Solved Google searches redirected, random bluescreens

Goldensunboy · 2011/02/28

[Resolved] Google searches redirected, random bluescreens

Hello, I am having troubles with malware and was wondering if someone could assist me.

This all started happening 2 days ago immediately after the Windows Host Process suddenly stopped working once while browsing the internet.

I haven't had malware problems in the past that wouldn't go away with a simple MBAM scan, but this one seems to not go away with everything I try. The problem is exactly like the one described in this thread; I have hourly popups for all sorts of ads (most of which get redirected to "http://www.google.com/webhp "), and most of the time when I click a link from Google search results I get redirected to the same ads which may or may not automatically redirect to webhp.

I have run MBAM, GMER, MBRCheck, DDS, HiJackThis, SystemLook, Kenco, OTL, and Avenger, none of which resolved the problem; I saved the logs from each program. I also attempted to run ComboFix and and the Kaspersky scan, but they couldn't complete. I tried ComboFix dozens of times both with regular boot and safe mode, but it bluescreens every time I run it, despite re-downloading it several times.

Help would be very much appreciated, and thank you for your time. I am only posting the logs requested in the announcement as per regulations, but will happily post whichever others are necessary or perform a scan again for a new log if needed.

********************

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Database version: 5900

Windows 6.0.6001 Service Pack 1
Internet Explorer 8.0.6001.18943

2/27/2011 11:22:42 PM
mbam-log-2011-02-27 (23-22-42).txt

Scan type: Quick scan
Objects scanned: 158727
Time elapsed: 2 minute(s), 43 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 2

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\xagiakyy (Trojan.FakeAlert) -> Value: xagiakyy -> Quarantined and deleted successfully.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
c:\Windows\Temp\kslrqpviu\jcqnqrahmof.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
c:\Users\Andrew\AppData\Local\Temp\jar_cache1089162310613109101.tmp (Trojan.Zbot) -> Quarantined and deleted successfully.

********************

GMER 1.0.15.15530 - http://www.gmer.net
Rootkit scan 2011-02-27 23:55:55
Windows 6.0.6001 Service Pack 1 Harddisk0\DR0 -> \Device\Ide\iaStor0 WDC_WD32 rev.11.0
Running: xoqflx19.exe; Driver: C:\Users\Andrew\AppData\Local\Temp\uglyqpog.sys

---- Kernel code sections - GMER 1.0.15 ----

? C:\Users\Andrew\AppData\Local\Temp\uglyqpog.sys The system cannot find the file specified. !

---- User code sections - GMER 1.0.15 ----

.text C:\Windows\system32\svchost.exe[844] ntdll.dll!NtProtectVirtualMemory 77C98968 5 Bytes JMP 0081000A
.text C:\Windows\system32\svchost.exe[844] ntdll.dll!NtWriteVirtualMemory 77C992A8 5 Bytes JMP 0082000A
.text C:\Windows\system32\svchost.exe[844] ntdll.dll!KiUserExceptionDispatcher 77C999E8 5 Bytes JMP 0080000A
.text C:\Windows\system32\svchost.exe[844] ole32.dll!CoCreateInstance 775EE188 5 Bytes JMP 00D2000A
.text C:\Windows\Explorer.EXE[1156] ntdll.dll!NtProtectVirtualMemory 77C98968 5 Bytes JMP 0026000A
.text C:\Windows\Explorer.EXE[1156] ntdll.dll!NtWriteVirtualMemory 77C992A8 5 Bytes JMP 0027000A
.text C:\Windows\Explorer.EXE[1156] ntdll.dll!KiUserExceptionDispatcher 77C999E8 5 Bytes JMP 0025000A

---- User IAT/EAT - GMER 1.0.15 ----

IAT C:\Windows\Explorer.EXE[1156] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdiplusShutdown] [74C788B4] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18175_none_9e7bbe54c9c04bca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[1156] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCloneImage] [74CB98A5] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18175_none_9e7bbe54c9c04bca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[1156] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDrawImageRectI] [74C7B9D4] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18175_none_9e7bbe54c9c04bca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[1156] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipSetInterpolationMode] [74C6FB47] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18175_none_9e7bbe54c9c04bca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[1156] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdiplusStartup] [74C77A79] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18175_none_9e7bbe54c9c04bca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[1156] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateFromHDC] [74C6EA65] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18175_none_9e7bbe54c9c04bca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[1156] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateBitmapFromStreamICM] [74CAB17D] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18175_none_9e7bbe54c9c04bca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[1156] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateBitmapFromStream] [74C7BC9A] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18175_none_9e7bbe54c9c04bca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[1156] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipGetImageHeight] [74C7074E] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18175_none_9e7bbe54c9c04bca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[1156] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipGetImageWidth] [74C706B5] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18175_none_9e7bbe54c9c04bca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[1156] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDisposeImage] [74C671B3] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18175_none_9e7bbe54c9c04bca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[1156] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipLoadImageFromFileICM] [74CFD848] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18175_none_9e7bbe54c9c04bca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[1156] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipLoadImageFromFile] [74C97379] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18175_none_9e7bbe54c9c04bca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[1156] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDeleteGraphics] [74C6E109] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18175_none_9e7bbe54c9c04bca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[1156] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipFree] [74C6697E] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18175_none_9e7bbe54c9c04bca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[1156] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipAlloc] [74C669A9] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18175_none_9e7bbe54c9c04bca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\Windows\Explorer.EXE[1156] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipSetCompositingMode] [74C72465] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18175_none_9e7bbe54c9c04bca\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)

---- Devices - GMER 1.0.15 ----

AttachedDevice \Driver\kbdclass \Device\KeyboardClass0 Wdf01000.sys (WDF Dynamic/Microsoft Corporation)
AttachedDevice \Driver\kbdclass \Device\KeyboardClass1 Wdf01000.sys (WDF Dynamic/Microsoft Corporation)
AttachedDevice \FileSystem\fastfat \Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)

Device \Device\Ide\IAAStorageDevice-1 -> \??\IDE#DiskWDC_WD3200BEKT-22F3T0___________________11.01A11#4&b17d5&0&0.0.0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b} device not found

---- Registry - GMER 1.0.15 ----

Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files\DAEMON Tools Lite\
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0x00 0x00 0x00 0x00 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x1E 0xD3 0xC3 0xB4 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0x82 0xF0 0x66 0x57 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0x2D 0x53 0x18 0x0A ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files\DAEMON Tools Lite\
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0x00 0x00 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x1E 0xD3 0xC3 0xB4 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0x82 0xF0 0x66 0x57 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0x2D 0x53 0x18 0x0A ...

---- Disk sectors - GMER 1.0.15 ----

Disk \Device\Harddisk0\DR0 sector 00 (MBR): rootkit-like behavior;
Disk \Device\Harddisk0\DR0 sector 62: rootkit-like behavior;
Disk \Device\Harddisk0\DR0 sectors 625142192 (+255): rootkit-like behavior;

---- EOF - GMER 1.0.15 ----

********************

MBRCheck, version 1.2.3
(c) 2010, AD

Command-line:
Windows Version: Windows Vista Home Premium Edition
Windows Information: Service Pack 1 (build 6001), 32-bit
Base Board Manufacturer: MSI
BIOS Manufacturer: American Megatrends Inc.
System Manufacturer: Micro-Star International
System Product Name: GT725
Logical Drives Mask: 0x0000007c

Kernel Drivers (total 162):
0x82846000 \SystemRoot\system32\ntkrnlpa.exe
0x82813000 \SystemRoot\system32\hal.dll
0x87C9D000 \SystemRoot\system32\kdcom.dll
0x80607000 \SystemRoot\system32\mcupdate_GenuineIntel.dll
0x80667000 \SystemRoot\system32\PSHED.dll
0x80678000 \SystemRoot\system32\BOOTVID.dll
0x80680000 \SystemRoot\system32\CLFS.SYS
0x806C1000 \SystemRoot\system32\CI.dll
0x82E02000 \SystemRoot\system32\drivers\Wdf01000.sys
0x82E7E000 \SystemRoot\system32\drivers\WDFLDR.SYS
0x82E8B000 \SystemRoot\System32\Drivers\sppc.sys
0x82F7E000 \SystemRoot\System32\Drivers\WMILIB.SYS
0x82F87000 \SystemRoot\System32\Drivers\SCSIPORT.SYS
0x82FAD000 \SystemRoot\system32\drivers\acpi.sys
0x82FF3000 \SystemRoot\system32\drivers\msisadrv.sys
0x807A1000 \SystemRoot\system32\drivers\pci.sys
0x807C8000 \SystemRoot\System32\drivers\partmgr.sys
0x82FFB000 \SystemRoot\system32\DRIVERS\compbatt.sys
0x807D7000 \SystemRoot\system32\DRIVERS\BATTC.SYS
0x807E1000 \SystemRoot\system32\drivers\volmgr.sys
0x83004000 \SystemRoot\System32\drivers\volmgrx.sys
0x8304E000 \SystemRoot\System32\drivers\mountmgr.sys
0x8305E000 \SystemRoot\system32\DRIVERS\iaStor.sys
0x8312C000 \SystemRoot\system32\drivers\atapi.sys
0x83134000 \SystemRoot\system32\drivers\ataport.SYS
0x83152000 \SystemRoot\system32\drivers\fltmgr.sys
0x83184000 \SystemRoot\system32\drivers\fileinfo.sys
0x83209000 \SystemRoot\System32\Drivers\ksecdd.sys
0x8327A000 \SystemRoot\system32\drivers\ndis.sys
0x83385000 \SystemRoot\system32\drivers\msrpc.sys
0x833B0000 \SystemRoot\system32\drivers\NETIO.SYS
0x8AE0A000 \SystemRoot\System32\drivers\tcpip.sys
0x8AEF3000 \SystemRoot\System32\drivers\fwpkclnt.sys
0x8B00F000 \SystemRoot\System32\Drivers\Ntfs.sys
0x8B11E000 \SystemRoot\system32\drivers\volsnap.sys
0x8B157000 \SystemRoot\System32\Drivers\spldr.sys
0x8B15F000 \SystemRoot\System32\Drivers\mup.sys
0x8B16E000 \SystemRoot\System32\drivers\ecache.sys
0x8B195000 \SystemRoot\system32\drivers\disk.sys
0x8B1A6000 \SystemRoot\system32\drivers\CLASSPNP.SYS
0x8B1C7000 \SystemRoot\system32\drivers\crcdisk.sys
0x8B1D0000 \SystemRoot\System32\Drivers\BtHidBus.sys
0x8B1EC000 \SystemRoot\system32\DRIVERS\tunnel.sys
0x8B1F7000 \SystemRoot\system32\DRIVERS\tunmp.sys
0x8B000000 \SystemRoot\system32\DRIVERS\intelppm.sys
0x8F60E000 \SystemRoot\system32\DRIVERS\atikmdag.sys
0x8AF0E000 \SystemRoot\System32\drivers\dxgkrnl.sys
0x8F600000 \SystemRoot\System32\drivers\watchdog.sys
0x8B1D4000 \SystemRoot\system32\DRIVERS\HDAudBus.sys
0x8FBF5000 \SystemRoot\system32\DRIVERS\usbuhci.sys
0x8AFAD000 \SystemRoot\system32\DRIVERS\USBPORT.SYS
0x8AFEB000 \SystemRoot\system32\DRIVERS\usbehci.sys
0x83194000 \SystemRoot\system32\DRIVERS\Rtlh86.sys
0x8EE08000 \SystemRoot\system32\DRIVERS\NETw5v32.sys
0x8F18F000 \SystemRoot\system32\DRIVERS\ohci1394.sys
0x8F19F000 \SystemRoot\system32\DRIVERS\1394BUS.SYS
0x8F1AD000 \SystemRoot\system32\DRIVERS\o2sd.sys
0x8F1B7000 \SystemRoot\system32\DRIVERS\o2media.sys
0x8F1C3000 \SystemRoot\system32\DRIVERS\i8042prt.sys
0x8F1D6000 \SystemRoot\system32\DRIVERS\kbdclass.sys
0x831BF000 \SystemRoot\system32\DRIVERS\SynTP.sys
0x8F1E1000 \SystemRoot\system32\DRIVERS\USBD.SYS
0x8F1E3000 \SystemRoot\system32\DRIVERS\mouclass.sys
0x8F1EE000 \SystemRoot\system32\DRIVERS\CmBatt.sys
0x8F1F2000 \SystemRoot\system32\DRIVERS\wmiacpi.sys
0x8F202000 \SystemRoot\system32\DRIVERS\enecir.sys
0x8F21A000 \SystemRoot\system32\drivers\iviaspi.sys
0x8F21D000 \SystemRoot\system32\DRIVERS\cdrom.sys
0x8F235000 \SystemRoot\System32\Drivers\a26i5n6p.SYS
0x8F26E000 \SystemRoot\System32\Drivers\tosrfcom.sys
0x8F27E000 \SystemRoot\System32\Drivers\btnetBus.sys
0x8F284000 \SystemRoot\System32\Drivers\VcommMgr.sys
0x8F28B000 \SystemRoot\System32\Drivers\IvtBtBus.sys
0x8F290000 \SystemRoot\system32\DRIVERS\msiscsi.sys
0x8F2BE000 \SystemRoot\system32\DRIVERS\storport.sys
0x8F2FF000 \SystemRoot\system32\DRIVERS\TDI.SYS
0x8F30A000 \SystemRoot\System32\Drivers\RootMdm.sys
0x8F312000 \SystemRoot\system32\drivers\modem.sys
0x8F31F000 \SystemRoot\system32\DRIVERS\rasl2tp.sys
0x8F336000 \SystemRoot\system32\DRIVERS\ndistapi.sys
0x8F341000 \SystemRoot\system32\DRIVERS\ndiswan.sys
0x8F364000 \SystemRoot\system32\DRIVERS\raspppoe.sys
0x8F373000 \SystemRoot\system32\DRIVERS\raspptp.sys
0x8F387000 \SystemRoot\system32\DRIVERS\rassstp.sys
0x8F39C000 \SystemRoot\system32\DRIVERS\pnetmdm.sys
0x8F39F000 \SystemRoot\system32\DRIVERS\termdd.sys
0x8F3AF000 \SystemRoot\system32\DRIVERS\swenum.sys
0x8F3B1000 \SystemRoot\system32\DRIVERS\ks.sys
0x8F3DB000 \SystemRoot\system32\DRIVERS\circlass.sys
0x8F3E9000 \SystemRoot\system32\DRIVERS\mssmbios.sys
0x8F3F3000 \SystemRoot\system32\DRIVERS\umbus.sys
0x8FE02000 \SystemRoot\system32\DRIVERS\usbhub.sys
0x8FE36000 \SystemRoot\system32\DRIVERS\tosporte.sys
0x8FE41000 \SystemRoot\System32\Drivers\NDProxy.SYS
0x8FE52000 \SystemRoot\system32\drivers\RtHDMIV.sys
0x8FE77000 \SystemRoot\system32\drivers\portcls.sys
0x8FEA4000 \SystemRoot\system32\drivers\drmk.sys
0x91001000 \SystemRoot\system32\drivers\RTKVHDA.sys
0x91222000 \SystemRoot\system32\DRIVERS\smserial.sys
0x9132F000 \SystemRoot\system32\DRIVERS\hidir.sys
0x9133A000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS
0x9134A000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS
0x91351000 \SystemRoot\system32\DRIVERS\kbdhid.sys
0x9135A000 \SystemRoot\system32\DRIVERS\mouhid.sys
0x91362000 \SystemRoot\System32\Drivers\Fs_Rec.SYS
0x9136B000 \SystemRoot\System32\Drivers\Null.SYS
0x91372000 \SystemRoot\System32\Drivers\Beep.SYS
0x91379000 \SystemRoot\System32\drivers\vga.sys
0x91385000 \SystemRoot\System32\drivers\VIDEOPRT.SYS
0x913A6000 \SystemRoot\System32\DRIVERS\RDPCDD.sys
0x913AE000 \SystemRoot\system32\drivers\rdpencdd.sys
0x913B6000 \SystemRoot\System32\Drivers\Msfs.SYS
0x913C1000 \SystemRoot\System32\Drivers\Npfs.SYS
0x913CF000 \SystemRoot\System32\DRIVERS\rasacd.sys
0x913D8000 \SystemRoot\system32\DRIVERS\tdx.sys
0x8FEC9000 \SystemRoot\system32\DRIVERS\smb.sys
0x8FEDD000 \SystemRoot\system32\drivers\afd.sys
0x8FF25000 \SystemRoot\System32\DRIVERS\netbt.sys
0x8FF57000 \SystemRoot\system32\DRIVERS\pacer.sys
0x913EE000 \SystemRoot\system32\DRIVERS\netbios.sys
0x8FF6D000 \SystemRoot\system32\DRIVERS\wanarp.sys
0x8FF80000 \SystemRoot\system32\DRIVERS\rdbss.sys
0x8FFBC000 \SystemRoot\system32\drivers\nsiproxy.sys
0x8FFC6000 \SystemRoot\System32\Drivers\dfsc.sys
0x8FFDD000 \SystemRoot\system32\DRIVERS\USBSTOR.SYS
0x92605000 \SystemRoot\system32\DRIVERS\udfs.sys
0x92640000 \SystemRoot\System32\Drivers\btcusb.sys
0x92655000 \SystemRoot\system32\DRIVERS\usbccgp.sys
0x9266C000 \SystemRoot\System32\Drivers\usbvideo.sys
0x814E0000 \SystemRoot\System32\win32k.sys
0x9268D000 \SystemRoot\System32\drivers\Dxapi.sys
0x92697000 \SystemRoot\system32\DRIVERS\monitor.sys
0x81700000 \SystemRoot\System32\TSDDD.dll
0x81720000 \SystemRoot\System32\cdd.dll
0x81730000 \SystemRoot\System32\ATMFD.DLL
0x926A6000 \SystemRoot\System32\Drivers\fastfat.SYS
0x926CE000 \SystemRoot\system32\drivers\spsys.sys
0x9277D000 \SystemRoot\system32\DRIVERS\lltdio.sys
0x9278D000 \SystemRoot\system32\DRIVERS\nwifi.sys
0x927B7000 \SystemRoot\system32\DRIVERS\ndisuio.sys
0x927C1000 \SystemRoot\system32\DRIVERS\rspndr.sys
0xA0805000 \SystemRoot\system32\drivers\HTTP.sys
0xA0872000 \SystemRoot\System32\DRIVERS\srvnet.sys
0xA088F000 \SystemRoot\system32\DRIVERS\bowser.sys
0xA08A8000 \SystemRoot\System32\drivers\mpsdrv.sys
0xA08BD000 \SystemRoot\system32\drivers\mrxdav.sys
0xA08DD000 \SystemRoot\system32\DRIVERS\mrxsmb.sys
0xA08FC000 \SystemRoot\system32\DRIVERS\mrxsmb10.sys
0xA0935000 \SystemRoot\system32\DRIVERS\mrxsmb20.sys
0xA094D000 \SystemRoot\System32\DRIVERS\srv2.sys
0xA0974000 \SystemRoot\System32\DRIVERS\srv.sys
0xA1A0D000 \SystemRoot\system32\drivers\peauth.sys
0xA1AEB000 \SystemRoot\System32\Drivers\secdrv.SYS
0xA1AF5000 \SystemRoot\System32\drivers\tcpipreg.sys
0xA1B01000 \SystemRoot\system32\DRIVERS\VComm.sys
0xA1B03000 \SystemRoot\system32\DRIVERS\WUDFRd.sys
0xA1B18000 \SystemRoot\system32\DRIVERS\WUDFPf.sys
0xA1B2A000 \SystemRoot\system32\DRIVERS\btnetdrv.sys
0xA1B32000 \??\C:\Program Files\IVT Corporation\BlueSoleil\Device\Win2k\BTNetFilter.sys
0xA1B36000 \SystemRoot\system32\drivers\VHIDMini.sys
0x775B0000 \Windows\System32\ntdll.dll
0x10000000 \Program Files\DAEMON Tools Lite\Engine.dll

Processes (total 82):
0 System Idle Process
4 System
472 C:\Windows\System32\smss.exe
544 csrss.exe
608 C:\Windows\System32\wininit.exe
616 csrss.exe
652 C:\Windows\System32\services.exe
664 C:\Windows\System32\lsass.exe
672 C:\Windows\System32\lsm.exe
700 C:\Windows\System32\winlogon.exe
860 C:\Windows\System32\svchost.exe
920 C:\Windows\System32\svchost.exe
976 C:\Windows\System32\svchost.exe
1056 C:\Windows\System32\Ati2evxx.exe
1116 C:\Windows\System32\svchost.exe
1144 C:\Windows\System32\svchost.exe
1180 C:\Windows\System32\svchost.exe
1248 C:\Windows\System32\audiodg.exe
1316 C:\Windows\System32\svchost.exe
1348 C:\Windows\System32\SLsvc.exe
1424 C:\Windows\System32\svchost.exe
1488 C:\Windows\System32\Ati2evxx.exe
1568 C:\Windows\System32\svchost.exe
1824 C:\Windows\System32\spoolsv.exe
1852 C:\Windows\System32\svchost.exe
2024 C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
244 C:\Program Files\Bonjour\mDNSResponder.exe
320 C:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe
488 C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
504 C:\Program Files\System Control Manager\MSIService.exe
1484 C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe
1580 C:\Windows\System32\svchost.exe
332 C:\Windows\System32\svchost.exe
2056 C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe
2092 C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe
2128 C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
2176 C:\Windows\System32\svchost.exe
2208 C:\Windows\System32\SearchIndexer.exe
2420 C:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe
2584 WUDFHost.exe
2756 WmiPrvSE.exe
2904 C:\Windows\System32\taskeng.exe
3208 C:\Windows\System32\dwm.exe
3256 C:\Windows\System32\taskeng.exe
3280 C:\Windows\explorer.exe
3344 C:\Program Files\TeamViewer\Version6\TeamViewer.exe
3524 C:\Windows\System32\mobsync.exe
3532 C:\Program Files\Windows Defender\MSASCui.exe
3596 C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
3616 C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
3664 C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
3676 C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
3720 C:\Program Files\System Control Manager\MGSysCtrl.exe
3788 C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
3828 C:\Program Files\Toshiba\Bluetooth Toshiba Stack\ItSecMng.exe
3928 C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
3936 C:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe
3976 D:\InterVideo\Common\Bin\WinCinemaMgr.exe
4056 C:\Windows\System32\wbem\unsecapp.exe
2268 D:\Java\jre6\bin\jusched.exe
2644 C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
1452 C:\Windows\WindowsMobile\wmdSync.exe
856 C:\Program Files\IVT Corporation\BlueSoleil\BtTray.exe
1392 C:\Program Files\Skype\Phone\Skype.exe
1608 C:\Program Files\DAEMON Tools Lite\DTLite.exe
2952 C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
2936 C:\Program Files\PdaNet for Android\PdaNetPC.exe
812 C:\Windows\System32\svchost.exe
3124 WmiPrvSE.exe
4196 C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
4424 C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
4504 C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
4608 C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHSP.exe
5356 C:\Windows\System32\SearchProtocolHost.exe
5380 C:\Windows\System32\SearchFilterHost.exe
5640 C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
5916 C:\Program Files\Mozilla Firefox\firefox.exe
4876 C:\Program Files\Google\Update\GoogleUpdate.exe
5060 C:\Windows\explorer.exe
4716 C:\Windows\System32\dllhost.exe
5264 C:\Users\Andrew\Desktop\MBRCheck.exe
4924 C:\Windows\System32\conime.exe

\\.\C: --> \\.\PhysicalDrive0 at offset 0x00000001`f4100000 (NTFS)
\\.\D: --> \\.\PhysicalDrive0 at offset 0x0000000c`f0900000 (NTFS)

PhysicalDrive0 Model Number: WDCWD3200BEKT-22F3T0, Rev: 11.01A11

Size Device Name MBR Status
--------------------------------------------
298 GB \\.\PhysicalDrive0 Windows 7 MBR code detected
SHA1: 4379A3D43019B46FA357F7DD6A53B45A3CA8FB79

Done!

********************

DDS (Ver_10-12-12.02) - NTFSx86
Run by Andrew at 0:01:30.51 on Mon 02/28/2011
Internet Explorer: 8.0.6001.18943
Microsoft® Windows Vistaâ„¢ Home Premium 6.0.6001.1.1252.1.1033.18.3070.1878 [GMT -5:00]

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\Ati2evxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\Ati2evxx.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
C:\Program Files\System Control Manager\MSIService.exe
C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe
C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe
C:\Windows\system32\WUDFHost.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\TeamViewer\Version6\TeamViewer.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\System Control Manager\MGSysCtrl.exe
C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\ItSecMng.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe
D:\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\Windows\system32\wbem\unsecapp.exe
D:\Java\jre6\bin\jusched.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Windows\WindowsMobile\wmdSync.exe
C:\Program Files\IVT Corporation\BlueSoleil\BtTray.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files\PdaNet for Android\PdaNetPC.exe
C:\Windows\system32\svchost.exe -k WindowsMobile
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\explorer.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\DllHost.exe
C:\Users\Andrew\Desktop\dds.scr

============== Pseudo HJT Report ===============

uSearch Bar = Preserve
uStart Page = hxxp://www.google.com/
uDefault_Page_URL = hxxp://www.msi.com.tw
mStart Page = hxxp://www.msi.com.tw
mDefault_Page_URL = hxxp://www.msi.com.tw
mURLSearchHooks: Freecorder Toolbar: {1392b8d2-5c05-419f-a8f6-b9f15a596612} -
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: {1392b8d2-5c05-419f-a8f6-b9f15a596612} - Freecorder Toolbar
BHO: {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - No File
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\progra~1\micros~2\office12\GRA8E1~1.DLL
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - d:\java\jre6\bin\jp2ssv.dll
TB: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
TB: Freecorder Toolbar: {1392b8d2-5c05-419f-a8f6-b9f15a596612} -
TB: DAEMON Tools Toolbar: {32099aac-c132-4136-9e9a-4e364a424e17} - c:\program files\daemon tools toolbar\DTToolbar.dll
uRun: [Google Update] "c:\users\andrew\appdata\local\google\update\GoogleUpdate.exe" /c
uRun: [Skype] "c:\program files\skype\phone\Skype.exe" /nosplash /minimized
uRun: [DAEMON Tools Lite] "c:\program files\daemon tools lite\DTLite.exe" -autorun
mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
mRun: [StartCCC] "c:\program files\ati technologies\ati.ace\core-static\CLIStart.exe" MSRun
mRun: [RtHDVCpl] c:\program files\realtek\audio\hda\RtHDVCpl.exe
mRun: [SMSERIAL] c:\program files\motorola\smserial\sm56hlpr.exe
mRun: [IAAnotif] c:\program files\intel\intel matrix storage manager\iaanotif.exe
mRun: [MGSysCtrl] c:\program files\system control manager\MGSysCtrl.exe
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe "
mRun: [ITSecMng] %ProgramFiles%\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START
mRun: [fspuip] "c:\program files\fsp\fspuip.exe "
mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe
mRun: [Home Theater SchSvr] "c:\program files\common files\intervideo\schsvr\SchSvr.exe "
mRun: [WINCINEMAMGR] d:\intervideo\common\bin\WinCinemaMgr.exe
mRun: [SunJavaUpdateSched] "d:\java\jre6\bin\jusched.exe "
mRun: [QuickTime Task] "d:\quicktime\QTTask.exe" -atboottime
mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe "
mRun: [Windows Mobile-based device management] %windir%\WindowsMobile\wmdSync.exe
mRun: [Malwarebytes Anti-Malware (rootkit-scan)] "c:\program files\malwarebytes' anti-malware\mbam.exe" /runcleanupscript
mRun: [BtTray] "c:\program files\ivt corporation\bluesoleil\BtTray.exe "
StartupFolder: c:\users\andrew\appdata\roaming\micros~1\windows\startm~1\programs\startup\pdanet~1.lnk - c:\program files\pdanet for android\PdaNetPC.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\blueto~1.lnk - c:\program files\toshiba\bluetooth toshiba stack\TosBtMng.exe
mPolicies-system: EnableLUA = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\progra~1\micros~2\office12\GR99D3~1.DLL
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\progra~1\micros~2\office12\GRA8E1~1.DLL

================= FIREFOX ===================

FF - ProfilePath - c:\users\andrew\appdata\roaming\mozilla\firefox\profiles\bk5py183.default\
FF - prefs.js: browser.search.selectedEngine - DAEMON Search
FF - prefs.js: browser.startup.homepage - www.google.com
FF - prefs.js: network.proxy.type - 0
FF - component: c:\users\andrew\appdata\roaming\mozilla\firefox\profiles\bk5py183.default\extensions\dttoolbar@toolbarnet.com\components\DTToolbarFF.dll
FF - plugin: c:\program files\divx\divx plus web player\npdivx32.dll
FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\google\update\1.2.183.23\npGoogleOneClick8.dll
FF - plugin: c:\program files\google\update\1.2.183.27\npGoogleOneClick8.dll
FF - plugin: c:\program files\google\update\1.2.183.29\npGoogleOneClick8.dll
FF - plugin: c:\program files\google\update\1.2.183.39\npGoogleOneClick8.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npwachk.dll
FF - plugin: c:\users\andrew\appdata\local\google\update\1.2.183.39\npGoogleOneClick8.dll
FF - plugin: c:\users\andrew\appdata\roaming\facebook\npfbplugin_1_0_3.dll
FF - plugin: d:\java\jre6\bin\new_plugin\npdeploytk.dll
FF - plugin: d:\java\jre6\bin\new_plugin\npjp2.dll
FF - plugin: d:\quicktime\plugins\npqtplugin.dll
FF - plugin: d:\quicktime\plugins\npqtplugin2.dll
FF - plugin: d:\quicktime\plugins\npqtplugin3.dll
FF - plugin: d:\quicktime\plugins\npqtplugin4.dll
FF - plugin: d:\quicktime\plugins\npqtplugin5.dll
FF - plugin: d:\quicktime\plugins\npqtplugin6.dll
FF - plugin: d:\quicktime\plugins\npqtplugin7.dll
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\DotNetAssistantExtension
FF - Ext: XULRunner: {9CDE2E9A-73D0-4D51-B280-D902F5A4B567} - c:\users\andrew\appdata\local\{9CDE2E9A-73D0-4D51-B280-D902F5A4B567}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: New Tab Homepage: {66E978CD-981F-47DF-AC42-E3CF417C1467} - %profile%\extensions\{66E978CD-981F-47DF-AC42-E3CF417C1467}
FF - Ext: Rikaichan: {0AA9101C-D3C1-4129-A9B7-D778C6A17F82} - %profile%\extensions\{0AA9101C-D3C1-4129-A9B7-D778C6A17F82}
FF - Ext: Rikaichan Japanese-English Dictionary File: rikaichan-jpen@polarcloud.com - %profile%\extensions\rikaichan-jpen@polarcloud.com
FF - Ext: DAEMON Tools Toolbar: DTToolbar@toolbarnet.com - %profile%\extensions\DTToolbar@toolbarnet.com
FF - Ext: Greasemonkey: {e4a8a97b-f2ed-450b-b12d-ee082ba24781} - %profile%\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
FF - Ext: Screengrab: {02450954-cdd9-410f-b1da-db804e18c671} - %profile%\extensions\{02450954-cdd9-410f-b1da-db804e18c671}

---- FIREFOX POLICIES ----
FF - user.js: network.cookie.cookieBehavior - 0
FF - user.js: privacy.clearOnShutdown.cookies - false
FF - user.js: security.warn_viewing_mixed - false
FF - user.js: security.warn_viewing_mixed.show_once - false
FF - user.js: security.warn_submit_insecure - false
FF - user.js: security.warn_submit_insecure.show_once - false

============= SERVICES / DRIVERS ===============

R0 BtHidBus;Bluetooth HID Bus Service;c:\windows\system32\drivers\BtHidBus.sys [2009-1-7 20744]
R2 BsMobileCS;BsMobileCS;c:\program files\ivt corporation\bluesoleil\BsMobileCS.exe [2009-2-27 143467]
R2 Micro Star SCM;Micro Star SCM;c:\program files\system control manager\MSIService.exe [2009-1-8 159744]
R2 TeamViewer5;TeamViewer 5;c:\program files\teamviewer\version5\TeamViewer_Service.exe [2010-10-31 2011944]
R2 TeamViewer6;TeamViewer 6;c:\program files\teamviewer\version6\TeamViewer_Service.exe [2011-1-27 2253688]
R3 btnetBUs;Bluetooth PAN Bus Service;c:\windows\system32\drivers\btnetBus.sys [2008-12-7 30088]
R3 enecir;ENE CIR Receiver;c:\windows\system32\drivers\enecir.sys [2009-1-8 54784]
R3 IvtBtBUs;IVT Bluetooth Bus Service;c:\windows\system32\drivers\IvtBtBus.sys [2008-7-2 26248]
R3 NETw5v32;Intel(R) Wireless WiFi Link Adapter Driver for Windows Vista 32 Bit ;c:\windows\system32\drivers\NETw5v32.sys [2009-1-8 3658752]
R3 O2MDRDR;O2MDRDR;c:\windows\system32\drivers\o2media.sys [2008-7-15 51288]
R3 O2SDRDR;O2SDRDR;c:\windows\system32\drivers\o2sd.sys [2008-6-11 43608]
R3 pnetmdm;PdaNet Modem;c:\windows\system32\drivers\pnetmdm.sys [2010-2-25 9472]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2009-7-31 133104]
S3 fspad_wlh32;Finger-sensing Pad Driver for Windows 2000/XP/Vista_wlh32;c:\windows\system32\drivers\fspad_wlh32.sys [2009-7-30 33792]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
S4 xintkxw;xintkxw;c:\windows\system32\drivers\ohpbrd.sys [2010-5-22 54016]

=============== Created Last 30 ================

2011-02-28 04:07:10 -------- d-s---w- C:\ComboFix
2011-02-28 03:53:03 -------- d-sh--w- c:\windows\system32\%APPDATA%
2011-02-28 02:22:21 98816 ----a-w- c:\windows\sed.exe
2011-02-28 02:22:21 89088 ----a-w- c:\windows\MBR.exe
2011-02-28 02:22:21 256512 ----a-w- c:\windows\PEV.exe
2011-02-28 02:22:21 161792 ----a-w- c:\windows\SWREG.exe
2011-02-27 04:19:39 -------- d-----w- c:\users\andrew\appdata\roaming\Ziyfeq
2011-02-27 04:19:39 -------- d-----w- c:\users\andrew\appdata\roaming\Saybad
2011-02-25 07:11:54 5943120 ----a-w- c:\progra~2\microsoft\windows defender\definition updates\{0234e413-f577-4ee0-ba3f-7646abe6895a}\mpengine.dll
2011-02-06 00:23:27 -------- d-----w- c:\users\andrew\appdata\roaming\BadApple!!
2011-02-04 02:48:57 13176832 ----a-w- c:\windows\system32\BadAppleResource7.dll
2011-02-04 02:48:56 22561792 ----a-w- c:\windows\system32\BadAppleResource6.dll
2011-02-04 02:48:54 24824320 ----a-w- c:\windows\system32\BadAppleResource5.dll
2011-02-04 02:48:50 33039360 ----a-w- c:\windows\system32\BadAppleResource4.dll
2011-02-04 02:48:48 30380544 ----a-w- c:\windows\system32\BadAppleResource3.dll
2011-02-04 02:48:46 30617600 ----a-w- c:\windows\system32\BadAppleResource2.dll
2011-02-04 02:48:45 43520 ----a-w- c:\windows\system32\BadApple!!.scr
2011-02-04 02:48:45 21436928 ----a-w- c:\windows\system32\BadAppleResource1.dll

==================== Find3M ====================

2011-02-27 07:07:43 312439113 ----a-w- c:\windows\DUMP3f31.tmp
2011-02-02 22:11:20 222080 ------w- c:\windows\system32\MpSigStub.exe

=================== ROOTKIT ====================

Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Windows 6.0.6001 Disk: WDC_WD32 rev.11.0 -> Harddisk0\DR0 -> \Device\Ide\iaStor0

device: opened successfully
user: MBR read successfully

Disk trace:
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys >>UNKNOWN [0x87B70439]<<
_asm { PUSH EBP; MOV EBP, ESP; PUSH ECX; MOV EAX, [EBP+0x8]; CMP EAX, [0x87b767b8]; MOV EAX, [0x87b76834]; PUSH EBX; PUSH ESI; MOV ESI, [EBP+0xc]; MOV EBX, [ESI+0x60]; PUSH EDI; JNZ 0x20; MOV [EBP+0x8], EAX; }
1 ntkrnlpa!IofCallDriver[0x8290205F] -> \Device\Harddisk0\DR0[0x874BBAC8]
3 CLASSPNP[0x8B1AB745] -> ntkrnlpa!IofCallDriver[0x8290205F] -> [0x87C8B1C8]
\Driver\iaStor[0x86C1E140] -> IRP_MJ_CREATE -> 0x87B70439
kernel: MBR read successfully
_asm { XOR AX, AX; MOV SS, AX; MOV SP, 0x7c00; MOV ES, AX; MOV DS, AX; MOV SI, 0x7c00; MOV DI, 0x600; MOV CX, 0x200; CLD ; REP MOVSB ; PUSH AX; PUSH 0x61c; RETF ; STI ; PUSHA ; MOV CX, 0x132; MOV BP, 0x62a; ROR BYTE [BP+0x0], CL; INC BP; }
detected disk devices:
\Device\Ide\IAAStorageDevice-1 -> \??\IDE#DiskWDC_WD3200BEKT-22F3T0___________________11.01A11#4&b17d5&0&0.0.0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b} device not found
detected hooks:
\Driver\atapi -> 0x8612a1f8
user != kernel MBR !!!
sectors 625142446 (+255): user != kernel
Warning: possible TDL4 rootkit infection !
TDL4 rootkit infection detected ! Use: "mbr.exe -f" to fix.

