========== Files/Folders - Created Within 30 Days ========== [2013-06-10 21:31:36 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Alissa\Desktop\OTL.com
[2013-06-10 21:04:07 | 000,538,254 | ---- | C] (
www.sordum.net) -- C:\Users\Alissa\Desktop\EnableCMD.exe
[2013-06-10 21:02:00 | 000,000,000 | ---D | C] -- C:\ProgramData\StarApp
[2013-06-10 21:01:58 | 000,000,000 | ---D | C] -- C:\ProgramData\BetterSoft
[2013-06-10 21:01:57 | 000,000,000 | ---D | C] -- C:\ProgramData\SearchNewTab
[2013-06-10 21:01:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SearchNewTab
[2013-06-10 21:01:57 | 000,000,000 | ---D | C] -- C:\Users\Alissa\AppData\Local\Google
[2013-06-10 21:01:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\EasyLife
[2013-06-10 21:01:45 | 000,000,000 | ---D | C] -- C:\ProgramData\InstallMate
[2013-06-03 14:17:23 | 000,000,000 | ---D | C] -- C:\Users\Alissa\Desktop\Nieuwe map
[2013-06-02 21:41:31 | 000,000,000 | ---D | C] -- C:\Windows\Minidump
[2013-05-31 22:43:20 | 000,000,000 | ---D | C] -- C:\Users\Alissa\Desktop\Apple Blossom
[2013-05-31 22:14:59 | 000,000,000 | ---D | C] -- C:\Users\Alissa\Desktop\Beer Barrel Polka
[2013-05-31 21:14:15 | 000,000,000 | ---D | C] -- C:\Users\Alissa\Desktop\Tico tico
[2013-05-31 21:08:21 | 000,000,000 | ---D | C] -- C:\Users\Alissa\Desktop\Shoo Shoo baby
[2013-05-31 20:59:44 | 000,000,000 | ---D | C] -- C:\Users\Alissa\Desktop\Beat me daddy eight to the bar
[2013-05-29 23:22:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows 7 - Codec Pack
[2013-05-29 23:22:02 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\C2MP
[2013-05-29 20:40:45 | 000,000,000 | ---D | C] -- C:\Users\Alissa\Desktop\Rum and coca cola
[2013-05-29 20:32:38 | 012,800,512 | ---- | C] (IDT, Inc.) -- C:\Windows\SysNative\idtcpl64.cpl
[2013-05-29 20:32:38 | 003,467,264 | ---- | C] (IDT, Inc.) -- C:\Windows\SysNative\stlang64.dll
[2013-05-29 20:32:38 | 000,564,224 | ---- | C] (IDT, Inc.) -- C:\Windows\SysNative\idt64mp1.exe
[2013-05-29 08:14:36 | 000,000,000 | ---D | C] -- C:\Users\Alissa\AppData\Local\ElevatedDiagnostics
[2013-05-22 08:35:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2013-05-21 20:22:19 | 000,000,000 | ---D | C] -- C:\Users\Alissa\Desktop\Chattanooga choo choo
[2013-05-21 20:21:56 | 000,000,000 | ---D | C] -- C:\Users\Alissa\Desktop\don't sit under the apple tree
[2013-05-21 20:21:33 | 000,000,000 | ---D | C] -- C:\Users\Alissa\Desktop\Bei mir bist du shoen
[2013-05-21 20:21:08 | 000,000,000 | ---D | C] -- C:\Users\Alissa\Desktop\In the mood
[2013-05-19 23:38:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2013-05-19 23:37:43 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2013-05-19 23:37:42 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2013-05-19 23:37:42 | 000,000,000 | ---D | C] -- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
[2013-05-13 21:09:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Meridian93
[2013-05-13 20:43:32 | 000,000,000 | ---D | C] -- C:\Users\Alissa\AppData\Roaming\Meridian93
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files - Modified Within 30 Days ========== [2013-06-10 21:31:39 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Alissa\Desktop\OTL.com
