Cannot run Windows update (win7) and other problems

Discussion in 'Malware Help (A Specialist Will Reply)' started by mvssysprog, Aug 16, 2012.

  1. mvssysprog

    mvssysprog Private E-2

    I was infected with the zeroaccess trojan. It was supposedly removed by McAfee several weeks ago. I noticed that the mcafee firewall wouldn't start, the windows firewall wouldn't start, the windows update service and Bits service were missing.

    I went out to the Microsoft support site and was able to get Windows update service to start, but was unable to get the BITS service to start. I was able to get it defined using a suggestion off the microsoft support site, but it is now in delayed start mode. When I try to start it, I get error code 2 - files not found.

    I also ran /scannow but no integrity issues were found.

    I have run all of the suggested utilities and am including the logs in this post. I would greatly appreciate any assistance that you can provide to get my desktop straightened out.

    Thanks a lot in advance...

    Dave
     

    Attached Files:

    mvssysprog, Aug 16, 2012
    #1
  2. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    Hello there.

    Download BFE.reg and MpsSvc.reg to your desktop.

    • Now please click Start, and type regedit into the search box.
    • You should see a regedit.exe and icon appear in the Programs area of the Start Menu.
    • Right click on regedit.exe and select Run As Administrator
    • Then in the Registry Editor menu click File and select Import.
    • Navigate to the BFE.reg file saved to your Desktop and double click it. Allow it to be added to the registry. Repeat this for the MpsSvc.reg file.


    Download Windows Repair by Tweaking.com and unzip the contents into a newly created folder on your desktop.
    • Now run Repair_Windows.exe by double clicking on it ( if you are running Vista or Win 7, use right click and select Run As Administrator)
    • Now select the Start Repairs tab.
    • The click the Start button.
    • Create a System Restore point if prompted.
    • On the next screen, click the Unselect All button to first deselect all repairs.
    • Now select the following repair options:
      • Reset Registry Permissions
      • Reset File Permissions
      • Register System Files
      • Repair WMI
      • Repair Windows Firewall
      • Remove Policies Set By Infections
      • Repair Winsock & DNS Cache
      • Repair Proxy Settings
      • Repair Windows Updates
      • Set Windows Services To Default Startup
    • Now on the lower right side check the box to Restart/Shutdown System When Finished
    • Then make sure the Restart System radio button is enabled.
    • Shutdown any other programs that you are running now before continuing.
    • Now click the Start button.
    • Be patient while the tool repairs the selected items.
    • It should reboot automatically when finished.

    After reboot, check to see if your firewall is working.



    Next...

    http://img827.imageshack.us/img827/1263/frst.gif For 32-bit (x86) systems download Farbar Recovery Scan Tool and save it to a flash drive.
    For 64-bit (x64) systems download Farbar Recovery Scan Tool x64 and save it to a flash drive.

    Plug the flashdrive into the infected PC.

    Enter System Recovery Options.

    To enter System Recovery Options from the Advanced Boot Options:
    • Restart the computer.
    • As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
    • Use the arrow keys to select the Repair your computer menu item.
    • Choose your language settings, and then click Next.
    • Select the operating system you want to repair, and then click Next.
    • Select your user account and click Next.

    To enter System Recovery Options by using Windows installation disc:

    • Insert the installation disc.
    • Restart your computer.
    • If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
    • Click Repair your computer.
    • Choose your language settings, and then click Next.
    • Select the operating system you want to repair, and then click Next.
    • Select your user account an click Next.
    On the System Recovery Options menu you will get the following options:
    • Select Command Prompt
    • In the command window type in notepad and press Enter.
    • The notepad opens. Under File menu select Open.
    • Select "Computer" and find your flash drive letter and close the notepad.
    • In the command window type e:\frst.exe (for x64 bit version type e:\frst64) and press Enter
    • Note: Replace letter e with the drive letter of your flash drive.
    • The tool will start to run.
    • When the tool opens click Yes to disclaimer.
    • Press Scan button.
    • It will make a log (FRST.txt) on the flash drive. Please attach this log to your next reply. (How to attach)

    ------------------------------------------------------------------

    Now run the C:\MGtools\GetLogs.bat file by double clicking on it. (Right click and run as admin if using Vista or Windows7) Then attach the new C:\MGlogs.zip file that will be created by running this.
     
    Kestrel13!, Aug 17, 2012
    #2
  3. mvssysprog

    mvssysprog Private E-2

    Good evening...

    Thank you for your response. I downloaded the two registry updates you suggested, and then ran Windows Repair (following the directions you specified). After the reboot, I went to McAfee and the Firewall was down. When I tried to turn it on, it went on and then off immediately. I then went to the Windows firewall in the Control Panel. I tried to start that one and got error 0x8007042c.

    After the reboot, McAfee came up and said it had disinfected a trojan, but I didn't click on details fast enough and the message disappeared.

    I then ran FRST64 and GetLogs.bat. The logs for both are included.

    Thank you in advance for any assistance you can provide.

    Dave
     

    Attached Files:

    mvssysprog, Aug 17, 2012
    #3
  4. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

    Attached is fixlist.txt
    • Save fixlist.txt to your flash drive.
    • You should now have both fixlist.txt and FRST64.exe on your flash drive.

    Now re-enter System Recovery Options.
    Run FRST64 and press the Fix button just once and wait.
    The tool will make a log on the flashdrive (Fixlog.txt).
    Please attach this to your next message. (How to attach)

    Now attempt to boot normally.

    -------------------------------

    • Now re-run RogueKiller - no fix just a scan and attach the log.
    • Re-run FRST - no fix, just a scan and attach the log.
    • Re run Windows Repair and also import the two reg files again like you did before. (BFE.reg and MpsSvc.reg)
    • Let me know how things are running at this point.
     

    Attached Files:

    Kestrel13!, Aug 18, 2012
    #4
  5. mvssysprog

    mvssysprog Private E-2

    Hi...

    I am uploading the files from another PC because after running the windows repair, I have lost connectivity to the internet. But first:

    I saved FIXLIST.TXT to my flash drive, rebooted and ran FRST64. The FIXLOG.TXT is accompanying this response

    I ran RogueKiller in scan mode and have included the RKreport(2).txt.

    I imported BFE.reg and MpsSvc.reg successfully into the registry

    I ran Windows Repair and it rebooted the machine.

    I ran FRST64 from my flash drive and have included FRST.LOG. I then rebooted.

    Windows update and BITS service are now active. And my firewall is active, but unfortunately I have lost connectivity with the internet.

    The errors that are showing up after troubleshooting with Windows network diagnostics are:

    Windows can't communicate with the device or resource
    Security or Firewall settings might be blocking the connection.

    I tried stopping the firewall within McAfee but it did not enable me to connect to the internet.

    Please advise how I should proceed. Is it possible that windows repair affected my internet connectivity?

    Thanks in advance...

    Dave
     

    Attached Files:

    mvssysprog, Aug 18, 2012
    #5
  6. mvssysprog

    mvssysprog Private E-2

    Hi...

    I have an update. I tried to do an ipconfig /release and /renew without any effect. I rebooted the PC, after rebooting my PC Cleaner PRO kicked in and found an error in my internet settings. I had it fix it and I was able to reconnect to the internet.

    I tried to do a windows update. However I still cannot. I went out to the services and saw that BITS service was present, but not started. I tried to start it and got Error 2: The system cannot find the file specified.

    Please advise me as to how to proceed. The firewall is now up.

    Thanks in advance....

    Dave
     
    mvssysprog, Aug 18, 2012
    #6
  7. mvssysprog

    mvssysprog Private E-2

    One more update... out on another forum here, I found the following link dealing with getting BITS operational:

    http://forums.majorgeeks.com/showth...+2:+The+system+cannot+find+the+file+specified

    The gentleman found a post on another website that apparently fixed his problem:

    http://steveit.ca/2012/07/09/windows-update-fails-missing-bits-service/comment-page-1/#comment-719

    They suggested downloading the BITS.reg file and importing it into the registry. I did that. and now my Windows update is now working!

    One last question... Is there a scan from one of the apps I downloaded (or another one) that I can run to make sure there are not more lingering issues?

    Thank you VERY much for all of your assistance. It's nice to have my system back up...

    Dave
     
    mvssysprog, Aug 18, 2012
    #7
  8. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Let's make sure there are no other services still broken.