============= FINISH: 0:02:08.56 ===============

broni · 2011/02/28

Welcome aboard

Please, observe following rules:

Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.

If you're stuck, or you're not sure about certain step, always ask before doing anything else.

Please refrain from running tools or applying updates other than those I suggest.

Never run more than one scan at a time.

Keep updating me regarding your computer behavior, good, or bad.

The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.

If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.

I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.

=================================================================

I don't see any antivirus program running.
Why would that be?

You're infected with a rootkit.

Download TDSSKiller and save it to your desktop.

Extract (unzip) its contents to your desktop.

Open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.

If an infected file is detected, the default action will be Cure, click on Continue.

If a suspicious file is detected, the default action will be Skip, click on Continue.

It may ask you to reboot the computer to complete the process. Click on Reboot Now.

If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.

If a reboot is required, the report can also be found in your root directory (usually C:\ folder) in the form of TDSSKiller_xxxx_log.txt. Please copy and paste the contents of that file here.

Goldensunboy · 2011/03/01

Thank you for the reply, TDSSKiller seems to have fixed the problem! However, since it may take a few hours before I see some problem like a random bluescreen or popup, I will wait until I haven't seen a problem for about a day to call it resolved. At this point, searches are no longer being redirected, and I haven't experienced a popup yet.

As for antivirus, I haven't tried many, but the ones I have used in the past (Norton, McAfee) were very slow. Which one would you recommend? (sorry that I'm off-topic there)

In case it's needed at some point, here's the TDSSKiller log:

********************

2011/03/01 01:00:52.0126 5916 TDSS rootkit removing tool 2.4.18.0 Feb 21 2011 11:08:08
2011/03/01 01:00:52.0282 5916 ================================================================================
2011/03/01 01:00:52.0282 5916 SystemInfo:
2011/03/01 01:00:52.0283 5916
2011/03/01 01:00:52.0283 5916 OS Version: 6.0.6001 ServicePack: 1.0
2011/03/01 01:00:52.0283 5916 Product type: Workstation
2011/03/01 01:00:52.0283 5916 ComputerName: ANDREW-PC
2011/03/01 01:00:52.0283 5916 UserName: Andrew
2011/03/01 01:00:52.0283 5916 Windows directory: C:\Windows
2011/03/01 01:00:52.0283 5916 System windows directory: C:\Windows
2011/03/01 01:00:52.0283 5916 Processor architecture: Intel x86
2011/03/01 01:00:52.0283 5916 Number of processors: 2
2011/03/01 01:00:52.0283 5916 Page size: 0x1000
2011/03/01 01:00:52.0283 5916 Boot type: Normal boot
2011/03/01 01:00:52.0283 5916 ================================================================================
2011/03/01 01:00:52.0784 5916 Initialize success
2011/03/01 01:01:06.0602 4508 ================================================================================
2011/03/01 01:01:06.0602 4508 Scan started
2011/03/01 01:01:06.0602 4508 Mode: Manual;
2011/03/01 01:01:06.0602 4508 ================================================================================
2011/03/01 01:01:06.0974 4508 ACPI (fcb8c7210f0135e24c6580f7f649c73c) C:\Windows\system32\drivers\acpi.sys
2011/03/01 01:01:07.0016 4508 adp94xx (04f0fcac69c7c71a3ac4eb97fafc8303) C:\Windows\system32\drivers\adp94xx.sys
2011/03/01 01:01:07.0049 4508 adpahci (60505e0041f7751bdbb80f88bf45c2ce) C:\Windows\system32\drivers\adpahci.sys
2011/03/01 01:01:07.0083 4508 adpu160m (8a42779b02aec986eab64ecfc98f8bd7) C:\Windows\system32\drivers\adpu160m.sys
2011/03/01 01:01:07.0114 4508 adpu320 (241c9e37f8ce45ef51c3de27515ca4e5) C:\Windows\system32\drivers\adpu320.sys
2011/03/01 01:01:07.0167 4508 AFD (763e172a55177e478cb419f88fd0ba03) C:\Windows\system32\drivers\afd.sys
2011/03/01 01:01:07.0208 4508 agp440 (13f9e33747e6b41a3ff305c37db0d360) C:\Windows\system32\drivers\agp440.sys
2011/03/01 01:01:07.0226 4508 aic78xx (ae1fdf7bf7bb6c6a70f67699d880592a) C:\Windows\system32\drivers\djsvs.sys
2011/03/01 01:01:07.0257 4508 aliide (9eaef5fc9b8e351afa7e78a6fae91f91) C:\Windows\system32\drivers\aliide.sys
2011/03/01 01:01:07.0273 4508 amdagp (c47344bc706e5f0b9dce369516661578) C:\Windows\system32\drivers\amdagp.sys
2011/03/01 01:01:07.0301 4508 amdide (9b78a39a4c173fdbc1321e0dd659b34c) C:\Windows\system32\drivers\amdide.sys
2011/03/01 01:01:07.0328 4508 AmdK7 (18f29b49ad23ecee3d2a826c725c8d48) C:\Windows\system32\drivers\amdk7.sys
2011/03/01 01:01:07.0347 4508 AmdK8 (93ae7f7dd54ab986a6f1a1b37be7442d) C:\Windows\system32\drivers\amdk8.sys
2011/03/01 01:01:07.0385 4508 arc (5d2888182fb46632511acee92fdad522) C:\Windows\system32\drivers\arc.sys
2011/03/01 01:01:07.0413 4508 arcsas (5e2a321bd7c8b3624e41fdec3e244945) C:\Windows\system32\drivers\arcsas.sys
2011/03/01 01:01:07.0479 4508 AsyncMac (53b202abee6455406254444303e87be1) C:\Windows\system32\DRIVERS\asyncmac.sys
2011/03/01 01:01:07.0505 4508 atapi (2d9c903dc76a66813d350a562de40ed9) C:\Windows\system32\drivers\atapi.sys
2011/03/01 01:01:07.0560 4508 athr (8be56f8300e1c37b578da23c71816b7a) C:\Windows\system32\DRIVERS\athr.sys
2011/03/01 01:01:07.0721 4508 atikmdag (7fe1176c2d6031d914ca8e69c0047f18) C:\Windows\system32\DRIVERS\atikmdag.sys
2011/03/01 01:01:07.0858 4508 avcgbdr (de95593d8699d96beeb0ba2e6ecb8313) C:\Windows\system32\drivers\avcgbdr.sys
2011/03/01 01:01:07.0886 4508 avcgbfl (187f906eb9f4d647ced63bf57bf96545) C:\Windows\system32\Drivers\avcgbfl.sys
2011/03/01 01:01:07.0922 4508 Beep (67e506b75bd5326a3ec7b70bd014dfb6) C:\Windows\system32\drivers\Beep.sys
2011/03/01 01:01:07.0952 4508 blbdrive (d4df28447741fd3d953526e33a617397) C:\Windows\system32\drivers\blbdrive.sys
2011/03/01 01:01:07.0998 4508 bowser (74b442b2be1260b7588c136177ceac66) C:\Windows\system32\DRIVERS\bowser.sys
2011/03/01 01:01:08.0041 4508 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\drivers\brfiltlo.sys
2011/03/01 01:01:08.0060 4508 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\drivers\brfiltup.sys
2011/03/01 01:01:08.0088 4508 Brserid (b304e75cff293029eddf094246747113) C:\Windows\system32\drivers\brserid.sys
2011/03/01 01:01:08.0116 4508 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\system32\drivers\brserwdm.sys
2011/03/01 01:01:08.0139 4508 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\system32\drivers\brusbmdm.sys
2011/03/01 01:01:08.0160 4508 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\system32\drivers\brusbser.sys
2011/03/01 01:01:08.0204 4508 BT (28d6d39b98eecbb6dffbcec2a740ff89) C:\Windows\system32\DRIVERS\btnetdrv.sys
2011/03/01 01:01:08.0295 4508 Btcsrusb (942c602296119d758547808221c85a2c) C:\Windows\system32\Drivers\btcusb.sys
2011/03/01 01:01:08.0316 4508 BtHidBus (ce441ccd98c5ecb10cb12fcaf97322ec) C:\Windows\system32\Drivers\BtHidBus.sys
2011/03/01 01:01:08.0349 4508 BTHMODEM (ad07c1ec6665b8b35741ab91200c6b68) C:\Windows\system32\drivers\bthmodem.sys
2011/03/01 01:01:08.0381 4508 btnetBUs (d3c277a51ef9e2ec972d6221f99c0b6d) C:\Windows\system32\Drivers\btnetBus.sys
2011/03/01 01:01:08.0434 4508 BTNetFilter (4f26303becbb7cc5ca8ff39593124cf2) C:\Program Files\IVT Corporation\BlueSoleil\Device\Win2k\BTNetFilter.sys
2011/03/01 01:01:08.0468 4508 cdfs (7add03e75beb9e6dd102c3081d29840a) C:\Windows\system32\DRIVERS\cdfs.sys
2011/03/01 01:01:08.0497 4508 cdrom (1ec25cea0de6ac4718bf89f9e1778b57) C:\Windows\system32\DRIVERS\cdrom.sys
2011/03/01 01:01:08.0531 4508 circlass (e5d4133f37219dbcfe102bc61072589d) C:\Windows\system32\DRIVERS\circlass.sys
2011/03/01 01:01:08.0569 4508 CLFS (465745561c832b29f7c48b488aab3842) C:\Windows\system32\CLFS.sys
2011/03/01 01:01:08.0613 4508 CmBatt (99afc3795b58cc478fbbbcdc658fcb56) C:\Windows\system32\DRIVERS\CmBatt.sys
2011/03/01 01:01:08.0632 4508 cmdide (0ca25e686a4928484e9fdabd168ab629) C:\Windows\system32\drivers\cmdide.sys
2011/03/01 01:01:08.0654 4508 Compbatt (6afef0b60fa25de07c0968983ee4f60a) C:\Windows\system32\DRIVERS\compbatt.sys
2011/03/01 01:01:08.0669 4508 crcdisk (741e9dff4f42d2d8477d0fc1dc0df871) C:\Windows\system32\drivers\crcdisk.sys
2011/03/01 01:01:08.0693 4508 Crusoe (1f07becdca750766a96cda811ba86410) C:\Windows\system32\drivers\crusoe.sys
2011/03/01 01:01:08.0759 4508 CrystalSysInfo (f054744f67576a01139885173392502b) D:\MediaCoder\SysInfo.sys
2011/03/01 01:01:08.0796 4508 DfsC (9e635ae5e8ad93e2b5989e2e23679f97) C:\Windows\system32\Drivers\dfsc.sys
2011/03/01 01:01:08.0842 4508 disk (64109e623abd6955c8fb110b592e68b7) C:\Windows\system32\drivers\disk.sys
2011/03/01 01:01:08.0876 4508 drmkaud (97fef831ab90bee128c9af390e243f80) C:\Windows\system32\drivers\drmkaud.sys
2011/03/01 01:01:08.0911 4508 DXGKrnl (85f33880b8cfb554bd3d9ccdb486845a) C:\Windows\System32\drivers\dxgkrnl.sys
2011/03/01 01:01:08.0947 4508 E1G60 (5425f74ac0c1dbd96a1e04f17d63f94c) C:\Windows\system32\DRIVERS\E1G60I32.sys
2011/03/01 01:01:08.0990 4508 Ecache (dd2cd259d83d8b72c02c5f2331ff9d68) C:\Windows\system32\drivers\ecache.sys
2011/03/01 01:01:09.0030 4508 elxstor (23b62471681a124889978f6295b3f4c6) C:\Windows\system32\drivers\elxstor.sys
2011/03/01 01:01:09.0068 4508 enecir (6c74035909b31f873d85b25e00beb984) C:\Windows\system32\DRIVERS\enecir.sys
2011/03/01 01:01:09.0093 4508 ErrDev (3db974f3935483555d7148663f726c61) C:\Windows\system32\drivers\errdev.sys
2011/03/01 01:01:09.0137 4508 exfat (0d858eb20589a34efb25695acaa6aa2d) C:\Windows\system32\drivers\exfat.sys
2011/03/01 01:01:09.0159 4508 fastfat (3c489390c2e2064563727752af8eab9e) C:\Windows\system32\drivers\fastfat.sys
2011/03/01 01:01:09.0199 4508 fdc (afe1e8b9782a0dd7fb46bbd88e43f89a) C:\Windows\system32\DRIVERS\fdc.sys
2011/03/01 01:01:09.0238 4508 FileInfo (a8c0139a884861e3aae9cfe73b208a9f) C:\Windows\system32\drivers\fileinfo.sys
2011/03/01 01:01:09.0270 4508 Filetrace (0ae429a696aecbc5970e3cf2c62635ae) C:\Windows\system32\drivers\filetrace.sys
2011/03/01 01:01:09.0306 4508 flpydisk (85b7cf99d532820495d68d747fda9ebd) C:\Windows\system32\DRIVERS\flpydisk.sys
2011/03/01 01:01:09.0341 4508 FltMgr (05ea53afe985443011e36dab07343b46) C:\Windows\system32\drivers\fltmgr.sys
2011/03/01 01:01:09.0383 4508 fspad_wlh32 (92d62d68e48d1cdf25287b42c66e4f27) C:\Windows\system32\DRIVERS\fspad_wlh32.sys
2011/03/01 01:01:09.0401 4508 Fs_Rec (65ea8b77b5851854f0c55c43fa51a198) C:\Windows\system32\drivers\Fs_Rec.sys
2011/03/01 01:01:09.0445 4508 FTDIBUS (a36e8beedb3aaca09bf55a1d17904bc8) C:\Windows\system32\drivers\ftdibus.sys
2011/03/01 01:01:09.0470 4508 gagp30kx (34582a6e6573d54a07ece5fe24a126b5) C:\Windows\system32\drivers\gagp30kx.sys
2011/03/01 01:01:09.0536 4508 HdAudAddService (cb04c744be0a61b1d648faed182c3b59) C:\Windows\system32\drivers\HdAudio.sys
2011/03/01 01:01:09.0557 4508 HDAudBus (c87b1ee051c0464491c1a7b03fa0bc99) C:\Windows\system32\DRIVERS\HDAudBus.sys
2011/03/01 01:01:09.0582 4508 HidBth (1338520e78d90154ed6be8f84de5fceb) C:\Windows\system32\drivers\hidbth.sys
2011/03/01 01:01:09.0608 4508 HidIr (d8df3722d5e961baa1292aa2f12827e2) C:\Windows\system32\DRIVERS\hidir.sys
2011/03/01 01:01:09.0632 4508 HidUsb (854ca287ab7faf949617a788306d967e) C:\Windows\system32\DRIVERS\hidusb.sys
2011/03/01 01:01:09.0661 4508 HpCISSs (16ee7b23a009e00d835cdb79574a91a6) C:\Windows\system32\drivers\hpcisss.sys
2011/03/01 01:01:09.0696 4508 HTTP (96e241624c71211a79c84f50a8e71cab) C:\Windows\system32\drivers\HTTP.sys
2011/03/01 01:01:09.0721 4508 i2omp (c6b032d69650985468160fc9937cf5b4) C:\Windows\system32\drivers\i2omp.sys
2011/03/01 01:01:09.0746 4508 i8042prt (22d56c8184586b7a1f6fa60be5f5a2bd) C:\Windows\system32\DRIVERS\i8042prt.sys
2011/03/01 01:01:09.0796 4508 iaStor (db0cc620b27a928d968c1a1e9cd9cb87) C:\Windows\system32\DRIVERS\iaStor.sys
2011/03/01 01:01:09.0824 4508 iaStorV (54155ea1b0df185878e0fc9ec3ac3a14) C:\Windows\system32\drivers\iastorv.sys
2011/03/01 01:01:09.0847 4508 iirsp (2d077bf86e843f901d8db709c95b49a5) C:\Windows\system32\drivers\iirsp.sys
2011/03/01 01:01:09.0922 4508 IntcAzAudAddService (126c1e93d4d3ea3e0aaa0557873ae646) C:\Windows\system32\drivers\RTKVHDA.sys
2011/03/01 01:01:09.0985 4508 intelide (83aa759f3189e6370c30de5dc5590718) C:\Windows\system32\drivers\intelide.sys
2011/03/01 01:01:10.0010 4508 intelppm (224191001e78c89dfa78924c3ea595ff) C:\Windows\system32\DRIVERS\intelppm.sys
2011/03/01 01:01:10.0053 4508 IpFilterDriver (62c265c38769b864cb25b4bcf62df6c3) C:\Windows\system32\DRIVERS\ipfltdrv.sys
2011/03/01 01:01:10.0095 4508 IPMIDRV (b25aaf203552b7b3491139d582b39ad1) C:\Windows\system32\drivers\ipmidrv.sys
2011/03/01 01:01:10.0116 4508 IPNAT (8793643a67b42cec66490b2a0cf92d68) C:\Windows\system32\DRIVERS\ipnat.sys
2011/03/01 01:01:10.0141 4508 IRENUM (109c0dfb82c3632fbd11949b73aeeac9) C:\Windows\system32\drivers\irenum.sys
2011/03/01 01:01:10.0172 4508 isapnp (6c70698a3e5c4376c6ab5c7c17fb0614) C:\Windows\system32\drivers\isapnp.sys
2011/03/01 01:01:10.0196 4508 iScsiPrt (f247eec28317f6c739c16de420097301) C:\Windows\system32\DRIVERS\msiscsi.sys
2011/03/01 01:01:10.0221 4508 iteatapi (bced60d16156e428f8df8cf27b0df150) C:\Windows\system32\drivers\iteatapi.sys
2011/03/01 01:01:10.0247 4508 iteraid (06fa654504a498c30adca8bec4e87e7e) C:\Windows\system32\drivers\iteraid.sys
2011/03/01 01:01:10.0278 4508 Iviaspi (cd8abfff1387e0f42cf6c6d7cdc19f0d) C:\Windows\system32\drivers\iviaspi.sys
2011/03/01 01:01:10.0306 4508 IvtBtBUs (71e1fc547cc488d5cd7bf0860c96f5af) C:\Windows\system32\Drivers\IvtBtBus.sys
2011/03/01 01:01:10.0324 4508 kbdclass (37605e0a8cf00cbba538e753e4344c6e) C:\Windows\system32\DRIVERS\kbdclass.sys
2011/03/01 01:01:10.0346 4508 kbdhid (18247836959ba67e3511b62846b9c2e0) C:\Windows\system32\DRIVERS\kbdhid.sys
2011/03/01 01:01:10.0387 4508 KSecDD (7a0cf7908b6824d6a2a1d313e5ae3dca) C:\Windows\system32\Drivers\ksecdd.sys
2011/03/01 01:01:10.0427 4508 lltdio (d1c5883087a0c3f1344d9d55a44901f6) C:\Windows\system32\DRIVERS\lltdio.sys
2011/03/01 01:01:10.0460 4508 LSI_FC (c7e15e82879bf3235b559563d4185365) C:\Windows\system32\drivers\lsi_fc.sys
2011/03/01 01:01:10.0481 4508 LSI_SAS (ee01ebae8c9bf0fa072e0ff68718920a) C:\Windows\system32\drivers\lsi_sas.sys
2011/03/01 01:01:10.0504 4508 LSI_SCSI (912a04696e9ca30146a62afa1463dd5c) C:\Windows\system32\drivers\lsi_scsi.sys
2011/03/01 01:01:10.0536 4508 luafv (8f5c7426567798e62a3b3614965d62cc) C:\Windows\system32\drivers\luafv.sys
2011/03/01 01:01:10.0569 4508 megasas (0001ce609d66632fa17b84705f658879) C:\Windows\system32\drivers\megasas.sys
2011/03/01 01:01:10.0613 4508 MegaSR (c252f32cd9a49dbfc25ecf26ebd51a99) C:\Windows\system32\drivers\megasr.sys
2011/03/01 01:01:10.0671 4508 Modem (e13b5ea0f51ba5b1512ec671393d09ba) C:\Windows\system32\drivers\modem.sys
2011/03/01 01:01:10.0701 4508 monitor (0a9bb33b56e294f686abb7c1e4e2d8a8) C:\Windows\system32\DRIVERS\monitor.sys
2011/03/01 01:01:10.0721 4508 mouclass (5bf6a1326a335c5298477754a506d263) C:\Windows\system32\DRIVERS\mouclass.sys
2011/03/01 01:01:10.0746 4508 mouhid (93b8d4869e12cfbe663915502900876f) C:\Windows\system32\DRIVERS\mouhid.sys
2011/03/01 01:01:10.0765 4508 MountMgr (bdafc88aa6b92f7842416ea6a48e1600) C:\Windows\system32\drivers\mountmgr.sys
2011/03/01 01:01:10.0793 4508 mpio (511d011289755dd9f9a7579fb0b064e6) C:\Windows\system32\drivers\mpio.sys
2011/03/01 01:01:10.0818 4508 mpsdrv (22241feba9b2defa669c8cb0a8dd7d2e) C:\Windows\system32\drivers\mpsdrv.sys
2011/03/01 01:01:10.0856 4508 Mraid35x (4fbbb70d30fd20ec51f80061703b001e) C:\Windows\system32\drivers\mraid35x.sys
2011/03/01 01:01:10.0882 4508 MRxDAV (ae3de84536b6799d2267443cec8edbb9) C:\Windows\system32\drivers\mrxdav.sys
2011/03/01 01:01:10.0909 4508 mrxsmb (7afc42e60432fd1014f5342f2b1b1f74) C:\Windows\system32\DRIVERS\mrxsmb.sys
2011/03/01 01:01:10.0931 4508 mrxsmb10 (8a75752ae17924f65452746674b14b78) C:\Windows\system32\DRIVERS\mrxsmb10.sys
2011/03/01 01:01:10.0948 4508 mrxsmb20 (f4d0f3252e651f02be64984ffa738394) C:\Windows\system32\DRIVERS\mrxsmb20.sys
2011/03/01 01:01:10.0975 4508 msahci (28023e86f17001f7cd9b15a5bc9ae07d) C:\Windows\system32\drivers\msahci.sys
2011/03/01 01:01:10.0997 4508 msdsm (4468b0f385a86ecddaf8d3ca662ec0e7) C:\Windows\system32\drivers\msdsm.sys
2011/03/01 01:01:11.0028 4508 Msfs (a9927f4a46b816c92f461acb90cf8515) C:\Windows\system32\drivers\Msfs.sys
2011/03/01 01:01:11.0058 4508 msisadrv (0f400e306f385c56317357d6dea56f62) C:\Windows\system32\drivers\msisadrv.sys
2011/03/01 01:01:11.0094 4508 MSKSSRV (d8c63d34d9c9e56c059e24ec7185cc07) C:\Windows\system32\drivers\MSKSSRV.sys
2011/03/01 01:01:11.0119 4508 MSPCLOCK (1d373c90d62ddb641d50e55b9e78d65e) C:\Windows\system32\drivers\MSPCLOCK.sys
2011/03/01 01:01:11.0153 4508 MSPQM (b572da05bf4e098d4bba3a4734fb505b) C:\Windows\system32\drivers\MSPQM.sys
2011/03/01 01:01:11.0179 4508 MsRPC (b5614aecb05a9340aa0fb55bf561cc63) C:\Windows\system32\drivers\MsRPC.sys
2011/03/01 01:01:11.0202 4508 mssmbios (e384487cb84be41d09711c30ca79646c) C:\Windows\system32\DRIVERS\mssmbios.sys
2011/03/01 01:01:11.0230 4508 MSTEE (7199c1eec1e4993caf96b8c0a26bd58a) C:\Windows\system32\drivers\MSTEE.sys
2011/03/01 01:01:11.0242 4508 Mup (6dfd1d322de55b0b7db7d21b90bec49c) C:\Windows\system32\Drivers\mup.sys
2011/03/01 01:01:11.0278 4508 NativeWifiP (3c21ce48ff529bb73dadb98770b54025) C:\Windows\system32\DRIVERS\nwifi.sys
2011/03/01 01:01:11.0316 4508 NDIS (9bdc71790fa08f0a0b5f10462b1bd0b1) C:\Windows\system32\drivers\ndis.sys
2011/03/01 01:01:11.0339 4508 NdisTapi (0e186e90404980569fb449ba7519ae61) C:\Windows\system32\DRIVERS\ndistapi.sys
2011/03/01 01:01:11.0351 4508 Ndisuio (d6973aa34c4d5d76c0430b181c3cd389) C:\Windows\system32\DRIVERS\ndisuio.sys
2011/03/01 01:01:11.0387 4508 NdisWan (3d14c3b3496f88890d431e8aa022a411) C:\Windows\system32\DRIVERS\ndiswan.sys
2011/03/01 01:01:11.0402 4508 NDProxy (71dab552b41936358f3b541ae5997fb3) C:\Windows\system32\drivers\NDProxy.sys
2011/03/01 01:01:11.0423 4508 NetBIOS (bcd093a5a6777cf626434568dc7dba78) C:\Windows\system32\DRIVERS\netbios.sys
2011/03/01 01:01:11.0445 4508 netbt (7c5fee5b1c5728507cd96fb4a13e7a02) C:\Windows\system32\DRIVERS\netbt.sys
2011/03/01 01:01:11.0589 4508 NETw5v32 (e559ea9138c77b5d1fda8c558764a25f) C:\Windows\system32\DRIVERS\NETw5v32.sys
2011/03/01 01:01:11.0694 4508 nfrd960 (2e7fb731d4790a1bc6270accefacb36e) C:\Windows\system32\drivers\nfrd960.sys
2011/03/01 01:01:11.0724 4508 Npfs (ecb5003f484f9ed6c608d6d6c7886cbb) C:\Windows\system32\drivers\Npfs.sys
2011/03/01 01:01:11.0739 4508 nsiproxy (609773e344a97410ce4ebf74a8914fcf) C:\Windows\system32\drivers\nsiproxy.sys
2011/03/01 01:01:11.0778 4508 Ntfs (b4effe29eb4f15538fd8a9681108492d) C:\Windows\system32\drivers\Ntfs.sys
2011/03/01 01:01:11.0819 4508 ntrigdigi (e875c093aec0c978a90f30c9e0dfbb72) C:\Windows\system32\drivers\ntrigdigi.sys
2011/03/01 01:01:11.0841 4508 Null (c5dbbcda07d780bda9b685df333bb41e) C:\Windows\system32\drivers\Null.sys
2011/03/01 01:01:11.0867 4508 nvraid (2edf9e7751554b42cbb60116de727101) C:\Windows\system32\drivers\nvraid.sys
2011/03/01 01:01:11.0891 4508 nvstor (abed0c09758d1d97db0042dbb2688177) C:\Windows\system32\drivers\nvstor.sys
2011/03/01 01:01:11.0904 4508 nv_agp (18bbdf913916b71bd54575bdb6eeac0b) C:\Windows\system32\drivers\nv_agp.sys
2011/03/01 01:01:11.0992 4508 O2MDRDR (a073a97d6c9f2e3921062fce7f22331b) C:\Windows\system32\DRIVERS\o2media.sys
2011/03/01 01:01:12.0008 4508 O2SDRDR (6e590c91f97ae5e3408453c8ae9a3000) C:\Windows\system32\DRIVERS\o2sd.sys
2011/03/01 01:01:12.0047 4508 ohci1394 (790e27c3db53410b40ff9ef2fd10a1d9) C:\Windows\system32\DRIVERS\ohci1394.sys
2011/03/01 01:01:12.0084 4508 Parport (0fa9b5055484649d63c303fe404e5f4d) C:\Windows\system32\drivers\parport.sys
2011/03/01 01:01:12.0108 4508 partmgr (3b38467e7c3daed009dfe359e17f139f) C:\Windows\system32\drivers\partmgr.sys
2011/03/01 01:01:12.0131 4508 Parvdm (4f9a6a8a31413180d0fcb279ad5d8112) C:\Windows\system32\drivers\parvdm.sys
2011/03/01 01:01:12.0179 4508 pccsmcfd (fd2041e9ba03db7764b2248f02475079) C:\Windows\system32\DRIVERS\pccsmcfd.sys
2011/03/01 01:01:12.0222 4508 pci (01b94418deb235dff777cc80076354b4) C:\Windows\system32\drivers\pci.sys
2011/03/01 01:01:12.0242 4508 pciide (fc175f5ddab666d7f4d17449a547626f) C:\Windows\system32\drivers\pciide.sys
2011/03/01 01:01:12.0272 4508 pcmcia (e6f3fb1b86aa519e7698ad05e58b04e5) C:\Windows\system32\drivers\pcmcia.sys
2011/03/01 01:01:12.0321 4508 PEAUTH (6349f6ed9c623b44b52ea3c63c831a92) C:\Windows\system32\drivers\peauth.sys
2011/03/01 01:01:12.0425 4508 pnetmdm (da19e3401f39c10df193be029c7e7bba) C:\Windows\system32\DRIVERS\pnetmdm.sys
2011/03/01 01:01:12.0461 4508 PptpMiniport (ecfffaec0c1ecd8dbc77f39070ea1db1) C:\Windows\system32\DRIVERS\raspptp.sys
2011/03/01 01:01:12.0483 4508 Processor (2027293619dd0f047c584cf2e7df4ffd) C:\Windows\system32\drivers\processr.sys
2011/03/01 01:01:12.0544 4508 PSched (bfef604508a0ed1eae2a73e872555ffb) C:\Windows\system32\DRIVERS\pacer.sys
2011/03/01 01:01:12.0599 4508 ql2300 (0a6db55afb7820c99aa1f3a1d270f4f6) C:\Windows\system32\drivers\ql2300.sys
2011/03/01 01:01:12.0645 4508 ql40xx (81a7e5c076e59995d54bc1ed3a16e60b) C:\Windows\system32\drivers\ql40xx.sys
2011/03/01 01:01:12.0677 4508 QWAVEdrv (9f5e0e1926014d17486901c88eca2db7) C:\Windows\system32\drivers\qwavedrv.sys
2011/03/01 01:01:12.0729 4508 RasAcd (147d7f9c556d259924351feb0de606c3) C:\Windows\system32\DRIVERS\rasacd.sys
2011/03/01 01:01:12.0755 4508 Rasl2tp (a214adbaf4cb47dd2728859ef31f26b0) C:\Windows\system32\DRIVERS\rasl2tp.sys
2011/03/01 01:01:12.0796 4508 RasPppoe (3e9d9b048107b40d87b97df2e48e0744) C:\Windows\system32\DRIVERS\raspppoe.sys
2011/03/01 01:01:12.0816 4508 RasSstp (a7d141684e9500ac928a772ed8e6b671) C:\Windows\system32\DRIVERS\rassstp.sys
2011/03/01 01:01:12.0840 4508 rdbss (6e1c5d0457622f9ee35f683110e93d14) C:\Windows\system32\DRIVERS\rdbss.sys
2011/03/01 01:01:12.0864 4508 RDPCDD (89e59be9a564262a3fb6c4f4f1cd9899) C:\Windows\system32\DRIVERS\RDPCDD.sys
2011/03/01 01:01:12.0900 4508 rdpdr (fbc0bacd9c3d7f6956853f64a66e252d) C:\Windows\system32\drivers\rdpdr.sys
2011/03/01 01:01:12.0918 4508 RDPENCDD (9d91fe5286f748862ecffa05f8a0710c) C:\Windows\system32\drivers\rdpencdd.sys
2011/03/01 01:01:12.0947 4508 RDPWD (e1c18f4097a5abcec941dc4b2f99db7e) C:\Windows\system32\drivers\RDPWD.sys
2011/03/01 01:01:12.0979 4508 ROOTMODEM (75e8a6bfa7374aba833ae92bf41ae4e6) C:\Windows\system32\Drivers\RootMdm.sys
2011/03/01 01:01:13.0017 4508 rspndr (9c508f4074a39e8b4b31d27198146fad) C:\Windows\system32\DRIVERS\rspndr.sys
2011/03/01 01:01:13.0056 4508 RTHDMIAzAudService (d85da4371af61359edfca4ea06619dd4) C:\Windows\system32\drivers\RtHDMIV.sys
2011/03/01 01:01:13.0101 4508 RTL8169 (d6fae13afacef23a6471d23284b8a164) C:\Windows\system32\DRIVERS\Rtlh86.sys
2011/03/01 01:01:13.0135 4508 sbp2port (3ce8f073a557e172b330109436984e30) C:\Windows\system32\drivers\sbp2port.sys
2011/03/01 01:01:13.0174 4508 sdbus (126ea89bcc413ee45e3004fb0764888f) C:\Windows\system32\DRIVERS\sdbus.sys
2011/03/01 01:01:13.0207 4508 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
2011/03/01 01:01:13.0265 4508 Serenum (68e44e331d46f0fb38f0863a84cd1a31) C:\Windows\system32\drivers\serenum.sys
2011/03/01 01:01:13.0290 4508 Serial (c70d69a918b178d3c3b06339b40c2e1b) C:\Windows\system32\drivers\serial.sys
2011/03/01 01:01:13.0310 4508 sermouse (8af3d28a879bf75db53a0ee7a4289624) C:\Windows\system32\drivers\sermouse.sys
2011/03/01 01:01:13.0412 4508 sffdisk (3efa810bdca87f6ecc24f9832243fe86) C:\Windows\system32\drivers\sffdisk.sys
2011/03/01 01:01:13.0446 4508 sffp_mmc (e95d451f7ea3e583aec75f3b3ee42dc5) C:\Windows\system32\drivers\sffp_mmc.sys
2011/03/01 01:01:13.0468 4508 sffp_sd (3d0ea348784b7ac9ea9bd9f317980979) C:\Windows\system32\drivers\sffp_sd.sys
2011/03/01 01:01:13.0492 4508 sfloppy (46ed8e91793b2e6f848015445a0ac188) C:\Windows\system32\drivers\sfloppy.sys
2011/03/01 01:01:13.0524 4508 sisagp (1d76624a09a054f682d746b924e2dbc3) C:\Windows\system32\drivers\sisagp.sys
2011/03/01 01:01:13.0547 4508 SiSRaid2 (43cb7aa756c7db280d01da9b676cfde2) C:\Windows\system32\drivers\sisraid2.sys
2011/03/01 01:01:13.0577 4508 SiSRaid4 (a99c6c8b0baa970d8aa59ddc50b57f94) C:\Windows\system32\drivers\sisraid4.sys
2011/03/01 01:01:13.0648 4508 Smb (031e6bcd53c9b2b9ace111eafec347b6) C:\Windows\system32\DRIVERS\smb.sys
2011/03/01 01:01:13.0691 4508 smserial (5e62ba073c90e6c9d4ea199d6080f919) C:\Windows\system32\DRIVERS\smserial.sys
2011/03/01 01:01:13.0738 4508 spldr (7aebdeef071fe28b0eef2cdd69102bff) C:\Windows\system32\drivers\spldr.sys
2011/03/01 01:01:13.0807 4508 sptd (cdddec541bc3c96f91ecb48759673505) C:\Windows\system32\Drivers\sptd.sys
2011/03/01 01:01:13.0807 4508 Suspicious file (NoAccess): C:\Windows\system32\Drivers\sptd.sys. md5: cdddec541bc3c96f91ecb48759673505
2011/03/01 01:01:13.0821 4508 sptd - detected Locked file (1)
2011/03/01 01:01:13.0864 4508 srv (9a0163e7fbe59da0591bb1ad77d92e63) C:\Windows\system32\DRIVERS\srv.sys
2011/03/01 01:01:13.0889 4508 srv2 (c7da26d2c7d480b1dd38ca19cc90b821) C:\Windows\system32\DRIVERS\srv2.sys
2011/03/01 01:01:13.0932 4508 srvnet (f9c65e1e00a6bbf7c57d9b8ea068c525) C:\Windows\system32\DRIVERS\srvnet.sys
2011/03/01 01:01:13.0999 4508 swenum (7ba58ecf0c0a9a69d44b3dca62becf56) C:\Windows\system32\DRIVERS\swenum.sys
2011/03/01 01:01:14.0028 4508 Symc8xx (192aa3ac01df071b541094f251deed10) C:\Windows\system32\drivers\symc8xx.sys
2011/03/01 01:01:14.0108 4508 Sym_hi (8c8eb8c76736ebaf3b13b633b2e64125) C:\Windows\system32\drivers\sym_hi.sys
2011/03/01 01:01:14.0127 4508 Sym_u3 (8072af52b5fd103bbba387a1e49f62cb) C:\Windows\system32\drivers\sym_u3.sys
2011/03/01 01:01:14.0161 4508 SynTP (55f6e55cc2430ca8713387106fa79817) C:\Windows\system32\DRIVERS\SynTP.sys
2011/03/01 01:01:14.0230 4508 Tcpip (782568ab6a43160a159b6215b70bcce9) C:\Windows\system32\drivers\tcpip.sys
2011/03/01 01:01:14.0273 4508 Tcpip6 (782568ab6a43160a159b6215b70bcce9) C:\Windows\system32\DRIVERS\tcpip.sys
2011/03/01 01:01:14.0312 4508 tcpipreg (d4a2e4a4b011f3a883af77315a5ae76b) C:\Windows\system32\drivers\tcpipreg.sys
2011/03/01 01:01:14.0350 4508 TDPIPE (5dcf5e267be67a1ae926f2df77fbcc56) C:\Windows\system32\drivers\tdpipe.sys
2011/03/01 01:01:14.0377 4508 TDTCP (389c63e32b3cefed425b61ed92d3f021) C:\Windows\system32\drivers\tdtcp.sys
2011/03/01 01:01:14.0423 4508 tdx (d09276b1fab033ce1d40dcbdf303d10f) C:\Windows\system32\DRIVERS\tdx.sys
2011/03/01 01:01:14.0471 4508 TermDD (a048056f5e1a96a9bf3071b91741a5aa) C:\Windows\system32\DRIVERS\termdd.sys
2011/03/01 01:01:14.0518 4508 tosporte (2c15b4856f929ac7dd144044d8334b54) C:\Windows\system32\DRIVERS\tosporte.sys
2011/03/01 01:01:14.0578 4508 tosrfbd (cd6e9c27adc6b37b0b3df29cc83e15a7) C:\Windows\system32\DRIVERS\tosrfbd.sys
2011/03/01 01:01:14.0645 4508 tosrfbnp (181e217a7a326817d97946d045b3cb46) C:\Windows\system32\Drivers\tosrfbnp.sys
2011/03/01 01:01:14.0660 4508 Tosrfcom (4579b035ae3ac8044df72621af734894) C:\Windows\system32\Drivers\tosrfcom.sys
2011/03/01 01:01:14.0688 4508 Tosrfhid (d3f87c46c7c9e5db99fbd3d17121b891) C:\Windows\system32\DRIVERS\Tosrfhid.sys
2011/03/01 01:01:14.0715 4508 tosrfnds (c52fd27b9adf3a1f22cb90e6bcf9b0cb) C:\Windows\system32\DRIVERS\tosrfnds.sys
2011/03/01 01:01:14.0748 4508 TosRfSnd (156d63f6898e4d95f2962f2b72862868) C:\Windows\system32\drivers\tosrfsnd.sys
2011/03/01 01:01:14.0784 4508 Tosrfusb (f6680c77be134c81cc67f91986022701) C:\Windows\system32\DRIVERS\tosrfusb.sys
2011/03/01 01:01:14.0819 4508 tssecsrv (dcf0f056a2e4f52287264f5ab29cf206) C:\Windows\system32\DRIVERS\tssecsrv.sys
2011/03/01 01:01:14.0846 4508 tunmp (caecc0120ac49e3d2f758b9169872d38) C:\Windows\system32\DRIVERS\tunmp.sys
2011/03/01 01:01:14.0887 4508 tunnel (6042505ff6fa9ac1ef7684d0e03b6940) C:\Windows\system32\DRIVERS\tunnel.sys
2011/03/01 01:01:14.0910 4508 uagp35 (7d33c4db2ce363c8518d2dfcf533941f) C:\Windows\system32\drivers\uagp35.sys
2011/03/01 01:01:14.0935 4508 udfs (8b5088058fa1d1cd897a2113ccff6c58) C:\Windows\system32\DRIVERS\udfs.sys
2011/03/01 01:01:14.0969 4508 uliagpkx (b0acfdc9e4af279e9116c03e014b2b27) C:\Windows\system32\drivers\uliagpkx.sys
2011/03/01 01:01:14.0998 4508 uliahci (9224bb254f591de4ca8d572a5f0d635c) C:\Windows\system32\drivers\uliahci.sys
2011/03/01 01:01:15.0025 4508 UlSata (8514d0e5cd0534467c5fc61be94a569f) C:\Windows\system32\drivers\ulsata.sys
2011/03/01 01:01:15.0042 4508 ulsata2 (38c3c6e62b157a6bc46594fada45c62b) C:\Windows\system32\drivers\ulsata2.sys
2011/03/01 01:01:15.0072 4508 umbus (32cff9f809ae9aed85464492bf3e32d2) C:\Windows\system32\DRIVERS\umbus.sys
2011/03/01 01:01:15.0113 4508 usbccgp (caf811ae4c147ffcd5b51750c7f09142) C:\Windows\system32\DRIVERS\usbccgp.sys
2011/03/01 01:01:15.0139 4508 usbcir (e9476e6c486e76bc4898074768fb7131) C:\Windows\system32\drivers\usbcir.sys
2011/03/01 01:01:15.0164 4508 usbehci (cebe90821810e76320155beba722fcf9) C:\Windows\system32\DRIVERS\usbehci.sys
2011/03/01 01:01:15.0183 4508 usbhub (cc6b28e4ce39951357963119ce47b143) C:\Windows\system32\DRIVERS\usbhub.sys
2011/03/01 01:01:15.0213 4508 usbohci (38dbc7dd6cc5a72011f187425384388b) C:\Windows\system32\drivers\usbohci.sys
2011/03/01 01:01:15.0245 4508 usbprint (e75c4b5269091d15a2e7dc0b6d35f2f5) C:\Windows\system32\DRIVERS\usbprint.sys
2011/03/01 01:01:15.0277 4508 USBSTOR (87ba6b83c5d19b69160968d07d6e2982) C:\Windows\system32\DRIVERS\USBSTOR.SYS
2011/03/01 01:01:15.0291 4508 usbuhci (814d653efc4d48be3b04a307eceff56f) C:\Windows\system32\DRIVERS\usbuhci.sys
2011/03/01 01:01:15.0318 4508 usbvideo (e67998e8f14cb0627a769f6530bcb352) C:\Windows\system32\Drivers\usbvideo.sys
2011/03/01 01:01:15.0353 4508 VComm (0955553090e0a88614e5b8a02af9324c) C:\Windows\system32\DRIVERS\VComm.sys
2011/03/01 01:01:15.0376 4508 VcommMgr (ea0d7c68dc77b478f1c08022b8afe8ca) C:\Windows\system32\Drivers\VcommMgr.sys
2011/03/01 01:01:15.0420 4508 vga (87b06e1f30b749a114f74622d013f8d4) C:\Windows\system32\DRIVERS\vgapnp.sys
2011/03/01 01:01:15.0443 4508 VgaSave (2e93ac0a1d8c79d019db6c51f036636c) C:\Windows\System32\drivers\vga.sys
2011/03/01 01:01:15.0477 4508 VHidMinidrv (95a38e0a1b06109ad2bfb50dd40e31db) C:\Windows\system32\drivers\VHIDMini.sys
2011/03/01 01:01:15.0521 4508 viaagp (5d7159def58a800d5781ba3a879627bc) C:\Windows\system32\drivers\viaagp.sys
2011/03/01 01:01:15.0539 4508 ViaC7 (c4f3a691b5bad343e6249bd8c2d45dee) C:\Windows\system32\drivers\viac7.sys
2011/03/01 01:01:15.0562 4508 viaide (aadf5587a4063f52c2c3fed7887426fc) C:\Windows\system32\drivers\viaide.sys
2011/03/01 01:01:15.0590 4508 volmgr (69503668ac66c77c6cd7af86fbdf8c43) C:\Windows\system32\drivers\volmgr.sys
2011/03/01 01:01:15.0614 4508 volmgrx (98f5ffe6316bd74e9e2c97206c190196) C:\Windows\system32\drivers\volmgrx.sys
2011/03/01 01:01:15.0630 4508 volsnap (d8b4a53dd2769f226b3eb374374987c9) C:\Windows\system32\drivers\volsnap.sys
2011/03/01 01:01:15.0663 4508 vsmraid (587253e09325e6bf226b299774b728a9) C:\Windows\system32\drivers\vsmraid.sys
2011/03/01 01:01:15.0697 4508 WacomPen (48dfee8f1af7c8235d4e626f0c4fe031) C:\Windows\system32\drivers\wacompen.sys
2011/03/01 01:01:15.0719 4508 Wanarp (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
2011/03/01 01:01:15.0742 4508 Wanarpv6 (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
2011/03/01 01:01:15.0779 4508 Wd (78fe9542363f297b18c027b2d7e7c07f) C:\Windows\system32\drivers\wd.sys
2011/03/01 01:01:15.0810 4508 Wdf01000 (b6f0a7ad6d4bd325fbcd8bac96cd8d96) C:\Windows\system32\drivers\Wdf01000.sys
2011/03/01 01:01:15.0890 4508 winusb (f03110711b17ad31271cb2baf0dbb2b1) C:\Windows\system32\DRIVERS\winusb.sys
2011/03/01 01:01:15.0906 4508 WmiAcpi (2e7255d172df0b8283cdfb7b433b864e) C:\Windows\system32\DRIVERS\wmiacpi.sys
2011/03/01 01:01:15.0954 4508 WpdUsb (0cec23084b51b8288099eb710224e955) C:\Windows\system32\DRIVERS\wpdusb.sys
2011/03/01 01:01:16.0001 4508 ws2ifsl (e3a3cb253c0ec2494d4a61f5e43a389c) C:\Windows\system32\drivers\ws2ifsl.sys
2011/03/01 01:01:16.0051 4508 WUDFRd (ac13cb789d93412106b0fb6c7eb2bcb6) C:\Windows\system32\DRIVERS\WUDFRd.sys
2011/03/01 01:01:16.0081 4508 xintkxw (e6d35f3aa51a65eb35c1f2340154a25e) C:\Windows\system32\drivers\ohpbrd.sys
2011/03/01 01:01:16.0137 4508 xnacc (9eea6d029fef5f3016d089b1a603837d) C:\Windows\system32\DRIVERS\xnacc.sys
2011/03/01 01:01:16.0179 4508 \HardDisk0 - detected Rootkit.Win32.TDSS.tdl4 (0)
2011/03/01 01:01:16.0184 4508 ================================================================================
2011/03/01 01:01:16.0184 4508 Scan finished
2011/03/01 01:01:16.0184 4508 ================================================================================
2011/03/01 01:01:16.0196 3104 Detected object count: 2
2011/03/01 01:01:36.0903 3104 Locked file(sptd) - User select action: Skip
2011/03/01 01:01:37.0162 3104 \HardDisk0 - will be cured after reboot
2011/03/01 01:01:37.0162 3104 Rootkit.Win32.TDSS.tdl4(\HardDisk0) - User select action: Cure
2011/03/01 01:02:08.0524 0740 Deinitialize success