[2013-06-10 21:07:00 | 000,000,940 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013-06-10 21:04:22 | 000,538,254 | ---- | M] (
www.sordum.net) -- C:\Users\Alissa\Desktop\EnableCMD.exe
[2013-06-10 21:01:59 | 000,000,478 | -H-- | M] () -- C:\Windows\tasks\schedule!2844174011.job
[2013-06-10 20:55:33 | 000,014,240 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013-06-10 20:55:33 | 000,014,240 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013-06-10 20:48:16 | 000,001,093 | ---- | M] () -- C:\Users\Alissa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\BBC iPlayer Desktop.lnk
[2013-06-10 20:47:31 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013-06-10 20:47:22 | 3062,910,976 | -HS- | M] () -- C:\hiberfil.sys
[2013-06-09 10:49:53 | 000,648,201 | ---- | M] () -- C:\Users\Alissa\Desktop\adwcleaner.exe
[2013-06-06 10:07:25 | 000,001,798 | ---- | M] () -- C:\Users\Public\Desktop\Vuze.lnk
[2013-06-06 10:07:25 | 000,001,798 | ---- | M] () -- C:\Users\Alissa\Application Data\Microsoft\Internet Explorer\Quick Launch\Vuze.lnk
[2013-06-02 21:41:20 | 312,795,965 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2013-05-31 00:14:45 | 004,996,283 | ---- | M] () -- C:\Users\Alissa\Desktop\bass The Andrews Sisters - Boogie Woogie Bugle Boy (Backing Track Instrumentale)(2).mp3
[2013-05-29 23:22:30 | 000,001,901 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CodecPackUpdateChecker.lnk
[2013-05-29 23:22:30 | 000,001,866 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CodecPackTrayMenu.lnk
[2013-05-27 08:09:56 | 001,549,262 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2013-05-27 08:09:56 | 000,701,564 | ---- | M] () -- C:\Windows\SysNative\perfh013.dat
[2013-05-27 08:09:56 | 000,616,008 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2013-05-27 08:09:56 | 000,133,564 | ---- | M] () -- C:\Windows\SysNative\perfc013.dat
[2013-05-27 08:09:56 | 000,106,388 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2013-05-25 22:06:26 | 004,513,122 | ---- | M] () -- C:\Users\Alissa\Desktop\Jane Russell - Buttons And Bows (Backing Track Instrumentale).mp3
[2013-05-19 23:38:13 | 000,001,783 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2013-05-15 12:46:51 | 000,415,344 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files Created - No Company Name ========== [2013-06-10 21:01:58 | 000,000,478 | -H-- | C] () -- C:\Windows\tasks\schedule!2844174011.job
[2013-06-09 10:49:43 | 000,648,201 | ---- | C] () -- C:\Users\Alissa\Desktop\adwcleaner.exe
[2013-06-02 21:41:20 | 312,795,965 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2013-05-31 00:14:42 | 004,996,283 | ---- | C] () -- C:\Users\Alissa\Desktop\bass The Andrews Sisters - Boogie Woogie Bugle Boy (Backing Track Instrumentale)(2).mp3
[2013-05-29 23:22:30 | 000,001,901 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CodecPackUpdateChecker.lnk
[2013-05-29 23:22:30 | 000,001,866 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CodecPackTrayMenu.lnk
[2013-05-29 20:58:42 | 000,178,688 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2013-05-25 22:06:23 | 004,513,122 | ---- | C] () -- C:\Users\Alissa\Desktop\Jane Russell - Buttons And Bows (Backing Track Instrumentale).mp3