    Please run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista or Win7, don't double click, use right click and select Run As Administrator).


    Then attach the below logs:
    • C:\MGlogs.zip
     
    chaslang, Aug 18, 2012
    #8
  9. mvssysprog

    mvssysprog Private E-2

    Hi...

    Please find enclosed the MGlogs.zip file.

    I sincerely appreciate all of the help you guys have provided.... what a mess.

    Dave
     

    Attached Files:

    mvssysprog, Aug 18, 2012
    #9
  10. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    Please download and save the below to your Desktop or anywhere else you can find it ( if the Desktop is not showing )

    http://download.bleepingcomputer.com/grinler/unhide.exe

    Now run it.

    You also should follow step number 6 and 7 8 and 9 if necessary of these instructions

    Because at the moment all this is hidden as you can see: (Use scroll bar to see which files are hidden)

    Code:
    C:\Users\Home\Local Settings\TEMP\smtmp\1
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\4
----a-w             1,282 2009-07-14 05:01:14  C:\Users\Home\Local Settings\TEMP\smtmp\1\Default Programs.lnk
--sha-w               442 2009-07-14 05:01:14  C:\Users\Home\Local Settings\TEMP\smtmp\1\desktop.ini
----a-w             2,805 2010-12-21 19:41:53  C:\Users\Home\Local Settings\TEMP\smtmp\1\Dragon NaturallySpeaking 11.0.lnk
----a-w             2,989 2011-03-27 01:05:33  C:\Users\Home\Local Settings\TEMP\smtmp\1\Program Updates.lnk
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs
----a-w             1,868 2012-01-12 00:16:39  C:\Users\Home\Local Settings\TEMP\smtmp\1\Software Updates.lnk
----a-w             1,266 2009-07-14 04:49:40  C:\Users\Home\Local Settings\TEMP\smtmp\1\Windows Update.lnk
----a-w               987 2011-01-02 17:17:08  C:\Users\Home\Local Settings\TEMP\smtmp\1\WinRAR.lnk
----a-w             2,213 2012-04-01 20:48:08  C:\Users\Home\Local Settings\TEMP\smtmp\1\WinZip.lnk
d-----w                 0 2012-08-16 23:57:22  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Accessories
d-----w                 0 2012-08-16 23:57:22  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Administrative Tools
----a-w             2,441 2012-01-16 19:24:07  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Adobe Reader X.lnk
d-----w                 0 2012-08-16 23:53:15  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Amazon
----a-w             2,519 2011-07-02 11:31:22  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Apple Software Update.lnk
d-----w                 0 2012-08-16 23:57:22  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\calibre - E-book Management
d-----w                 0 2012-08-16 23:57:22  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Canon MP830
d-----w                 0 2012-08-16 23:57:22  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Canon MX850 series
d-----w                 0 2012-08-16 23:53:17  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Canon Utilities
d-----w                 0 2012-08-16 23:57:22  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Catalyst Control Center
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\CloneDVD5
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Core Temp
----a-w             1,335 2010-12-19 03:37:44  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Corel Painter Photo Essentials 4.lnk
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Corel PaintShop Photo Pro X3
d-----w                 0 2012-08-16 23:53:17  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Creative
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\CyberLink PowerDVD 9.5
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Dell
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Dell DataSafe
----a-w             1,979 2010-12-18 15:01:46  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Dell Help Documentation.lnk
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Dell Support Center
--sha-w             1,748 2010-12-18 23:46:50  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\desktop.ini
d-----w                 0 2012-08-16 23:53:18  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\DFX Audio Enhancer
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Diskeeper Corporation
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\DivX Plus
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Dragon NaturallySpeaking 11.0
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Fidelity Investments
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Games
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Google Chrome
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Hauppauge WinTV
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ImgBurn
----a-w             1,883 2011-12-22 02:54:02  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ImgBurn.lnk
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ImTOO
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\inFlow Inventory
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Intel
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\iTunes
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Laplink PCmover
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Logitech
----a-w               990 2012-02-10 03:24:24  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\LogMeIn.lnk
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Maintenance
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Malwarebytes' Anti-Malware
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\McAfee
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\McAfee Security Scan Plus
----a-w             2,168 2011-09-11 02:55:59  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\McAfee Virtual Technician.lnk
----a-w             1,345 2010-11-17 19:18:29  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Media Center.lnk
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Microsoft Office
----a-w             2,435 2010-11-17 17:41:12  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Microsoft Office 2010.lnk
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Microsoft Office Live Meeting 2007
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Microsoft Silverlight
d-----w                 0 2012-08-16 23:53:22  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Microsoft SQL Server 2005
----a-w             1,156 2011-05-03 11:24:31  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Mozilla Firefox.lnk
----a-w             2,104 2011-07-05 20:05:46  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Mozilla Thunderbird.lnk
d-----w                 0 2012-08-16 23:53:22  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Nero
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Nuance PDF Converter Professional 7
----a-w             1,847 2012-02-11 01:50:22  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Opera.lnk
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\PC Cleaners
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\PMB
----a-w             1,123 2011-11-07 23:29:21  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\PMB.lnk
d-----w                 0 2012-08-16 23:53:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\PopCap Games
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\PrintMaster
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\QuickTime
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Roxio Creator Premier
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ScanSoft OmniPage 16
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\SharePoint
----a-w             1,330 2009-07-14 04:57:08  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Sidebar.lnk
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\SiSoftware
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Skype
d-----w                 0 2012-08-16 23:53:25  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\SlySoft
d-----w                 0 2012-08-16 23:53:25  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Smith Micro
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Snagit 10
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Snagit 9
d-----w                 0 2012-08-16 23:53:25  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Sophos
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Startup
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Tag&Rename
d-----w                 0 2012-08-16 23:53:25  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Uniblue
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\VideoLAN
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Winamp
----a-w             1,352 2009-07-14 04:57:09  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Windows Anytime Upgrade.lnk
----a-w             1,326 2010-11-17 19:18:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Windows DVD Maker.lnk
----a-w             1,210 2009-07-14 04:54:59  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Windows Fax and Scan.lnk
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Windows Live
----a-w             1,460 2010-12-18 23:45:22  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Windows Live Mail.lnk
----a-w             2,488 2010-12-18 23:44:32  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Windows Live Messenger.lnk
----a-w             1,307 2010-12-18 23:46:50  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Windows Live Movie Maker.lnk
----a-w             1,376 2010-12-18 23:46:29  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Windows Live Photo Gallery.lnk
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Windows Media
----a-w             1,547 2010-11-17 17:52:04  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Windows Media Player.lnk
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Windows Password Key Professional Demo