broni · 2011/03/01

Good news

We'll still have to run some more checks to make sure your computer is really clean.

Install one of these:
- Avast! free antivirus: http://www.avast.com/eng/download-avast-home.html
- Avira free antivirus: http://www.free-av.com/en/download/1/avira_antivir_personal__free_antivirus.html
Update, run full scan, report on any findings.

When done....

Please download ComboFix from [color= "Red"]Here[/color] or [color= "#FF0000"]Here[/color] to your Desktop.

[color= "Blue"]**Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop**[/color]

Please, never rename Combofix unless instructed.

Close any open browsers.

Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results ".

Click on [color= "Red"]this link[/color] to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.

NOTE1. If Combofix asks you to install Recovery Console, please allow it.
NOTE 2. If Combofix asks you to update the program, always do so.

Close any open browsers.

[color= "Red"]WARNING:[/color] Combofix will disconnect your machine from the Internet as soon as it starts

Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.

If there is no internet connection after running Combofix, then restart your computer to restore back your connection.

Double click on combofix.exe & follow the prompts.

When finished, it will produce a report for you.

Please post the "C:\ComboFix.txt"

**Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall
**Note 2 for AVG users: ComboFix will not run until AVG is uninstalled as a protective measure against the anti-virus. This is because AVG "falsely" detects ComboFix (or its embedded files) as a threat and may remove them resulting in the tool not working correctly which in turn can cause "unpredictable results ". Since AVG cannot be effectively disabled before running ComboFix, the author recommends you to uninstall AVG first.
Use AppRemover to uninstall it: http://www.appremover.com/
We can reinstall it when we're done with CF.
**Note 3: If you receive an error "Illegal operation attempted on a registery key that has been marked for deletion ", restart computer to fix the issue.

Make sure, you re-enable your security programs, when you're done with Combofix.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

NOTE.
If, for some reason, Combofix refuses to run, try one of the following:

1. Run Combofix from Safe Mode.

2. Delete Combofix file, download fresh one, but rename combofix.exe to your_name.exe BEFORE saving it to your desktop.
Do NOT run it yet.

Please download and run the below tool named Rkill (courtesy of BleepingComputer.com) which may help allow other programs to run.

There are 4 different versions. If one of them won't run then download and try to run the other one.

Vista and Win7 users need to right click Rkill and choose Run as Administrator

You only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.

Rkill.com
Rkill.scr
Rkill.exe

Double-click on the Rkill desktop icon to run the tool.

If using Vista or Windows 7 right-click on it and choose Run As Administrator.

A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.

If not, delete the file, then download and use the one provided in Link 2.

If it does not work, repeat the process and attempt to use one of the remaining links until the tool runs.

Do not reboot until instructed.

If the tool does not run from any of the links provided, please let me know.

Once you've gotten one of them to run, immediately run your_name.exe by double clicking on it.

If normal mode still doesn't work, run BOTH tools from safe mode.

In case #2, please post BOTH logs, rKill and Combofix.

DO NOT make any other changes to your computer (like installing programs, using other cleaning tools, etc.), until it's officially declared clean!!!

Goldensunboy · 2011/03/02

Avast found and deleted 3 exe files whose filenames consisted only of numbers from "C:\Users\Andrew\AppData\Local\Temp ", and
"C:\Users\Andrew\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\36\269860e4-54785117 ".

Do you think the problem is resolved yet? ComboFix runs now, I haven't seen any ads, redirects or bluescreens in a day and a half now. Thanks again, Broni!

Here is the ComboFix report:

********************

ComboFix 11-03-01.03 - Andrew 03/02/2011 9:50.1.2 - x86
Microsoft® Windows Vistaâ„¢ Home Premium 6.0.6001.1.1252.1.1033.18.3070.1215 [GMT -5:00]
Running from: c:\users\Andrew\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\users\Andrew\AppData\Local\{9CDE2E9A-73D0-4D51-B280-D902F5A4B567}
c:\users\Andrew\AppData\Local\{9CDE2E9A-73D0-4D51-B280-D902F5A4B567}\chrome.manifest
c:\users\Andrew\AppData\Local\{9CDE2E9A-73D0-4D51-B280-D902F5A4B567}\chrome\content\_cfg.js
c:\users\Andrew\AppData\Local\{9CDE2E9A-73D0-4D51-B280-D902F5A4B567}\chrome\content\overlay.xul
c:\users\Andrew\AppData\Local\{9CDE2E9A-73D0-4D51-B280-D902F5A4B567}\install.rdf
c:\windows\system32\drivers\ohpbrd.sys
c:\windows\system32\twunk_32.exe

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_xintkxw
-------\Service_xintkxw

((((((((((((((((((((((((( Files Created from 2011-02-02 to 2011-03-02 )))))))))))))))))))))))))))))))
.

2011-03-02 14:54 . 2011-03-02 14:54 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-03-02 06:37 . 2011-02-23 14:56 371544 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2011-03-02 06:37 . 2011-02-23 14:56 301528 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-03-02 06:37 . 2011-02-23 14:55 49240 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-03-02 06:37 . 2011-02-23 14:55 25432 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-03-02 06:37 . 2011-02-23 14:54 19544 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2011-03-02 06:37 . 2011-02-23 14:55 53592 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2011-03-02 06:36 . 2011-02-23 15:04 40648 ----a-w- c:\windows\avastSS.scr
2011-03-02 06:36 . 2011-02-23 15:04 190016 ----a-w- c:\windows\system32\aswBoot.exe
2011-03-02 06:36 . 2011-03-02 06:36 -------- d-----w- c:\programdata\AVAST Software
2011-03-02 06:36 . 2011-03-02 06:36 -------- d-----w- c:\program files\AVAST Software
2011-03-01 07:18 . 2011-02-11 06:54 5943120 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{B7FEC2AB-3198-4709-B767-C4BE79FA7122}\mpengine.dll
2011-02-28 03:53 . 2011-02-28 03:53 -------- d-sh--w- c:\windows\system32\%APPDATA%
2011-02-27 04:19 . 2011-02-27 07:24 -------- d-----w- c:\users\Andrew\AppData\Roaming\Ziyfeq
2011-02-27 04:19 . 2011-02-27 06:40 -------- d-----w- c:\users\Andrew\AppData\Roaming\Saybad
2011-02-16 15:14 . 2011-02-16 15:14 -------- d-----w- c:\program files\Common Files\Skype
2011-02-06 00:23 . 2011-02-06 00:23 -------- d-----w- c:\users\Andrew\AppData\Roaming\BadApple!!
2011-02-04 02:48 . 2010-07-21 08:45 13176832 ----a-w- c:\windows\system32\BadAppleResource7.dll
2011-02-04 02:48 . 2010-07-21 08:39 22561792 ----a-w- c:\windows\system32\BadAppleResource6.dll
2011-02-04 02:48 . 2010-07-21 08:40 24824320 ----a-w- c:\windows\system32\BadAppleResource5.dll
2011-02-04 02:48 . 2010-07-21 08:41 33039360 ----a-w- c:\windows\system32\BadAppleResource4.dll
2011-02-04 02:48 . 2010-07-21 08:43 30380544 ----a-w- c:\windows\system32\BadAppleResource3.dll
2011-02-04 02:48 . 2010-07-21 08:44 30617600 ----a-w- c:\windows\system32\BadAppleResource2.dll
2011-02-04 02:48 . 2010-07-21 19:16 43520 ----a-w- c:\windows\system32\BadApple!!.scr
2011-02-04 02:48 . 2010-07-21 08:45 21436928 ----a-w- c:\windows\system32\BadAppleResource1.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-02-27 07:07 . 2009-07-31 18:55 312439113 ----a-w- c:\windows\DUMP3f31.tmp
2011-02-02 22:11 . 2009-10-04 03:32 222080 ------w- c:\windows\system32\MpSigStub.exe
2010-12-20 23:09 . 2009-07-31 04:19 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-12-20 23:08 . 2009-07-31 04:18 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-12-03 19:15 . 2010-12-03 19:15 205984 ----a-w- c:\programdata\Microsoft\VBExpress\10.0\1033\ResourceCache.dll
2010-12-03 19:06 . 2010-12-03 19:06 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@= "{472083B0-C522-11CF-8763-00608CC02F24} "
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-02-23 15:04 122512 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Google Update "= "c:\users\Andrew\AppData\Local\Google\Update\GoogleUpdate.exe" [2010-06-12 136176]
"Skype "= "c:\program files\Skype\Phone\Skype.exe" [2011-01-26 15026056]
"DAEMON Tools Lite "= "c:\program files\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"StartCCC "= "c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-08-30 61440]
"RtHDVCpl "= "c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2008-11-12 6687264]
"SMSERIAL "= "c:\program files\Motorola\SMSERIAL\sm56hlpr.exe" [2008-06-11 1454080]
"IAAnotif "= "c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2008-04-16 178712]
"MGSysCtrl "= "c:\program files\System Control Manager\MGSysCtrl.exe" [2009-01-06 708608]
"Adobe Reader Speed Launcher "= "c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-12 39792]
"fspuip "= "c:\program files\FSP\fspuip.exe" [2008-08-28 360448]
"SynTPEnh "= "c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-12-06 1029416]
"Home Theater SchSvr "= "c:\program files\Common Files\InterVideo\SchSvr\SchSvr.exe" [2005-09-27 106496]
"WINCINEMAMGR "= "d:\intervideo\Common\Bin\WinCinemaMgr.exe" [2005-09-27 266240]
"SunJavaUpdateSched "= "d:\java\jre6\bin\jusched.exe" [2009-08-18 148888]
"QuickTime Task "= "d:\quicktime\QTTask.exe" [2009-05-26 413696]
"GrooveMonitor "= "c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-27 31016]
"Windows Mobile-based device management "= "c:\windows\WindowsMobile\wmdSync.exe" [2008-01-21 215552]
"BtTray "= "c:\program files\IVT Corporation\BlueSoleil\BtTray.exe" [2009-02-27 278016]
"avast "= "c:\program files\AVAST Software\Avast\avastUI.exe" [2011-02-23 3451496]

c:\users\Andrew\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
PdaNet Desktop.lnk - c:\program files\PdaNet for Android\PdaNetPC.exe [2010-8-5 449040]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth Manager.lnk - c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe [2008-4-15 2979144]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA "= 0 (0x0)
"EnableUIADesktopToggle "= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring "=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring "=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring "=dword:00000001

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2009-07-31 133104]
R3 BTCOM;Bluetooth Serial port driver;c:\windows\system32\DRIVERS\btcomport.sys [x]
R3 BTCOMBUS;Bluetooth Serial Port Bus Service;c:\windows\system32\Drivers\btcombus.sys [x]
R3 fspad_wlh32;Finger-sensing Pad Driver for Windows 2000/XP/Vista_wlh32;c:\windows\system32\DRIVERS\fspad_wlh32.sys [2008-08-28 33792]
R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S0 BtHidBus;Bluetooth HID Bus Service;c:\windows\System32\Drivers\BtHidBus.sys [2009-01-08 20744]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-12-03 691696]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2011-02-23 53592]
S2 BsMobileCS;BsMobileCS;c:\program files\IVT Corporation\BlueSoleil\BsMobileCS.exe [2009-02-27 143467]
S2 Micro Star SCM;Micro Star SCM;c:\program files\System Control Manager\MSIService.exe [2008-11-05 159744]
S2 TeamViewer5;TeamViewer 5;c:\program files\TeamViewer\Version5\TeamViewer_Service.exe [2010-10-19 2011944]
S2 TeamViewer6;TeamViewer 6;c:\program files\TeamViewer\Version6\TeamViewer_Service.exe [2011-01-27 2253688]
S3 btnetBUs;Bluetooth PAN Bus Service;c:\windows\system32\Drivers\btnetBus.sys [2008-12-07 30088]
S3 enecir;ENE CIR Receiver;c:\windows\system32\DRIVERS\enecir.sys [2008-04-28 54784]
S3 IvtBtBUs;IVT Bluetooth Bus Service;c:\windows\system32\Drivers\IvtBtBus.sys [2008-07-02 26248]
S3 NETw5v32;Intel(R) Wireless WiFi Link Adapter Driver for Windows Vista 32 Bit ;c:\windows\system32\DRIVERS\NETw5v32.sys [2008-04-27 3658752]
S3 O2MDRDR;O2MDRDR;c:\windows\system32\DRIVERS\o2media.sys [2008-07-15 51288]
S3 O2SDRDR;O2SDRDR;c:\windows\system32\DRIVERS\o2sd.sys [2008-06-12 43608]
S3 pnetmdm;PdaNet Modem;c:\windows\system32\DRIVERS\pnetmdm.sys [2006-09-28 9472]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
WindowsMobile REG_MULTI_SZ wcescomm rapimgr
LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr
.
Contents of the 'Scheduled Tasks' folder

2011-03-02 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-07-31 05:45]

2011-03-02 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-07-31 05:45]

2011-03-02 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-250340048-698677869-2617958138-1000Core.job
- c:\users\Andrew\AppData\Local\Google\Update\GoogleUpdate.exe [2010-06-12 04:37]

2011-03-02 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-250340048-698677869-2617958138-1000UA.job
- c:\users\Andrew\AppData\Local\Google\Update\GoogleUpdate.exe [2010-06-12 04:37]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com/
mStart Page = hxxp://www.msi.com.tw
FF - ProfilePath - c:\users\Andrew\AppData\Roaming\Mozilla\Firefox\Profiles\bk5py183.default\
FF - prefs.js: browser.search.selectedEngine - DAEMON Search
FF - prefs.js: browser.startup.homepage - www.google.com
FF - prefs.js: network.proxy.type - 0
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: New Tab Homepage: {66E978CD-981F-47DF-AC42-E3CF417C1467} - %profile%\extensions\{66E978CD-981F-47DF-AC42-E3CF417C1467}
FF - Ext: Rikaichan: {0AA9101C-D3C1-4129-A9B7-D778C6A17F82} - %profile%\extensions\{0AA9101C-D3C1-4129-A9B7-D778C6A17F82}
FF - Ext: Rikaichan Japanese-English Dictionary File: rikaichan-jpen@polarcloud.com - %profile%\extensions\rikaichan-jpen@polarcloud.com
FF - Ext: DAEMON Tools Toolbar: DTToolbar@toolbarnet.com - %profile%\extensions\DTToolbar@toolbarnet.com
FF - Ext: Greasemonkey: {e4a8a97b-f2ed-450b-b12d-ee082ba24781} - %profile%\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
FF - Ext: Screengrab: {02450954-cdd9-410f-b1da-db804e18c671} - %profile%\extensions\{02450954-cdd9-410f-b1da-db804e18c671}
FF - user.js: network.cookie.cookieBehavior - 0
FF - user.js: privacy.clearOnShutdown.cookies - false
FF - user.js: security.warn_viewing_mixed - false
FF - user.js: security.warn_viewing_mixed.show_once - false
FF - user.js: security.warn_submit_insecure - false
FF - user.js: security.warn_submit_insecure.show_once - false
.
- - - - ORPHANS REMOVED - - - -

BHO-{1392b8d2-5c05-419f-a8f6-b9f15a596612} - (no file)
Toolbar-{1392b8d2-5c05-419f-a8f6-b9f15a596612} - (no file)
Toolbar-Locked - (no file)
WebBrowser-{1392B8D2-5C05-419F-A8F6-B9F15A596612} - (no file)
HKLM-Run-ITSecMng - %ProgramFiles%\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe
HKLM-Run-Malwarebytes Anti-Malware (rootkit-scan) - c:\program files\Malwarebytes' Anti-Malware\mbam.exe
SafeBoot-klmdb.sys
AddRemove-Chipamp - d:\winamp\uninstall_chipamp.exe
AddRemove-Freecorder Toolbar - c:\progra~1\FREECO~1\UNWISE.EXE
AddRemove-GIF Animator - d:\program files\Microsoft GIF Animator\setup\GifACME.exe

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-03-02 09:58
Windows 6.0.6001 Service Pack 1 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial "=dword:00000000
"MSCurrentCountry "=dword:000000b5

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial "=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial "=dword:00000000
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'Explorer.exe'(2416)
c:\windows\system32\BsMobileSDK.dll
c:\windows\system32\BsLangInDepRes.dll
c:\windows\system32\Bs2Res.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
c:\windows\system32\conime.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
c:\program files\O2Micro Flash Memory Card Driver\o2flash.exe
c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
c:\program files\TeamViewer\Version6\TeamViewer.exe
c:\program files\IVT Corporation\BlueSoleil\BsHelpCS.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
c:\program files\Toshiba\Bluetooth Toshiba Stack\ItSecMng.exe
c:\windows\system32\wbem\unsecapp.exe
c:\program files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
c:\program files\Synaptics\SynTP\SynTPHelper.exe
c:\\?\c:\windows\system32\wbem\WMIADAP.EXE
.
**************************************************************************
.
Completion time: 2011-03-02 10:02:24 - machine was rebooted
ComboFix-quarantined-files.txt 2011-03-02 15:02

Pre-Run: 3,635,118,080 bytes free
Post-Run: 1,804,963,840 bytes free

- - End Of File - - 220DD20B8CF3BA08455168B246B0A1D4

broni · 2011/03/02

Good news

We'll run couple more tools to make sure, you're really clean.

Download OTL to your Desktop.

Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.

Click the Scan All Users checkbox.

Under the Custom Scan box paste this in:

netsvcs
drivers32
%SYSTEMDRIVE%\*.*
%systemroot%\Fonts\*.com
%systemroot%\Fonts\*.dll
%systemroot%\Fonts\*.ini
%systemroot%\Fonts\*.ini2
%systemroot%\Fonts\*.exe
%systemroot%\system32\spool\prtprocs\w32x86\*.*
%systemroot%\REPAIR\*.bak1
%systemroot%\REPAIR\*.ini
%systemroot%\system32\*.jpg
%systemroot%\*.jpg
%systemroot%\*.png
%systemroot%\*.scr
%systemroot%\*._sy
%APPDATA%\Adobe\Update\*.*
%ALLUSERSPROFILE%\Favorites\*.*
%APPDATA%\Microsoft\*.*
%PROGRAMFILES%\*.*
%APPDATA%\Update\*.*
%systemroot%\*. /mp /s
CREATERESTOREPOINT
%systemroot%\System32\config\*.sav
%PROGRAMFILES%\bak. /s
%systemroot%\system32\bak. /s
%ALLUSERSPROFILE%\Start Menu\*.lnk /x
%systemroot%\system32\config\systemprofile\*.dat /x
%systemroot%\*.config
%systemroot%\system32\*.db
%APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x
%USERPROFILE%\Desktop\*.exe
%PROGRAMFILES%\Common Files\*.*
%systemroot%\*.src
%systemroot%\install\*.*
%systemroot%\system32\DLL\*.*
%systemroot%\system32\HelpFiles\*.*
%systemroot%\system32\rundll\*.*
%systemroot%\winn32\*.*
%systemroot%\Java\*.*
%systemroot%\system32\test\*.*
%systemroot%\system32\Rundll32\*.*
%systemroot%\AppPatch\Custom\*.*
%APPDATA%\Roaming\Microsoft\Windows\Recent\*.lnk /x
%PROGRAMFILES%\PC-Doctor\Downloads\*.*
%PROGRAMFILES%\Internet Explorer\*.tmp
%PROGRAMFILES%\Internet Explorer\*.dat
%USERPROFILE%\My Documents\*.exe
%USERPROFILE%\*.exe
%systemroot%\ADDINS\*.*
%systemroot%\assembly\*.bak2
%systemroot%\Config\*.*
%systemroot%\REPAIR\*.bak2
%systemroot%\SECURITY\Database\*.sdb /x
%systemroot%\SYSTEM\*.bak2
%systemroot%\Web\*.bak2
%systemroot%\Driver Cache\*.*
%PROGRAMFILES%\Mozilla Firefox\0*.exe
%ProgramFiles%\Microsoft Common\*.*
%ProgramFiles%\TinyProxy.
%USERPROFILE%\Favorites\*.url /x
%systemroot%\system32\*.bk
%systemroot%\*.te
%systemroot%\system32\system32\*.*
%ALLUSERSPROFILE%\*.dat /x
%systemroot%\system32\drivers\*.rmv
dir /b "%systemroot%\system32\*.exe" | find /i " " /c
dir /b "%systemroot%\*.exe" | find /i " " /c
%PROGRAMFILES%\Microsoft\*.*
%systemroot%\System32\Wbem\proquota.exe
%PROGRAMFILES%\Mozilla Firefox\*.dat
%USERPROFILE%\Cookies\*.txt /x
%SystemRoot%\system32\fonts\*.*
%systemroot%\system32\winlog\*.*
%systemroot%\system32\Language\*.*
%systemroot%\system32\Settings\*.*
%systemroot%\system32\*.quo
%SYSTEMROOT%\AppPatch\*.exe
%SYSTEMROOT%\inf\*.exe
%SYSTEMROOT%\Installer\*.exe
%systemroot%\system32\config\*.bak2
%systemroot%\system32\Computers\*.*
%SystemRoot%\system32\Sound\*.*
%SystemRoot%\system32\SpecialImg\*.*
%SystemRoot%\system32\code\*.*
%SystemRoot%\system32\draft\*.*
%SystemRoot%\system32\MSSSys\*.*
%ProgramFiles%\Javascript\*.*
%systemroot%\pchealth\helpctr\System\*.exe /s
%systemroot%\Web\*.exe
%systemroot%\system32\msn\*.*
%systemroot%\system32\*.tro
%AppData%\Microsoft\Installer\msupdates\*.*
%ProgramFiles%\Messenger\*.*
%systemroot%\system32\systhem32\*.*
%systemroot%\system\*.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs
/md5start
/md5stop

Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.