[2013-05-19 23:38:13 | 000,001,783 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2013-03-16 04:49:24 | 000,038,736 | ---- | C] () -- C:\Windows\SysWow64\dischandler.exe
[2013-03-13 20:39:34 | 003,915,776 | ---- | C] () -- C:\Windows\SysWow64\ffmpeg.dll
[2013-03-13 20:38:34 | 000,112,640 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2013-03-13 20:35:56 | 000,271,360 | ---- | C] () -- C:\Windows\SysWow64\TomsMoComp_ff.dll
[2013-03-13 20:35:38 | 000,157,184 | ---- | C] () -- C:\Windows\SysWow64\ff_unrar.dll
[2013-03-13 20:35:36 | 000,147,456 | ---- | C] () -- C:\Windows\SysWow64\ff_libmad.dll
[2013-03-13 20:35:36 | 000,099,840 | ---- | C] () -- C:\Windows\SysWow64\ff_wmv9.dll
[2013-03-13 20:35:34 | 001,525,760 | ---- | C] () -- C:\Windows\SysWow64\ff_samplerate.dll
[2013-03-13 20:35:34 | 000,211,968 | ---- | C] () -- C:\Windows\SysWow64\ff_libdts.dll
[2013-03-13 20:35:34 | 000,114,688 | ---- | C] () -- C:\Windows\SysWow64\ff_liba52.dll
[2013-02-10 15:15:04 | 000,384,472 | ---- | C] () -- C:\Windows\SysWow64\swscale-lav-2.dll
[2013-02-10 15:15:04 | 000,188,072 | ---- | C] () -- C:\Windows\SysWow64\libbluray.dll
[2013-02-10 15:15:02 | 007,833,552 | ---- | C] () -- C:\Windows\SysWow64\avcodec-lav-54.dll
[2013-02-10 15:15:02 | 001,256,952 | ---- | C] () -- C:\Windows\SysWow64\avformat-lav-54.dll
[2013-02-10 15:15:02 | 000,247,920 | ---- | C] () -- C:\Windows\SysWow64\avutil-lav-52.dll
[2013-02-10 15:15:02 | 000,169,888 | ---- | C] () -- C:\Windows\SysWow64\avfilter-lav-3.dll
[2013-02-10 15:15:02 | 000,165,160 | ---- | C] () -- C:\Windows\SysWow64\avresample-lav-1.dll
[2013-01-30 20:46:06 | 000,000,057 | ---- | C] () -- C:\ProgramData\Ament.ini
[2012-09-29 23:47:28 | 000,000,178 | ---- | C] () -- C:\Windows\SysWow64\Formats.ini
[2012-01-10 23:27:26 | 000,867,020 | ---- | C] () -- C:\Windows\SysWow64\igkrng575.bin
[2012-01-10 23:27:26 | 000,128,204 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng575.bin
[2012-01-10 23:27:26 | 000,105,608 | ---- | C] () -- C:\Windows\SysWow64\igfcg575m.bin
[2012-01-10 22:29:54 | 013,904,384 | ---- | C] () -- C:\Windows\SysWow64\ig4icd32.dll
[2011-12-07 20:32:24 | 000,216,064 | ---- | C] ( ) -- C:\Windows\SysWow64\Lagarith.dll
[2011-09-08 15:00:52 | 000,150,528 | ---- | C] () -- C:\Windows\SysWow64\mkx.dll
[2011-09-08 15:00:48 | 000,142,336 | ---- | C] () -- C:\Windows\SysWow64\mp4.dll
[2011-09-08 15:00:42 | 000,123,392 | ---- | C] () -- C:\Windows\SysWow64\ogm.dll
[2011-09-08 15:00:38 | 000,249,856 | ---- | C] () -- C:\Windows\SysWow64\dxr.dll
[2011-09-08 15:00:34 | 000,113,152 | ---- | C] () -- C:\Windows\SysWow64\dsmux.exe
[2011-09-08 15:00:24 | 000,154,624 | ---- | C] () -- C:\Windows\SysWow64\ts.dll
[2011-09-08 15:00:10 | 000,137,728 | ---- | C] () -- C:\Windows\SysWow64\mkv2vfr.exe
[2011-09-08 15:00:06 | 000,358,400 | ---- | C] () -- C:\Windows\SysWow64\gdsmux.exe
[2011-09-08 14:59:54 | 000,080,384 | ---- | C] () -- C:\Windows\SysWow64\mkzlib.dll
[2011-09-08 14:59:52 | 000,024,576 | ---- | C] () -- C:\Windows\SysWow64\mkunicode.dll
[2011-06-24 04:58:32 | 000,242,259 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2011-06-24 04:58:04 | 000,877,296 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