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\WinRAR
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\WinZip
d-----w                 0 2012-08-16 23:53:27  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Xara
----a-w             1,246 2009-07-14 04:57:08  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\XPS Viewer.lnk
d-----w                 0 2012-08-16 23:57:22  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Accessories\Accessibility
----a-w             1,230 2009-07-14 04:55:00  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Accessories\Calculator.lnk
--sha-w             1,854 2010-11-17 19:18:27  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Accessories\Desktop.ini
----a-w             1,266 2009-07-14 04:54:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Accessories\displayswitch.lnk
----a-w             1,364 2010-11-17 19:18:27  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Accessories\Math Input Panel.lnk
----a-w             1,238 2010-11-17 19:18:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Accessories\Mobility Center.lnk
----a-w             1,242 2010-11-17 19:18:22  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Accessories\NetworkProjection.lnk
----a-w             1,242 2009-07-14 04:54:32  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Accessories\Paint.lnk
----a-w             1,367 2009-07-14 04:53:55  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Accessories\Remote Desktop Connection.lnk
----a-w             1,272 2010-11-17 19:18:26  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Accessories\Snipping Tool.lnk
----a-w             1,330 2009-07-14 04:57:08  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Accessories\Sound Recorder.lnk
----a-w             1,351 2010-11-17 19:18:27  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Accessories\Sticky Notes.lnk
----a-w             1,254 2009-07-14 04:54:58  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Accessories\Sync Center.lnk
d-----w                 0 2012-08-16 23:57:22  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Accessories\System Tools
d-----w                 0 2012-08-16 23:57:22  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Accessories\Tablet PC
----a-w             1,579 2009-07-14 04:57:09  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Accessories\Welcome Center.lnk
d-----w                 0 2012-08-16 23:57:22  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Accessories\Windows PowerShell
----a-w             1,322 2009-07-14 04:54:58  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Accessories\Wordpad.lnk
--sha-w               370 2009-07-14 04:57:07  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Accessories\Accessibility\Desktop.ini
----a-w             1,388 2009-07-14 04:57:07  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Accessories\Accessibility\Speech Recognition.lnk
----a-w             1,248 2009-07-14 04:55:00  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Accessories\System Tools\Character Map.lnk
--sha-w             1,338 2009-07-14 04:57:09  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Accessories\System Tools\Desktop.ini
----a-w             1,252 2009-07-14 04:54:58  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Accessories\System Tools\Disk Cleanup.lnk
----a-w             2,595 2012-03-30 13:09:38  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Accessories\System Tools\Diskeeper 2011.lnk
----a-w             1,242 2009-07-14 04:53:50  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Accessories\System Tools\Resource Monitor.lnk
----a-w             1,250 2009-07-14 04:53:33  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Accessories\System Tools\System Information.lnk
----a-w             1,246 2009-07-14 04:54:57  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Accessories\System Tools\System Restore.lnk
----a-w             1,268 2009-07-14 04:54:29  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Accessories\System Tools\Task Scheduler.lnk
----a-w             1,320 2009-07-14 04:57:09  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Accessories\System Tools\Windows Easy Transfer Reports.lnk
----a-w             1,316 2009-07-14 04:57:09  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Accessories\System Tools\Windows Easy Transfer.lnk
--sha-w               343 2010-11-17 19:18:26  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Accessories\Tablet PC\Desktop.ini
----a-w             1,436 2010-11-17 19:18:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Accessories\Tablet PC\ShapeCollector.lnk
----a-w             1,386 2010-11-17 19:18:26  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Accessories\Tablet PC\TabTip.lnk
----a-w             1,316 2010-11-17 19:18:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Accessories\Tablet PC\Windows Journal.lnk
--sha-w               216 2009-07-14 04:57:13  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Accessories\Windows PowerShell\desktop.ini
----a-w             1,989 2009-07-14 05:32:31  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Accessories\Windows PowerShell\Windows PowerShell (x86).lnk
----a-w             1,468 2009-07-14 04:57:13  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Accessories\Windows PowerShell\Windows PowerShell ISE (x86).lnk
----a-w             1,468 2009-07-14 04:57:13  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Accessories\Windows PowerShell\Windows PowerShell ISE.lnk
----a-w             1,899 2009-07-14 05:32:31  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk
----a-w             1,242 2009-07-14 04:57:13  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Administrative Tools\Component Services.lnk
----a-w             1,294 2009-07-14 04:54:21  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Administrative Tools\Computer Management.lnk
----a-w             1,270 2009-07-14 04:53:52  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Administrative Tools\Data Sources (ODBC).lnk
--sha-w             1,958 2011-05-27 17:53:06  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Administrative Tools\desktop.ini
----a-w             1,298 2009-07-14 04:54:29  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Administrative Tools\Event Viewer.lnk
----a-w             1,274 2009-07-14 04:54:22  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Administrative Tools\iSCSI Initiator.lnk
----a-w             1,268 2009-07-14 04:53:33  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Administrative Tools\Memory Diagnostics Tool.lnk
----a-w             1,232 2009-07-14 04:53:50  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Administrative Tools\Performance Monitor.lnk
----a-w             1,262 2011-05-27 17:53:06  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Administrative Tools\Print Management.lnk
----a-w             1,248 2010-11-17 19:18:28  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Administrative Tools\Security Configuration Management.lnk
----a-w             1,288 2009-07-14 04:54:05  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Administrative Tools\services.lnk
----a-w             1,246 2009-07-14 04:53:33  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Administrative Tools\System Configuration.lnk
----a-w             1,262 2009-07-14 04:54:29  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Administrative Tools\Task Scheduler.lnk
----a-w             1,274 2009-07-14 04:53:58  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Administrative Tools\Windows Firewall with Advanced Security.lnk
----a-w             2,741 2009-07-14 05:32:31  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Administrative Tools\Windows PowerShell Modules.lnk
d-----w                 0 2012-08-16 23:57:22  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Amazon\Amazon MP3 Downloader
----a-w             1,249 2011-11-23 13:50:45  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Amazon\Amazon MP3 Downloader\Amazon MP3 Downloader.lnk
----a-w             1,199 2011-11-23 13:50:45  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Amazon\Amazon MP3 Downloader\Uninstall Amazon MP3 Downloader.lnk
----a-w               980 2012-04-12 02:16:57  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\calibre - E-book Management\calibre - E-book management.lnk
----a-w               991 2012-04-12 02:16:57  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\calibre - E-book Management\E-book viewer.lnk
----a-w               956 2012-04-12 02:16:57  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\calibre - E-book Management\LRF viewer.lnk
----a-w             1,206 2011-07-21 03:26:40  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Canon MP830\Readme.lnk
----a-w             1,446 2011-07-21 03:26:40  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Canon MP830\Uninstall.lnk
----a-w             1,241 2011-07-21 03:28:57  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Canon MX850 series\Readme.lnk
----a-w             1,579 2011-07-21 03:28:57  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Canon MX850 series\Uninstall.lnk
d-----w                 0 2012-08-16 23:57:22  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Canon Utilities\MP Navigator 2.2
d-----w                 0 2012-08-16 23:57:22  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Canon Utilities\MP Navigator EX 1.1
d-----w                 0 2012-08-16 23:57:22  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Canon Utilities\My Printer
d-----w                 0 2012-08-16 23:57:22  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Canon Utilities\Solution Menu
----a-w             2,082 2010-12-25 06:33:27  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Canon Utilities\MP Navigator 2.2\MP Navigator 2.2.lnk