When the scan completes, it will open two notepad windows: OTL.txt and Extras.txt. These are saved in the same location as OTL.

Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post them back here.

Goldensunboy · 2011/03/03

OTL did not create a new Extras.txt file in the same directory where it was being executed from, but it did create OTL.txt. There was already an old Extras.txt from the last time I ran OTL. Should I delete the old Extras.txt and see if it creates a new one then?

Also, the log file is too large for me to post. Are attachments possible, or would it be acceptable that I split it into two posts?

broni · 2011/03/03

Post new OTL.txt and old Extras.txt.
If any log is too long, split it between couple of replies.

Goldensunboy · 2011/03/03

OTL logfile created on: 3/3/2011 4:33:01 AM - Run 2
OTL by OldTimer - Version 3.2.22.2 Folder = C:\Users\Andrew\Downloads
Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18943)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 57.00% Memory free
6.00 Gb Paging File | 5.00 Gb Available in Paging File | 79.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 43.95 Gb Total Space | 1.73 Gb Free Space | 3.94% Space Free | Partition Type: NTFS
Drive D: | 246.33 Gb Total Space | 115.83 Gb Free Space | 47.02% Space Free | Partition Type: NTFS
Drive F: | 3.92 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF

Computer Name: ANDREW-PC | User Name: Andrew | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011/03/03 04:31:40 | 000,581,120 | ---- | M] (OldTimer Tools) -- C:\Users\Andrew\Downloads\OTL(2).exe
PRC - [2011/02/23 10:04:20 | 003,451,496 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2011/02/23 10:04:19 | 000,042,184 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2011/01/27 10:51:04 | 007,626,104 | ---- | M] (TeamViewer GmbH) -- C:\Program Files\TeamViewer\Version6\TeamViewer.exe
PRC - [2011/01/27 10:51:04 | 002,253,688 | ---- | M] (TeamViewer GmbH) -- C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe
PRC - [2010/10/19 07:29:03 | 002,011,944 | ---- | M] (TeamViewer GmbH) -- C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe
PRC - [2010/08/02 21:33:54 | 000,449,040 | ---- | M] () -- C:\Program Files\PdaNet for Android\PdaNetPC.exe
PRC - [2010/04/01 04:16:20 | 000,357,696 | ---- | M] (DT Soft Ltd) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe
PRC - [2009/08/18 10:35:20 | 000,386,480 | ---- | M] (Sun Microsystems, Inc.) -- D:\Java\jre6\bin\jucheck.exe
PRC - [2009/02/27 16:04:38 | 000,850,432 | ---- | M] () -- C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
PRC - [2009/02/27 16:04:34 | 000,278,016 | ---- | M] () -- C:\Program Files\IVT Corporation\BlueSoleil\BtTray.exe
PRC - [2009/02/27 15:42:20 | 000,098,407 | ---- | M] () -- C:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe
PRC - [2009/02/27 15:40:48 | 000,143,467 | ---- | M] () -- C:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe
PRC - [2009/01/06 13:05:52 | 000,708,608 | ---- | M] (Micro-Star International Co., Ltd.) -- C:\Program Files\System Control Manager\MGSysCtrl.exe
PRC - [2008/11/05 12:21:04 | 000,159,744 | ---- | M] (Micro-Star Int'l Co., Ltd.) -- C:\Program Files\System Control Manager\MSIService.exe
PRC - [2008/10/29 01:29:41 | 002,927,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2008/06/11 05:16:00 | 001,454,080 | ---- | M] (Motorola Inc.) -- C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
PRC - [2008/05/23 19:07:00 | 000,288,072 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHSP.exe
PRC - [2008/05/23 01:54:42 | 000,120,168 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
PRC - [2008/05/13 21:45:04 | 000,357,704 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
PRC - [2008/04/15 20:54:42 | 000,354,840 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
PRC - [2008/04/15 20:54:40 | 000,178,712 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
PRC - [2008/04/15 02:05:40 | 002,979,144 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
PRC - [2008/03/31 22:08:50 | 000,083,272 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
PRC - [2008/01/20 21:23:24 | 000,215,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\WindowsMobile\wmdSync.exe
PRC - [2007/02/12 03:43:00 | 000,065,536 | ---- | M] (O2Micro International) -- C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe
PRC - [2005/09/27 04:00:38 | 000,106,496 | ---- | M] (InterVideo Inc.) -- C:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe
PRC - [2005/09/27 02:47:50 | 000,266,240 | ---- | M] (InterVideo Inc.) -- D:\InterVideo\Common\Bin\WinCinemaMgr.exe

========== Modules (SafeList) ==========

MOD - [2011/03/03 04:31:40 | 000,581,120 | ---- | M] (OldTimer Tools) -- C:\Users\Andrew\Downloads\OTL(2).exe
MOD - [2008/12/12 17:19:32 | 000,053,248 | ---- | M] () -- C:\Program Files\System Control Manager\MGKBHook.dll
MOD - [2008/01/20 21:23:44 | 001,684,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll

========== Win32 Services (SafeList) ==========

SRV - [2011/02/23 10:04:19 | 000,042,184 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2011/01/27 10:51:04 | 002,253,688 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe -- (TeamViewer6)
SRV - [2010/10/19 07:29:03 | 002,011,944 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe -- (TeamViewer5)
SRV - [2009/10/16 16:40:51 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2009/08/30 18:40:56 | 000,316,664 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2009/02/27 16:04:38 | 000,850,432 | ---- | M] () [Auto | Running] -- C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe -- (BlueSoleilCS)
SRV - [2009/02/27 15:42:20 | 000,098,407 | ---- | M] () [On_Demand | Running] -- C:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe -- (BsHelpCS)
SRV - [2009/02/27 15:40:48 | 000,143,467 | ---- | M] () [Auto | Running] -- C:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe -- (BsMobileCS)
SRV - [2008/11/05 12:21:04 | 000,159,744 | ---- | M] (Micro-Star Int'l Co., Ltd.) [Auto | Running] -- C:\Program Files\System Control Manager\MSIService.exe -- (Micro Star SCM)
SRV - [2008/09/08 06:59:00 | 000,575,488 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2008/05/23 01:54:42 | 000,120,168 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe -- (TOSHIBA Bluetooth Service)
SRV - [2008/04/15 20:54:42 | 000,354,840 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON) Intel(R)
SRV - [2008/01/20 21:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2008/01/20 21:23:24 | 000,365,568 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm)
SRV - [2008/01/20 21:23:24 | 000,167,936 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr)
SRV - [2007/02/12 03:43:00 | 000,065,536 | ---- | M] (O2Micro International) [Auto | Running] -- C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe -- (o2flash)

========== Driver Services (SafeList) ==========

DRV - [2011/02/23 09:56:55 | 000,371,544 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2011/02/23 09:56:45 | 000,301,528 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2011/02/23 09:55:49 | 000,049,240 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2011/02/23 09:55:10 | 000,025,432 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2011/02/23 09:55:03 | 000,053,592 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2011/02/23 09:54:55 | 000,019,544 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2010/12/03 14:06:16 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\sptd.sys -- (sptd)
DRV - [2009/05/25 05:50:44 | 000,164,864 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169)
DRV - [2009/01/08 01:20:04 | 000,031,880 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\VCommMgr.sys -- (VcommMgr)
DRV - [2009/01/07 22:39:36 | 000,020,744 | ---- | M] (IVT Corporation.) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\BtHidBus.sys -- (BtHidBus)
DRV - [2009/01/03 15:40:12 | 000,039,304 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\btcusb.sys -- (Btcsrusb)
DRV - [2008/12/22 12:18:58 | 000,017,416 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\VHIDMini.sys -- (VHidMinidrv)
DRV - [2008/12/07 11:44:54 | 000,030,088 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\btnetBus.sys -- (btnetBUs)
DRV - [2008/12/07 11:44:50 | 000,017,928 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\btnetdrv.sys -- (BT)
DRV - [2008/11/12 10:41:00 | 004,179,456 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag)
DRV - [2008/11/11 05:29:42 | 000,154,272 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\RtHDMIV.sys -- (RTHDMIAzAudService)
DRV - [2008/08/28 10:30:03 | 000,033,792 | ---- | M] (Sentelic Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\fspad_wlh32.sys -- (fspad_wlh32)
DRV - [2008/08/26 09:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2008/07/28 02:53:00 | 000,919,552 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\athr.sys -- (athr)
DRV - [2008/07/15 03:38:00 | 000,051,288 | ---- | M] (O2Micro ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\o2media.sys -- (O2MDRDR)
DRV - [2008/07/02 13:58:48 | 000,026,248 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\IvtBtBus.sys -- (IvtBtBUs)
DRV - [2008/06/27 15:06:28 | 000,041,728 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfusb.sys -- (Tosrfusb)
DRV - [2008/06/11 20:28:00 | 000,043,608 | ---- | M] (O2Micro ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\o2sd.sys -- (O2SDRDR)
DRV - [2008/06/11 05:23:00 | 001,097,856 | ---- | M] (Motorola Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\smserial.sys -- (smserial)
DRV - [2008/05/13 19:16:06 | 000,064,000 | ---- | M] (TOSHIBA Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\tosrfcom.sys -- (Tosrfcom)
DRV - [2008/04/28 12:54:58 | 000,054,784 | ---- | M] (ENE TECHNOLOGY INC.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\enecir.sys -- (enecir)
DRV - [2008/04/27 17:29:00 | 003,658,752 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\NETw5v32.sys -- (NETw5v32) Intel(R)
DRV - [2008/04/23 20:15:26 | 000,131,712 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfbd.sys -- (tosrfbd)
DRV - [2008/03/25 16:54:02 | 000,041,472 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tosporte.sys -- (tosporte)
DRV - [2008/03/19 14:38:24 | 000,074,112 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Tosrfhid.sys -- (Tosrfhid)
DRV - [2008/01/22 23:57:48 | 000,054,144 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TosRfSnd.sys -- (TosRfSnd)
DRV - [2008/01/21 18:27:50 | 000,014,856 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\VComm.sys -- (VComm)
DRV - [2008/01/20 21:23:26 | 000,031,616 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (winusb)
DRV - [2007/11/29 12:45:44 | 000,036,608 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfbnp.sys -- (tosrfbnp)
DRV - [2007/09/25 09:59:46 | 000,015,152 | ---- | M] () [Kernel | On_Demand | Stopped] -- D:\MediaCoder\SysInfo.sys -- (CrystalSysInfo)
DRV - [2007/06/27 01:05:52 | 000,053,184 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ftdibus.sys -- (FTDIBUS)
DRV - [2006/11/22 12:41:18 | 000,022,416 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\Program Files\IVT Corporation\BlueSoleil\device\Win2k\BTNetFilter.sys -- (BTNetFilter)
DRV - [2006/09/28 14:32:14 | 000,009,472 | ---- | M] (June Fabrics Technology) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\pnetmdm.sys -- (pnetmdm)
DRV - [2005/09/26 00:08:10 | 000,125,568 | ---- | M] (Adaptec, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\avcgbdr.sys -- (avcgbdr)
DRV - [2005/07/28 03:28:10 | 000,019,712 | ---- | M] (Adaptec, Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\avcgbfl.sys -- (avcgbfl)
DRV - [2005/01/07 08:42:00 | 000,018,612 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfnds.sys -- (tosrfnds)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [Binary data over 100 bytes]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = [Binary data over 100 bytes]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msi.com.tw
IE - HKLM\..\URLSearchHook: {1392b8d2-5c05-419f-a8f6-b9f15a596612} - Reg Error: Key error. File not found

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:33440

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:33440

IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-250340048-698677869-2617958138-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKU\S-1-5-21-250340048-698677869-2617958138-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.selectedEngine: "DAEMON Search "
FF - prefs.js..browser.startup.homepage: "www.google.com "
FF - prefs.js..extensions.enabledItems: {66E978CD-981F-47DF-AC42-E3CF417C1467}:0.4.2
FF - prefs.js..extensions.enabledItems: rikaichan-jpen@polarcloud.com:2.00.100530
FF - prefs.js..extensions.enabledItems: DTToolbar@toolbarnet.com:1.1.2.0185
FF - prefs.js..extensions.enabledItems: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.9.1
FF - prefs.js..extensions.enabledItems: {02450954-cdd9-410f-b1da-db804e18c671}:0.96.3
FF - prefs.js..extensions.enabledItems: wrc@avast.com:20110101
FF - prefs.js..network.proxy.type: 0

FF - HKLM\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2011/03/02 01:36:57 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.14\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/03/02 10:08:56 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.14\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/03/02 10:08:56 | 000,000,000 | ---D | M]

[2010/05/08 12:23:21 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Andrew\AppData\Roaming\Mozilla\Extensions
[2009/08/25 09:39:11 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Andrew\AppData\Roaming\Mozilla\Extensions\MediaCoder
[2011/03/02 10:09:43 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Andrew\AppData\Roaming\Mozilla\Firefox\Profiles\bk5py183.default\extensions
[2011/02/27 14:02:43 | 000,000,000 | ---D | M] (Screengrab) -- C:\Users\Andrew\AppData\Roaming\Mozilla\Firefox\Profiles\bk5py183.default\extensions\{02450954-cdd9-410f-b1da-db804e18c671}
[2010/10/08 02:09:34 | 000,000,000 | ---D | M] (Rikaichan) -- C:\Users\Andrew\AppData\Roaming\Mozilla\Firefox\Profiles\bk5py183.default\extensions\{0AA9101C-D3C1-4129-A9B7-D778C6A17F82}
[2010/05/24 01:53:29 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Andrew\AppData\Roaming\Mozilla\Firefox\Profiles\bk5py183.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/06/24 00:53:16 | 000,000,000 | ---D | M] (New Tab Homepage) -- C:\Users\Andrew\AppData\Roaming\Mozilla\Firefox\Profiles\bk5py183.default\extensions\{66E978CD-981F-47DF-AC42-E3CF417C1467}
[2011/02/22 23:27:40 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Users\Andrew\AppData\Roaming\Mozilla\Firefox\Profiles\bk5py183.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2010/12/03 14:06:45 | 000,000,000 | ---D | M] ( "DAEMON Tools Toolbar ") -- C:\Users\Andrew\AppData\Roaming\Mozilla\Firefox\Profiles\bk5py183.default\extensions\DTToolbar@toolbarnet.com
[2010/10/01 10:33:33 | 000,000,000 | ---D | M] (Rikaichan Japanese-English Dictionary File) -- C:\Users\Andrew\AppData\Roaming\Mozilla\Firefox\Profiles\bk5py183.default\extensions\rikaichan-jpen@polarcloud.com
[2010/12/03 14:06:39 | 000,002,059 | ---- | M] () -- C:\Users\Andrew\AppData\Roaming\Mozilla\Firefox\Profiles\bk5py183.default\searchplugins\daemon-search.xml
[2010/05/08 15:16:10 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011/03/02 01:36:57 | 000,000,000 | ---D | M] (avast! WebRep) -- C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF
[2010/12/09 05:47:06 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npwachk.dll

O1 HOSTS File: ([2011/03/02 09:58:02 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (no name) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - No CLSID value found.
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll ()
O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()
O3 - HKLM\..\Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll ()
O3 - HKU\S-1-5-21-250340048-698677869-2617958138-1000\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [BtTray] C:\Program Files\IVT Corporation\BlueSoleil\BtTray.exe ()
O4 - HKLM..\Run: [fspuip] C:\Program Files\FSP\fspuip.exe (Sentelic Corporation)
O4 - HKLM..\Run: [Home Theater SchSvr] C:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe (InterVideo Inc.)
O4 - HKLM..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
O4 - HKLM..\Run: [MGSysCtrl] C:\Program Files\System Control Manager\MGSysCtrl.exe (Micro-Star International Co., Ltd.)
O4 - HKLM..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe (Motorola Inc.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [WINCINEMAMGR] D:\InterVideo\Common\Bin\WinCinemaMgr.exe (InterVideo Inc.)
O4 - HKLM..\Run: [Windows Mobile-based device management] C:\Windows\WindowsMobile\wmdSync.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-250340048-698677869-2617958138-1000..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - Startup: C:\Users\Andrew\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PdaNet Desktop.lnk = C:\Program Files\PdaNet for Android\PdaNetPC.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-250340048-698677869-2617958138-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-250340048-698677869-2617958138-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Computer, Inc.)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Andrew\Pictures\32f8148ed961202548ec40c5cd24a92a.jpg
O24 - Desktop BackupWallPaper: C:\Users\Andrew\Pictures\32f8148ed961202548ec40c5cd24a92a.jpg
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 16:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2009/06/10 16:42:20 | 000,000,024 | ---- | M] () - D:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - File not found
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found

Drivers32: msacm.ac3acm - C:\Windows\System32\ac3acm.acm (fccHandler)
Drivers32: msacm.dvacm - C:\Program Files\Common Files\Ulead Systems\vio\DVACM.acm (Ulead Systems, Inc.)
Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lameacm - C:\Windows\System32\lameACM.acm (http://www.mp3dev.org/)
Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
Drivers32: VIDC.DIVX - C:\Windows\System32\divx.dll (DivX, Inc.)
Drivers32: VIDC.FFDS - C:\Windows\System32\ff_vfw.dll ()
Drivers32: VIDC.FPS1 - C:\Windows\System32\frapsvid.dll (Beepa P/L)
Drivers32: VIDC.XVID - C:\Windows\System32\xvidvfw.dll ()
Drivers32: VIDC.YV12 - C:\Windows\System32\yv12vfw.dll (www.helixcommunity.org)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2011/03/02 10:02:26 | 000,000,000 | ---D | C] -- C:\Windows\temp
[2011/03/02 10:02:26 | 000,000,000 | ---D | C] -- C:\Users\Andrew\AppData\Local\temp
[2011/03/02 09:58:05 | 000,000,000 | ---D | C] -- C:\$RECYCLE.BIN
[2011/03/02 09:48:42 | 000,000,000 | ---D | C] -- C:\ComboFix
[2011/03/02 09:48:21 | 000,212,480 | ---- | C] (SteelWerX) -- C:\Windows\SWXCACLS.exe
[2011/03/02 01:37:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus
[2011/03/02 01:37:24 | 000,371,544 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswSnx.sys
[2011/03/02 01:37:24 | 000,301,528 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswSP.sys
[2011/03/02 01:37:24 | 000,049,240 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswTdi.sys
[2011/03/02 01:37:24 | 000,025,432 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswRdr.sys
[2011/03/02 01:37:24 | 000,019,544 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswFsBlk.sys
[2011/03/02 01:37:23 | 000,053,592 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswMonFlt.sys
[2011/03/02 01:36:55 | 000,190,016 | ---- | C] (AVAST Software) -- C:\Windows\System32\aswBoot.exe
[2011/03/02 01:36:55 | 000,040,648 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr
[2011/03/02 01:36:48 | 000,000,000 | ---D | C] -- C:\ProgramData\AVAST Software
[2011/03/02 01:36:48 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
[2011/03/01 01:00:07 | 001,372,248 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\Andrew\Desktop\TDSSKiller.exe
[2011/02/27 23:23:16 | 000,000,000 | ---D | C] -- C:\Users\Andrew\Desktop\logs
[2011/02/27 22:53:03 | 000,000,000 | -HSD | C] -- C:\Windows\System32\%APPDATA%
[2011/02/27 21:22:21 | 000,161,792 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2011/02/27 21:22:21 | 000,136,704 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2011/02/27 21:22:21 | 000,031,232 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2011/02/27 21:22:17 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT
[2011/02/27 21:21:55 | 000,000,000 | ---D | C] -- C:\Qoobox
[2011/02/26 23:19:39 | 000,000,000 | ---D | C] -- C:\Users\Andrew\AppData\Roaming\Ziyfeq
[2011/02/26 23:19:39 | 000,000,000 | ---D | C] -- C:\Users\Andrew\AppData\Roaming\Saybad
[2011/02/16 10:14:41 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2011/02/13 03:10:52 | 000,000,000 | ---D | C] -- C:\Users\Andrew\Desktop\imageEncode-0.7
[2011/02/10 16:30:53 | 000,000,000 | ---D | C] -- C:\Users\Andrew\Documents\LeslieStuff
[2011/02/05 19:23:27 | 000,000,000 | ---D | C] -- C:\Users\Andrew\AppData\Roaming\BadApple!!
[2011/02/05 01:56:57 | 000,000,000 | ---D | C] -- C:\Users\Andrew\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MediaCoder
[3 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/03/03 04:23:00 | 000,000,886 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011/03/03 04:11:02 | 000,003,344 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011/03/03 04:11:02 | 000,003,344 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011/03/03 04:03:00 | 000,000,860 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-250340048-698677869-2617958138-1000Core.job
[2011/03/03 04:02:59 | 000,000,912 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-250340048-698677869-2617958138-1000UA.job
[2011/03/03 01:23:00 | 000,000,882 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011/03/02 18:13:03 | 000,000,117 | ---- | M] () -- C:\Users\Andrew\jagex_runescape_preferences2.dat
[2011/03/02 18:12:35 | 000,000,039 | ---- | M] () -- C:\Users\Andrew\jagex_runescape_preferences.dat
[2011/03/02 18:11:25 | 000,001,055 | ---- | M] () -- C:\Windows\System32\bscs.ini
[2011/03/02 18:11:13 | 000,006,510 | ---- | M] () -- C:\Windows\System32\LOCALSERVICE.INI
[2011/03/02 18:11:13 | 000,000,101 | ---- | M] () -- C:\Windows\System32\LOCALDEVICE.INI
[2011/03/02 18:11:08 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011/03/02 10:12:15 | 000,643,486 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011/03/02 10:12:15 | 000,119,542 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011/03/02 09:58:02 | 000,000,027 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2011/03/02 09:42:28 | 004,278,549 | R--- | M] () -- C:\Users\Andrew\Desktop\ComboFix.exe
[2011/03/02 09:35:22 | 000,014,072 | ---- | M] () -- C:\Users\Andrew\Documents\Untitled.png
[2011/03/02 01:37:25 | 000,001,839 | ---- | M] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2011/03/02 01:37:23 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt
[2011/03/02 01:26:24 | 001,204,763 | ---- | M] () -- C:\Users\Andrew\Documents\3525184746311.pdf
[2011/02/27 14:10:08 | 002,235,643 | ---- | M] () -- C:\Users\Andrew\Documents\ElectroMagnetism
[2011/02/27 13:59:35 | 000,000,118 | ---- | M] () -- C:\Users\Andrew\webct_upload_applet.properties
[2011/02/27 02:10:02 | 000,172,544 | ---- | M] () -- C:\Users\Andrew\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/02/26 01:22:37 | 000,037,199 | ---- | M] () -- C:\Users\Andrew\Documents\WoahConversationWoahUnsupervisedTalkWithYourMomWoahTimesInfinity.rtf
[2011/02/23 23:32:46 | 000,000,965 | ---- | M] () -- C:\Users\Public\Desktop\TeamViewer 6.lnk
[2011/02/23 10:04:21 | 000,040,648 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr
[2011/02/23 10:04:17 | 000,190,016 | ---- | M] (AVAST Software) -- C:\Windows\System32\aswBoot.exe
[2011/02/23 09:56:55 | 000,371,544 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswSnx.sys
[2011/02/23 09:56:45 | 000,301,528 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswSP.sys
[2011/02/23 09:55:49 | 000,049,240 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswTdi.sys
[2011/02/23 09:55:10 | 000,025,432 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswRdr.sys
[2011/02/23 09:55:03 | 000,053,592 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswMonFlt.sys
[2011/02/23 09:54:55 | 000,019,544 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswFsBlk.sys
[2011/02/22 04:54:11 | 000,000,489 | ---- | M] () -- C:\Windows\System32\REMOTEDEVICE.INI
[2011/02/22 04:53:50 | 000,964,771 | ---- | M] () -- C:\Users\Andrew\Desktop\Red Zone.mp3
[2011/02/21 11:09:14 | 001,372,248 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\Andrew\Desktop\TDSSKiller.exe
[2011/02/21 00:43:29 | 009,339,584 | ---- | M] () -- C:\Users\Andrew\Desktop\AGEHA.brstm
[2011/02/20 10:11:11 | 000,304,128 | ---- | M] () -- C:\Users\Andrew\Desktop\HotelMarioEarRape.mp3
[2011/02/19 01:09:54 | 000,484,758 | ---- | M] () -- C:\Users\Andrew\Documents\130000CoinsDownTheShitter.png
[2011/02/19 01:09:02 | 000,473,656 | ---- | M] () -- C:\Users\Andrew\Documents\WhatIsThis.dib
[2011/02/10 21:52:34 | 001,772,330 | ---- | M] () -- C:\Users\Andrew\Desktop\Holic.ogg
[2011/02/10 21:43:54 | 002,826,464 | ---- | M] () -- C:\Users\Andrew\Desktop\Holic.brstm
[2011/02/09 11:29:39 | 000,000,929 | ---- | M] () -- C:\Users\Public\Desktop\YouTube Downloader.lnk
[2011/02/05 01:56:57 | 000,000,516 | ---- | M] () -- C:\Users\Andrew\Desktop\MediaCoder.lnk
[3 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/03/02 09:42:04 | 004,278,549 | R--- | C] () -- C:\Users\Andrew\Desktop\ComboFix.exe
[2011/03/02 09:35:22 | 000,014,072 | ---- | C] () -- C:\Users\Andrew\Documents\Untitled.png
[2011/03/02 01:37:25 | 000,001,839 | ---- | C] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2011/03/02 01:26:23 | 001,204,763 | ---- | C] () -- C:\Users\Andrew\Documents\3525184746311.pdf
[2011/02/28 21:37:35 | 000,731,136 | ---- | C] () -- C:\Users\Andrew\Desktop\avenger.exe
[2011/02/27 21:22:21 | 000,256,512 | ---- | C] () -- C:\Windows\PEV.exe
[2011/02/27 21:22:21 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2011/02/27 21:22:21 | 000,089,088 | ---- | C] () -- C:\Windows\MBR.exe
[2011/02/27 21:22:21 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2011/02/27 21:22:21 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2011/02/27 14:06:54 | 002,235,643 | ---- | C] () -- C:\Users\Andrew\Documents\ElectroMagnetism
[2011/02/26 01:22:37 | 000,037,199 | ---- | C] () -- C:\Users\Andrew\Documents\WoahConversationWoahUnsupervisedTalkWithYourMomWoahTimesInfinity.rtf
[2011/02/23 23:32:46 | 000,000,977 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 6.lnk
[2011/02/23 23:32:46 | 000,000,965 | ---- | C] () -- C:\Users\Public\Desktop\TeamViewer 6.lnk
[2011/02/22 04:53:47 | 000,964,771 | ---- | C] () -- C:\Users\Andrew\Desktop\Red Zone.mp3
[2011/02/21 00:43:29 | 009,339,584 | ---- | C] () -- C:\Users\Andrew\Desktop\AGEHA.brstm
[2011/02/19 01:09:54 | 000,484,758 | ---- | C] () -- C:\Users\Andrew\Documents\130000CoinsDownTheShitter.png
[2011/02/19 01:09:02 | 000,473,656 | ---- | C] () -- C:\Users\Andrew\Documents\WhatIsThis.dib
[2011/02/10 21:52:29 | 001,772,330 | ---- | C] () -- C:\Users\Andrew\Desktop\Holic.ogg
[2011/02/10 21:43:54 | 002,826,464 | ---- | C] () -- C:\Users\Andrew\Desktop\Holic.brstm
[2011/02/09 11:33:36 | 000,304,128 | ---- | C] () -- C:\Users\Andrew\Desktop\HotelMarioEarRape.mp3
[2011/02/05 01:56:57 | 000,000,516 | ---- | C] () -- C:\Users\Andrew\Desktop\MediaCoder.lnk
[2011/02/03 21:48:57 | 013,176,832 | ---- | C] () -- C:\Windows\System32\BadAppleResource7.dll
[2011/02/03 21:48:56 | 022,561,792 | ---- | C] () -- C:\Windows\System32\BadAppleResource6.dll
[2011/02/03 21:48:54 | 024,824,320 | ---- | C] () -- C:\Windows\System32\BadAppleResource5.dll
[2011/02/03 21:48:50 | 033,039,360 | ---- | C] () -- C:\Windows\System32\BadAppleResource4.dll
[2011/02/03 21:48:48 | 030,380,544 | ---- | C] () -- C:\Windows\System32\BadAppleResource3.dll
[2011/02/03 21:48:46 | 030,617,600 | ---- | C] () -- C:\Windows\System32\BadAppleResource2.dll
[2011/02/03 21:48:45 | 021,436,928 | ---- | C] () -- C:\Windows\System32\BadAppleResource1.dll
[2011/02/03 21:48:45 | 000,043,520 | ---- | C] () -- C:\Windows\System32\BadApple!!.scr
[2010/07/20 20:26:24 | 000,003,849 | ---- | C] () -- C:\Windows\System32\SHORTCUT.INI
[2010/07/20 20:26:14 | 000,000,489 | ---- | C] () -- C:\Windows\System32\REMOTEDEVICE.INI
[2010/07/19 22:05:30 | 000,006,510 | ---- | C] () -- C:\Windows\System32\LOCALSERVICE.INI
[2010/07/19 22:05:28 | 000,000,101 | ---- | C] () -- C:\Windows\System32\LOCALDEVICE.INI
[2010/07/19 22:01:58 | 000,000,000 | ---- | C] () -- C:\Windows\System32\BSPRINT.INI
[2010/07/17 01:15:06 | 000,000,000 | ---- | C] () -- C:\Windows\BsMobileModel.ini
[2010/06/08 00:44:07 | 000,000,000 | ---- | C] () -- C:\Users\Andrew\AppData\Local\Glovanejobecebep.bin
[2010/06/08 00:44:06 | 000,000,120 | ---- | C] () -- C:\Users\Andrew\AppData\Local\Scupuwaq.dat
[2010/06/08 00:42:26 | 000,000,012 | ---- | C] () -- C:\Users\Andrew\AppData\Roaming\gklupx.dat
[2010/05/08 12:23:13 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2009/08/21 21:33:26 | 000,000,099 | ---- | C] () -- C:\Windows\WirelessFTP.INI
[2009/08/11 14:11:32 | 000,108,473 | ---- | C] () -- C:\Windows\Thumbplug TGA Uninstaller.exe
[2009/08/10 16:07:39 | 000,204,800 | ---- | C] () -- C:\Windows\System32\IVIresizeW7.dll
[2009/08/10 16:07:39 | 000,192,512 | ---- | C] () -- C:\Windows\System32\IVIresizeP6.dll
[2009/08/10 16:07:39 | 000,192,512 | ---- | C] () -- C:\Windows\System32\IVIresizeM6.dll
[2009/08/10 16:07:39 | 000,188,416 | ---- | C] () -- C:\Windows\System32\IVIresizePX.dll
[2009/08/10 16:07:38 | 000,200,704 | ---- | C] () -- C:\Windows\System32\IVIresizeA6.dll
[2009/08/10 16:07:38 | 000,020,480 | ---- | C] () -- C:\Windows\System32\IVIresize.dll
[2009/07/31 01:02:08 | 001,060,424 | ---- | C] () -- C:\Windows\System32\WdfCoInstaller01000.dll
[2009/07/31 00:45:16 | 000,168,448 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2009/07/31 00:45:16 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini
[2009/07/31 00:45:15 | 000,881,664 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2009/07/31 00:45:15 | 000,205,824 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2009/07/31 00:45:14 | 003,596,288 | ---- | C] () -- C:\Windows\System32\qt-dx331.dll
[2009/07/31 00:45:13 | 000,085,504 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2009/07/31 00:30:04 | 000,000,056 | -H-- | C] () -- C:\Windows\System32\ezsidmv.dat
[2009/07/30 23:11:05 | 000,172,544 | ---- | C] () -- C:\Users\Andrew\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/03/05 05:54:58 | 000,073,728 | ---- | C] () -- C:\Windows\System32\RtNicProp32.dll
[2009/02/27 16:04:46 | 000,001,055 | ---- | C] () -- C:\Windows\System32\bscs.ini
[2009/02/27 15:45:16 | 000,405,589 | ---- | C] () -- C:\Windows\System32\BsUI.dll
[2009/02/27 15:44:50 | 000,278,647 | ---- | C] () -- C:\Windows\System32\outlookAddin.dll
[2009/02/27 15:44:28 | 000,053,248 | ---- | C] () -- C:\Windows\System32\HtmPrintHelper.dll
[2009/02/27 15:44:10 | 000,622,693 | ---- | C] () -- C:\Windows\System32\BSShell.dll
[2009/02/27 15:41:38 | 000,098,403 | ---- | C] () -- C:\Windows\System32\Bs2Res.dll
[2009/02/27 15:41:02 | 000,122,976 | ---- | C] () -- C:\Windows\System32\BsMobileSDK.dll
[2009/02/27 15:40:50 | 000,028,672 | ---- | C] () -- C:\Windows\System32\BsMobileCSps.dll
[2009/01/08 14:19:55 | 000,000,000 | ---- | C] () -- C:\Windows\tosOBEX.INI
[2009/01/08 13:54:36 | 000,106,605 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2009/01/08 13:54:36 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2009/01/08 12:03:09 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2009/01/08 12:00:31 | 003,107,788 | ---- | C] () -- C:\Windows\System32\atiumdva.dat
[2008/12/07 11:44:54 | 000,030,088 | ---- | C] () -- C:\Windows\System32\drivers\btnetBus.sys
[2008/11/12 09:21:00 | 000,159,744 | ---- | C] () -- C:\Windows\System32\atitmmxx.dll
[2008/10/29 20:45:00 | 000,180,720 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2008/10/22 14:30:30 | 000,081,920 | ---- | C] () -- C:\Windows\System32\BsVistaCommon.dll
[2008/10/20 23:40:00 | 000,081,920 | ---- | C] () -- C:\Windows\System32\ATIODE.exe
[2008/10/20 23:40:00 | 000,045,056 | ---- | C] () -- C:\Windows\System32\ATIODCLI.exe
[2008/03/07 12:54:22 | 017,907,824 | ---- | C] () -- C:\Windows\System32\BsLangInDepRes.dll
[2007/12/21 19:46:32 | 000,118,784 | ---- | C] () -- C:\Windows\System32\TosBtAcc.dll
[2006/11/02 07:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006/11/02 07:47:37 | 001,728,512 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2006/11/02 07:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006/11/02 05:33:01 | 000,643,486 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2006/11/02 05:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2006/11/02 05:33:01 | 000,119,542 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2006/11/02 05:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2006/11/02 05:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2006/11/02 03:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2006/11/02 03:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2006/11/02 02:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006/11/02 02:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2005/07/23 00:30:18 | 000,065,536 | ---- | C] () -- C:\Windows\System32\TosCommAPI.dll