========== ZeroAccess Check ========== [2009-07-14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013-02-27 06:52:56 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013-02-27 05:55:05 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
========== LOP Check ========== [2013-02-22 23:16:25 | 000,000,000 | ---D | M] -- C:\Users\Alissa\AppData\Roaming\8floor
[2013-02-21 15:30:59 | 000,000,000 | ---D | M] -- C:\Users\Alissa\AppData\Roaming\AlawarEntertainment
[2013-03-06 23:29:04 | 000,000,000 | ---D | M] -- C:\Users\Alissa\AppData\Roaming\Artifex Mundi
[2013-05-06 18:22:04 | 000,000,000 | ---D | M] -- C:\Users\Alissa\AppData\Roaming\Audacity
[2013-06-08 09:08:21 | 000,000,000 | ---D | M] -- C:\Users\Alissa\AppData\Roaming\Azureus
[2013-02-25 21:04:56 | 000,000,000 | ---D | M] -- C:\Users\Alissa\AppData\Roaming\BBCiPlayerDesktop.61DB7A798358575D6A969CCD73DDBBD723A6DA9D.1
[2013-02-21 14:51:55 | 000,000,000 | ---D | M] -- C:\Users\Alissa\AppData\Roaming\Blue Tea Games
[2013-02-19 16:12:54 | 000,000,000 | ---D | M] -- C:\Users\Alissa\AppData\Roaming\Boolat Games
[2013-02-17 20:08:35 | 000,000,000 | ---D | M] -- C:\Users\Alissa\AppData\Roaming\Boomzap
[2013-02-16 21:57:46 | 000,000,000 | ---D | M] -- C:\Users\Alissa\AppData\Roaming\Color Brush
[2013-02-10 14:03:32 | 000,000,000 | ---D | M] -- C:\Users\Alissa\AppData\Roaming\Eipix
[2013-03-06 23:26:38 | 000,000,000 | ---D | M] -- C:\Users\Alissa\AppData\Roaming\Elephant Games
[2013-05-09 21:29:17 | 000,000,000 | ---D | M] -- C:\Users\Alissa\AppData\Roaming\ERS Game Studios
[2013-02-12 19:10:59 | 000,000,000 | ---D | M] -- C:\Users\Alissa\AppData\Roaming\Fenomen Games
[2013-01-03 13:30:05 | 000,000,000 | ---D | M] -- C:\Users\Alissa\AppData\Roaming\Games
[2013-05-07 10:57:26 | 000,000,000 | ---D | M] -- C:\Users\Alissa\AppData\Roaming\Garmin
[2013-05-11 17:17:20 | 000,000,000 | ---D | M] -- C:\Users\Alissa\AppData\Roaming\GetRightToGo
[2013-02-10 10:11:26 | 000,000,000 | ---D | M] -- C:\Users\Alissa\AppData\Roaming\Ghost Ship Studios
[2013-02-12 19:15:42 | 000,000,000 | ---D | M] -- C:\Users\Alissa\AppData\Roaming\Gogii Games
[2013-01-03 12:11:23 | 000,000,000 | ---D | M] -- C:\Users\Alissa\AppData\Roaming\Legacy Games
[2013-01-03 17:34:25 | 000,000,000 | ---D | M] -- C:\Users\Alissa\AppData\Roaming\LestaStudio
[2013-02-26 21:52:27 | 000,000,000 | ---D | M] -- C:\Users\Alissa\AppData\Roaming\Maximize Games
[2013-05-13 20:43:32 | 000,000,000 | ---D | M] -- C:\Users\Alissa\AppData\Roaming\Meridian93
[2013-02-20 22:01:27 | 000,000,000 | ---D | M] -- C:\Users\Alissa\AppData\Roaming\PlayFavoriteGames
[2013-01-02 14:38:55 | 000,000,000 | ---D | M] -- C:\Users\Alissa\AppData\Roaming\Raptr
[2013-02-17 21:14:26 | 000,000,000 | ---D | M] -- C:\Users\Alissa\AppData\Roaming\SulusGames
[2013-01-07 14:34:45 | 000,000,000 | ---D | M] -- C:\Users\Alissa\AppData\Roaming\tabagames
[2013-03-28 22:55:00 | 000,000,000 | ---D | M] -- C:\Users\Alissa\AppData\Roaming\TuneUpMedia
[2013-01-25 20:53:04 | 000,000,000 | ---D | M] -- C:\Users\Alissa\AppData\Roaming\Vast Studios
[2013-01-10 22:16:30 | 000,000,000 | ---D | M] -- C:\Users\Alissa\AppData\Roaming\WindSolutions