----a-w             2,091 2010-12-25 06:33:27  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Canon Utilities\MP Navigator 2.2\MP Navigator Readme.lnk
----a-w             2,178 2010-12-25 06:33:27  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Canon Utilities\MP Navigator 2.2\MP Navigator Uninstall.lnk
----a-w             2,125 2010-12-25 06:36:02  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Canon Utilities\MP Navigator EX 1.1\MP Navigator EX 1.1.lnk
----a-w             2,118 2010-12-25 06:36:02  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Canon Utilities\MP Navigator EX 1.1\MP Navigator EX Readme.lnk
----a-w             2,205 2010-12-25 06:36:02  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Canon Utilities\MP Navigator EX 1.1\MP Navigator EX Uninstall.lnk
----a-w             1,815 2010-12-25 06:31:02  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Canon Utilities\My Printer\My Printer Readme.lnk
----a-w             1,877 2010-12-25 06:31:02  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Canon Utilities\My Printer\My Printer Uninstall.lnk
----a-w             1,830 2010-12-25 06:31:02  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Canon Utilities\My Printer\My Printer.lnk
----a-w             2,053 2010-12-25 06:34:12  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Canon Utilities\Solution Menu\Solution Menu Readme.lnk
----a-w             2,097 2010-12-25 06:34:12  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Canon Utilities\Solution Menu\Solution Menu Uninstall.lnk
----a-w             2,069 2010-12-25 06:34:12  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Canon Utilities\Solution Menu\Solution Menu.lnk
----a-w             2,094 2011-01-11 06:50:34  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Catalyst Control Center\CCC - Advanced.lnk
----a-w             2,088 2011-01-11 06:50:34  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Catalyst Control Center\CCC - Wizard.lnk
----a-w             2,082 2011-01-11 06:50:34  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Catalyst Control Center\CCC.lnk
----a-w             2,096 2011-01-11 06:50:34  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Catalyst Control Center\Help.lnk
----a-w             2,078 2011-01-11 06:50:34  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Catalyst Control Center\Restart Runtime.lnk
----a-w             1,031 2011-03-08 12:42:26  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\CloneDVD5\CloneDVD5.lnk
----a-w             1,054 2011-03-08 12:42:26  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\CloneDVD5\Online Help.lnk
----a-w               960 2011-03-08 12:42:26  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\CloneDVD5\Readme.lnk
----a-w               960 2011-03-08 12:42:26  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\CloneDVD5\Send Error Report.lnk
----a-w               972 2011-03-08 12:42:26  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\CloneDVD5\Uninstall CloneDVD5.lnk
----a-w               950 2010-12-18 16:38:32  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Core Temp\Core Temp.lnk
----a-w             1,360 2010-12-19 03:16:35  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Corel PaintShop Photo Pro X3\Corel PaintShop Photo Pro X3.lnk
----a-w             1,192 2010-12-19 03:24:27  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Corel PaintShop Photo Pro X3\Corel PaintShop Photo Project Creator.lnk
----a-w             1,253 2010-12-19 03:16:35  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Corel PaintShop Photo Pro X3\Corel Photo Downloader.lnk
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Creative\THX TruStudio PC
----a-w             2,116 2010-11-17 17:39:31  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Creative\THX TruStudio PC\Readme.lnk
----a-w             2,299 2010-11-17 17:39:29  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Creative\THX TruStudio PC\THX Audio Control Panel.lnk
----a-w             1,262 2010-11-17 17:52:15  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\CyberLink PowerDVD 9.5\CyberLink PowerDVD 9.5.lnk
--sha-w               208 2010-11-17 17:52:15  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\CyberLink PowerDVD 9.5\desktop.ini
----a-w             1,457 2010-11-17 17:52:15  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\CyberLink PowerDVD 9.5\PowerDVD 9.5.5 Help file.lnk
----a-w             1,012 2010-11-17 17:43:06  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Dell\Dell Dock.lnk
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Dell\Dell Software & Utilities
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Dell\Service Agreements
----a-w             1,137 2010-11-17 17:47:34  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Dell\Dell Software & Utilities\Dell Getting Started Guide.lnk
----a-w             2,471 2010-11-17 17:26:15  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Dell\Service Agreements\Accidental_Damage_Services.pdf.lnk
----a-w             1,862 2010-11-17 17:32:51  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Dell DataSafe\Dell DataSafe Local Backup.lnk
----a-w             2,091 2010-11-17 17:32:40  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Dell DataSafe\Dell DataSafe Online.lnk
----a-w             1,056 2012-04-18 13:04:10  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Dell Support Center\Dell Support Center.lnk
--sha-w               143 2012-04-18 13:04:10  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Dell Support Center\desktop.ini
----a-w             1,116 2012-04-18 13:04:10  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Dell Support Center\PC Checkup.lnk
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\DFX Audio Enhancer\DFX for Winamp
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\DFX Audio Enhancer\DFX for Windows Media Player
----a-w             2,160 2011-02-08 19:59:29  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\DFX Audio Enhancer\DFX for Winamp\Manual.lnk
----a-w             1,272 2011-02-08 19:59:29  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\DFX Audio Enhancer\DFX for Winamp\Settings.lnk
----a-w             1,930 2011-02-08 19:48:16  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\DFX Audio Enhancer\DFX for Windows Media Player\Manual.lnk
----a-w             2,595 2012-03-30 13:09:38  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Diskeeper Corporation\Diskeeper 2011.lnk
----a-w             1,214 2012-01-11 21:32:55  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\DivX Plus\Check for Updates.lnk
----a-w             1,216 2011-05-16 01:19:03  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\DivX Plus\Codec Settings.lnk
----a-w             2,140 2012-01-11 21:33:30  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\DivX Plus\DivX Plus Converter.lnk
----a-w             1,136 2012-01-11 21:33:10  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\DivX Plus\DivX Plus Player.lnk
----a-w             1,074 2012-01-11 21:33:30  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\DivX Plus\DivX Support.lnk
----a-w             1,074 2012-01-11 21:33:30  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\DivX Plus\Post DivX® video to your website.lnk
----a-w             1,226 2012-01-11 21:32:55  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\DivX Plus\Register.lnk
----a-w             1,080 2012-01-11 21:33:30  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\DivX Plus\Why Buy DivX Pro.lnk
----a-w             2,807 2010-12-21 19:41:53  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Dragon NaturallySpeaking 11.0\About Dragon NaturallySpeaking 11.0.lnk
----a-w             2,811 2010-12-21 19:41:53  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Dragon NaturallySpeaking 11.0\Dragon NaturallySpeaking 11.0.lnk
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Dragon NaturallySpeaking 11.0\Dragon NaturallySpeaking Tools
----a-w             2,847 2010-12-21 19:41:53  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Dragon NaturallySpeaking 11.0\Show Dragon Log.lnk
----a-w             2,839 2010-12-21 19:41:53  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Dragon NaturallySpeaking 11.0\Show Setup Log.lnk
----a-w             2,811 2010-12-21 19:41:53  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Dragon NaturallySpeaking 11.0\Dragon NaturallySpeaking Tools\Upgrade User Profiles.lnk
----a-w             2,296 2011-05-24 10:46:07  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Fidelity Investments\Active Trader Pro .lnk
----a-w             2,831 2011-05-24 10:46:07  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Fidelity Investments\Active Trader Pro Beta..lnk
----a-w               200 2011-07-08 00:38:03  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Games\Bejeweled 3.lnk
----a-w               352 2011-02-17 16:09:20  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Games\Chess.lnk
----a-w               244 2011-03-09 03:17:50  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Games\Chessmaster® Grandmaster Edition.lnk
--sha-w             1,128 2011-02-17 16:09:21  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Games\desktop.ini
----a-w               364 2011-02-17 16:09:15  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Games\FreeCell.lnk
----a-w               258 2009-07-14 04:54:59  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Games\GameExplorer.lnk
----a-w               356 2011-02-17 16:09:20  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Games\Hearts.lnk
----a-w               474 2011-02-17 16:09:20  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Games\Internet Backgammon.lnk
----a-w               470 2011-02-17 16:09:20  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Games\Internet Checkers.lnk
----a-w               466 2011-02-17 16:09:21  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Games\Internet Spades.lnk