========== LOP Check ==========

[2011/01/15 22:32:16 | 000,000,000 | ---D | M] -- C:\Users\Andrew\AppData\Roaming\.minecraft
[2011/02/05 19:23:27 | 000,000,000 | ---D | M] -- C:\Users\Andrew\AppData\Roaming\BadApple!!
[2011/02/05 01:56:50 | 000,000,000 | ---D | M] -- C:\Users\Andrew\AppData\Roaming\Broad Intelligence
[2010/12/03 14:11:53 | 000,000,000 | ---D | M] -- C:\Users\Andrew\AppData\Roaming\DAEMON Tools Lite
[2010/06/13 14:44:00 | 000,000,000 | ---D | M] -- C:\Users\Andrew\AppData\Roaming\Facebook
[2010/07/18 12:50:50 | 000,000,000 | ---D | M] -- C:\Users\Andrew\AppData\Roaming\fretsonfire
[2009/08/25 09:27:49 | 000,000,000 | ---D | M] -- C:\Users\Andrew\AppData\Roaming\GeoVid
[2011/01/10 11:39:10 | 000,000,000 | ---D | M] -- C:\Users\Andrew\AppData\Roaming\gtk-2.0
[2009/08/11 20:24:14 | 000,000,000 | ---D | M] -- C:\Users\Andrew\AppData\Roaming\ImgBurn
[2009/08/10 16:08:35 | 000,000,000 | ---D | M] -- C:\Users\Andrew\AppData\Roaming\Intervideo
[2010/09/13 01:20:47 | 000,000,000 | ---D | M] -- C:\Users\Andrew\AppData\Roaming\Mp3tag
[2009/12/13 00:29:41 | 000,000,000 | ---D | M] -- C:\Users\Andrew\AppData\Roaming\NCH Swift Sound
[2011/02/27 01:40:14 | 000,000,000 | ---D | M] -- C:\Users\Andrew\AppData\Roaming\Saybad
[2010/03/13 02:51:35 | 000,000,000 | ---D | M] -- C:\Users\Andrew\AppData\Roaming\SpaceMonger
[2010/10/31 00:05:56 | 000,000,000 | ---D | M] -- C:\Users\Andrew\AppData\Roaming\TeamViewer
[2009/08/30 19:02:02 | 000,000,000 | ---D | M] -- C:\Users\Andrew\AppData\Roaming\Thinstall
[2010/09/26 21:17:28 | 000,000,000 | ---D | M] -- C:\Users\Andrew\AppData\Roaming\Toshiba
[2010/12/03 14:02:34 | 000,000,000 | ---D | M] -- C:\Users\Andrew\AppData\Roaming\Ulead Systems
[2010/11/30 17:00:05 | 000,000,000 | ---D | M] -- C:\Users\Andrew\AppData\Roaming\updatetool
[2011/02/04 01:27:20 | 000,000,000 | ---D | M] -- C:\Users\Andrew\AppData\Roaming\uTorrent
[2009/09/01 22:46:34 | 000,000,000 | ---D | M] -- C:\Users\Andrew\AppData\Roaming\Yuuguu
[2011/02/27 02:24:23 | 000,000,000 | ---D | M] -- C:\Users\Andrew\AppData\Roaming\Ziyfeq
[2011/03/02 10:05:46 | 000,032,588 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========

========== Custom Scans ==========

< %SYSTEMDRIVE%\*.* >
[2006/09/18 16:43:36 | 000,000,024 | ---- | M] () -- C:\autoexec.bat
[2010/05/30 09:37:27 | 000,000,000 | ---- | M] () -- C:\BASE
[2009/07/13 20:38:58 | 000,383,562 | RHS- | M] () -- C:\bootmgr
[2009/10/29 17:03:27 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK
[2011/03/02 10:02:24 | 000,016,018 | ---- | M] () -- C:\ComboFix.txt
[2006/09/18 16:43:37 | 000,000,010 | ---- | M] () -- C:\config.sys
[2009/10/29 13:17:49 | 000,203,836 | RHS- | M] () -- C:\grldr
[2010/11/09 07:52:08 | 055,862,979 | ---- | M] () -- C:\Halloween.rar
[2009/08/18 08:54:57 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2009/08/18 08:54:57 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2011/03/02 09:57:24 | 3533,967,360 | -HS- | M] () -- C:\pagefile.sys
[2010/05/30 09:38:54 | 000,000,000 | ---- | M] () -- C:\ROPE
[2010/06/11 23:49:47 | 000,057,016 | ---- | M] () -- C:\TDSSKiller.2.3.2.0_12.06.2010_00.49.38_log.txt
[2011/03/01 01:02:08 | 000,066,658 | ---- | M] () -- C:\TDSSKiller.2.4.18.0_01.03.2011_01.00.52_log.txt
[2007/10/28 14:06:28 | 000,765,440 | ---- | M] () -- C:\widApp.exe
[2009/10/29 13:17:52 | 000,000,000 | RHS- | M] () -- C:\winx.ld

< %systemroot%\Fonts\*.com >
[2006/11/02 07:37:12 | 000,026,040 | ---- | M] () -- C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2006/11/02 07:37:12 | 000,026,489 | ---- | M] () -- C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2006/11/02 07:37:12 | 000,029,779 | ---- | M] () -- C:\Windows\Fonts\GlobalSerif.CompositeFont
[2006/11/02 07:37:12 | 000,030,808 | ---- | M] () -- C:\Windows\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2006/09/18 16:37:34 | 000,000,065 | ---- | M] () -- C:\Windows\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2006/11/05 19:00:00 | 000,027,136 | ---- | M] (CANON INC.) -- C:\Windows\System32\spool\prtprocs\w32x86\CNMPD8O.DLL
[2006/11/05 19:00:00 | 000,069,632 | ---- | M] (CANON INC.) -- C:\Windows\System32\spool\prtprocs\w32x86\CNMPP8O.DLL
[2006/11/02 07:35:48 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spool\prtprocs\w32x86\jnwppr.dll
[2006/10/26 22:56:12 | 000,033,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spool\prtprocs\w32x86\msonpppr.dll

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >
[2011/02/23 10:04:21 | 000,040,648 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr
[3 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >
[2008/01/20 21:43:21 | 000,000,174 | -HS- | M] () -- C:\Program Files\desktop.ini

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >
[2008/01/20 22:14:18 | 016,846,848 | ---- | M] () -- C:\Windows\System32\config\COMPONENTS.SAV
[2008/01/20 22:14:08 | 000,106,496 | ---- | M] () -- C:\Windows\System32\config\DEFAULT.SAV
[2008/01/20 22:14:18 | 000,020,480 | ---- | M] () -- C:\Windows\System32\config\SECURITY.SAV
[2006/11/02 05:34:08 | 010,133,504 | ---- | M] () -- C:\Windows\System32\config\SOFTWARE.SAV
[2006/11/02 05:34:08 | 001,826,816 | ---- | M] () -- C:\Windows\System32\config\SYSTEM.SAV

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2009/08/17 21:35:25 | 000,000,286 | -HS- | M] () -- C:\Users\Andrew\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini

< %USERPROFILE%\Desktop\*.exe >
[2008/05/30 23:09:46 | 000,731,136 | ---- | M] () -- C:\Users\Andrew\Desktop\avenger.exe
[2011/03/02 09:42:28 | 004,278,549 | R--- | M] () -- C:\Users\Andrew\Desktop\ComboFix.exe
[2011/02/21 11:09:14 | 001,372,248 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\Andrew\Desktop\TDSSKiller.exe

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< %APPDATA%\Roaming\Microsoft\Windows\Recent\*.lnk /x >

< %PROGRAMFILES%\PC-Doctor\Downloads\*.* >

< %PROGRAMFILES%\Internet Explorer\*.tmp >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %USERPROFILE%\My Documents\*.exe >

< %USERPROFILE%\*.exe >

< %systemroot%\ADDINS\*.* >

< %systemroot%\assembly\*.bak2 >

< %systemroot%\Config\*.* >

< %systemroot%\REPAIR\*.bak2 >

< %systemroot%\SECURITY\Database\*.sdb /x >

< %systemroot%\SYSTEM\*.bak2 >

< %systemroot%\Web\*.bak2 >

< %systemroot%\Driver Cache\*.* >

< %PROGRAMFILES%\Mozilla Firefox\0*.exe >

< %ProgramFiles%\Microsoft Common\*.* >

< %ProgramFiles%\TinyProxy. >

< %USERPROFILE%\Favorites\*.url /x >
[2009/07/30 22:16:19 | 000,000,402 | -HS- | M] () -- C:\Users\Andrew\Favorites\desktop.ini
[2010/07/25 01:24:22 | 000,000,236 | ---- | M] () -- C:\Users\Andrew\Favorites\NCH Audio and Telephony Software.lnk

< %systemroot%\system32\*.bk >

< %systemroot%\*.te >

< %systemroot%\system32\system32\*.* >

< %ALLUSERSPROFILE%\*.dat /x >

< %systemroot%\system32\drivers\*.rmv >

< dir /b "%systemroot%\system32\*.exe" | find /i " " /c >

< dir /b "%systemroot%\*.exe" | find /i " " /c >
Thumbplug TGA Uninstaller.exe

< %PROGRAMFILES%\Microsoft\*.* >

< %systemroot%\System32\Wbem\proquota.exe >

< %PROGRAMFILES%\Mozilla Firefox\*.dat >

< %USERPROFILE%\Cookies\*.txt /x >

< %SystemRoot%\system32\fonts\*.* >

< %systemroot%\system32\winlog\*.* >

< %systemroot%\system32\Language\*.* >

< %systemroot%\system32\Settings\*.* >

< %systemroot%\system32\*.quo >

< %SYSTEMROOT%\AppPatch\*.exe >

< %SYSTEMROOT%\inf\*.exe >

< %SYSTEMROOT%\Installer\*.exe >

< %systemroot%\system32\config\*.bak2 >

< %systemroot%\system32\Computers\*.* >

< %SystemRoot%\system32\Sound\*.* >

< %SystemRoot%\system32\SpecialImg\*.* >

< %SystemRoot%\system32\code\*.* >

< %SystemRoot%\system32\draft\*.* >

< %SystemRoot%\system32\MSSSys\*.* >

< %ProgramFiles%\Javascript\*.* >

< %systemroot%\pchealth\helpctr\System\*.exe /s >

< %systemroot%\Web\*.exe >

< %systemroot%\system32\msn\*.* >

< %systemroot%\system32\*.tro >

< %AppData%\Microsoft\Installer\msupdates\*.* >

< %ProgramFiles%\Messenger\*.* >

< %systemroot%\system32\systhem32\*.* >

< %systemroot%\system\*.exe >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\ Auto Update\Results\Install|LastSuccessTime /rs >

broni · 2011/03/03

You're running extremely low on C drive free space:

Drive C: | 43.95 Gb Total Space | 1.73 Gb Free Space | 3.94% Space Free
Click to expand...

You need to start moving some stuff out.

==================================================================

1. Update your Java version here: http://www.java.com/en/download/installed.jsp

Note 1: UNCHECK any pre-checked toolbar and/or software offered with the Java update. The pre-checked toolbars/software are not part of the Java update.

Note 2: The Java Quick Starter (JQS.exe) adds a service to improve the initial startup time of Java applets and applications. If you don't want to run another extra service, go to Start > Control Panel > Java > Advanced > Miscellaneous and uncheck the box for Java Quick Starter. Click OK and restart your computer.

2. Now, we need to remove old Java version and its remnants...

Download JavaRa to your desktop and unzip it to its own folder

Run JavaRa.exe (Vista users! Right click on JavaRa.exe, click Run As Administrator), pick the language of your choice and click Select. Then click Remove Older Versions.

Accept any prompts.

=================================================================

Run OTL
Under the [color= "#0000FF"]Custom Scans/Fixes[/color] box at the bottom, paste in the following
Code:
:OTL
IE - HKLM\..\URLSearchHook: {1392b8d2-5c05-419f-a8f6-b9f15a596612} - Reg Error: Key error. File not found
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings:  "ProxyEnable" = 1
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings:  "ProxyOverride" = <local>
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings:  "ProxyServer" = http=127.0.0.1:33440
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings:  "ProxyEnable" = 1
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings:  "ProxyOverride" = <local>
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings:  "ProxyServer" = http=127.0.0.1:33440
O2 - BHO: (no name) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found
[2011/02/26 23:19:39 | 000,000,000 | ---D | C] -- C:\Users\Andrew\AppData\Roaming\Ziyfeq
[2011/02/26 23:19:39 | 000,000,000 | ---D | C] -- C:\Users\Andrew\AppData\Roaming\Saybad
[2010/06/08 00:44:07 | 000,000,000 | ---- | C] () -- C:\Users\Andrew\AppData\Local\Glovanejobecebep.bin
[2010/06/08 00:44:06 | 000,000,120 | ---- | C] () -- C:\Users\Andrew\AppData\Local\Scupuwaq.dat
[2010/06/08 00:42:26 | 000,000,012 | ---- | C] () -- C:\Users\Andrew\AppData\Roaming\gklupx.dat
[2009/07/31 00:30:04 | 000,000,056 | -H-- | C] () -- C:\Windows\System32\ezsidmv.dat
@Alternate Data Stream - 64 bytes -> C:\Users\Andrew\Documents\StraightToVideo.avi:TOC.WMV
@Alternate Data Stream - 64 bytes -> C:\Users\Andrew\Documents\DudeWheresMyCar.avi:TOC.WMV
@Alternate Data Stream - 64 bytes -> C:\Users\Andrew\Desktop\Fullmetal_Alchemist_Brotherhood_47_1280x720_HD.mkv: TOC.WMV
@Alternate Data Stream - 64 bytes -> C:\Users\Andrew\Desktop\[Eclipse]_Fullmetal_Alchemist_Brotherhood_-_46_(1280x720_h264)_[081D8777].mkv:TOC.WMV
@Alternate Data Stream - 64 bytes -> C:\Users\Andrew\Desktop\[Eclipse] Fullmetal Alchemist Brotherhood - 44 (XviD) [70DCC391].avi:TOC.WMV
@Alternate Data Stream - 487 bytes -> C:\ProgramData\TEMP:05EE1EEF


:Commands
[purity]
[emptytemp]
[emptyflash]
[Reboot]
Then click the [color= "#FF0000"]Run Fix[/color] button at the top

Let the program run unhindered, reboot the PC when it is done

You will get a log that shows the results of the fix. Please post it.
================================================================

Last scans....

1. Download Security Check from HERE, and save it to your Desktop.

Double-click SecurityCheck.exe

Follow the onscreen instructions inside of the black box.

A Notepad document should open automatically called checkup.txt; please post the contents of that document.

NOTE SecurityCheck may produce some false warning(s), so leave the results reading to me.

2. Download Temp File Cleaner (TFC)

Double click on TFC.exe to run the program.

Click on Start button to begin cleaning process.

TFC will close all running programs, and it may ask you to restart computer.

3. Please run a free online scan with the ESET Online Scanner

Disable your antivirus program

Tick the box next to YES, I accept the Terms of Use

Click Start

IMPORTANT! UN-check Remove found threats

Accept any security warnings from your browser.

Check Scan archives

Click Start

ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.

When the scan completes, push List of found threats

Click on Export to text file , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.

NOTE. If Eset won't find any threats, it won't produce any log.

Goldensunboy · 2011/03/03

Sorry about the report not being full, I'm posting the rest of the report now in this post. I had to wait until a moderator approved the first post for it to show up. I'll follow through with what you just outlined after I post this.

********************

========== Files - Unicode (All) ==========
[2011/02/03 21:48:59 | 004,381,812 | ---- | C] ()(C:\Windows\System32\????Bad Apple!! PV????.mp3) -- C:\Windows\System32\【東方】Bad Apple!!　ＰＶ【影絵】.mp3
[2010/12/13 23:30:53 | 002,438,062 | ---- | M] ()(C:\Users\Andrew\Desktop\Do You Like Waffles_ ?.flv) -- C:\Users\Andrew\Desktop\Do You Like Waffles_ ♫.flv
[2010/12/13 23:30:50 | 002,438,062 | ---- | C] ()(C:\Users\Andrew\Desktop\Do You Like Waffles_ ?.flv) -- C:\Users\Andrew\Desktop\Do You Like Waffles_ ♫.flv
[2010/12/09 20:08:16 | 000,725,038 | ---- | M] ()(C:\Users\Andrew\Documents\??????(contrast).xcf) -- C:\Users\Andrew\Documents\四コマまんが(contrast).xcf
[2010/12/09 15:33:43 | 000,725,038 | ---- | C] ()(C:\Users\Andrew\Documents\??????(contrast).xcf) -- C:\Users\Andrew\Documents\四コマまんが(contrast).xcf
[2010/12/09 15:01:11 | 008,644,729 | ---- | M] ()(C:\Users\Andrew\Documents\??????.xcf) -- C:\Users\Andrew\Documents\四コマまんが.xcf
[2010/12/09 14:34:28 | 008,644,729 | ---- | C] ()(C:\Users\Andrew\Documents\??????.xcf) -- C:\Users\Andrew\Documents\四コマまんが.xcf
[2010/07/23 02:34:06 | 004,381,812 | ---- | M] ()(C:\Windows\System32\????Bad Apple!! PV????.mp3) -- C:\Windows\System32\【東方】Bad Apple!!　ＰＶ【影絵】.mp3

========== Alternate Data Streams ==========

@Alternate Data Stream - 64 bytes -> C:\Users\Andrew\Documents\StraightToVideo.avi:TOC.WMV
@Alternate Data Stream - 64 bytes -> C:\Users\Andrew\Documents\DudeWheresMyCar.avi:TOC.WMV
@Alternate Data Stream - 64 bytes -> C:\Users\Andrew\Desktop\Fullmetal_Alchemist_Brotherhood_47_1280x720_HD.mkv:TOC.WMV
@Alternate Data Stream - 64 bytes -> C:\Users\Andrew\Desktop\[Eclipse]_Fullmetal_Alchemist_Brotherhood_-_46_(1280x720_h264)_[081D8777].mkv:TOC.WMV
@Alternate Data Stream - 64 bytes -> C:\Users\Andrew\Desktop\[Eclipse] Fullmetal Alchemist Brotherhood - 44 (XviD) [70DCC391].avi:TOC.WMV
@Alternate Data Stream - 487 bytes -> C:\ProgramData\TEMP:05EE1EEF

< End of report >

********************

OTL Extras logfile created on: 2/28/2011 9:25:19 PM - Run 1
OTL by OldTimer - Version 3.2.22.2 Folder = C:\Users\Andrew\Downloads
Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18943)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 58.00% Memory free
6.00 Gb Paging File | 5.00 Gb Available in Paging File | 78.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 43.95 Gb Total Space | 3.26 Gb Free Space | 7.41% Space Free | Partition Type: NTFS
Drive D: | 246.33 Gb Total Space | 115.83 Gb Free Space | 47.02% Space Free | Partition Type: NTFS
Drive F: | 3.92 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF

Computer Name: ANDREW-PC | User Name: Andrew | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1 ",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1 "
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [SpaceMonger] -- "C:\Program Files\SpaceMonger\SpaceMonger.exe" ; show-free-space false ; show-system-space false ; set-root "%l" (Sixty-Five Software, Inc.)
Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"UacDisableNotify" = 0
"InternetSettingsDisableNotify" = 0
"AutoUpdateDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0

