11:31:16 AM    116880    33    C:\Documents and Settings\Jay\Local Settings\Temp\set33.tmp
4/16/2008 11:19:59 AM    116880    32    C:\Documents and Settings\Jay\Local Settings\Temp\SETC.tmp
4/3/2008 12:34:03 AM    32768    32    C:\Documents and Settings\Jay\Local Settings\Temp\swt-awt-win32-3346.dll
4/3/2008 12:34:03 AM    307200    32    C:\Documents and Settings\Jay\Local Settings\Temp\swt-win32-3346.dll

 

bamajim

10.4K Posts

May 19th, 2008 13:00

jusmille

I still don't see anything malware / spyware related

Rerun Hijackthis
  • At the main window Select " Open the Misc tool section"
    Then Select " Open ADS Spy"
    Uncheck " Quick scan" Then Scan
    If a log shows up in the window Select " Save log" and post
    it as a reply to this thread














Microsoft MVP Consumer-Security

 


"The world is what you make of it"




jusmille

13 Posts

June 6th, 2008 10:00

C:\Documents and Settings\Carrie\Favorites\MSN.com.url : favicon  (3638 bytes)
C:\Documents and Settings\Jay\Favorites\gamefaqs Jaws Unleashed (PS2) FAQ-Walkthrough by Ranger05msn.url : favicon  (1406 bytes)
C:\Documents and Settings\Jay\Favorites\GE Electric  Dryer Nwer Style Diagnostic Chart AMERICAN SERVICE DEPT..url : favicon  (3638 bytes)
C:\Documents and Settings\Jay\Favorites\Tiger Woods PGA Tour 2006 cheats, Tiger Woods PGA Tour 2006 cheat codes Playstation 2.url : favicon  (766 bytes)

 

Was this post helpful?

View All

0 events found

No Events found!

Top