----a-w               360 2011-02-17 16:09:20  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Games\Mahjong.lnk
----a-w               376 2011-02-17 16:09:20  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Games\Minesweeper.lnk
----a-w               370 2011-02-17 16:09:20  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Games\More Games from Microsoft.lnk
----a-w               378 2011-02-17 16:09:21  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Games\Purble Place.lnk
----a-w               368 2011-02-17 16:09:20  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Games\Solitaire.lnk
----a-w               392 2011-02-17 16:09:21  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Games\Spider Solitaire.lnk
----a-w             2,364 2012-05-01 18:43:00  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Google Chrome\Google Chrome.lnk
----a-w             2,409 2012-05-01 18:43:00  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Google Chrome\Uninstall Google Chrome.lnk
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Hauppauge WinTV\Advanced Options
----a-w             1,002 2011-04-15 01:59:34  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Hauppauge WinTV\Restart IR.lnk
----a-w             2,102 2011-04-15 01:59:31  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Hauppauge WinTV\Signal Monitor.lnk
----a-w             1,002 2011-04-15 01:59:34  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Hauppauge WinTV\Stop IR.lnk
----a-w             2,059 2011-04-15 01:59:48  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Hauppauge WinTV\Uninstall WinTV 7.lnk
----a-w             1,111 2011-04-15 01:59:48  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Hauppauge WinTV\WinTV 7.lnk
----a-w             2,003 2011-04-15 01:59:48  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Hauppauge WinTV\Advanced Options\Empty Channel Database.lnk
----a-w             2,009 2011-04-15 01:59:48  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Hauppauge WinTV\Advanced Options\Open Recordings (only).lnk
----a-w             2,007 2011-04-15 01:59:48  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Hauppauge WinTV\Advanced Options\Open Scheduler (only).lnk
----a-w             1,882 2011-12-22 02:54:02  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ImgBurn\ImgBurn Read Me.lnk
----a-w             1,889 2011-12-22 02:54:02  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ImgBurn\ImgBurn.lnk
----a-w             1,905 2011-12-22 02:54:02  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ImgBurn\Uninstall.lnk
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ImTOO\Audio Encoder 6
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ImTOO\CD Ripper 6
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ImTOO\DVD Creator
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ImTOO\DVD Creator 6
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ImTOO\DVD Ripper Ultimate 6
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ImTOO\MPEG Encoder 3
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ImTOO\Video Converter Ultimate 6
----a-w             1,196 2011-05-27 19:38:49  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ImTOO\Audio Encoder 6\Buy.lnk
----a-w             1,192 2011-05-27 19:38:49  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ImTOO\Audio Encoder 6\ImTOO Audio Encoder 6.lnk
----a-w             1,156 2011-05-27 19:38:49  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ImTOO\Audio Encoder 6\ImTOO Audio Encoder Help.lnk
----a-w             1,197 2011-05-27 19:38:49  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ImTOO\Audio Encoder 6\Uninstall.lnk
----a-w             1,168 2011-05-27 19:40:55  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ImTOO\CD Ripper 6\Buy.lnk
----a-w             1,164 2011-05-27 19:40:55  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ImTOO\CD Ripper 6\ImTOO CD Ripper 6.lnk
----a-w             1,128 2011-05-27 19:40:55  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ImTOO\CD Ripper 6\ImTOO CD Ripper Help.lnk
----a-w             1,169 2011-05-27 19:40:55  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ImTOO\CD Ripper 6\Uninstall.lnk
----a-w             1,210 2011-11-26 17:12:43  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ImTOO\DVD Creator\Buy.lnk
----a-w             1,260 2011-11-26 17:12:41  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ImTOO\DVD Creator\ImTOO DVD Creator Help.lnk
----a-w             1,184 2011-11-26 17:12:41  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ImTOO\DVD Creator\ImTOO DVD Creator.lnk
----a-w             1,169 2011-11-26 17:12:43  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ImTOO\DVD Creator\Uninstall.lnk
----a-w             1,224 2011-03-08 11:39:32  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ImTOO\DVD Creator 6\Buy.lnk
----a-w             1,198 2011-03-08 11:39:31  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ImTOO\DVD Creator 6\ImTOO DVD Creator 6.lnk
----a-w             1,188 2011-03-08 11:39:32  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ImTOO\DVD Creator 6\ImTOO DVD Creator Help.lnk
----a-w             1,183 2011-03-08 11:39:33  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ImTOO\DVD Creator 6\Uninstall.lnk
----a-w             1,238 2011-11-26 22:03:47  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ImTOO\DVD Ripper Ultimate 6\Buy.lnk
----a-w             1,234 2011-11-26 22:03:47  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ImTOO\DVD Ripper Ultimate 6\ImTOO DVD Ripper Ultimate 6.lnk
----a-w             1,284 2011-11-26 22:03:47  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ImTOO\DVD Ripper Ultimate 6\ImTOO DVD Ripper Ultimate Help.lnk
----a-w             1,239 2011-11-26 22:03:47  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ImTOO\DVD Ripper Ultimate 6\Uninstall.lnk
----a-w             1,201 2011-01-05 15:19:40  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ImTOO\MPEG Encoder 3\Buy.lnk
----a-w             1,185 2011-01-05 15:19:40  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ImTOO\MPEG Encoder 3\ImTOO MPEG Encoder 3.lnk
----a-w             1,185 2011-01-05 15:19:40  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ImTOO\MPEG Encoder 3\ImTOO MPEG Encoder Help.lnk
----a-w             1,154 2011-01-05 15:19:40  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ImTOO\MPEG Encoder 3\ImTOO MPEG Encoder Wizard 3.lnk
----a-w             1,348 2011-01-05 15:19:40  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ImTOO\MPEG Encoder 3\PSP Video Manager.lnk
----a-w             1,173 2011-01-05 15:19:40  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ImTOO\MPEG Encoder 3\Readme.lnk
----a-w               964 2011-01-05 15:19:40  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ImTOO\MPEG Encoder 3\Uninstall.lnk
----a-w             1,273 2012-01-30 16:18:09  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ImTOO\Video Converter Ultimate 6\Buy.lnk
----a-w             1,269 2012-01-30 16:18:08  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ImTOO\Video Converter Ultimate 6\ImTOO Video Converter Ultimate 6.lnk
----a-w             1,319 2012-01-30 16:18:08  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ImTOO\Video Converter Ultimate 6\ImTOO Video Converter Ultimate Help.lnk
----a-w             1,274 2012-01-30 16:18:09  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ImTOO\Video Converter Ultimate 6\Uninstall.lnk
----a-w             1,919 2011-11-01 14:25:39  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\inFlow Inventory\inFlow Inventory.lnk
----a-w             1,794 2011-11-01 14:25:39  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\inFlow Inventory\Program Log.lnk
----a-w             1,942 2011-11-01 14:25:38  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\inFlow Inventory\Uninstall.lnk
--sha-w               195 2010-11-17 17:25:07  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Intel\desktop.ini
----a-w             1,429 2010-11-17 17:25:07  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Intel\Intel Control Center.lnk
----a-w             1,488 2010-11-17 17:25:07  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Intel\Intel(R) Rapid Storage Technology.lnk
----a-w             2,107 2012-04-01 03:28:28  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\iTunes\About iTunes.lnk
----a-w             1,803 2012-04-01 03:28:27  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\iTunes\iTunes.lnk
----a-w             2,044 2010-12-21 20:51:37  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Laplink PCmover\Install USB Drivers.lnk
----a-w               978 2010-12-21 20:51:38  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Laplink PCmover\More Software.lnk
----a-w             1,991 2010-12-21 20:51:37  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Laplink PCmover\PCmover Professional.lnk
----a-w             2,148 2010-12-21 20:51:38  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Laplink PCmover\StartUpThis.lnk
----a-w             2,029 2011-01-02 02:11:41  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Logitech\Logitech Vid HD.lnk
----a-w             1,644 2011-11-10 16:07:56  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Logitech\Logitech Webcam Software.lnk
----a-w             1,304 2009-07-14 04:57:07  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Maintenance\Backup and Restore Center.lnk
----a-w             1,248 2009-07-14 04:57:07  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Maintenance\Create Recovery Disc.lnk
--sha-w               606 2009-07-14 04:57:09  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Maintenance\Desktop.ini
----a-w             1,212 2009-07-14 04:57:09  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Maintenance\Remote Assistance.lnk