========== Authorized Applications List ==========

========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{11C12BDD-413F-48B4-ACA5-36FA4D907134}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{1EC2FC88-736F-4DF1-B491-B81B6DD7B1DA}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe |
"{2C2E4411-5E57-4E9E-8A99-0128F41D1473}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{431275F3-0A8B-4435-9FCD-63E8D2EB756B}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{452337B5-5E9D-4D02-AFC3-F748E98CA937}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{5B88B4E0-F8E2-42FA-9172-4B71C1490447}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{75782788-26AB-417C-AD00-C2E3D26E2D9A}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{A1711C5A-721A-46C4-8E43-CC671212C21E}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{B1890BD0-0E7C-418E-BA3C-87E733A046D7}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{01F836EF-65CA-4676-9070-F54F0BEAAB5D}" = protocol=6 | dir=in | app=d:\steam\steamapps\common\left 4 dead\left4dead.exe |
"{027122EE-E6D0-4403-9030-3B707239C29C}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{02AC86E2-D809-4042-A217-EE8DC61EA2B8}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{05E51170-C39D-44BB-B962-E5718B8C5CFF}" = protocol=17 | dir=in | app=d:\world of warcraft\wow-3.2.0.10314-to-3.2.2.10482-enus-downloader.exe |
"{093F2816-7A61-4530-9E41-11D692E3297D}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{09903533-E205-4866-B480-CB35004A39AD}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{0B7ACBD3-6576-4E8F-92B4-08476B195569}" = protocol=17 | dir=in | app=c:\program files\teamviewer\version5\teamviewer.exe |
"{0D58EE22-96A7-45BA-9E1A-95BFEECB5543}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\groove.exe |
"{12B003E4-E231-4543-8189-C6E7E179B40E}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{1D93770F-6757-42C4-8232-1517FD376A98}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{20B0038E-1971-44F5-8601-28E5C785D80A}" = protocol=6 | dir=in | app=d:\world of warcraft\wow-3.2.0.10192-to-3.2.0.10314-enus-downloader.exe |
"{229E3EA1-7D2A-4746-B4D4-EEE9F7944DF2}" = protocol=17 | dir=in | app=c:\program files\teamviewer\version5\teamviewer_service.exe |
"{23D450FE-27E5-4EB1-8260-1B40220CD49E}" = protocol=6 | dir=in | app=d:\world of warcraft\wow-3.2.0.10314-to-3.2.2.10482-enus-downloader.exe |
"{26A42098-4701-4B6B-A609-DD35E23E267B}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\groove.exe |
"{334B704C-E39A-4C32-8E14-D4BA2F1BC068}" = protocol=17 | dir=in | app=c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe |
"{389ADFED-1B2D-45C6-A847-658616145C64}" = protocol=6 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{41D9773E-132B-40DA-A951-D1D46E452807}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{442219DA-1D33-42F7-9804-E256FC436A17}" = protocol=6 | dir=in | app=c:\program files\teamviewer\version5\teamviewer_service.exe |
"{4E2429D0-1884-4CBD-9331-EDFE752B37D2}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{541E47F9-2563-47E2-9696-B837F729E88F}" = protocol=6 | dir=in | app=d:\world of warcraft\wow-3.2.0-enus-downloader.exe |
"{5429256B-5BAC-49C9-9751-1E167BDC3885}" = protocol=6 | dir=in | app=c:\program files\teamviewer\version6\teamviewer.exe |
"{54D0FF2B-583F-4C13-AA69-F7E6E08E0D3D}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{574EC28A-EC5E-4DD6-9ED6-9E0D88AA8135}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{5E4399EE-8EB1-4775-9BC7-9E31D65474E5}" = protocol=6 | dir=in | app=d:\world of warcraft\wow-3.2.2.10482-to-3.2.2.10505-enus-downloader.exe |
"{5F37CDBE-61F4-4F19-9C7E-574A4CA979DE}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{62B20540-3AC0-4F71-8CF0-C7C67D59DAB8}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{64280408-DE78-45ED-B93F-0BA0BD3BA4C1}" = protocol=6 | dir=in | app=c:\program files\teamviewer\version6\teamviewer_service.exe |
"{64423B1A-AA06-4257-BFF1-6241B7D77EAF}" = protocol=17 | dir=in | app=d:\steam\steamapps\common\left 4 dead\left4dead.exe |
"{6E811F90-17C7-4E48-B224-0F600C90D109}" = protocol=17 | dir=in | app=d:\mediacoder\mediacoder.exe |
"{76D759D6-9B1C-42AD-80C7-E374EA85CE20}" = dir=in | app=c:\program files\skype\plugin manager\skypepm.exe |
"{79E58880-111C-474E-BB75-969CA825AEAE}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{7ED41CA8-93B3-494A-B226-D2C18E4F4582}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{84D13A2B-9148-4551-934A-B5BDA7F95EA2}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{859C4F97-0598-4C64-830D-D979767F2395}" = protocol=17 | dir=in | app=d:\world of warcraft\wow-3.2.2.10482-to-3.2.2.10505-enus-downloader.exe |
"{8EEEFFDF-4147-419C-A457-E1067417A739}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{9776BB1F-7E3D-4361-80AD-0E2DE5E9E49C}" = protocol=6 | dir=in | app=c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe |
"{99755297-145A-4989-83CB-F7D4E6934352}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{9FF465F4-5A19-4AA4-A59A-479C64D6BFAB}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{A38C6AC4-3819-4486-A7F0-37A9EC3F5712}" = protocol=17 | dir=in | app=c:\program files\ivt corporation\bluesoleil\bluesoleilcs.exe |
"{B21E608A-D8D9-44EF-8747-51A8ED36CF12}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{B984DE1B-836A-46DA-9222-5EE587DCE3A5}" = protocol=17 | dir=in | app=d:\world of warcraft\wow-3.2.0-enus-downloader.exe |
"{BEC985BD-1782-4DFB-AEC5-167D8D2C9855}" = protocol=6 | dir=in | app=c:\program files\teamviewer\version5\teamviewer.exe |
"{CB090040-953D-4CD9-814C-C20CA6C8CBD1}" = protocol=17 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{CD138466-A05D-4CB1-B45A-2E875A65E914}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{D6510658-5231-4DAE-B0EF-118DB5CED799}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{D768CB4A-A8DC-4A47-96EF-0AAD29A2BD34}" = protocol=17 | dir=in | app=c:\program files\teamviewer\version6\teamviewer.exe |
"{DD8ED63E-A068-4E20-B295-58E6580C97EA}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{E8A3B44D-7693-4F37-90D2-866371F14E1D}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{E8D7826D-E2B6-4A23-9176-A457B1C65D4E}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{E9E6954A-653D-4920-B34B-6D3A5DD464E6}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{F31A57FF-59D3-4BBC-8687-50F7B3334CD9}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{F3C126C5-344E-406E-80FF-9BCBD3B76AA8}" = protocol=6 | dir=in | app=c:\program files\ivt corporation\bluesoleil\bluesoleilcs.exe |
"{F3E21DAC-33D3-490E-B728-E50A5F0D3B2F}" = protocol=17 | dir=in | app=d:\world of warcraft\wow-3.2.0.10192-to-3.2.0.10314-enus-downloader.exe |
"{F68E081A-A0DA-4DFB-9C5C-37B18D33994B}" = protocol=17 | dir=in | app=c:\program files\teamviewer\version6\teamviewer_service.exe |
"{F7E0D4D8-C30D-48EC-AEE3-9B940DF72489}" = protocol=6 | dir=in | app=d:\mediacoder\mediacoder.exe |
"TCP Query User{089B18B4-A52E-467D-ABCB-D5C402FDC3AE}C:\program files\stepmania cvs\program\stepmania.exe" = protocol=6 | dir=in | app=c:\program files\stepmania cvs\program\stepmania.exe |
"TCP Query User{102396B6-5AAC-4214-8BED-ACB8219D04A3}D:\java\jre6\bin\java.exe" = protocol=6 | dir=in | app=d:\java\jre6\bin\java.exe |
"TCP Query User{1860705C-0EC4-4378-BE1A-C19888864595}G:\programs\piu pro pc\sum goodies\smpro.exe" = protocol=6 | dir=in | app=g:\programs\piu pro pc\sum goodies\smpro.exe |
"TCP Query User{18BCA281-AB29-41DC-B3AC-A0177D008ECC}H:\programs\piu pro pc\sum goodies\smpro.exe" = protocol=6 | dir=in | app=h:\programs\piu pro pc\sum goodies\smpro.exe |
"TCP Query User{1A41302B-D719-484D-BD14-242DB0015E70}D:\usb-backup_12-26-09\programs\in the groove 2\program\in the groove 2.exe" = protocol=6 | dir=in | app=d:\usb-backup_12-26-09\programs\in the groove 2\program\in the groove 2.exe |
"TCP Query User{229286B8-BBD8-4A38-815E-2FD588FCDB9C}D:\world of warcraft\launcher.exe" = protocol=6 | dir=in | app=d:\world of warcraft\launcher.exe |
"TCP Query User{3B1F2E6B-9B75-444F-A0E1-205D83C5C47D}D:\nsmbw_hacking\riifs\riifs.exe" = protocol=6 | dir=in | app=d:\nsmbw_hacking\riifs\riifs.exe |
"TCP Query User{3C8738DA-F857-43F5-ACF3-BF239C0AD873}C:2\programs\piu pro pc\sum goodies\smpro.exe" = protocol=6 | dir=in | app=c:2\programs\piu pro pc\sum goodies\smpro.exe |
"TCP Query User{3D4DAB7A-FC9E-4ED1-B932-7D8779A90ED8}G:\programs\piu pro pc\sum goodies\smpro.exe" = protocol=6 | dir=in | app=g:\programs\piu pro pc\sum goodies\smpro.exe |
"TCP Query User{570A30B5-AE63-4CAD-B59C-1BEDCCB02C20}E:\programs\in the groove 2\program\in the groove 2.exe" = protocol=6 | dir=in | app=e:\programs\in the groove 2\program\in the groove 2.exe |
"TCP Query User{604890BE-B6DB-42C3-A4FA-0AAEA48993D7}C:\program files\stepmania cvs\program\stepmania.exe" = protocol=6 | dir=in | app=c:\program files\stepmania cvs\program\stepmania.exe |
"TCP Query User{6230EE3D-B4E7-4E10-8DAF-7FFF66EA2781}H:\programs\in the groove 2\program\in the groove 2.exe" = protocol=6 | dir=in | app=h:\programs\in the groove 2\program\in the groove 2.exe |
"TCP Query User{788251C5-EC0E-4FF1-877B-44FFC96A54E2}C:1\programs\in the groove 2\program\in the groove 2.exe" = protocol=6 | dir=in | app=c:1\programs\in the groove 2\program\in the groove 2.exe |
"TCP Query User{8168D7DC-D398-44A1-A046-941B71B4B1E2}C:\program files\veoh networks\veohwebplayer\veohwebplayer.exe" = protocol=6 | dir=in | app=c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe |
"TCP Query User{87C761F7-A7A5-460A-B0CD-46C295F9D8E1}C:2\programs\in the groove 2\program\in the groove 2.exe" = protocol=6 | dir=in | app=c:2\programs\in the groove 2\program\in the groove 2.exe |
"TCP Query User{905EC2E5-0197-49AC-B1A0-CA4EAA0F50FC}C:\program files\java\jdk1.6.0_14\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jdk1.6.0_14\bin\java.exe |
"TCP Query User{B72CEF88-A8F4-46E5-A235-C10663421CD5}C:0\programs\in the groove 2\program\in the groove 2.exe" = protocol=6 | dir=in | app=c:0\programs\in the groove 2\program\in the groove 2.exe |
"TCP Query User{BDB5AE99-EBF9-498C-AE8B-4BCACFCC66E1}D:\usb\programs\in the groove 2\program\in the groove 2.exe" = protocol=6 | dir=in | app=d:\usb\programs\in the groove 2\program\in the groove 2.exe |
"TCP Query User{C6411B2F-E8B3-45C8-9A3E-77755BCC8B1B}G:\programs\in the groove 2\program\in the groove 2.exe" = protocol=6 | dir=in | app=g:\programs\in the groove 2\program\in the groove 2.exe |
"TCP Query User{CA15EC2D-941E-41D0-8D4B-A510E5C7A424}E:\programs\piu pro pc\sum goodies\smpro.exe" = protocol=6 | dir=in | app=e:\programs\piu pro pc\sum goodies\smpro.exe |
"TCP Query User{CFF77DD6-DA01-44B2-8201-7F6C602A0687}D:\usb\programs\piu pro pc\sum goodies\smpro.exe" = protocol=6 | dir=in | app=d:\usb\programs\piu pro pc\sum goodies\smpro.exe |
"TCP Query User{EF044BBC-677B-4ED4-9568-BF9343B30925}G:\programs\in the groove 2\program\in the groove 2.exe" = protocol=6 | dir=in | app=g:\programs\in the groove 2\program\in the groove 2.exe |
"TCP Query User{FF8AA591-4059-4DD2-8ACA-336A10B5D4C2}D:\nsmbw_hacking\riifs.exe" = protocol=6 | dir=in | app=d:\nsmbw_hacking\riifs.exe |
"UDP Query User{01A97E37-1037-45F2-A721-E9E9B982A5E4}D:\nsmbw_hacking\riifs.exe" = protocol=17 | dir=in | app=d:\nsmbw_hacking\riifs.exe |
"UDP Query User{092AB640-3BE5-4A2F-B1EB-56CC70BAB930}D:\usb\programs\piu pro pc\sum goodies\smpro.exe" = protocol=17 | dir=in | app=d:\usb\programs\piu pro pc\sum goodies\smpro.exe |
"UDP Query User{0BC0109E-F026-4100-BEC5-47CA46995AD8}D:\usb\programs\in the groove 2\program\in the groove 2.exe" = protocol=17 | dir=in | app=d:\usb\programs\in the groove 2\program\in the groove 2.exe |
"UDP Query User{16574871-B643-4AE9-B5A1-2E6EC09AAEAD}C:2\programs\in the groove 2\program\in the groove 2.exe" = protocol=17 | dir=in | app=c:2\programs\in the groove 2\program\in the groove 2.exe |
"UDP Query User{1B37A0A4-EFD6-489D-9DD9-D924A67010A6}D:\usb-backup_12-26-09\programs\in the groove 2\program\in the groove 2.exe" = protocol=17 | dir=in | app=d:\usb-backup_12-26-09\programs\in the groove 2\program\in the groove 2.exe |
"UDP Query User{1FEEB762-3094-437C-B8CD-9D7CA416683A}C:2\programs\piu pro pc\sum goodies\smpro.exe" = protocol=17 | dir=in | app=c:2\programs\piu pro pc\sum goodies\smpro.exe |
"UDP Query User{2EDB4C82-D3D7-46AC-B7B5-A430779597B0}G:\programs\piu pro pc\sum goodies\smpro.exe" = protocol=17 | dir=in | app=g:\programs\piu pro pc\sum goodies\smpro.exe |
"UDP Query User{3A8D430E-8DF4-4326-BE43-0C575FD60456}H:\programs\in the groove 2\program\in the groove 2.exe" = protocol=17 | dir=in | app=h:\programs\in the groove 2\program\in the groove 2.exe |
"UDP Query User{43A1E052-7367-40F4-9047-1D1AC9C15E1F}C:1\programs\in the groove 2\program\in the groove 2.exe" = protocol=17 | dir=in | app=c:1\programs\in the groove 2\program\in the groove 2.exe |
"UDP Query User{45982A15-D912-41ED-8DB9-B62F3174DC63}D:\java\jre6\bin\java.exe" = protocol=17 | dir=in | app=d:\java\jre6\bin\java.exe |
"UDP Query User{482C617E-A1BA-44B9-B77F-540C2B2C4893}C:\program files\stepmania cvs\program\stepmania.exe" = protocol=17 | dir=in | app=c:\program files\stepmania cvs\program\stepmania.exe |
"UDP Query User{563DE430-7A52-4422-8D29-4FFF5E53F929}G:\programs\piu pro pc\sum goodies\smpro.exe" = protocol=17 | dir=in | app=g:\programs\piu pro pc\sum goodies\smpro.exe |
"UDP Query User{673C8E4E-21DF-4D54-A855-50AB8CFB09EA}C:0\programs\in the groove 2\program\in the groove 2.exe" = protocol=17 | dir=in | app=c:0\programs\in the groove 2\program\in the groove 2.exe |
"UDP Query User{89DE7B39-77FC-4301-847C-346EFDDD7089}G:\programs\in the groove 2\program\in the groove 2.exe" = protocol=17 | dir=in | app=g:\programs\in the groove 2\program\in the groove 2.exe |
"UDP Query User{8A7E7266-2CB0-48C4-8FB0-C1B41286FDE4}H:\programs\piu pro pc\sum goodies\smpro.exe" = protocol=17 | dir=in | app=h:\programs\piu pro pc\sum goodies\smpro.exe |
"UDP Query User{97CA934F-70B8-41AE-8E48-FF43D6C15642}C:\program files\java\jdk1.6.0_14\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jdk1.6.0_14\bin\java.exe |
"UDP Query User{9EFD32D7-C84D-4CD1-B66C-AB4FEFEF2A03}C:\program files\stepmania cvs\program\stepmania.exe" = protocol=17 | dir=in | app=c:\program files\stepmania cvs\program\stepmania.exe |
"UDP Query User{CD08AC54-ED90-4838-91AF-1A9F7A7AB5A2}E:\programs\in the groove 2\program\in the groove 2.exe" = protocol=17 | dir=in | app=e:\programs\in the groove 2\program\in the groove 2.exe |
"UDP Query User{E7120E2D-36B8-4546-9174-573595C63D97}C:\program files\veoh networks\veohwebplayer\veohwebplayer.exe" = protocol=17 | dir=in | app=c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe |
"UDP Query User{F36CFCF9-2A74-411F-ADDD-F8A58B6AE4F9}D:\world of warcraft\launcher.exe" = protocol=17 | dir=in | app=d:\world of warcraft\launcher.exe |
"UDP Query User{F57B05BF-A0DF-474B-917B-BBB0AD61BCF0}E:\programs\piu pro pc\sum goodies\smpro.exe" = protocol=17 | dir=in | app=e:\programs\piu pro pc\sum goodies\smpro.exe |
"UDP Query User{F84C6A8E-9AC3-4201-B9B3-5D1300C68C20}D:\nsmbw_hacking\riifs\riifs.exe" = protocol=17 | dir=in | app=d:\nsmbw_hacking\riifs\riifs.exe |
"UDP Query User{F9F94079-623F-43B0-8BAC-EC21B3E4617A}G:\programs\in the groove 2\program\in the groove 2.exe" = protocol=17 | dir=in | app=g:\programs\in the groove 2\program\in the groove 2.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0046FA01-C5B9-4985-BACB-398DC480FC05}" = Adobe Photoshop CS3
"{00DA766F-8EE4-3139-D489-80AC76DE14CF}" = Catalyst Control Center Graphics Light
"{00E1266C-2124-4C02-F37B-C9028D59E6FD}" = Catalyst Control Center Graphics Previews Vista
"{015C5B35-B678-451C-9AEE-821E8D69621C}_is1" = PeerBlock 1.0+ (r404)
"{044F9133-B8D7-4d11-BF39-803FA20F5C8B}" = Microsoft Windows SDK for Visual Studio 2008 SP1 Express Tools for Win32
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{04AF207D-9A77-465A-8B76-991F6AB66245}" = Adobe Help Viewer CS3
"{07690F1C-04B1-4060-9691-6748ED1826B9}" = MSI Software Install
"{08B32819-6EEF-4057-AEDA-5AB681A36A23}" = Adobe Bridge Start Meeting
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0A28B2D3-230A-1C46-360E-8EB95AFF739F}" = Catalyst Control Center Localization Spanish
"{0C19D563-5F25-4621-BF10-01F741BD283F}" = Microsoft SQL Server Compact 3.5 SP1 Design Tools English
"{0EE891C8-6971-F1B8-09FF-D7AD653E7E35}" = Catalyst Control Center Graphics Full New
"{0F667427-AD37-4089-A4A2-15AF5E44CACD}" = O2Micro Flash Memory Card Reader Driver (x86)
"{112C23F2-C036-4D40-BED4-0CB47BF5555C}" = Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 ENU
"{14DD7530-CCD2-3798-B37D-3839ED6A441C}" = Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools
"{15331E68-A681-2D3C-DD30-CC9CBDFE5132}" = Catalyst Control Center Localization Turkish
"{15348C35-1940-7B1D-54FF-B85321488346}" = Catalyst Control Center Graphics Full Existing
"{17E8A7E0-1E72-6139-CDA9-139F5EDD6C61}" = Catalyst Control Center Localization French
"{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}" = Adobe WinSoft Linguistics Plugin
"{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}" = YouTube Downloader 2.6.5
"{249D41B4-DC98-2EEF-5B9A-CFA0CB1CA3A7}" = CCC Help Portuguese
"{24aab420-4e30-4496-9739-3e216f3de6ae}" = Python 2.6.2
"{25976E4A-42F1-43B7-854B-301C646E6F2A}_is1" = MyMenu 1.2
"{26A24AE4-039D-4CA4-87B4-2F83216014FF}" = Java(TM) 6 Update 14
"{2892E1B7-E24D-4CCB-B8A7-B63D4B66F89F}" = BurnRecovery
"{29E5EA97-5F74-4A57-B8B2-D4F169117183}" = Adobe Stock Photos CS3
"{2A2F3AE8-246A-4252-BB26-1BEB45627074}" = Microsoft SQL Server System CLR Types
"{32A3A4F4-B792-11D6-A78A-00B0D0160140}" = Java(TM) SE Development Kit 6 Update 14
"{32AE58D5-49F5-45A6-B697-259EE62B015C}_is1" = WADder 2.7.3
"{36125B10-F7CF-EE74-5CFA-304FC830CF33}" = CCC Help Korean
"{3A9FC03D-C685-4831-94CF-4EDFD3749497}" = Microsoft SQL Server Compact 3.5 SP2 ENU
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3ED1F87A-08D9-F584-F963-012AC5636562}" = Catalyst Control Center Localization Russian
"{4286E640-B5FB-11DF-AC4B-005056C00008}" = Google Earth
"{47C39E4A-28F2-33B1-B9B7-97F24E52D917}" = Microsoft Help Viewer 1.0
"{48FE73F3-4C3A-4871-BCD0-A7726A08BD64}" = Hex Workshop v6
"{4AEEF5AF-4630-0090-CCB8-1D969A9C8A8D}" = CCC Help Polish
"{4E968D9C-21A7-4915-B698-F7AEB913541D}" = Microsoft SQL Server 2008 R2 Management Objects
"{51846830-E7B2-4218-8968-B77F0FF475B8}" = Adobe Color EU Extra Settings
"{54793AA1-5001-42F4-ABB6-C364617C6078}" = Adobe Linguistics CS3
"{567FDCFB-97B5-229B-92B7-987F24775603}" = CCC Help French
"{59F24743-2EA1-3A45-B8C2-6E0E1E078FA8}" = Microsoft Visual C# 2010 Express - ENU
"{5aa47dba-b584-4d47-a626-76e53fc2987d}" = JavaFX(TM) 1.2 SDK
"{5BE1E709-30E4-3D6D-A708-96CE8D5E5E8D}" = Microsoft Windows SDK for Visual Studio 2008 SP1 Express Tools for .NET Framework - enu
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{6445F9DF-430E-F9F7-9DAF-EB5E9CE6E8F6}" = Catalyst Control Center Localization Chinese Traditional
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6ABE0BEE-D572-4FE8-B434-9E72A289431B}" = Adobe Fonts All
"{6D52C408-B09A-4520-9B18-475B81D393F1}" = Microsoft Works
"{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}" = Adobe Asset Services CS3
"{70E8EBD5-78C9-4258-B20A-5098CCA000F0}" = Dolby Control Center
"{802771A9-A856-4A41-ACF7-1450E523C923}" = Adobe XMP Panels CS3
"{8049B054-E5BB-F036-B35D-246D650B8A36}" = Catalyst Control Center Core Implementation
"{83258E90-1F76-4E13-9F60-A0F8ED41E76F}" = PC Connectivity Solution
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{842FAF7C-50EF-4463-9B8F-6222E1384D7D}" = Microsoft Windows SDK for Visual Studio 2008 Headers and Libraries
"{84B46A4E-1A79-5C45-8DEB-C7B8C9F460D5}" = Catalyst Control Center Localization German
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8169 8168 8101E 8102E Ethernet Driver
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}" = Adobe Device Central CS3
"{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}" = Adobe Type Support
"{8FDD39D2-3721-EA61-E942-72E068E2E41A}" = Catalyst Control Center Localization Portuguese
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{926CC8AE-8414-43DF-8EB4-CF26D9C3C663}" =
"{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2007
"{90120000-0114-0409-0000-0000000FF1CE}" = Microsoft Office Groove Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90176341-0A8B-4CCC-A78D-F862228A6B95}" = Adobe Anchor Service CS3
"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{926C96FB-9D0A-4504-8000-C6D3A4A3118E}" = Java DB 10.4.2.1
"{934C8784-8C1A-62B6-6095-45CE962270D3}" = Catalyst Control Center Localization Korean
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{95655ED4-7CA5-46DF-907F-7144877A32E5}" = Adobe Color NA Recommended Settings
"{96B93407-6812-D527-9FD9-7A145A01C9FE}" = Catalyst Control Center InstallProxy
"{9A8A188A-9A7E-1B3F-1684-49A988520C62}" = CCC Help Spanish
"{9C8AA437-5D39-A950-1A7D-8261E2EFB59C}" = CCC Help German
"{9C9824D9-9000-4373-A6A5-D0E5D4831394}" = Adobe Bridge CS3
"{9D621E41-4BCE-F236-B3A4-3CD32D245970}" = CCC Help Chinese Standard
"{A29C6B24-A1D7-2EAA-DF27-580C3C36F8EA}" = CCC Help Hungarian
"{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}" = Adobe CMaps
"{A2D81E70-2A98-4A08-A628-94388B063C5E}" = Adobe Color - Photoshop Specific
"{A3BE3F1E-2472-4211-8735-E8239BE49D9F}" = Ulead Burn.Now 4.5
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9310EB3-A6C1-4CA9-6531-A4F599B9F52F}" = ccc-utility
"{AA8D37A4-DCB2-D06A-4558-0C08463FE24F}" = Catalyst Control Center Localization Chinese Standard
"{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}" = PDF Settings
"{AC76BA86-7AD7-1033-7B44-A81200000003}" = Adobe Reader 8.1.2
"{AF4C64E6-7B2D-E3C3-4A7B-4EEA4916A7D6}" = ccc-core-static
"{B15405CC-7F5A-E6AB-536F-8C41F2774964}" = Catalyst Control Center Localization Italian
"{B293C0F5-55F4-8655-D165-7A11BBA70424}" = CCC Help Turkish
"{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}" = Adobe Camera Raw 4.0
"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Plus Web Player
"{B8436ADC-214C-9914-0201-C0DE4CFFE153}" = CCC Help Italian
"{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}" = Adobe Default Language CS3
"{C0A871F9-D580-4404-9A69-A02CF3078C87}" = Bluesoleil 6.4.249.0
"{C2D69781-F392-4118-A5A7-C7E9C38DBFC2}" = Adobe ExtendScript Toolkit 2
"{C3F19A5F-35A8-4FDB-A6ED-0F4CE398DA48}" = Nokia Connectivity Cable Driver
"{C6CF32A6-D42F-02AE-EDC7-67DBCA575B74}" = CCC Help English
"{C78EAC6F-7A73-452E-8134-DBB2165C5A68}" = QuickTime
"{C7C434EA-62F3-2B8F-6B47-91BA1F868381}" = Catalyst Control Center Localization Czech
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}" = Bluetooth Stack for Windows by Toshiba
"{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}" = Microsoft .NET Framework 4 Multi-Targeting Pack
"{D0DFF92A-492E-4C40-B862-A74A173C25C5}" = Adobe Version Cue CS3 Client
"{D1A2171E-5392-B36E-F13C-95DE1AA2C451}" = CCC Help Czech
"{D1BB4446-AE9C-4256-9A7F-4D46604D2462}" = Adobe Setup
"{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}" = Adobe PDF Library Files
"{D33FEB66-A027-B1A4-A67C-EC4D28D02868}" = Catalyst Control Center Localization Polish
"{D8087907-E255-3A41-A46D-D0F798709C71}" = Microsoft Visual C++ 2008 Express Edition with SP1 - ENU
"{D86CEB96-6B1E-4214-ACEA-83EBEFCA1212}_is1" = OGG MP3 Converter v3.4 build 839
"{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9}" = Adobe Color Common Settings
"{DBAD81CE-EB3E-BF85-D934-58FB198BDCCA}" = CCC Help Russian
"{DD622B1D-A78E-3FE8-9C8C-246F5764B0D0}" = Microsoft Visual Basic 2008 Express Edition with SP1 - ENU
"{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}" = Adobe Color JA Extra Settings
"{E30B6BE8-2CB2-0D1D-6CF7-FB713B26580E}" = CCC Help Chinese Traditional
"{E482D953-FE61-3E92-5593-B12B2558DE65}" = Catalyst Control Center Localization Hungarian
"{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}" = Microsoft Office Suite Activation Assistant
"{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}" = Skype™ 5.1
"{E69AE897-9E0B-485C-8552-7841F48D42D8}" = Adobe Update Manager CS3
"{E86906FF-C63D-4EAF-ACE7-5F8D55FBEA9A}" = Finger-sensing Pad Driver
"{ED784556-66AA-3F17-9B58-7246ACB5C7E4}" = Microsoft Visual Basic 2010 Express - ENU
"{ED9C5D25-55DF-48D8-9328-2AC0D75DE5D8}" = System Control Manager
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F54933B3-7524-86C2-62E2-CD79147EF515}" = ATI Catalyst Install Manager
"{F7514465-E5F3-48E9-A952-327DAEF33DE6}" = InterVideo Home Theater
"{FDA0209F-12CA-2E9E-33FB-EA0B8F61AA69}" = Skins
"504244733D18C8F63FF584AEB290E3904E791693" = Windows Driver Package - Nokia pccsmcfd (08/22/2008 7.0.0.0)
"5D38134BF8A10D640B30E6B014EECDBC5F881E3D" = Windows Driver Package - ENE (enecir) HIDClass (04/29/2008 2.5.0.0)
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe_2ac78060bc5856b0c1cf873bb919b58" = Adobe Photoshop CS3
"Android SDK Tools" = Android SDK Tools
"A-PDF Restrictions Remover_is1" = A-PDF Restrictions Remover 1.6
"asterisk key" = Asterisk Key 10.0
"Audacity_is1" = Audacity 1.2.6
"AVIedit 3.38" = AVIedit 3.38
"CamStudio" = CamStudio
"Chipamp" = Chipamp
"DAEMON Tools Toolbar" = DAEMON Tools Toolbar
"Derive 6" = Derive 6
"devkitProUpdater" = devkitProUpdater 1.5.0
"DVD Decrypter" = DVD Decrypter (Remove Only)
"Easy Graphic Converter_is1" = Easy Graphic Converter 3.0
"ENTERPRISE" = Microsoft Office Enterprise 2007
"Free Video to MP3 Converter_is1" = Free Video to MP3 Converter version 4.0
"Free Window Registry Repair" = Free Window Registry Repair
"Free YouTube Downloader Converter" = Free YouTube Downloader Converter
"Freecorder Toolbar" = Freecorder Toolbar
"Freecorder Toolbar3.03" = Freecorder Toolbar 3.03 Application
"Frets on Fire" = Frets On Fire
"FruityLoops v3.4" = FruityLoops v3.4
"GIF Animator" = Microsoft GIF Animator
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"ImgBurn" = ImgBurn
"InstallShield_{A3BE3F1E-2472-4211-8735-E8239BE49D9F}" = Ulead Burn.Now 4.5 SE
"KLiteCodecPack_is1" = K-Lite Codec Pack 5.0.0 (Full)
"lcc-win32 (base system)_is1" = lcc-win32 version 3.2 (base system)
"LogonStudio" = LogonStudio
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"MediaCoder" = MediaCoder 2011-RC2
"MediaCoder 3GP Edition" = MediaCoder 3GP Edition 0.6.0
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft Help Viewer 1.0" = Microsoft Help Viewer 1.0
"Microsoft Visual Basic 2008 Express Edition with SP1 - ENU" = Microsoft Visual Basic 2008 Express Edition with SP1 - ENU
"Microsoft Visual Basic 2010 Express - ENU" = Microsoft Visual Basic 2010 Express - ENU
"Microsoft Visual C# 2010 Express - ENU" = Microsoft Visual C# 2010 Express - ENU
"Microsoft Visual C++ 2008 Express Edition with SP1 - ENU" = Microsoft Visual C++ 2008 Express Edition with SP1 - ENU
"MixMeister BPM Analyzer_is1" = MixMeister BPM Analyzer 1.0
"Mozilla Firefox (3.6.13)" = Mozilla Firefox (3.6.13)
"Mp3tag" = Mp3tag v2.47b
"nbi-glassfish-mod-sun-3.0.0.28.20090708" = Sun GlassFish Enterprise Server v3 Prelude
"nbi-nb-base-6.7.1.0.0" = NetBeans IDE 6.7.1
"nbi-sjsas-2.1.60.20090309.0" = Sun GlassFish Enterprise Server v2.1
"OpenITG" = OpenITG
"OSS Video Decompiler_is1" = OSS Video Decompiler 5.5.0.4
"PdaNet_is1" = PdaNet for Android 2.42
"PSS_Plex_1.0.0001" = PSS Plex 1.1.0
"Red Eye Remover_is1" = Red Eye Remover 2.0
"SMSERIAL" = Motorola SM56 Data Fax Modem
"SpaceMonger" = SpaceMonger 2.1.1
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"TeamViewer 5" = TeamViewer 5
"TeamViewer 6" = TeamViewer 6
"The File Splitter 1.31_is1" = The File Splitter 1.31
"Thumbplug TGA" = Thumbplug TGA
"Uninstall_is1" = Uninstall 1.0.0.1
"uTorrent" = µTorrent
"VidSplitter_is1" = VidSplitter
"WavePad" = WavePad Sound Editor
"Winamp" = Winamp
"WinGimp-2.0_is1" = GIMP 2.6.8
"WinRAR archiver" = WinRAR archiver
"World of Warcraft" = World of Warcraft
"Yuuguu" = Yuuguu

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"e08a25ef4f6f2e1b" = RLECompression
"Facebook Plug-In" = Facebook Plug-In
"Google Chrome" = Google Chrome
"Gravity Force Lab" = Gravity Force Lab
"SwiftKit" = SwiftKit
"Winamp Detect" = Winamp Detector Plug-in

========== Last 10 Event Log Errors ==========

Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt!

< End of report >

broni · 2011/03/03

Ok ...

Goldensunboy · 2011/03/06

I accidentally closed the text file that popped up after I ran OTL, and couldn't find it after the fact; sorry, but the initial scan was lost. I ran it again and saved the log from the second run.

I have the reports from the other two also. ESET found several programs that are infected that I no longer necessarily need, would it be best if I deleted them? The listed files on the D drive were most likely infected a little over 2 years ago, in the summer on an older laptop when I had an invasive virus that was infecting exe files and word documents.

********************

All processes killed
========== OTL ==========
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{1392b8d2-5c05-419f-a8f6-b9f15a596612} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1392b8d2-5c05-419f-a8f6-b9f15a596612}\ not found.
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyOverride| /E : value set successfully!
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer| /E : value set successfully!
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyOverride| /E : value set successfully!
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}\ not found.
Starting removal of ActiveX control {E2883E8F-472F-4FB0-9522-AC9BF37916A7}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{AEB6717E-7E19-11d0-97EE-00C04FD91972} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AEB6717E-7E19-11d0-97EE-00C04FD91972}\ not found.
Folder C:\Users\Andrew\AppData\Roaming\Ziyfeq\ not found.
Folder C:\Users\Andrew\AppData\Roaming\Saybad\ not found.
File C:\Users\Andrew\AppData\Local\Glovanejobecebep.bin not found.
File C:\Users\Andrew\AppData\Local\Scupuwaq.dat not found.
File C:\Users\Andrew\AppData\Roaming\gklupx.dat not found.
C:\Windows\System32\ezsidmv.dat moved successfully.
Unable to delete ADS C:\Users\Andrew\Documents\StraightToVideo.avi:TOC.WMV .
Unable to delete ADS C:\Users\Andrew\Documents\DudeWheresMyCar.avi:TOC.WMV .
Unable to delete ADS C:\Users\Andrew\Desktop\Fullmetal_Alchemist_Brotherhood_47_1280x720_HD.mkv: TOC.WMV .
Unable to delete ADS C:\Users\Andrew\Desktop\[Eclipse]_Fullmetal_Alchemist_Brotherhood_-_46_(1280x720_h264)_[081D8777].mkv:TOC.WMV .
Unable to delete ADS C:\Users\Andrew\Desktop\[Eclipse] Fullmetal Alchemist Brotherhood - 44 (XviD) [70DCC391].avi:TOC.WMV .
Unable to delete ADS C:\ProgramData\TEMP:05EE1EEF .
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Andrew
->Temp folder emptied: 101474 bytes
->Temporary Internet Files folder emptied: 1719497 bytes
->Java cache emptied: 43894 bytes
->FireFox cache emptied: 91818524 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 1282 bytes

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Public
->Temp folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 341 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 89.00 mb

[EMPTYFLASH]

User: All Users

User: Andrew
->Flash cache emptied: 0 bytes

User: Default
->Flash cache emptied: 0 bytes

User: Default User
->Flash cache emptied: 0 bytes

User: Public

Total Flash Files Cleaned = 0.00 mb

OTL by OldTimer - Version 3.2.22.2 log created on 03062011_225104

Files\Folders moved on Reboot...
File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...

********************

Results of screen317's Security Check version 0.99.7
Windows Vista Service Pack 1 (UAC is disabled!)
Out of date service pack!!
Internet Explorer 8
``````````````````````````````
Antivirus/Firewall Check:
Windows Firewall Disabled!
avast! Free Antivirus
WMI entry may not exist for antivirus; attempting automatic update.
```````````````````````````````
Anti-malware/Other Utilities Check:
Malwarebytes' Anti-Malware
Java(TM) 6 Update 24
Java(TM) SE Development Kit 6 Update 14
JavaFX(TM) 1.2 SDK
Java DB 10.4.2.1
Out of date Java installed!
Adobe Flash Player 10.2.152.32
Adobe Reader 8.1.2
Out of date Adobe Reader installed!
Mozilla Firefox (3.6.15)
````````````````````````````````
Process Check:
objlist.exe by Laurent
AVAST Software Avast AvastSvc.exe
AVAST Software Avast AvastUI.exe
``````````End of Log````````````

********************

C:\Qoobox\Quarantine\C\Users\Andrew\AppData\Local\{9CDE2E9A-73D0-4D51-B280-D902F5A4B567}\chrome\content\overlay.xul.vir probably a variant of Win32/Agent.NVQFFQI trojan
D:\SD stuff\Andrew's Corner\WinRAR archiver\Install_AIM.exe Win32/Adware.WBug.A application
D:\USB\Darton\Visual Basic\Tutorials\Tutorial28\CompletedApplication\Bookstore\BookInformation.aspx Win32/Virut.NBP virus
D:\USB\Darton\Visual Basic\Tutorials\Tutorial28\CompletedApplication\Bookstore\Books.aspx Win32/Virut.NBP virus
D:\USB\Darton\Visual Basic\Tutorials\Tutorial29\CompletedApplication\Bookstore\BookInformation.aspx Win32/Virut.NBP virus
D:\USB\Darton\Visual Basic\Tutorials\Tutorial29\CompletedApplication\Bookstore\Books.aspx Win32/Virut.NBP virus
D:\USB\Darton\Visual Basic\Tutorials\Tutorial31\CompletedApplication\Bookstore\BookInformation.aspx Win32/Virut.NBP virus
D:\USB\Darton\Visual Basic\Tutorials\Tutorial31\CompletedApplication\Bookstore\Books.aspx Win32/Virut.NBP virus
D:\USB-Backup_05-31-10\Darton\Visual Basic\Tutorials\Tutorial28\CompletedApplication\Bookstore\BookInformation.aspx Win32/Virut.NBP virus
D:\USB-Backup_05-31-10\Darton\Visual Basic\Tutorials\Tutorial28\CompletedApplication\Bookstore\Books.aspx Win32/Virut.NBP virus
D:\USB-Backup_05-31-10\Darton\Visual Basic\Tutorials\Tutorial29\CompletedApplication\Bookstore\BookInformation.aspx Win32/Virut.NBP virus
D:\USB-Backup_05-31-10\Darton\Visual Basic\Tutorials\Tutorial29\CompletedApplication\Bookstore\Books.aspx Win32/Virut.NBP virus
D:\USB-Backup_05-31-10\Darton\Visual Basic\Tutorials\Tutorial31\CompletedApplication\Bookstore\BookInformation.aspx Win32/Virut.NBP virus
D:\USB-Backup_05-31-10\Darton\Visual Basic\Tutorials\Tutorial31\CompletedApplication\Bookstore\Books.aspx Win32/Virut.NBP virus
D:\USB-Backup_12-26-09\Darton\Visual Basic\Tutorials\Tutorial28\CompletedApplication\Bookstore\BookInformation.aspx Win32/Virut.NBP virus
D:\USB-Backup_12-26-09\Darton\Visual Basic\Tutorials\Tutorial28\CompletedApplication\Bookstore\Books.aspx Win32/Virut.NBP virus
D:\USB-Backup_12-26-09\Darton\Visual Basic\Tutorials\Tutorial29\CompletedApplication\Bookstore\BookInformation.aspx Win32/Virut.NBP virus
D:\USB-Backup_12-26-09\Darton\Visual Basic\Tutorials\Tutorial29\CompletedApplication\Bookstore\Books.aspx Win32/Virut.NBP virus
D:\USB-Backup_12-26-09\Darton\Visual Basic\Tutorials\Tutorial31\CompletedApplication\Bookstore\BookInformation.aspx Win32/Virut.NBP virus
D:\USB-Backup_12-26-09\Darton\Visual Basic\Tutorials\Tutorial31\CompletedApplication\Bookstore\Books.aspx Win32/Virut.NBP virus

broni · 2011/03/06

Those files found on drive "D" are extremely dangerous.
They're infected with Virut virus, which, if spread into your computer is not curable.
Formatting and fresh Windows installation is the only option.
We'll remove them in a moment.

===============================================================

Uninstall:
Java(TM) SE Development Kit 6 Update 14
JavaFX(TM) 1.2 SDK
Java DB 10.4.2.1

=========================================================

Update Adobe Reader

You can download it from http://www.adobe.com/products/acrobat/readstep2.html
After installing the latest Adobe Reader, uninstall all previous versions.
Note. If you already have Adobe Photoshop® Album Starter Edition installed or do not wish to have it installed UNcheck the box which says Also Download Adobe Photoshop® Album Starter Edition.

Alternatively, you can uninstall Adobe Reader (33.5 MB), download and install Foxit PDF Reader(3.5MB) from HERE.
It's a much smaller file to download and uses a lot less resources than Adobe Reader.
Note: When installing FoxitReader, make sure to UN-check any pre-checked toolbar, or other garbage.

=================================================================

Run OTL
Under the [color= "#0000FF"]Custom Scans/Fixes[/color] box at the bottom, paste in the following
Code:
:OTL

:Services

:Reg

:Files
D:\USB\Darton\Visual Basic\Tutorials
D:\USB-Backup_05-31-10\Darton\Visual Basic\Tutorials\Tutorial28\CompletedApplication\Bookstore\BookInformation.aspx 
D:\USB-Backup_05-31-10\Darton\Visual Basic\Tutorials\Tutorial28\CompletedApplication\Bookstore\Books.aspx 
D:\USB-Backup_05-31-10\Darton\Visual Basic\Tutorials\Tutorial29\CompletedApplication\Bookstore\BookInformation.aspx 
D:\USB-Backup_05-31-10\Darton\Visual Basic\Tutorials\Tutorial29\CompletedApplication\Bookstore\Books.aspx 
D:\USB-Backup_05-31-10\Darton\Visual Basic\Tutorials\Tutorial31\CompletedApplication\Bookstore\BookInformation.aspx 
D:\USB-Backup_05-31-10\Darton\Visual Basic\Tutorials\Tutorial31\CompletedApplication\Bookstore\Books.aspx 
D:\USB-Backup_12-26-09\Darton\Visual Basic\Tutorials\Tutorial28\CompletedApplication\Bookstore\BookInformation.aspx 
D:\USB-Backup_12-26-09\Darton\Visual Basic\Tutorials\Tutorial28\CompletedApplication\Bookstore\Books.aspx 
D:\USB-Backup_12-26-09\Darton\Visual Basic\Tutorials\Tutorial29\CompletedApplication\Bookstore\BookInformation.aspx 
D:\USB-Backup_12-26-09\Darton\Visual Basic\Tutorials\Tutorial29\CompletedApplication\Bookstore\Books.aspx 
D:\USB-Backup_12-26-09\Darton\Visual Basic\Tutorials\Tutorial31\CompletedApplication\Bookstore\BookInformation.aspx 
D:\USB-Backup_12-26-09\Darton\Visual Basic\Tutorials\Tutorial31\CompletedApplication\Bookstore\Books.aspx

:Commands
[purity]
[emptytemp]
[emptyflash]
[Reboot]
Then click the [color= "#FF0000"]Run Fix[/color] button at the top

Let the program run unhindered, reboot the PC when it is done

You will get a log that shows the results of the fix. Please post it.
===============================================================

Your computer is clean

1. We need to reset system restore to prevent your computer from being accidentally reinfected by using some old restore point(s). We'll create fresh, clean restore point, using following OTL script:

Run OTL

Under the Custom Scans/Fixes box at the bottom, paste in the following:
Code:
:OTL
:Commands
[purity]
[emptytemp]
[EMPTYFLASH]
[CLEARALLRESTOREPOINTS]
[Reboot]
Then click the Run Fix button at the top

Let the program run unhindered, reboot the PC when it is done

Post resulting log.

2. Now, we'll remove all tools, we used during our cleaning process

Clean up with OTL:

Double-click OTL.exe to start the program.

Close all other programs apart from OTL as this step will require a reboot

On the OTL main screen, press the CLEANUP button

Say Yes to the prompt and then allow the program to reboot your computer.

If you still have any tools or logs leftover on your computer you can go ahead and delete those off of your computer now.

3. Make sure, Windows Updates are current.

4. If any Trojan was listed among your infection(s), make sure, you change all of your on-line important passwords (bank account(s), secured web sites, etc.) immediately!

5. Download, and install WOT (Web OF Trust): http://www.mywot.com/. It'll warn you (in most cases) about dangerous web sites.

6. Run Malwarebytes "Quick scan" once in a while to assure safety of your computer.

7. Run Temporary File Cleaner (TFC) weekly.

8. Download and install Secunia Personal Software Inspector (PSI): http://secunia.com/vulnerability_scanning/personal/. The Secunia PSI is a FREE security tool designed to detect vulnerable and out-dated programs and plug-ins which expose your PC to attacks. Run it weekly.

9. (optional) If you want to keep all your programs up to date, download and install FileHippo Update Checker.
The Update Checker will scan your computer for installed software, check the versions and then send this information to FileHippo.com to see if there are any newer releases.

10. Run defrag at your convenience.

11. Read How did I get infected?, With steps so it does not happen again!: http://www.bleepingcomputer.com/forums/topic2520.html

12. Please, let me know, how your computer is doing.

Goldensunboy · 2011/03/06

Thank you for finding those files and telling me of their dangers! I won't go near them until they are dealt with by a good anti-virus program.

However, I'm very sorry but the malware issue is going to have to be put on the backburner for a day or two because a new problem just started. About an hour ago, my computer randomly locked up, and I had to hard reset. I was not browsing the internet when this occurred. Now, every time I boot Vista, about 30 seconds after the welcome screen appears (even if I haven't typed in my password yet) the computer locks up, and all I can do is hard reset. The mouse can move, but clicking does nothing.

I have Windows 7 installed as a dual boot, and it loads fine; I would really like to get Vista running again, though, as that's what I'm more comfortable with using. Should I make a new thread about this?

broni · 2011/03/06

Please do.

As for those files, if you run steps from my previous reply, they'll be removed.

Goldensunboy · 2011/03/07

I will wait until this problem with Vista not booting is fixed to follow through with the second part; I hope it doesn't take too long to sort it out. I'll finish the cleanup process in this thread as soon as I fix Vista.