========== Purity Check ========== ========== Alternate Data Streams ========== @Alternate Data Stream - 233 bytes -> C:\ProgramData\TEMP:8BAD6F90
@Alternate Data Stream - 232 bytes -> C:\ProgramData\TEMP:97CA3B9E
@Alternate Data Stream - 213 bytes -> C:\ProgramData\TEMP:E33C786A
@Alternate Data Stream - 197 bytes -> C:\ProgramData\TEMP:C5AE4E07
@Alternate Data Stream - 149 bytes -> C:\ProgramData\TEMP:6EFFF8B9
@Alternate Data Stream - 148 bytes -> C:\ProgramData\TEMP:98CF1A39
@Alternate Data Stream - 148 bytes -> C:\ProgramData\TEMP:0FAE191E
@Alternate Data Stream - 147 bytes -> C:\ProgramData\TEMP:8866C899
@Alternate Data Stream - 147 bytes -> C:\ProgramData\TEMP:7D938C9B
@Alternate Data Stream - 146 bytes -> C:\ProgramData\TEMP:2339C9FD
@Alternate Data Stream - 144 bytes -> C:\ProgramData\TEMP:FD4C7AD3
@Alternate Data Stream - 144 bytes -> C:\ProgramData\TEMP:EF0BD3A1
@Alternate Data Stream - 140 bytes -> C:\ProgramData\TEMP:AD179392
@Alternate Data Stream - 139 bytes -> C:\ProgramData\TEMP:09629F6E
@Alternate Data Stream - 137 bytes -> C:\ProgramData\TEMP:BF6C4AAC
@Alternate Data Stream - 137 bytes -> C:\ProgramData\TEMP:036AA5DD
@Alternate Data Stream - 136 bytes -> C:\ProgramData\TEMP:5C42F64A
@Alternate Data Stream - 134 bytes -> C:\ProgramData\TEMP:0B278A1A
@Alternate Data Stream - 133 bytes -> C:\ProgramData\TEMP:BB99F46B
@Alternate Data Stream - 132 bytes -> C:\ProgramData\TEMP:B504E4C2
@Alternate Data Stream - 132 bytes -> C:\ProgramData\TEMP:01F9D1B4
@Alternate Data Stream - 131 bytes -> C:\ProgramData\TEMP:94B25DF5
@Alternate Data Stream - 131 bytes -> C:\ProgramData\TEMP:8B480195
@Alternate Data Stream - 131 bytes -> C:\ProgramData\TEMP:3D1D487A
@Alternate Data Stream - 130 bytes -> C:\ProgramData\TEMP:4A5CFD3B
@Alternate Data Stream - 130 bytes -> C:\ProgramData\TEMP:48D6EA0F
@Alternate Data Stream - 130 bytes -> C:\ProgramData\TEMP:02172F27
@Alternate Data Stream - 129 bytes -> C:\ProgramData\TEMP:E94FA418
@Alternate Data Stream - 128 bytes -> C:\ProgramData\TEMP:B21F2857
@Alternate Data Stream - 128 bytes -> C:\ProgramData\TEMP:5A068EE1
@Alternate Data Stream - 127 bytes -> C:\ProgramData\TEMP:C00C7190
@Alternate Data Stream - 126 bytes -> C:\ProgramData\TEMP:CB3667AF
@Alternate Data Stream - 126 bytes -> C:\ProgramData\TEMP:59A6876B
@Alternate Data Stream - 126 bytes -> C:\ProgramData\TEMP:234E9CC5
@Alternate Data Stream - 126 bytes -> C:\ProgramData\TEMP:0CEE6109
@Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:F3A185AE
@Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:8F6B75BF
@Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:460638C7
@Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:E517FE76
@Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:48BCFDB6
@Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:1CF1FB36
@Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:D434342F
@Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:3241739E
@Alternate Data Stream - 120 bytes -> C:\ProgramData\TEMP:CCD8056E
@Alternate Data Stream - 120 bytes -> C:\ProgramData\TEMP:709E81D4
@Alternate Data Stream - 120 bytes -> C:\ProgramData\TEMP:04BC9A2C
@Alternate Data Stream - 118 bytes -> C:\ProgramData\TEMP:9524D821
@Alternate Data Stream - 118 bytes -> C:\ProgramData\TEMP:7EB93F0E
< End of report >