----a-w             1,133 2012-03-23 10:35:14  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Malwarebytes' Anti-Malware\Malwarebytes Anti-Malware Help.lnk
----a-w             1,133 2012-03-23 10:35:14  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Malwarebytes' Anti-Malware\Malwarebytes Anti-Malware.lnk
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Malwarebytes' Anti-Malware\Tools
----a-w             1,157 2012-03-23 10:35:14  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Malwarebytes' Anti-Malware\Uninstall Malwarebytes Anti-Malware.lnk
----a-w             1,306 2012-03-23 10:35:14  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Malwarebytes' Anti-Malware\Tools\Malwarebytes Anti-Malware Chameleon.lnk
----a-w             1,848 2012-05-04 10:41:22  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\McAfee\McAfee SecurityCenter.lnk
----a-w             1,884 2011-08-11 10:51:34  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\McAfee Security Scan Plus\McAfee Security Scan Plus.lnk
----a-w             1,188 2011-08-11 10:51:34  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\McAfee Security Scan Plus\Uninstall.lnk
----a-w             2,919 2010-12-18 19:39:16  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Microsoft Office\Microsoft Access 2010.lnk
----a-w             2,951 2010-12-18 23:25:33  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Microsoft Office\Microsoft Excel 2010.lnk
----a-w             3,042 2010-12-18 19:39:17  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Microsoft Office\Microsoft InfoPath Designer 2010.lnk
----a-w             3,026 2010-12-18 19:39:17  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Microsoft Office\Microsoft InfoPath Filler 2010.lnk
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Microsoft Office\Microsoft Office 2010 Tools
----a-w             2,879 2010-12-18 19:39:17  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Microsoft Office\Microsoft OneNote 2010.lnk
----a-w             3,029 2010-12-18 19:39:17  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Microsoft Office\Microsoft Outlook 2010.lnk
----a-w             2,937 2010-12-18 23:25:33  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Microsoft Office\Microsoft PowerPoint 2010.lnk
----a-w             3,041 2010-12-18 19:39:17  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Microsoft Office\Microsoft Publisher 2010.lnk
----a-w             3,055 2010-12-18 19:39:16  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk
----a-w             3,021 2010-12-18 23:25:33  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Microsoft Office\Microsoft Word 2010.lnk
----a-w             2,977 2010-12-18 19:39:16  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Microsoft Office\Microsoft Office 2010 Tools\Digital Certificate for VBA Projects.lnk
----a-w             2,917 2010-12-18 19:39:16  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Microsoft Office\Microsoft Office 2010 Tools\Microsoft Clip Organizer.lnk
----a-w             2,751 2010-12-18 19:39:16  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Microsoft Office\Microsoft Office 2010 Tools\Microsoft Office 2010 Language Preferences.lnk
----a-w             2,837 2010-12-18 19:39:16  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Microsoft Office\Microsoft Office 2010 Tools\Microsoft Office 2010 Upload Center.lnk
----a-w             2,875 2010-12-18 19:39:16  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Microsoft Office\Microsoft Office 2010 Tools\Microsoft Office Picture Manager.lnk
----a-w             2,669 2012-01-27 15:27:00  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Microsoft Office Live Meeting 2007\Microsoft Office Live Meeting 2007.lnk
----a-w             2,671 2012-01-27 15:27:00  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Microsoft Office Live Meeting 2007\Microsoft Office Live Meeting Recording Manager.lnk
----a-w             2,267 2011-12-22 02:55:31  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Microsoft Silverlight\Microsoft Silverlight.lnk
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Microsoft SQL Server 2005\Configuration Tools
----a-w               858 2011-11-10 12:07:25  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Microsoft SQL Server 2005\Configuration Tools\SQL Server Configuration Manager.lnk
----a-w             1,128 2011-11-10 12:07:25  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Microsoft SQL Server 2005\Configuration Tools\SQL Server Error and Usage Reporting.lnk
----a-w             1,123 2011-11-10 12:07:25  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Microsoft SQL Server 2005\Configuration Tools\SQL Server Surface Area Configuration.lnk
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Nero\Nero 10
----a-w             2,679 2010-12-21 19:10:06  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Nero\Nero 10\Nero BackItUp.lnk
----a-w             2,739 2010-12-21 19:06:12  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Nero\Nero 10\Nero Burning ROM.lnk
----a-w             2,743 2010-12-21 19:11:00  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Nero\Nero 10\Nero ControlCenter.lnk
----a-w             2,737 2010-12-21 19:06:29  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Nero\Nero 10\Nero CoverDesigner.lnk
----a-w             2,723 2010-12-21 19:09:44  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Nero\Nero 10\Nero DiscSpeed.lnk
----a-w             2,713 2010-12-21 19:06:59  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Nero\Nero 10\Nero Express.lnk
----a-w             2,925 2010-12-21 19:09:33  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Nero\Nero 10\Nero InfoTool.lnk
----a-w             2,703 2010-12-21 19:10:49  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Nero\Nero 10\Nero MediaHub.lnk
----a-w             2,945 2010-12-21 19:07:30  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Nero\Nero 10\Nero Recode.lnk
----a-w             2,739 2010-12-21 19:09:37  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Nero\Nero 10\Nero RescueAgent.lnk
----a-w             2,855 2010-12-21 19:07:53  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Nero\Nero 10\Nero SoundTrax.lnk
----a-w             2,731 2010-12-21 19:08:21  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Nero\Nero 10\Nero StartSmart.lnk
----a-w             2,699 2010-12-21 19:09:07  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Nero\Nero 10\Nero Vision.lnk
----a-w             3,073 2010-12-21 19:09:28  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Nero\Nero 10\Nero WaveEditor.lnk
----a-w             1,047 2012-01-12 00:16:39  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Nuance PDF Converter Professional 7\PDF Converter Assistant.lnk
----a-w             1,117 2012-01-12 00:16:39  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Nuance PDF Converter Professional 7\PDF Converter Professional.lnk
----a-w             1,129 2012-01-12 00:16:39  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Nuance PDF Converter Professional 7\PDF Create Assistant.lnk
----a-w               992 2011-11-18 13:35:20  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\PC Cleaners\PC Cleaners.lnk
----a-w             2,071 2011-11-07 23:29:21  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\PMB\PMB Help.lnk
----a-w             1,056 2011-11-07 23:29:21  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\PMB\PMB Launcher.lnk
----a-w             1,129 2011-11-07 23:29:21  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\PMB\PMB.lnk
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\PopCap Games\Bejeweled 3
----a-w             1,261 2011-07-08 00:38:03  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\PopCap Games\Bejeweled 3\Play Bejeweled 3.lnk
----a-w             1,405 2011-07-08 00:38:04  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\PopCap Games\Bejeweled 3\Uninstall Bejeweled 3.lnk
----a-w             1,236 2011-07-08 00:38:03  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\PopCap Games\Bejeweled 3\View Readme.lnk
----a-w               994 2011-01-05 01:33:53  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\PrintMaster\Art Disc Installer.lnk
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\PrintMaster\Documents
----a-w             1,970 2011-01-05 01:33:53  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\PrintMaster\PrintMaster 12.lnk
----a-w             1,848 2011-01-05 01:33:53  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\PrintMaster\Register your Software.lnk
----a-w             1,940 2011-01-05 01:33:54  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\PrintMaster\Unlock New Software.lnk
----a-w             1,104 2011-01-05 01:33:54  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\PrintMaster\Documents\Broderbund LLC License Agreement.lnk
----a-w               872 2011-01-05 01:33:53  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\PrintMaster\Documents\Read Me.lnk
----a-w             2,441 2011-10-31 16:39:00  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\QuickTime\About QuickTime.lnk
----a-w             2,471 2011-10-31 16:39:00  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\QuickTime\PictureViewer.lnk
----a-w             2,441 2011-10-31 16:39:00  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\QuickTime\QuickTime Player.lnk
----a-w             1,818 2011-10-31 16:39:00  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\QuickTime\Uninstall QuickTime.lnk
----a-w             2,250 2010-11-17 17:29:38  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Roxio Creator Premier\Home.lnk
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Roxio Creator Premier\Projects
----a-w             2,132 2010-11-17 17:29:38  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Roxio Creator Premier\Projects\Audio.lnk