Here's the log from running OTL to remove the infected files:

***************

All processes killed
========== OTL ==========
========== SERVICES/DRIVERS ==========
========== REGISTRY ==========
========== FILES ==========
D:\USB\Darton\Visual Basic\Tutorials\Tutorial32\Exercises\WeatherViewer_Enhanced\WeatherViewer_Web\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial32\Exercises\WeatherViewer_Enhanced\WeatherViewer_Web\ClientBin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial32\Exercises\WeatherViewer_Enhanced\WeatherViewer_Web\bin\ja folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial32\Exercises\WeatherViewer_Enhanced\WeatherViewer_Web\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial32\Exercises\WeatherViewer_Enhanced\WeatherViewer_Web\App_Data folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial32\Exercises\WeatherViewer_Enhanced\WeatherViewer_Web folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial32\Exercises\WeatherViewer_Enhanced\WeatherViewer\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial32\Exercises\WeatherViewer_Enhanced\WeatherViewer\ClientBin\ja folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial32\Exercises\WeatherViewer_Enhanced\WeatherViewer\ClientBin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial32\Exercises\WeatherViewer_Enhanced\WeatherViewer folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial32\Exercises\WeatherViewer_Enhanced folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial32\Exercises folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial32\CompletedApplication\WeatherViewer\WeatherViewer_Web\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial32\CompletedApplication\WeatherViewer\WeatherViewer_Web\ClientBin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial32\CompletedApplication\WeatherViewer\WeatherViewer_Web\bin\ja folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial32\CompletedApplication\WeatherViewer\WeatherViewer_Web\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial32\CompletedApplication\WeatherViewer\WeatherViewer_Web\App_Data folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial32\CompletedApplication\WeatherViewer\WeatherViewer_Web folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial32\CompletedApplication\WeatherViewer\WeatherViewer\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial32\CompletedApplication\WeatherViewer\WeatherViewer\ClientBin\ja folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial32\CompletedApplication\WeatherViewer\WeatherViewer\ClientBin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial32\CompletedApplication\WeatherViewer\WeatherViewer folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial32\CompletedApplication\WeatherViewer folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial32\CompletedApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial32 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial31\images\Corel Auto-Preserve folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial31\images folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial31\Exercises\FlagImages folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial31\Exercises folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial31\CompletedApplication\Bookstore\images\Corel Auto-Preserve folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial31\CompletedApplication\Bookstore\images folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial31\CompletedApplication\Bookstore\App_Data folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial31\CompletedApplication\Bookstore\App_Code folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial31\CompletedApplication\Bookstore folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial31\CompletedApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial31 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial30\Exercises\Databases folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial30\Exercises folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial30 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial29\CompletedApplication\Bookstore\images\Corel Auto-Preserve folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial29\CompletedApplication\Bookstore\images folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial29\CompletedApplication\Bookstore\App_Data folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial29\CompletedApplication\Bookstore\App_Code folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial29\CompletedApplication\Bookstore folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial29\CompletedApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial29 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial28\CompletedApplication\Bookstore\images\Corel Auto-Preserve folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial28\CompletedApplication\Bookstore\images folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial28\CompletedApplication\Bookstore\App_Data folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial28\CompletedApplication\Bookstore\App_Code folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial28\CompletedApplication\Bookstore folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial28\CompletedApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial28 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial27\TemplateApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial27\Exercises\AdvancedPainter\AdvancedPainter\My Project\MyExtensions folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial27\Exercises\AdvancedPainter\AdvancedPainter\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial27\Exercises\AdvancedPainter\AdvancedPainter\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial27\Exercises\AdvancedPainter\AdvancedPainter\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial27\Exercises\AdvancedPainter\AdvancedPainter\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial27\Exercises\AdvancedPainter\AdvancedPainter folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial27\Exercises\AdvancedPainter folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial27\Exercises folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial27\CompletedApplication\Painter\Painter\My Project\MyExtensions folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial27\CompletedApplication\Painter\Painter\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial27\CompletedApplication\Painter\Painter\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial27\CompletedApplication\Painter\Painter\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial27\CompletedApplication\Painter\Painter\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial27\CompletedApplication\Painter\Painter folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial27\CompletedApplication\Painter folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial27\CompletedApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial27 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial26\Exercises\ModifiedCheckWriter\CheckWriter\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial26\Exercises\ModifiedCheckWriter\CheckWriter\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial26\Exercises\ModifiedCheckWriter\CheckWriter\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial26\Exercises\ModifiedCheckWriter\CheckWriter folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial26\Exercises\ModifiedCheckWriter folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial26\Exercises\LetterHead\LetterHead\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial26\Exercises\LetterHead\LetterHead\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial26\Exercises\LetterHead\LetterHead\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial26\Exercises\LetterHead\LetterHead\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial26\Exercises\LetterHead\LetterHead folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial26\Exercises\LetterHead folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial26\Exercises\Images folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial26\Exercises\CompanyLogo\CompanyLogo\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial26\Exercises\CompanyLogo\CompanyLogo\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial26\Exercises\CompanyLogo\CompanyLogo\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial26\Exercises\CompanyLogo\CompanyLogo\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial26\Exercises\CompanyLogo\CompanyLogo folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial26\Exercises\CompanyLogo folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial26\Exercises folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial26\CompletedApplication\CheckWriter\CheckWriter\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial26\CompletedApplication\CheckWriter\CheckWriter\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial26\CompletedApplication\CheckWriter\CheckWriter\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial26\CompletedApplication\CheckWriter\CheckWriter\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial26\CompletedApplication\CheckWriter\CheckWriter folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial26\CompletedApplication\CheckWriter folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial26\CompletedApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial26 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial25\TemplateApplication\EnhancedCarPaymentCalculator\EnhancedCarPaymentCalculator\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial25\TemplateApplication\EnhancedCarPaymentCalculator\EnhancedCarPaymentCalculator\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial25\TemplateApplication\EnhancedCarPaymentCalculator\EnhancedCarPaymentCalculator\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial25\TemplateApplication\EnhancedCarPaymentCalculator\EnhancedCarPaymentCalculator\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial25\TemplateApplication\EnhancedCarPaymentCalculator\EnhancedCarPaymentCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial25\TemplateApplication\EnhancedCarPaymentCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial25\TemplateApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial25\Exercises\EnhancedVendingMachine\images folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial25\Exercises\EnhancedVendingMachine\EnhancedVendingMachine\Resources folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial25\Exercises\EnhancedVendingMachine\EnhancedVendingMachine\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial25\Exercises\EnhancedVendingMachine\EnhancedVendingMachine\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial25\Exercises\EnhancedVendingMachine\EnhancedVendingMachine\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial25\Exercises\EnhancedVendingMachine\EnhancedVendingMachine\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial25\Exercises\EnhancedVendingMachine\EnhancedVendingMachine folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial25\Exercises\EnhancedVendingMachine folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial25\Exercises\EnhancedSimpleCalculator\EnhancedSimpleCalculator\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial25\Exercises\EnhancedSimpleCalculator\EnhancedSimpleCalculator\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial25\Exercises\EnhancedSimpleCalculator\EnhancedSimpleCalculator\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial25\Exercises\EnhancedSimpleCalculator\EnhancedSimpleCalculator\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial25\Exercises\EnhancedSimpleCalculator\EnhancedSimpleCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial25\Exercises\EnhancedSimpleCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial25\Exercises\EnhancedPrimeNumbers\EnhancedPrimeNumbers\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial25\Exercises\EnhancedPrimeNumbers\EnhancedPrimeNumbers\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial25\Exercises\EnhancedPrimeNumbers\EnhancedPrimeNumbers\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial25\Exercises\EnhancedPrimeNumbers\EnhancedPrimeNumbers\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial25\Exercises\EnhancedPrimeNumbers\EnhancedPrimeNumbers folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial25\Exercises\EnhancedPrimeNumbers folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial25\Exercises\EnhancedMilesPerGallon\EnhancedMilesPerGallon\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial25\Exercises\EnhancedMilesPerGallon\EnhancedMilesPerGallon\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial25\Exercises\EnhancedMilesPerGallon\EnhancedMilesPerGallon\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial25\Exercises\EnhancedMilesPerGallon\EnhancedMilesPerGallon\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial25\Exercises\EnhancedMilesPerGallon\EnhancedMilesPerGallon folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial25\Exercises\EnhancedMilesPerGallon folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial25\Exercises folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial25\CompletedApplication\EnhancedCarPaymentCalculator\EnhancedCarPaymentCalculator\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial25\CompletedApplication\EnhancedCarPaymentCalculator\EnhancedCarPaymentCalculator\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial25\CompletedApplication\EnhancedCarPaymentCalculator\EnhancedCarPaymentCalculator\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial25\CompletedApplication\EnhancedCarPaymentCalculator\EnhancedCarPaymentCalculator\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial25\CompletedApplication\EnhancedCarPaymentCalculator\EnhancedCarPaymentCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial25\CompletedApplication\EnhancedCarPaymentCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial25\CompletedApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial25 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial24\Exercises\Databases folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial24\Exercises folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial24\CompletedApplication\AddressBook\AddressBook\My Project\DataSources folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial24\CompletedApplication\AddressBook\AddressBook\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial24\CompletedApplication\AddressBook\AddressBook\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial24\CompletedApplication\AddressBook\AddressBook\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial24\CompletedApplication\AddressBook\AddressBook\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial24\CompletedApplication\AddressBook\AddressBook folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial24\CompletedApplication\AddressBook folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial24\CompletedApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial24 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\TemplateApplication\WriteEvent\WriteEvent\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\TemplateApplication\WriteEvent\WriteEvent\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\TemplateApplication\WriteEvent\WriteEvent\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\TemplateApplication\WriteEvent\WriteEvent\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\TemplateApplication\WriteEvent\WriteEvent folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\TemplateApplication\WriteEvent folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\TemplateApplication\TicketInformation\TicketInformation\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\TemplateApplication\TicketInformation\TicketInformation\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\TemplateApplication\TicketInformation\TicketInformation\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\TemplateApplication\TicketInformation\TicketInformation\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\TemplateApplication\TicketInformation\TicketInformation folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\TemplateApplication\TicketInformation folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\TemplateApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\Exercises\PhotoAlbum\PhotoAlbum\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\Exercises\PhotoAlbum\PhotoAlbum\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\Exercises\PhotoAlbum\PhotoAlbum\bin\Debug\images\small folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\Exercises\PhotoAlbum\PhotoAlbum\bin\Debug\images\large folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\Exercises\PhotoAlbum\PhotoAlbum\bin\Debug\images folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\Exercises\PhotoAlbum\PhotoAlbum\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\Exercises\PhotoAlbum\PhotoAlbum\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\Exercises\PhotoAlbum\PhotoAlbum folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\Exercises\PhotoAlbum folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\Exercises\FileScrape\FileScrape\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\Exercises\FileScrape\FileScrape\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\Exercises\FileScrape\FileScrape\bin\Debug\booklist_files folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\Exercises\FileScrape\FileScrape\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\Exercises\FileScrape\FileScrape\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\Exercises\FileScrape\FileScrape folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\Exercises\FileScrape folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\Exercises\CarReservation\CarReservation\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\Exercises\CarReservation\CarReservation\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\Exercises\CarReservation\CarReservation\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\Exercises\CarReservation\CarReservation\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\Exercises\CarReservation\CarReservation folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\Exercises\CarReservation folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\Exercises\BirthdaySaver\BirthdaySaver\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\Exercises\BirthdaySaver\BirthdaySaver\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\Exercises\BirthdaySaver\BirthdaySaver\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\Exercises\BirthdaySaver\BirthdaySaver\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\Exercises\BirthdaySaver\BirthdaySaver folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\Exercises\BirthdaySaver folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\Exercises folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\CompletedApplication\WriteEvent\WriteEvent\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\CompletedApplication\WriteEvent\WriteEvent\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\CompletedApplication\WriteEvent\WriteEvent\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\CompletedApplication\WriteEvent\WriteEvent\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\CompletedApplication\WriteEvent\WriteEvent folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\CompletedApplication\WriteEvent folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\CompletedApplication\TicketInformation_NoLINQ\TicketInformation\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\CompletedApplication\TicketInformation_NoLINQ\TicketInformation\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\CompletedApplication\TicketInformation_NoLINQ\TicketInformation\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\CompletedApplication\TicketInformation_NoLINQ\TicketInformation\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\CompletedApplication\TicketInformation_NoLINQ\TicketInformation folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\CompletedApplication\TicketInformation_NoLINQ folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\CompletedApplication\TicketInformation_LINQ\TicketInformation\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\CompletedApplication\TicketInformation_LINQ\TicketInformation\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\CompletedApplication\TicketInformation_LINQ\TicketInformation\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\CompletedApplication\TicketInformation_LINQ\TicketInformation\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\CompletedApplication\TicketInformation_LINQ\TicketInformation folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\CompletedApplication\TicketInformation_LINQ folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23\CompletedApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial23 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial22\TeamplateApplication\ScreenScraping\ScreenScraping\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial22\TeamplateApplication\ScreenScraping\ScreenScraping\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial22\TeamplateApplication\ScreenScraping\ScreenScraping\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial22\TeamplateApplication\ScreenScraping\ScreenScraping\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial22\TeamplateApplication\ScreenScraping\ScreenScraping folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial22\TeamplateApplication\ScreenScraping folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial22\TeamplateApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial22\Exercises\SupplyCalculator\SupplyCalculator\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial22\Exercises\SupplyCalculator\SupplyCalculator\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial22\Exercises\SupplyCalculator\SupplyCalculator\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial22\Exercises\SupplyCalculator\SupplyCalculator\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial22\Exercises\SupplyCalculator\SupplyCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial22\Exercises\SupplyCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial22\Exercises\PigLatin\PigLatin\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial22\Exercises\PigLatin\PigLatin\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial22\Exercises\PigLatin\PigLatin\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial22\Exercises\PigLatin\PigLatin\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial22\Exercises\PigLatin\PigLatin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial22\Exercises\PigLatin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial22\Exercises\Encryption\Encryption\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial22\Exercises\Encryption\Encryption\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial22\Exercises\Encryption\Encryption\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial22\Exercises\Encryption\Encryption\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial22\Exercises\Encryption\Encryption folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial22\Exercises\Encryption folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial22\Exercises\Anagram\Anagram\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial22\Exercises\Anagram\Anagram\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial22\Exercises\Anagram\Anagram\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial22\Exercises\Anagram\Anagram\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial22\Exercises\Anagram\Anagram folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial22\Exercises\Anagram folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial22\Exercises folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial22\CompletedApplication\ScreenScraping\ScreenScraping\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial22\CompletedApplication\ScreenScraping\ScreenScraping\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial22\CompletedApplication\ScreenScraping\ScreenScraping\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial22\CompletedApplication\ScreenScraping\ScreenScraping\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial22\CompletedApplication\ScreenScraping\ScreenScraping folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial22\CompletedApplication\ScreenScraping folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial22\CompletedApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial22 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial21\TemplateApplication\Typing\Typing\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial21\TemplateApplication\Typing\Typing\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial21\TemplateApplication\Typing\Typing\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial21\TemplateApplication\Typing\Typing\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial21\TemplateApplication\Typing\Typing folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial21\TemplateApplication\Typing folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial21\TemplateApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial21\Exercises\KeyEventInventory\KeyEventInventory\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial21\Exercises\KeyEventInventory\KeyEventInventory\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial21\Exercises\KeyEventInventory\KeyEventInventory\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial21\Exercises\KeyEventInventory\KeyEventInventory\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial21\Exercises\KeyEventInventory\KeyEventInventory folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial21\Exercises\KeyEventInventory folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial21\Exercises\FormPainter\FormPainter\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial21\Exercises\FormPainter\FormPainter\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial21\Exercises\FormPainter\FormPainter\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial21\Exercises\FormPainter\FormPainter\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial21\Exercises\FormPainter\FormPainter folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial21\Exercises\FormPainter folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial21\Exercises\DvorakKeyboard\DvorakKeyboard\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial21\Exercises\DvorakKeyboard\DvorakKeyboard\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial21\Exercises\DvorakKeyboard\DvorakKeyboard\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial21\Exercises\DvorakKeyboard\DvorakKeyboard\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial21\Exercises\DvorakKeyboard\DvorakKeyboard folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial21\Exercises\DvorakKeyboard folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial21\Exercises\BouncingBall\BouncingBall\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial21\Exercises\BouncingBall\BouncingBall\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial21\Exercises\BouncingBall\BouncingBall\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial21\Exercises\BouncingBall\BouncingBall\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial21\Exercises\BouncingBall\BouncingBall folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial21\Exercises\BouncingBall folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial21\Exercises folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial21\CompletedApplication\Typing\Typing\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial21\CompletedApplication\Typing\Typing\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial21\CompletedApplication\Typing\Typing\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial21\CompletedApplication\Typing\Typing\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial21\CompletedApplication\Typing\Typing folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial21\CompletedApplication\Typing folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial21\CompletedApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial21 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial20\TemplateApplication\ShippingHub\ShippingHub\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial20\TemplateApplication\ShippingHub\ShippingHub\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial20\TemplateApplication\ShippingHub\ShippingHub\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial20\TemplateApplication\ShippingHub\ShippingHub\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial20\TemplateApplication\ShippingHub\ShippingHub folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial20\TemplateApplication\ShippingHub folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial20\TemplateApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial20\Exercises\ShippingHubModified\ShippingHubModified\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial20\Exercises\ShippingHubModified\ShippingHubModified\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial20\Exercises\ShippingHubModified\ShippingHubModified\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial20\Exercises\ShippingHubModified\ShippingHubModified\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial20\Exercises\ShippingHubModified\ShippingHubModified folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial20\Exercises\ShippingHubModified folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial20\Exercises\ShippingHubEnhanced\ShippingHubEnhanced\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial20\Exercises\ShippingHubEnhanced\ShippingHubEnhanced\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial20\Exercises\ShippingHubEnhanced\ShippingHubEnhanced\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial20\Exercises\ShippingHubEnhanced\ShippingHubEnhanced\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial20\Exercises\ShippingHubEnhanced\ShippingHubEnhanced folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial20\Exercises\ShippingHubEnhanced folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial20\Exercises\ControlsCollection\ControlsCollection\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial20\Exercises\ControlsCollection\ControlsCollection\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial20\Exercises\ControlsCollection\ControlsCollection\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial20\Exercises\ControlsCollection\ControlsCollection\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial20\Exercises\ControlsCollection\ControlsCollection folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial20\Exercises\ControlsCollection folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial20\Exercises folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial20\CompletedApplication\ShippingHub\ShippingHub\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial20\CompletedApplication\ShippingHub\ShippingHub\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial20\CompletedApplication\ShippingHub\ShippingHub\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial20\CompletedApplication\ShippingHub\ShippingHub\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial20\CompletedApplication\ShippingHub\ShippingHub folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial20\CompletedApplication\ShippingHub folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial20\CompletedApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial20 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\TemplateApplication\MicrowaveOven\MicrowaveOven\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\TemplateApplication\MicrowaveOven\MicrowaveOven\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\TemplateApplication\MicrowaveOven\MicrowaveOven\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\TemplateApplication\MicrowaveOven\MicrowaveOven\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\TemplateApplication\MicrowaveOven\MicrowaveOven folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\TemplateApplication\MicrowaveOven folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\TemplateApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\Exercises\Triangle\Triangle\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\Exercises\Triangle\Triangle\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\Exercises\Triangle\Triangle\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\Exercises\Triangle\Triangle\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\Exercises\Triangle\Triangle folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\Exercises\Triangle folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\Exercises\MicrowaveOven2\MicrowaveOven2\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\Exercises\MicrowaveOven2\MicrowaveOven2\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\Exercises\MicrowaveOven2\MicrowaveOven2\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\Exercises\MicrowaveOven2\MicrowaveOven2\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\Exercises\MicrowaveOven2\MicrowaveOven2 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\Exercises\MicrowaveOven2 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\Exercises\DVDBurner\DVDBurner\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\Exercises\DVDBurner\DVDBurner\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\Exercises\DVDBurner\DVDBurner\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\Exercises\DVDBurner\DVDBurner\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\Exercises\DVDBurner\DVDBurner folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\Exercises\DVDBurner folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\Exercises\Debugger\ViewName\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\Exercises\Debugger\ViewName\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\Exercises\Debugger\ViewName\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\Exercises\Debugger\ViewName\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\Exercises\Debugger\ViewName folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\Exercises\Debugger folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\Exercises\AccountInformation\AccountInformation\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\Exercises\AccountInformation\AccountInformation\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\Exercises\AccountInformation\AccountInformation\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\Exercises\AccountInformation\AccountInformation\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\Exercises\AccountInformation\AccountInformation folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\Exercises\AccountInformation folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\Exercises folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\CompletedApplication\MicrowaveOven\MicrowaveOven\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\CompletedApplication\MicrowaveOven\MicrowaveOven\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\CompletedApplication\MicrowaveOven\MicrowaveOven\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\CompletedApplication\MicrowaveOven\MicrowaveOven\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\CompletedApplication\MicrowaveOven\MicrowaveOven folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\CompletedApplication\MicrowaveOven folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19\CompletedApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial19 folder moved successfully.

Goldensunboy · 2011/03/07

D:\USB\Darton\Visual Basic\Tutorials\Tutorial18\TemplateApplication\StudentGrades\StudentGrades\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial18\TemplateApplication\StudentGrades\StudentGrades\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial18\TemplateApplication\StudentGrades\StudentGrades\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial18\TemplateApplication\StudentGrades\StudentGrades folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial18\TemplateApplication\StudentGrades folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial18\TemplateApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial18\Exercises\SalesReport\SalesReport\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial18\Exercises\SalesReport\SalesReport\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial18\Exercises\SalesReport\SalesReport\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial18\Exercises\SalesReport\SalesReport\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial18\Exercises\SalesReport\SalesReport folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial18\Exercises\SalesReport folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial18\Exercises\FoodSurvey\FoodSurvey\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial18\Exercises\FoodSurvey\FoodSurvey\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial18\Exercises\FoodSurvey\FoodSurvey\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial18\Exercises\FoodSurvey\FoodSurvey\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial18\Exercises\FoodSurvey\FoodSurvey folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial18\Exercises\FoodSurvey folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial18\Exercises\EnhancedGasPump\GasPump\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial18\Exercises\EnhancedGasPump\GasPump\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial18\Exercises\EnhancedGasPump\GasPump\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial18\Exercises\EnhancedGasPump\GasPump\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial18\Exercises\EnhancedGasPump\GasPump folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial18\Exercises\EnhancedGasPump folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial18\Exercises folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial18\CompletedApplication\StudentGrades\StudentGrades\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial18\CompletedApplication\StudentGrades\StudentGrades\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial18\CompletedApplication\StudentGrades\StudentGrades\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial18\CompletedApplication\StudentGrades\StudentGrades folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial18\CompletedApplication\StudentGrades folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial18\CompletedApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial18 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\TemplateApplication\SumArray\SumArray\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\TemplateApplication\SumArray\SumArray\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\TemplateApplication\SumArray\SumArray\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\TemplateApplication\SumArray\SumArray\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\TemplateApplication\SumArray\SumArray folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\TemplateApplication\SumArray folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\TemplateApplication\FlagQuiz\FlagQuiz\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\TemplateApplication\FlagQuiz\FlagQuiz\bin\Release\images folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\TemplateApplication\FlagQuiz\FlagQuiz\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\TemplateApplication\FlagQuiz\FlagQuiz\bin\Debug\images folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\TemplateApplication\FlagQuiz\FlagQuiz\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\TemplateApplication\FlagQuiz\FlagQuiz\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\TemplateApplication\FlagQuiz\FlagQuiz folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\TemplateApplication\FlagQuiz folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\TemplateApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\Exercises\SalarySurvey\SalarySurvey\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\Exercises\SalarySurvey\SalarySurvey\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\Exercises\SalarySurvey\SalarySurvey\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\Exercises\SalarySurvey\SalarySurvey\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\Exercises\SalarySurvey\SalarySurvey folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\Exercises\SalarySurvey folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\Exercises\images folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\Exercises\FlagQuiz2\FlagQuiz2\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\Exercises\FlagQuiz2\FlagQuiz2\bin\Release\images folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\Exercises\FlagQuiz2\FlagQuiz2\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\Exercises\FlagQuiz2\FlagQuiz2\bin\Debug\images folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\Exercises\FlagQuiz2\FlagQuiz2\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\Exercises\FlagQuiz2\FlagQuiz2\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\Exercises\FlagQuiz2\FlagQuiz2 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\Exercises\FlagQuiz2 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\Exercises\CafeteriaSurvey\CafeteriaSurvey\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\Exercises\CafeteriaSurvey\CafeteriaSurvey\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\Exercises\CafeteriaSurvey\CafeteriaSurvey\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\Exercises\CafeteriaSurvey\CafeteriaSurvey\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\Exercises\CafeteriaSurvey\CafeteriaSurvey folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\Exercises\CafeteriaSurvey folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\Exercises folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\CompletedApplication\SumArray\SumArray\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\CompletedApplication\SumArray\SumArray\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\CompletedApplication\SumArray\SumArray\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\CompletedApplication\SumArray\SumArray\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\CompletedApplication\SumArray\SumArray folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\CompletedApplication\SumArray folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\CompletedApplication\FlagQuiz - Copy\FlagQuiz\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\CompletedApplication\FlagQuiz - Copy\FlagQuiz\bin\Release\images folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\CompletedApplication\FlagQuiz - Copy\FlagQuiz\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\CompletedApplication\FlagQuiz - Copy\FlagQuiz\bin\Debug\images folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\CompletedApplication\FlagQuiz - Copy\FlagQuiz\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\CompletedApplication\FlagQuiz - Copy\FlagQuiz\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\CompletedApplication\FlagQuiz - Copy\FlagQuiz folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\CompletedApplication\FlagQuiz - Copy folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\CompletedApplication\FlagQuiz\FlagQuiz\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\CompletedApplication\FlagQuiz\FlagQuiz\bin\Release\images folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\CompletedApplication\FlagQuiz\FlagQuiz\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\CompletedApplication\FlagQuiz\FlagQuiz\bin\Debug\images folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\CompletedApplication\FlagQuiz\FlagQuiz\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\CompletedApplication\FlagQuiz\FlagQuiz\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\CompletedApplication\FlagQuiz\FlagQuiz folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\CompletedApplication\FlagQuiz folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17\CompletedApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial17 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\TemplateApplication\CrapsGame\CrapsGame\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\TemplateApplication\CrapsGame\CrapsGame\bin\Release\Images folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\TemplateApplication\CrapsGame\CrapsGame\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\TemplateApplication\CrapsGame\CrapsGame\bin\Debug\Images folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\TemplateApplication\CrapsGame\CrapsGame\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\TemplateApplication\CrapsGame\CrapsGame\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\TemplateApplication\CrapsGame\CrapsGame folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\TemplateApplication\CrapsGame folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\TemplateApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\Images folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\Exercises\MultiplicationTeacher\MultiplicationTeacher\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\Exercises\MultiplicationTeacher\MultiplicationTeacher\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\Exercises\MultiplicationTeacher\MultiplicationTeacher\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\Exercises\MultiplicationTeacher\MultiplicationTeacher\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\Exercises\MultiplicationTeacher\MultiplicationTeacher folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\Exercises\MultiplicationTeacher folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\Exercises\LotteryPicker\LotteryPicker\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\Exercises\LotteryPicker\LotteryPicker\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\Exercises\LotteryPicker\LotteryPicker\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\Exercises\LotteryPicker\LotteryPicker\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\Exercises\LotteryPicker\LotteryPicker folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\Exercises\LotteryPicker folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\Exercises\GuessNumber\GuessNumber\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\Exercises\GuessNumber\GuessNumber\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\Exercises\GuessNumber\GuessNumber\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\Exercises\GuessNumber\GuessNumber\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\Exercises\GuessNumber\GuessNumber folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\Exercises\GuessNumber folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\Exercises\DiceSimulator\DiceSimulator\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\Exercises\DiceSimulator\DiceSimulator\bin\Release\Images folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\Exercises\DiceSimulator\DiceSimulator\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\Exercises\DiceSimulator\DiceSimulator\bin\Debug\Images folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\Exercises\DiceSimulator\DiceSimulator\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\Exercises\DiceSimulator\DiceSimulator\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\Exercises\DiceSimulator\DiceSimulator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\Exercises\DiceSimulator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\Exercises folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\CompletedApplication\CrapsGame\CrapsGame\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\CompletedApplication\CrapsGame\CrapsGame\bin\Release\Images folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\CompletedApplication\CrapsGame\CrapsGame\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\CompletedApplication\CrapsGame\CrapsGame\bin\Debug\Images folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\CompletedApplication\CrapsGame\CrapsGame\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\CompletedApplication\CrapsGame\CrapsGame\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\CompletedApplication\CrapsGame\CrapsGame folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\CompletedApplication\CrapsGame folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16\CompletedApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial16 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial15\TemplateApplication\FundRaiser\FundRaiser\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial15\TemplateApplication\FundRaiser\FundRaiser\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial15\TemplateApplication\FundRaiser\FundRaiser\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial15\TemplateApplication\FundRaiser\FundRaiser\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial15\TemplateApplication\FundRaiser\FundRaiser folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial15\TemplateApplication\FundRaiser folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial15\TemplateApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial15\Exercises\TaskList\TaskList\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial15\Exercises\TaskList\TaskList\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial15\Exercises\TaskList\TaskList\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial15\Exercises\TaskList\TaskList\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial15\Exercises\TaskList\TaskList folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial15\Exercises\TaskList folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial15\Exercises\QuizAverage\QuizAverage\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial15\Exercises\QuizAverage\QuizAverage\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial15\Exercises\QuizAverage\QuizAverage\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial15\Exercises\QuizAverage\QuizAverage\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial15\Exercises\QuizAverage\QuizAverage folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial15\Exercises\QuizAverage folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial15\Exercises\Maximum\Maximum\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial15\Exercises\Maximum\Maximum\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial15\Exercises\Maximum\Maximum\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial15\Exercises\Maximum\Maximum\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial15\Exercises\Maximum\Maximum folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial15\Exercises\Maximum folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial15\Exercises folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial15\CompletedApplication\FundRaiser\FundRaiser\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial15\CompletedApplication\FundRaiser\FundRaiser\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial15\CompletedApplication\FundRaiser\FundRaiser\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial15\CompletedApplication\FundRaiser\FundRaiser\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial15\CompletedApplication\FundRaiser\FundRaiser folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial15\CompletedApplication\FundRaiser folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial15\CompletedApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial15 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial14\TemplateApplication\ShippingTime\ShippingTime\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial14\TemplateApplication\ShippingTime\ShippingTime\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial14\TemplateApplication\ShippingTime\ShippingTime\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial14\TemplateApplication\ShippingTime\ShippingTime\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial14\TemplateApplication\ShippingTime\ShippingTime folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial14\TemplateApplication\ShippingTime folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial14\TemplateApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial14\Exercises\WorldClock\WorldClock\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial14\Exercises\WorldClock\WorldClock\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial14\Exercises\WorldClock\WorldClock\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial14\Exercises\WorldClock\WorldClock\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial14\Exercises\WorldClock\WorldClock folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial14\Exercises\WorldClock folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial14\Exercises\ShippingTimeEnhanced\ShippingTime\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial14\Exercises\ShippingTimeEnhanced\ShippingTime\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial14\Exercises\ShippingTimeEnhanced\ShippingTime\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial14\Exercises\ShippingTimeEnhanced\ShippingTime\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial14\Exercises\ShippingTimeEnhanced\ShippingTime folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial14\Exercises\ShippingTimeEnhanced folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial14\Exercises\FeeCalculator\FeeCalculator\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial14\Exercises\FeeCalculator\FeeCalculator\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial14\Exercises\FeeCalculator\FeeCalculator\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial14\Exercises\FeeCalculator\FeeCalculator\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial14\Exercises\FeeCalculator\FeeCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial14\Exercises\FeeCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial14\Exercises\AlarmClock\AlarmClock\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial14\Exercises\AlarmClock\AlarmClock\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial14\Exercises\AlarmClock\AlarmClock\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial14\Exercises\AlarmClock\AlarmClock\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial14\Exercises\AlarmClock\AlarmClock folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial14\Exercises\AlarmClock folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial14\Exercises folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial14\CompletedApplication\ShippingTime\ShippingTime\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial14\CompletedApplication\ShippingTime\ShippingTime\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial14\CompletedApplication\ShippingTime\ShippingTime\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial14\CompletedApplication\ShippingTime\ShippingTime\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial14\CompletedApplication\ShippingTime\ShippingTime folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial14\CompletedApplication\ShippingTime folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial14\CompletedApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial14 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\TemplateApplication\WageCalculator2\WageCalculator2\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\TemplateApplication\WageCalculator2\WageCalculator2\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\TemplateApplication\WageCalculator2\WageCalculator2\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\TemplateApplication\WageCalculator2\WageCalculator2\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\TemplateApplication\WageCalculator2\WageCalculator2 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\TemplateApplication\WageCalculator2 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\TemplateApplication\Maximum\Maximum\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\TemplateApplication\Maximum\Maximum\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\TemplateApplication\Maximum\Maximum\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\TemplateApplication\Maximum\Maximum\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\TemplateApplication\Maximum\Maximum folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\TemplateApplication\Maximum folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\TemplateApplication\HypotenuseCalculator\HypotenuseCalculator\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\TemplateApplication\HypotenuseCalculator\HypotenuseCalculator\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\TemplateApplication\HypotenuseCalculator\HypotenuseCalculator\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\TemplateApplication\HypotenuseCalculator\HypotenuseCalculator\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\TemplateApplication\HypotenuseCalculator\HypotenuseCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\TemplateApplication\HypotenuseCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\TemplateApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\Exercises\TemperatureConversion\TemperatureConversion\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\Exercises\TemperatureConversion\TemperatureConversion\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\Exercises\TemperatureConversion\TemperatureConversion\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\Exercises\TemperatureConversion\TemperatureConversion\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\Exercises\TemperatureConversion\TemperatureConversion folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\Exercises\TemperatureConversion folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\Exercises\MilesPerGallon\MilesPerGallon\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\Exercises\MilesPerGallon\MilesPerGallon\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\Exercises\MilesPerGallon\MilesPerGallon\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\Exercises\MilesPerGallon\MilesPerGallon\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\Exercises\MilesPerGallon\MilesPerGallon folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\Exercises\MilesPerGallon folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\Exercises\GasPump\GasPump\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\Exercises\GasPump\GasPump\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\Exercises\GasPump\GasPump\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\Exercises\GasPump\GasPump\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\Exercises\GasPump\GasPump folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\Exercises\GasPump folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\Exercises\DisplaySquare\DisplaySquare\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\Exercises\DisplaySquare\DisplaySquare\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\Exercises\DisplaySquare\DisplaySquare\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\Exercises\DisplaySquare\DisplaySquare\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\Exercises\DisplaySquare\DisplaySquare folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\Exercises\DisplaySquare folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\Exercises folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\CompletedApplication\WageCalculator2\WageCalculator2\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\CompletedApplication\WageCalculator2\WageCalculator2\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\CompletedApplication\WageCalculator2\WageCalculator2\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\CompletedApplication\WageCalculator2\WageCalculator2\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\CompletedApplication\WageCalculator2\WageCalculator2 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\CompletedApplication\WageCalculator2 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\CompletedApplication\Maximum\Maximum\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\CompletedApplication\Maximum\Maximum\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\CompletedApplication\Maximum\Maximum\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\CompletedApplication\Maximum\Maximum\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\CompletedApplication\Maximum\Maximum folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\CompletedApplication\Maximum folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\CompletedApplication\HypotenuseCalculator\HypotenuseCalculator\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\CompletedApplication\HypotenuseCalculator\HypotenuseCalculator\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\CompletedApplication\HypotenuseCalculator\HypotenuseCalculator\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\CompletedApplication\HypotenuseCalculator\HypotenuseCalculator\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\CompletedApplication\HypotenuseCalculator\HypotenuseCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\CompletedApplication\HypotenuseCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13\CompletedApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial13 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial12\TemplateApplication\SecurityPanel\SecurityPanel\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial12\TemplateApplication\SecurityPanel\SecurityPanel\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial12\TemplateApplication\SecurityPanel\SecurityPanel\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial12\TemplateApplication\SecurityPanel\SecurityPanel\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial12\TemplateApplication\SecurityPanel\SecurityPanel folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial12\TemplateApplication\SecurityPanel folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial12\TemplateApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial12\Exercises\SalesCommissionCalculator\SalesCommissionCalculator\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial12\Exercises\SalesCommissionCalculator\SalesCommissionCalculator\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial12\Exercises\SalesCommissionCalculator\SalesCommissionCalculator\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial12\Exercises\SalesCommissionCalculator\SalesCommissionCalculator\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial12\Exercises\SalesCommissionCalculator\SalesCommissionCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial12\Exercises\SalesCommissionCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial12\Exercises\IncomeTaxCalculator\IncomeTaxCalculator\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial12\Exercises\IncomeTaxCalculator\IncomeTaxCalculator\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial12\Exercises\IncomeTaxCalculator\IncomeTaxCalculator\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial12\Exercises\IncomeTaxCalculator\IncomeTaxCalculator\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial12\Exercises\IncomeTaxCalculator\IncomeTaxCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial12\Exercises\IncomeTaxCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial12\Exercises\DiscountCalculator\DiscountCalculator\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial12\Exercises\DiscountCalculator\DiscountCalculator\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial12\Exercises\DiscountCalculator\DiscountCalculator\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial12\Exercises\DiscountCalculator\DiscountCalculator\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial12\Exercises\DiscountCalculator\DiscountCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial12\Exercises\DiscountCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial12\Exercises\CashRegister\CashRegister\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial12\Exercises\CashRegister\CashRegister\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial12\Exercises\CashRegister\CashRegister\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial12\Exercises\CashRegister\CashRegister\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial12\Exercises\CashRegister\CashRegister folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial12\Exercises\CashRegister folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial12\Exercises folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial12\CompletedApplication\SecurityPanel\SecurityPanel\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial12\CompletedApplication\SecurityPanel\SecurityPanel\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial12\CompletedApplication\SecurityPanel\SecurityPanel\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial12\CompletedApplication\SecurityPanel\SecurityPanel\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial12\CompletedApplication\SecurityPanel\SecurityPanel folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial12\CompletedApplication\SecurityPanel folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial12\CompletedApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial12 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\TemplateApplication\InterestCalculator\InterestCalculator\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\TemplateApplication\InterestCalculator\InterestCalculator\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\TemplateApplication\InterestCalculator\InterestCalculator\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\TemplateApplication\InterestCalculator\InterestCalculator\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\TemplateApplication\InterestCalculator\InterestCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\TemplateApplication\InterestCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\TemplateApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\Exercises\SavingsCalculator\SavingsCalculator\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\Exercises\SavingsCalculator\SavingsCalculator\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\Exercises\SavingsCalculator\SavingsCalculator\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\Exercises\SavingsCalculator\SavingsCalculator\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\Exercises\SavingsCalculator\SavingsCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\Exercises\SavingsCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\Exercises\PresentValue\PresentValue\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\Exercises\PresentValue\PresentValue\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\Exercises\PresentValue\PresentValue\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\Exercises\PresentValue\PresentValue\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\Exercises\PresentValue\PresentValue folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\Exercises\PresentValue folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\Exercises\PayRaise\PayRaise\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\Exercises\PayRaise\PayRaise\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\Exercises\PayRaise\PayRaise\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\Exercises\PayRaise\PayRaise\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\Exercises\PayRaise\PayRaise folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\Exercises\PayRaise folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\Exercises\InterestCalculatorEnhancement\InterestCalculator\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\Exercises\InterestCalculatorEnhancement\InterestCalculator\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\Exercises\InterestCalculatorEnhancement\InterestCalculator\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\Exercises\InterestCalculatorEnhancement\InterestCalculator\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\Exercises\InterestCalculatorEnhancement\InterestCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\Exercises\InterestCalculatorEnhancement folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\Exercises\ComparingRates\ComparingRates\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\Exercises\ComparingRates\ComparingRates\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\Exercises\ComparingRates\ComparingRates\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\Exercises\ComparingRates\ComparingRates\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\Exercises\ComparingRates\ComparingRates folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\Exercises\ComparingRates folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\Exercises folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\CompletedApplication\InterestCalculator\InterestCalculator\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\CompletedApplication\InterestCalculator\InterestCalculator\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\CompletedApplication\InterestCalculator\InterestCalculator\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\CompletedApplication\InterestCalculator\InterestCalculator\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\CompletedApplication\InterestCalculator\InterestCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\CompletedApplication\InterestCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11\CompletedApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial11 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial10\TemplateApplication\ClassAverage\ClassAverage\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial10\TemplateApplication\ClassAverage\ClassAverage\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial10\TemplateApplication\ClassAverage\ClassAverage\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial10\TemplateApplication\ClassAverage\ClassAverage\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial10\TemplateApplication\ClassAverage\ClassAverage folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial10\TemplateApplication\ClassAverage folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial10\TemplateApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial10\Exercises\UndeterminedClassAverage\ClassAverage\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial10\Exercises\UndeterminedClassAverage\ClassAverage\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial10\Exercises\UndeterminedClassAverage\ClassAverage\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial10\Exercises\UndeterminedClassAverage\ClassAverage\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial10\Exercises\UndeterminedClassAverage\ClassAverage folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial10\Exercises\UndeterminedClassAverage folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial10\Exercises\ModifiedClassAverage\ClassAverage\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial10\Exercises\ModifiedClassAverage\ClassAverage\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial10\Exercises\ModifiedClassAverage\ClassAverage\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial10\Exercises\ModifiedClassAverage\ClassAverage\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial10\Exercises\ModifiedClassAverage\ClassAverage folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial10\Exercises\ModifiedClassAverage folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial10\Exercises\Factorial\Factorial\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial10\Exercises\Factorial\Factorial\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial10\Exercises\Factorial\Factorial\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial10\Exercises\Factorial\Factorial\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial10\Exercises\Factorial\Factorial folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial10\Exercises\Factorial folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial10\Exercises\ArithmeticCalculator\ArithmeticCalculator\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial10\Exercises\ArithmeticCalculator\ArithmeticCalculator\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial10\Exercises\ArithmeticCalculator\ArithmeticCalculator\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial10\Exercises\ArithmeticCalculator\ArithmeticCalculator\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial10\Exercises\ArithmeticCalculator\ArithmeticCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial10\Exercises\ArithmeticCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial10\Exercises folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial10\CompletedApplication\ClassAverage\ClassAverage\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial10\CompletedApplication\ClassAverage\ClassAverage\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial10\CompletedApplication\ClassAverage\ClassAverage\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial10\CompletedApplication\ClassAverage\ClassAverage\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial10\CompletedApplication\ClassAverage\ClassAverage folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial10\CompletedApplication\ClassAverage folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial10\CompletedApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial10 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\TemplateApplication\CarPaymentCalculator\CarPaymentCalculator\obj\Release\TempPE folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\TemplateApplication\CarPaymentCalculator\CarPaymentCalculator\obj\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\TemplateApplication\CarPaymentCalculator\CarPaymentCalculator\obj\Debug\TempPE folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\TemplateApplication\CarPaymentCalculator\CarPaymentCalculator\obj\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\TemplateApplication\CarPaymentCalculator\CarPaymentCalculator\obj folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\TemplateApplication\CarPaymentCalculator\CarPaymentCalculator\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\TemplateApplication\CarPaymentCalculator\CarPaymentCalculator\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\TemplateApplication\CarPaymentCalculator\CarPaymentCalculator\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\TemplateApplication\CarPaymentCalculator\CarPaymentCalculator\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\TemplateApplication\CarPaymentCalculator\CarPaymentCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\TemplateApplication\CarPaymentCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\TemplateApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\Exercises\TableOfPowers\TableOfPowers\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\Exercises\TableOfPowers\TableOfPowers\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\Exercises\TableOfPowers\TableOfPowers\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\Exercises\TableOfPowers\TableOfPowers\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\Exercises\TableOfPowers\TableOfPowers folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\Exercises\TableOfPowers folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\Exercises\OfficeSupplies\OfficeSupplies\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\Exercises\OfficeSupplies\OfficeSupplies\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\Exercises\OfficeSupplies\OfficeSupplies\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\Exercises\OfficeSupplies\OfficeSupplies\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\Exercises\OfficeSupplies\OfficeSupplies folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\Exercises\OfficeSupplies folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\Exercises\MortgageCalculator\MortgageCalculator\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\Exercises\MortgageCalculator\MortgageCalculator\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\Exercises\MortgageCalculator\MortgageCalculator\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\Exercises\MortgageCalculator\MortgageCalculator\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\Exercises\MortgageCalculator\MortgageCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\Exercises\MortgageCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\Exercises\Debugger\OddNumbers\OddNumbers\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\Exercises\Debugger\OddNumbers\OddNumbers\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\Exercises\Debugger\OddNumbers\OddNumbers\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\Exercises\Debugger\OddNumbers\OddNumbers\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\Exercises\Debugger\OddNumbers\OddNumbers folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\Exercises\Debugger\OddNumbers folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\Exercises\Debugger folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\Exercises folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\CompletedApplication\CarPaymentCalculator\CarPaymentCalculator\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\CompletedApplication\CarPaymentCalculator\CarPaymentCalculator\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\CompletedApplication\CarPaymentCalculator\CarPaymentCalculator\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\CompletedApplication\CarPaymentCalculator\CarPaymentCalculator\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\CompletedApplication\CarPaymentCalculator\CarPaymentCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\CompletedApplication\CarPaymentCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09\CompletedApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial09 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial08\TemplateApplication\DentalPayment\DentalPayment\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial08\TemplateApplication\DentalPayment\DentalPayment\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial08\TemplateApplication\DentalPayment\DentalPayment\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial08\TemplateApplication\DentalPayment\DentalPayment\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial08\TemplateApplication\DentalPayment\DentalPayment folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial08\TemplateApplication\DentalPayment folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial08\TemplateApplication folder moved successfully.