----a-w             2,130 2010-11-17 17:29:38  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Roxio Creator Premier\Projects\Copy.lnk
----a-w             2,130 2010-11-17 17:29:38  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Roxio Creator Premier\Projects\Data.lnk
----a-w             2,132 2010-11-17 17:29:38  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Roxio Creator Premier\Projects\DVD and Video.lnk
----a-w             2,132 2010-11-17 17:29:38  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Roxio Creator Premier\Projects\Photo.lnk
----a-w             2,132 2010-11-17 17:29:38  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Roxio Creator Premier\Projects\Tools.lnk
----a-w             2,677 2011-03-27 01:05:33  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ScanSoft OmniPage 16\OmniPage Agent.lnk
----a-w             2,893 2011-03-27 01:05:34  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ScanSoft OmniPage 16\OmniPage Batch Manager.lnk
----a-w             2,861 2011-03-27 01:05:33  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ScanSoft OmniPage 16\OmniPage Professional 16.lnk
----a-w             2,823 2011-03-27 01:05:34  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\ScanSoft OmniPage 16\Scanner Setup Wizard.lnk
----a-w             3,055 2010-12-18 19:39:16  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\SharePoint\Microsoft SharePoint Workspace 2010.lnk
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\SiSoftware\Database Schemas
----a-w             1,137 2011-04-21 13:35:31  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\SiSoftware\Documentation.lnk
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\SiSoftware\Example Scripts
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\SiSoftware\Internet Links
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\SiSoftware\Sample Reports
----a-w             1,203 2011-04-21 13:35:31  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\SiSoftware\SiSoftware Sandra Lite 2011.SP1x.lnk
----a-w             2,087 2011-04-21 13:35:31  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\SiSoftware\Uninstall Sandra.lnk
----a-w             1,311 2011-04-21 13:35:31  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\SiSoftware\Database Schemas\Access Schema.lnk
----a-w             1,306 2011-04-21 13:35:31  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\SiSoftware\Database Schemas\mySQL Schema.lnk
----a-w             1,311 2011-04-21 13:35:31  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\SiSoftware\Database Schemas\Oracle Schema.lnk
----a-w             1,331 2011-04-21 13:35:31  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\SiSoftware\Database Schemas\SQL Server Schema.lnk
----a-w             1,321 2011-04-21 13:35:31  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\SiSoftware\Example Scripts\Analysis Script.lnk
----a-w             1,301 2011-04-21 13:35:31  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\SiSoftware\Example Scripts\Burn-in Script.lnk
----a-w             1,311 2011-04-21 13:35:31  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\SiSoftware\Example Scripts\Create Report Script.lnk
----a-w             1,316 2011-04-21 13:35:31  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\SiSoftware\Example Scripts\Monitor Environment Script.lnk
----a-w               903 2011-04-21 13:35:31  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\SiSoftware\Internet Links\Compare Product Prices.lnk
----a-w               923 2011-04-21 13:35:31  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\SiSoftware\Internet Links\Get more! Order the Business commercial version.lnk
----a-w               907 2011-04-21 13:35:31  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\SiSoftware\Internet Links\Get more! Order the Home commercial version.lnk
----a-w               917 2011-04-21 13:35:31  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\SiSoftware\Internet Links\Product Reviews and Benchmarks using SiSoftware Sandra.lnk
----a-w               933 2011-04-21 13:35:31  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\SiSoftware\Internet Links\SiSoftware @ Internet.lnk
----a-w               907 2011-04-21 13:35:31  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\SiSoftware\Internet Links\Statistics and Rankings.lnk
----a-w             1,311 2011-04-21 13:35:31  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\SiSoftware\Sample Reports\HTML format Report.lnk
----a-w             1,311 2011-04-21 13:35:31  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\SiSoftware\Sample Reports\MIF format Report.lnk
----a-w             1,311 2011-04-21 13:35:31  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\SiSoftware\Sample Reports\Text format Report.lnk
----a-w             1,311 2011-04-21 13:35:31  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\SiSoftware\Sample Reports\XML format Report.lnk
----a-w             2,533 2012-03-01 22:34:55  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Skype\Skype.lnk
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\SlySoft\AnyDVD
----a-w             1,163 2011-01-08 04:13:35  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\SlySoft\AnyDVD\AnyDVD Help.lnk
----a-w             1,237 2011-01-08 04:13:35  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\SlySoft\AnyDVD\AnyDVD History.lnk
----a-w             1,141 2011-01-08 04:13:35  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\SlySoft\AnyDVD\AnyDVD Image Ripper.lnk
----a-w             1,137 2011-01-08 04:13:35  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\SlySoft\AnyDVD\AnyDVD Ripper.lnk
----a-w             1,147 2011-01-08 04:13:35  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\SlySoft\AnyDVD\AnyDVD System Information.lnk
----a-w             1,131 2011-01-08 04:13:35  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\SlySoft\AnyDVD\AnyDVD.lnk
----a-w             1,148 2011-01-08 04:13:35  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\SlySoft\AnyDVD\Register AnyDVD.lnk
----a-w             1,168 2011-01-08 04:13:33  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\SlySoft\AnyDVD\Uninstall.lnk
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Smith Micro\CheckIt Diagnostics 8
----a-w             2,741 2011-02-10 17:29:45  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Smith Micro\CheckIt Diagnostics 8\CheckIt Diagnostics 8 Help.lnk
----a-w             2,889 2011-02-10 17:29:45  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Smith Micro\CheckIt Diagnostics 8\CheckIt Diagnostics 8.lnk
----a-w             2,627 2011-07-05 19:34:06  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Snagit 10\Snagit 10 Editor.lnk
----a-w             2,603 2011-07-05 19:34:06  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Snagit 10\Snagit 10.lnk
----a-w             2,551 2011-01-04 23:18:42  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Snagit 9\Snagit 9 Editor.lnk
----a-w             2,551 2011-01-04 23:18:42  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Snagit 9\Snagit 9.lnk
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Sophos\Sophos Anti-Rootkit
----a-w             1,908 2012-03-30 15:08:40  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Sophos\Sophos Anti-Rootkit\Release notes.lnk
----a-w             2,127 2012-03-30 15:08:40  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Sophos\Sophos Anti-Rootkit\Sophos Anti-Rootkit manual.lnk
----a-w             2,127 2012-03-30 15:08:40  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Sophos\Sophos Anti-Rootkit\Sophos Anti-Rootkit.lnk
----a-w             2,141 2012-03-30 15:08:40  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Sophos\Sophos Anti-Rootkit\Uninstall Sophos Anti-Rootkit.lnk
--sha-w               174 2009-07-14 04:54:24  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Startup\desktop.ini
----a-w             1,864 2011-08-11 10:51:34  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Startup\McAfee Security Scan Plus.lnk
----a-w             1,720 2011-05-02 20:04:53  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Startup\PdfPro7Hook - Shortcut.lnk
----a-w             2,094 2011-07-05 19:34:07  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Startup\Snagit 10.lnk
----a-w             1,143 2012-03-05 11:49:34  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Tag&Rename\Download Tag&Rename User Manual in pdf.lnk
----a-w             1,043 2012-03-05 11:49:34  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Tag&Rename\Tag&Rename help.lnk
----a-w             1,113 2012-03-05 11:49:34  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Tag&Rename\Tag&Rename.lnk
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Uniblue\DriverScanner
----a-w             1,219 2012-02-01 13:07:22  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Uniblue\DriverScanner\DriverScanner.lnk
----a-w             1,194 2012-02-01 13:07:22  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Uniblue\DriverScanner\Uninstall DriverScanner.lnk
----a-w             1,146 2012-03-01 22:32:19  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\VideoLAN\Documentation.lnk
----a-w             1,097 2012-03-01 22:32:19  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\VideoLAN\Release Notes.lnk
----a-w             1,186 2012-03-01 22:32:19  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\VideoLAN\Reset VLC media player preferences and cache files.lnk
----a-w             1,161 2012-03-01 22:32:19  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\VideoLAN\VideoLAN Website.lnk
----a-w             1,106 2012-03-01 22:32:19  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\VideoLAN\VLC media player skinned.lnk
----a-w             1,090 2012-03-01 22:32:19  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\VideoLAN\VLC media player.lnk