Goldensunboy · 2011/03/07

D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\TemplateApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\ExpandedWageCalculator\WageCalculator\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\ExpandedWageCalculator\WageCalculator\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\ExpandedWageCalculator\WageCalculator\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\ExpandedWageCalculator\WageCalculator\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\ExpandedWageCalculator\WageCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\ExpandedWageCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\Debugger\Grades\Grades\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\Debugger\Grades\Grades\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\Debugger\Grades\Grades\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\Debugger\Grades\Grades\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\Debugger\Grades\Grades folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\Debugger\Grades folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\Debugger folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\CurrencyConverter\CurrencyConverter\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\CurrencyConverter\CurrencyConverter\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\CurrencyConverter\CurrencyConverter\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\CurrencyConverter\CurrencyConverter\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\CurrencyConverter\CurrencyConverter folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\CurrencyConverter folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\CreditChecker\CreditChecker\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\CreditChecker\CreditChecker\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\CreditChecker\CreditChecker\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\CreditChecker\CreditChecker\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\CreditChecker\CreditChecker folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\CreditChecker folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\CompletedApplication\WageCalculator\WageCalculator\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\CompletedApplication\WageCalculator\WageCalculator\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\CompletedApplication\WageCalculator\WageCalculator\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\CompletedApplication\WageCalculator\WageCalculator\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\CompletedApplication\WageCalculator\WageCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\CompletedApplication\WageCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\CompletedApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\TemplateApplication\Inventory3\Inventory3\obj\Debug\TempPE folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\TemplateApplication\Inventory3\Inventory3\obj\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\TemplateApplication\Inventory3\Inventory3\obj folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\TemplateApplication\Inventory3\Inventory3\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\TemplateApplication\Inventory3\Inventory3\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\TemplateApplication\Inventory3\Inventory3\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\TemplateApplication\Inventory3\Inventory3\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\TemplateApplication\Inventory3\Inventory3 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\TemplateApplication\Inventory3 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\TemplateApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\TemperatureConversion\TemperatureConversion\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\TemperatureConversion\TemperatureConversion\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\TemperatureConversion\TemperatureConversion\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\TemperatureConversion\TemperatureConversion\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\TemperatureConversion\TemperatureConversion folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\TemperatureConversion folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\SimpleEncryption\SimpleEncryption\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\SimpleEncryption\SimpleEncryption\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\SimpleEncryption\SimpleEncryption\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\SimpleEncryption\SimpleEncryption\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\SimpleEncryption\SimpleEncryption folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\SimpleEncryption folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\SimpleCalculator\SimpleCalculator\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\SimpleCalculator\SimpleCalculator\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\SimpleCalculator\SimpleCalculator\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\SimpleCalculator\SimpleCalculator\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\SimpleCalculator\SimpleCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\SimpleCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\AverageDebugging\AverageDebugging\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\AverageDebugging\AverageDebugging\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\AverageDebugging\AverageDebugging\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\AverageDebugging\AverageDebugging\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\AverageDebugging\AverageDebugging folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\AverageDebugging folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\CompletedApplication\Inventory3\Inventory3\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\CompletedApplication\Inventory3\Inventory3\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\CompletedApplication\Inventory3\Inventory3\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\CompletedApplication\Inventory3\Inventory3\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\CompletedApplication\Inventory3\Inventory3 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\CompletedApplication\Inventory3 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\CompletedApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\TemplateApplication\Inventory2\Inventory2\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\TemplateApplication\Inventory2\Inventory2\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\TemplateApplication\Inventory2\Inventory2\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\TemplateApplication\Inventory2\Inventory2\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\TemplateApplication\Inventory2\Inventory2 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\TemplateApplication\Inventory2 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\TemplateApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\Exercises\InventoryEnhancement\InventoryEnhancement\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\Exercises\InventoryEnhancement\InventoryEnhancement\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\Exercises\InventoryEnhancement\InventoryEnhancement\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\Exercises\InventoryEnhancement\InventoryEnhancement\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\Exercises\InventoryEnhancement\InventoryEnhancement folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\Exercises\InventoryEnhancement folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\Exercises\DebuggingExercise\AccountInformation\AccountInformation\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\Exercises\DebuggingExercise\AccountInformation\AccountInformation\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\Exercises\DebuggingExercise\AccountInformation\AccountInformation\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\Exercises\DebuggingExercise\AccountInformation\AccountInformation\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\Exercises\DebuggingExercise\AccountInformation\AccountInformation folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\Exercises\DebuggingExercise\AccountInformation folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\Exercises\DebuggingExercise folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\Exercises\AccountInformation\AccountInformation\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\Exercises\AccountInformation\AccountInformation\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\Exercises\AccountInformation\AccountInformation\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\Exercises\AccountInformation\AccountInformation\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\Exercises\AccountInformation\AccountInformation folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\Exercises\AccountInformation folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\Exercises folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\CompletedApplication\Inventory2\Inventory2\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\CompletedApplication\Inventory2\Inventory2\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\CompletedApplication\Inventory2\Inventory2\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\CompletedApplication\Inventory2\Inventory2\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\CompletedApplication\Inventory2\Inventory2 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\CompletedApplication\Inventory2 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\CompletedApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\Password\Password\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\Password\Password\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\Password\Password\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\Password\Password\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\Password\Password folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\Password folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\MortgageCalculator\MortgageCalculator\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\MortgageCalculator\MortgageCalculator\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\MortgageCalculator\MortgageCalculator\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\MortgageCalculator\MortgageCalculator\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\MortgageCalculator\MortgageCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\MortgageCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\MonitorInvoice\MonitorInvoice\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\MonitorInvoice\MonitorInvoice\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\MonitorInvoice\MonitorInvoice\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\MonitorInvoice\MonitorInvoice\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\MonitorInvoice\MonitorInvoice folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\MonitorInvoice folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\AddressBook\AddressBook\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\AddressBook\AddressBook\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\AddressBook\AddressBook\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\AddressBook\AddressBook\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\AddressBook\AddressBook folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\AddressBook folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\CompletedApplication\Inventory\Inventory\obj\Debug\TempPE folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\CompletedApplication\Inventory\Inventory\obj\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\CompletedApplication\Inventory\Inventory\obj folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\CompletedApplication\Inventory\Inventory\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\CompletedApplication\Inventory\Inventory\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\CompletedApplication\Inventory\Inventory\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\CompletedApplication\Inventory\Inventory\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\CompletedApplication\Inventory\Inventory folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\CompletedApplication\Inventory folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\CompletedApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03\TemplateApplication\Welcome\Welcome\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03\TemplateApplication\Welcome\Welcome\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03\TemplateApplication\Welcome\Welcome\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03\TemplateApplication\Welcome\Welcome\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03\TemplateApplication\Welcome\Welcome folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03\TemplateApplication\Welcome folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03\TemplateApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03\ExerciseImages\VendingMachine\Corel Auto-Preserve folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03\ExerciseImages\VendingMachine folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03\ExerciseImages\Radio folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03\ExerciseImages folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03\CompletedApplication\Welcome\Welcome\Resources folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03\CompletedApplication\Welcome\Welcome\obj\Debug\TempPE folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03\CompletedApplication\Welcome\Welcome\obj\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03\CompletedApplication\Welcome\Welcome\obj folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03\CompletedApplication\Welcome\Welcome\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial08\Exercises\FuzzyDiceOrderForm\FuzzyDiceOrderForm\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial08\Exercises\FuzzyDiceOrderForm\FuzzyDiceOrderForm\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial08\Exercises\FuzzyDiceOrderForm\FuzzyDiceOrderForm\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial08\Exercises\FuzzyDiceOrderForm\FuzzyDiceOrderForm\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial08\Exercises\FuzzyDiceOrderForm\FuzzyDiceOrderForm folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial08\Exercises\FuzzyDiceOrderForm folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial08\Exercises\DentalPaymentEnhanced\DentalPaymentEnhanced\obj\Debug\TempPE folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial08\Exercises\DentalPaymentEnhanced\DentalPaymentEnhanced\obj\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial08\Exercises\DentalPaymentEnhanced\DentalPaymentEnhanced\obj folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial08\Exercises\DentalPaymentEnhanced\DentalPaymentEnhanced\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial08\Exercises\DentalPaymentEnhanced\DentalPaymentEnhanced\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial08\Exercises\DentalPaymentEnhanced\DentalPaymentEnhanced\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial08\Exercises\DentalPaymentEnhanced\DentalPaymentEnhanced\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial08\Exercises\DentalPaymentEnhanced\DentalPaymentEnhanced folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial08\Exercises\DentalPaymentEnhanced folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial08\Exercises\Debugger\SiblingSurvey\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial08\Exercises\Debugger\SiblingSurvey\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial08\Exercises\Debugger\SiblingSurvey\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial08\Exercises\Debugger\SiblingSurvey\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial08\Exercises\Debugger\SiblingSurvey folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial08\Exercises\Debugger folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial08\Exercises folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial08\CompletedApplication\DentalPayment\DentalPayment\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial08\CompletedApplication\DentalPayment\DentalPayment\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial08\CompletedApplication\DentalPayment\DentalPayment\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial08\CompletedApplication\DentalPayment\DentalPayment\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial08\CompletedApplication\DentalPayment\DentalPayment folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial08\CompletedApplication\DentalPayment folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial08\CompletedApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial08 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\TemplateApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\ExpandedWageCalculator\WageCalculator\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\ExpandedWageCalculator\WageCalculator\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\ExpandedWageCalculator\WageCalculator\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\ExpandedWageCalculator\WageCalculator\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\ExpandedWageCalculator\WageCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\ExpandedWageCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\Debugger\Grades\Grades\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\Debugger\Grades\Grades\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\Debugger\Grades\Grades\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\Debugger\Grades\Grades\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\Debugger\Grades\Grades folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\Debugger\Grades folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\Debugger folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\CurrencyConverter\CurrencyConverter\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\CurrencyConverter\CurrencyConverter\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\CurrencyConverter\CurrencyConverter\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\CurrencyConverter\CurrencyConverter\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\CurrencyConverter\CurrencyConverter folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\CurrencyConverter folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\CreditChecker\CreditChecker\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\CreditChecker\CreditChecker\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\CreditChecker\CreditChecker\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\CreditChecker\CreditChecker\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\CreditChecker\CreditChecker folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises\CreditChecker folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\Exercises folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\CompletedApplication\WageCalculator\WageCalculator\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\CompletedApplication\WageCalculator\WageCalculator\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\CompletedApplication\WageCalculator\WageCalculator\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\CompletedApplication\WageCalculator\WageCalculator\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\CompletedApplication\WageCalculator\WageCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\CompletedApplication\WageCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07\CompletedApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial07 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\TemplateApplication\Inventory3\Inventory3\obj\Debug\TempPE folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\TemplateApplication\Inventory3\Inventory3\obj\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\TemplateApplication\Inventory3\Inventory3\obj folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\TemplateApplication\Inventory3\Inventory3\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\TemplateApplication\Inventory3\Inventory3\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\TemplateApplication\Inventory3\Inventory3\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\TemplateApplication\Inventory3\Inventory3\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\TemplateApplication\Inventory3\Inventory3 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\TemplateApplication\Inventory3 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\TemplateApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\TemperatureConversion\TemperatureConversion\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\TemperatureConversion\TemperatureConversion\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\TemperatureConversion\TemperatureConversion\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\TemperatureConversion\TemperatureConversion\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\TemperatureConversion\TemperatureConversion folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\TemperatureConversion folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\SimpleEncryption\SimpleEncryption\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\SimpleEncryption\SimpleEncryption\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\SimpleEncryption\SimpleEncryption\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\SimpleEncryption\SimpleEncryption\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\SimpleEncryption\SimpleEncryption folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\SimpleEncryption folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\SimpleCalculator\SimpleCalculator\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\SimpleCalculator\SimpleCalculator\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\SimpleCalculator\SimpleCalculator\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\SimpleCalculator\SimpleCalculator\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\SimpleCalculator\SimpleCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\SimpleCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\AverageDebugging\AverageDebugging\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\AverageDebugging\AverageDebugging\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\AverageDebugging\AverageDebugging\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\AverageDebugging\AverageDebugging\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\AverageDebugging\AverageDebugging folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises\AverageDebugging folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\Exercises folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\CompletedApplication\Inventory3\Inventory3\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\CompletedApplication\Inventory3\Inventory3\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\CompletedApplication\Inventory3\Inventory3\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\CompletedApplication\Inventory3\Inventory3\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\CompletedApplication\Inventory3\Inventory3 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\CompletedApplication\Inventory3 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06\CompletedApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial06 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\TemplateApplication\Inventory2\Inventory2\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\TemplateApplication\Inventory2\Inventory2\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\TemplateApplication\Inventory2\Inventory2\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\TemplateApplication\Inventory2\Inventory2\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\TemplateApplication\Inventory2\Inventory2 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\TemplateApplication\Inventory2 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\TemplateApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\Exercises\InventoryEnhancement\InventoryEnhancement\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\Exercises\InventoryEnhancement\InventoryEnhancement\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\Exercises\InventoryEnhancement\InventoryEnhancement\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\Exercises\InventoryEnhancement\InventoryEnhancement\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\Exercises\InventoryEnhancement\InventoryEnhancement folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\Exercises\InventoryEnhancement folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\Exercises\DebuggingExercise\AccountInformation\AccountInformation\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\Exercises\DebuggingExercise\AccountInformation\AccountInformation\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\Exercises\DebuggingExercise\AccountInformation\AccountInformation\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\Exercises\DebuggingExercise\AccountInformation\AccountInformation\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\Exercises\DebuggingExercise\AccountInformation\AccountInformation folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\Exercises\DebuggingExercise\AccountInformation folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\Exercises\DebuggingExercise folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\Exercises\AccountInformation\AccountInformation\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\Exercises\AccountInformation\AccountInformation\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\Exercises\AccountInformation\AccountInformation\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\Exercises\AccountInformation\AccountInformation\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\Exercises\AccountInformation\AccountInformation folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\Exercises\AccountInformation folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\Exercises folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\CompletedApplication\Inventory2\Inventory2\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\CompletedApplication\Inventory2\Inventory2\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\CompletedApplication\Inventory2\Inventory2\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\CompletedApplication\Inventory2\Inventory2\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\CompletedApplication\Inventory2\Inventory2 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\CompletedApplication\Inventory2 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05\CompletedApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial05 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\Password\Password\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\Password\Password\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\Password\Password\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\Password\Password\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\Password\Password folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\Password folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\MortgageCalculator\MortgageCalculator\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\MortgageCalculator\MortgageCalculator\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\MortgageCalculator\MortgageCalculator\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\MortgageCalculator\MortgageCalculator\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\MortgageCalculator\MortgageCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\MortgageCalculator folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\MonitorInvoice\MonitorInvoice\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\MonitorInvoice\MonitorInvoice\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\MonitorInvoice\MonitorInvoice\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\MonitorInvoice\MonitorInvoice\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\MonitorInvoice\MonitorInvoice folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\MonitorInvoice folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\AddressBook\AddressBook\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\AddressBook\AddressBook\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\AddressBook\AddressBook\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\AddressBook\AddressBook\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\AddressBook\AddressBook folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises\AddressBook folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\Exercises folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\CompletedApplication\Inventory\Inventory\obj\Debug\TempPE folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\CompletedApplication\Inventory\Inventory\obj\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\CompletedApplication\Inventory\Inventory\obj folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\CompletedApplication\Inventory\Inventory\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\CompletedApplication\Inventory\Inventory\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\CompletedApplication\Inventory\Inventory\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\CompletedApplication\Inventory\Inventory\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\CompletedApplication\Inventory\Inventory folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\CompletedApplication\Inventory folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04\CompletedApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial04 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03\TemplateApplication\Welcome\Welcome\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03\TemplateApplication\Welcome\Welcome\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03\TemplateApplication\Welcome\Welcome\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03\TemplateApplication\Welcome\Welcome\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03\TemplateApplication\Welcome\Welcome folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03\TemplateApplication\Welcome folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03\TemplateApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03\ExerciseImages\VendingMachine\Corel Auto-Preserve folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03\ExerciseImages\VendingMachine folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03\ExerciseImages\Radio folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03\ExerciseImages folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03\CompletedApplication\Welcome\Welcome\Resources folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03\CompletedApplication\Welcome\Welcome\obj\Debug\TempPE folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03\CompletedApplication\Welcome\Welcome\obj\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03\CompletedApplication\Welcome\Welcome\obj folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03\CompletedApplication\Welcome\Welcome\My Project folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03\CompletedApplication\Welcome\Welcome\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03\CompletedApplication\Welcome\Welcome\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03\CompletedApplication\Welcome\Welcome\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03\CompletedApplication\Welcome\Welcome folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03\CompletedApplication\Welcome folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03\CompletedApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial02 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial01 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials folder moved successfully.
D:\USB-Backup_05-31-10\Darton\Visual Basic\Tutorials\Tutorial28\CompletedApplication\Bookstore\BookInformation.aspx moved successfully.
D:\USB-Backup_05-31-10\Darton\Visual Basic\Tutorials\Tutorial28\CompletedApplication\Bookstore\Books.aspx moved successfully.
D:\USB-Backup_05-31-10\Darton\Visual Basic\Tutorials\Tutorial29\CompletedApplication\Bookstore\BookInformation.aspx moved successfully.
D:\USB-Backup_05-31-10\Darton\Visual Basic\Tutorials\Tutorial29\CompletedApplication\Bookstore\Books.aspx moved successfully.
D:\USB-Backup_05-31-10\Darton\Visual Basic\Tutorials\Tutorial31\CompletedApplication\Bookstore\BookInformation.aspx moved successfully.
D:\USB-Backup_05-31-10\Darton\Visual Basic\Tutorials\Tutorial31\CompletedApplication\Bookstore\Books.aspx moved successfully.
D:\USB-Backup_12-26-09\Darton\Visual Basic\Tutorials\Tutorial28\CompletedApplication\Bookstore\BookInformation.aspx moved successfully.
D:\USB-Backup_12-26-09\Darton\Visual Basic\Tutorials\Tutorial28\CompletedApplication\Bookstore\Books.aspx moved successfully.
D:\USB-Backup_12-26-09\Darton\Visual Basic\Tutorials\Tutorial29\CompletedApplication\Bookstore\BookInformation.aspx moved successfully.
D:\USB-Backup_12-26-09\Darton\Visual Basic\Tutorials\Tutorial29\CompletedApplication\Bookstore\Books.aspx moved successfully.
D:\USB-Backup_12-26-09\Darton\Visual Basic\Tutorials\Tutorial31\CompletedApplication\Bookstore\BookInformation.aspx moved successfully.
D:\USB-Backup_12-26-09\Darton\Visual Basic\Tutorials\Tutorial31\CompletedApplication\Bookstore\Books.aspx moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03\CompletedApplication\Welcome\Welcome\bin\Release folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03\CompletedApplication\Welcome\Welcome\bin\Debug folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03\CompletedApplication\Welcome\Welcome\bin folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03\CompletedApplication\Welcome\Welcome folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03\CompletedApplication\Welcome folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03\CompletedApplication folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial03 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial02 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials\Tutorial01 folder moved successfully.
D:\USB\Darton\Visual Basic\Tutorials folder moved successfully.
D:\USB-Backup_05-31-10\Darton\Visual Basic\Tutorials\Tutorial28\CompletedApplication\Bookstore\BookInformation.aspx moved successfully.
D:\USB-Backup_05-31-10\Darton\Visual Basic\Tutorials\Tutorial28\CompletedApplication\Bookstore\Books.aspx moved successfully.
D:\USB-Backup_05-31-10\Darton\Visual Basic\Tutorials\Tutorial29\CompletedApplication\Bookstore\BookInformation.aspx moved successfully.
D:\USB-Backup_05-31-10\Darton\Visual Basic\Tutorials\Tutorial29\CompletedApplication\Bookstore\Books.aspx moved successfully.
D:\USB-Backup_05-31-10\Darton\Visual Basic\Tutorials\Tutorial31\CompletedApplication\Bookstore\BookInformation.aspx moved successfully.
D:\USB-Backup_05-31-10\Darton\Visual Basic\Tutorials\Tutorial31\CompletedApplication\Bookstore\Books.aspx moved successfully.
D:\USB-Backup_12-26-09\Darton\Visual Basic\Tutorials\Tutorial28\CompletedApplication\Bookstore\BookInformation.aspx moved successfully.
D:\USB-Backup_12-26-09\Darton\Visual Basic\Tutorials\Tutorial28\CompletedApplication\Bookstore\Books.aspx moved successfully.
D:\USB-Backup_12-26-09\Darton\Visual Basic\Tutorials\Tutorial29\CompletedApplication\Bookstore\BookInformation.aspx moved successfully.
D:\USB-Backup_12-26-09\Darton\Visual Basic\Tutorials\Tutorial29\CompletedApplication\Bookstore\Books.aspx moved successfully.
D:\USB-Backup_12-26-09\Darton\Visual Basic\Tutorials\Tutorial31\CompletedApplication\Bookstore\BookInformation.aspx moved successfully.
D:\USB-Backup_12-26-09\Darton\Visual Basic\Tutorials\Tutorial31\CompletedApplication\Bookstore\Books.aspx moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Andrew
->Temp folder emptied: 257058 bytes
->Temporary Internet Files folder emptied: 45825062 bytes
->Flash cache emptied: 2005 bytes

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 3558984 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 47.00 mb

[EMPTYFLASH]

User: All Users

User: Andrew
->Flash cache emptied: 0 bytes

User: Default

User: Default User

User: Public

Total Flash Files Cleaned = 0.00 mb

OTL by OldTimer - Version 3.2.22.2 log created on 03072011_004947

Files\Folders moved on Reboot...
File\Folder D:\Users\Andrew\AppData\Local\Temp\~DF3CA8693DEDB1A236.TMP not found!
File\Folder D:\Users\Andrew\AppData\Local\Temp\~DF3CD45A990799BB9A.TMP not found!
File\Folder D:\Users\Andrew\AppData\Local\Temp\~DF763BF41A969900EF.TMP not found!
File\Folder D:\Users\Andrew\AppData\Local\Temp\~DF83A690EDB5D8A681.TMP not found!
File\Folder D:\Users\Andrew\AppData\Local\Temp\~DFA2EBE57DB07A0229.TMP not found!
File\Folder D:\Users\Andrew\AppData\Local\Temp\~DFE7DA7189479860E9.TMP not found!
File\Folder D:\Users\Andrew\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\YX7JIQZS\97992-active-google-searches-redirected-random-bluescreens[1].html not found!
D:\Users\Andrew\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\YX7JIQZS\ai[1].htm moved successfully.
File\Folder D:\Users\Andrew\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\YX7JIQZS\update_security_info[1].htm not found!
D:\Users\Andrew\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\VG7QNAKC\ads[2].htm moved successfully.
D:\Users\Andrew\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\VG7QNAKC\ai[1].htm moved successfully.
D:\Users\Andrew\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\VG7QNAKC\ai[2].htm moved successfully.
D:\Users\Andrew\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\VG7QNAKC\ai[3].htm moved successfully.
D:\Users\Andrew\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\VG7QNAKC\ai[4].htm moved successfully.
File\Folder D:\Users\Andrew\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\VG7QNAKC\audmeasure[1].gif not found!
D:\Users\Andrew\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\VG7QNAKC\L[2].htm moved successfully.
File\Folder D:\Users\Andrew\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\VG7QNAKC\p-01-0VIaSjnOLg[1].gif not found!
File\Folder D:\Users\Andrew\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\VG7QNAKC\permalink[1].htm not found!
D:\Users\Andrew\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KJTG9LJ3\;ord=1661309793[1].htm moved successfully.
D:\Users\Andrew\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KJTG9LJ3\ai[1].htm moved successfully.
D:\Users\Andrew\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KJTG9LJ3\ai[2].htm moved successfully.
D:\Users\Andrew\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KJTG9LJ3\ai[3].htm moved successfully.
File\Folder D:\Users\Andrew\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KJTG9LJ3\audmeasure[1].gif not found!
File\Folder D:\Users\Andrew\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KJTG9LJ3\p-01-0VIaSjnOLg[1].gif not found!
D:\Users\Andrew\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9G2PBARB\11[1].htm moved successfully.
D:\Users\Andrew\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9G2PBARB\ai[1].htm moved successfully.
D:\Users\Andrew\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\AntiPhishing\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat moved successfully.
D:\Users\Andrew\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\MSIMGSIZ.DAT moved successfully.

Registry entries deleted on Reboot...

Goldensunboy · 2011/03/07

Admin wants me to continue in this thread, because since this hasn't been resolved yet, malware could be a potential contributor; however, I cannot complete the last steps from your other post because many of them have to do with installed programs that won't show up in Windows 7 because they were installed in Vista.

Is there any kind of scan you could reccommend that I may be able to run in Windows 7 to find malware or installation problems for Vista, or should I employ some other method of malware removal? It may be worth noting that CHKDSK performed a great deal of operations and fixes when I ran it for C:\, but it didn't fix the boot problem.

Log in or Sign up

Solved Google searches redirected, random bluescreens

Goldensunboy Inactive Thread Starter

broni Moderator Malware Analyst

Goldensunboy Inactive Thread Starter

broni Moderator Malware Analyst

Goldensunboy Inactive Thread Starter

broni Moderator Malware Analyst

Goldensunboy Inactive Thread Starter

broni Moderator Malware Analyst

Goldensunboy Inactive Thread Starter

broni Moderator Malware Analyst

Goldensunboy Inactive Thread Starter

broni Moderator Malware Analyst

Goldensunboy Inactive Thread Starter

broni Moderator Malware Analyst

Goldensunboy Inactive Thread Starter

broni Moderator Malware Analyst

Goldensunboy Inactive Thread Starter

Goldensunboy Inactive Thread Starter

Goldensunboy Inactive Thread Starter

Goldensunboy Inactive Thread Starter

Share This Page

Log in or Sign up

Solved Google searches redirected, random bluescreens

Goldensunboy Inactive Thread Starter

broni Moderator Malware Analyst

Goldensunboy Inactive Thread Starter

broni Moderator Malware Analyst

Goldensunboy Inactive Thread Starter

broni Moderator Malware Analyst

Goldensunboy Inactive Thread Starter

broni Moderator Malware Analyst

Goldensunboy Inactive Thread Starter

broni Moderator Malware Analyst

Goldensunboy Inactive Thread Starter

broni Moderator Malware Analyst

Goldensunboy Inactive Thread Starter

broni Moderator Malware Analyst

Goldensunboy Inactive Thread Starter

broni Moderator Malware Analyst

Goldensunboy Inactive Thread Starter

Goldensunboy Inactive Thread Starter

Goldensunboy Inactive Thread Starter

Goldensunboy Inactive Thread Starter

Share This Page

Useful Searches