----a-w             1,015 2011-12-22 02:51:47  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Winamp\Uninstall Winamp.lnk
----a-w             1,015 2011-12-22 02:51:47  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Winamp\What's New.lnk
----a-w             1,003 2011-12-22 02:51:47  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Winamp\Winamp.lnk
--sha-w               243 2010-12-18 23:47:33  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Windows Live\desktop.ini
----a-w             2,669 2010-12-18 23:41:56  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Windows Live\Windows Live Family Safety.lnk
----a-w             2,068 2010-12-18 23:47:33  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Windows Live\Windows Live Mesh.lnk
----a-w             2,350 2010-12-18 23:47:01  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Windows Live\Windows Live Writer.lnk
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Windows Media\Utilities
----a-w             2,106 2010-12-19 03:28:55  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Windows Media\Windows Media Encoder.lnk
----a-w             1,216 2010-12-19 03:28:55  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Windows Media\Utilities\Windows Media Encoding Script.lnk
----a-w             1,135 2010-12-19 03:28:55  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Windows Media\Utilities\Windows Media File Editor.lnk
----a-w             1,139 2010-12-19 03:28:55  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Windows Media\Utilities\Windows Media Profile Editor.lnk
----a-w             1,152 2010-12-19 03:28:55  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Windows Media\Utilities\Windows Media Stream Editor.lnk
----a-w             1,391 2011-01-12 13:25:37  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Windows Password Key Professional Demo\Help.lnk
----a-w             1,012 2011-01-12 13:25:38  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Windows Password Key Professional Demo\Uninstall Windows Password Key Professional Demo.lnk
----a-w             1,391 2011-01-12 13:25:38  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Windows Password Key Professional Demo\Website.lnk
----a-w             1,371 2011-01-12 13:25:37  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Windows Password Key Professional Demo\Windows Password Key Professional Demo.lnk
----a-w               980 2011-01-02 17:17:08  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\WinRAR\Console RAR manual.lnk
----a-w               999 2011-01-02 17:17:08  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\WinRAR\WinRAR help.lnk
----a-w               999 2011-01-02 17:17:08  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\WinRAR\WinRAR.lnk
----a-w             2,225 2012-04-01 20:48:08  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\WinZip\WinZip 16.0.lnk
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Xara\Xara Web Designer 7 Premium
d-----w                 0 2012-08-16 23:57:23  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Xara\Xara Web Designer MX Premium
----a-w             1,236 2011-07-18 18:42:44  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Xara\Xara Web Designer 7 Premium\Uninstall Xara Web Designer 7 Premium.lnk
----a-w             1,287 2011-07-18 18:42:44  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Xara\Xara Web Designer 7 Premium\Xara Web Designer 7 Premium Help.lnk
----a-w             1,096 2011-07-18 18:42:44  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Xara\Xara Web Designer 7 Premium\Xara Web Designer 7 Premium.lnk
----a-w             1,796 2012-03-31 01:38:39  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Xara\Xara Web Designer MX Premium\Uninstall Xara Web Designer MX Premium.lnk
----a-w             1,446 2012-03-31 01:38:39  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Xara\Xara Web Designer MX Premium\Xara Web Designer MX Premium Help.lnk
----a-w             1,217 2012-03-31 01:38:39  C:\Users\Home\Local Settings\TEMP\smtmp\1\Programs\Xara\Xara Web Designer MX Premium\Xara Web Designer MX Premium.lnk
----a-w             2,021 2011-07-31 20:04:16  C:\Users\Home\Local Settings\TEMP\smtmp\4\Adobe Reader X.lnk
----a-w             2,217 2011-11-23 13:50:45  C:\Users\Home\Local Settings\TEMP\smtmp\4\Amazon Cloud Player.lnk
----a-w             1,107 2011-01-08 04:13:35  C:\Users\Home\Local Settings\TEMP\smtmp\4\AnyDVD.lnk
----a-w             1,227 2011-07-08 00:38:04  C:\Users\Home\Local Settings\TEMP\smtmp\4\Bejeweled 3.lnk
----a-w               962 2012-04-12 02:16:57  C:\Users\Home\Local Settings\TEMP\smtmp\4\calibre - E-book management.lnk
----a-w             1,806 2010-12-25 06:31:04  C:\Users\Home\Local Settings\TEMP\smtmp\4\Canon My Printer.lnk
----a-w             2,045 2010-12-25 06:34:13  C:\Users\Home\Local Settings\TEMP\smtmp\4\Canon Solution Menu.lnk
----a-w             2,689 2011-02-10 17:29:45  C:\Users\Home\Local Settings\TEMP\smtmp\4\CheckIt Diagnostics 8.lnk
----a-w             1,342 2010-12-19 03:16:35  C:\Users\Home\Local Settings\TEMP\smtmp\4\Corel PaintShop Photo Pro X3.lnk
----a-w             1,174 2010-12-19 03:24:27  C:\Users\Home\Local Settings\TEMP\smtmp\4\Corel PaintShop Photo Project Creator.lnk
--sha-w               174 2009-07-14 04:54:24  C:\Users\Home\Local Settings\TEMP\smtmp\4\desktop.ini
----a-w             2,122 2012-01-11 21:33:30  C:\Users\Home\Local Settings\TEMP\smtmp\4\DivX Plus Converter.lnk
----a-w             1,118 2012-01-11 21:33:10  C:\Users\Home\Local Settings\TEMP\smtmp\4\DivX Plus Player.lnk
----a-w             2,799 2010-12-21 19:41:53  C:\Users\Home\Local Settings\TEMP\smtmp\4\Dragon NaturallySpeaking 11.0.lnk
----a-w             1,195 2012-02-01 13:07:22  C:\Users\Home\Local Settings\TEMP\smtmp\4\DriverScanner.lnk
----a-w             2,825 2011-05-24 10:46:07  C:\Users\Home\Local Settings\TEMP\smtmp\4\Fidelity Active Trader Pro Beta..lnk
----a-w             2,278 2011-05-24 10:46:07  C:\Users\Home\Local Settings\TEMP\smtmp\4\Fidelity Active Trader Pro.lnk
----a-w             2,346 2012-05-01 18:43:00  C:\Users\Home\Local Settings\TEMP\smtmp\4\Google Chrome.lnk
----a-w             1,871 2011-12-22 02:54:02  C:\Users\Home\Local Settings\TEMP\smtmp\4\ImgBurn.lnk
----a-w             2,072 2011-05-27 19:38:49  C:\Users\Home\Local Settings\TEMP\smtmp\4\ImTOO Audio Encoder 6.lnk
----a-w             2,036 2011-05-27 19:40:55  C:\Users\Home\Local Settings\TEMP\smtmp\4\ImTOO CD Ripper 6.lnk
----a-w             2,082 2011-03-08 11:39:31  C:\Users\Home\Local Settings\TEMP\smtmp\4\ImTOO DVD Creator 6.lnk
----a-w             2,064 2011-11-26 17:12:41  C:\Users\Home\Local Settings\TEMP\smtmp\4\ImTOO DVD Creator.lnk
----a-w             2,126 2011-11-26 22:03:47  C:\Users\Home\Local Settings\TEMP\smtmp\4\ImTOO DVD Ripper Ultimate 6.lnk
----a-w             2,171 2012-01-30 16:18:08  C:\Users\Home\Local Settings\TEMP\smtmp\4\ImTOO Video Converter Ultimate 6.lnk
----a-w             1,901 2011-11-01 14:25:39  C:\Users\Home\Local Settings\TEMP\smtmp\4\inFlow Inventory.lnk
----a-w             1,785 2012-04-01 03:28:28  C:\Users\Home\Local Settings\TEMP\smtmp\4\iTunes.lnk
----a-w             2,011 2011-01-02 02:11:41  C:\Users\Home\Local Settings\TEMP\smtmp\4\Logitech Vid HD.lnk
----a-w             1,626 2011-11-10 16:07:56  C:\Users\Home\Local Settings\TEMP\smtmp\4\Logitech Webcam Software  .lnk
----a-w             1,115 2012-03-23 10:35:14  C:\Users\Home\Local Settings\TEMP\smtmp\4\Malwarebytes Anti-Malware.lnk
----a-w             1,866 2011-08-11 10:51:34  C:\Users\Home\Local Settings\TEMP\smtmp\4\McAfee Security Scan Plus.lnk
----a-w             2,158 2011-09-11 02:56:02  C:\Users\Home\Local Settings\TEMP\smtmp\4\McAfee Virtual Technician.lnk
----a-w             1,144 2011-05-03 11:24:32  C:\Users\Home\Local Settings\TEMP\smtmp\4\Mozilla Firefox.lnk
----a-w             2,011 2010-12-24 18:46:56  C:\Users\Home\Local Settings\TEMP\smtmp\4\Mozilla Thunderbird.lnk
----a-w             2,058 2010-12-25 06:33:29  C:\Users\Home\Local Settings\TEMP\smtmp\4\MP Navigator 2.2.lnk
----a-w             2,101 2010-12-25 06:36:04  C:\Users\Home\Local Settings\TEMP\smtmp\4\MP Navigator EX 1.1.lnk
----a-w             3,013 2010-12-19 04:01:22  C:\Users\Home\Local Settings\TEMP\smtmp\4\Nero BackItUp 10.lnk
----a-w             2,915 2010-12-19 04:00:30  C:\Users\Home\Local Settings\TEMP\smtmp\4\Nero Burning ROM 10.lnk
----a-w             2,895 2010-12-19 04:03:48  C:\Users\Home\Local Settings\TEMP\smtmp\4\Nero MediaHub 10.lnk
----a-w             2,923 2010-12-19 04:06:26  C:\Users\Home\Local Settings\TEMP\smtmp\4\Nero StartSmart 10.lnk
----a-w             2,901 2010-12-19 04:05:12  C:\Users\Home\Local Settings\TEMP\smtmp\4\Nero Vision 10.lnk
----a-w             1,835 2012-02-11 01:50:21  C:\Users\Home\Local Settings\TEMP\smtmp\4\Opera.lnk
----a-w             1,985 2010-12-21 20:51:37  C:\Users\Home\Local Settings\TEMP\smtmp\4\PCmover Professional.lnk
----a-w             1,099 2012-01-12 00:16:39  C:\Users\Home\Local Settings\TEMP\smtmp\4\PDF Converter Professional.lnk
----a-w             1,838 2011-01-02 16:03:14  C:\Users\Home\Local Settings\TEMP\smtmp\4\PMB Help.lnk
----a-w             1,038 2011-01-02 16:03:14  C:\Users\Home\Local Settings\TEMP\smtmp\4\PMB Launcher.lnk
----a-w             1,015 2011-01-02 16:03:14  C:\Users\Home\Local Settings\TEMP\smtmp\4\PMB.lnk
----a-w             1,820 2011-01-05 01:33:42  C:\Users\Home\Local Settings\TEMP\smtmp\4\PrintMaster 12.lnk
----a-w             2,515 2012-03-01 22:34:55  C:\Users\Home\Local Settings\TEMP\smtmp\4\Skype.lnk
----a-w             2,039 2011-01-04 23:18:42  C:\Users\Home\Local Settings\TEMP\smtmp\4\Snagit 9 Editor.lnk
----a-w             2,019 2011-01-04 23:18:42  C:\Users\Home\Local Settings\TEMP\smtmp\4\Snagit 9.lnk
----a-w             1,072 2012-03-01 22:32:19  C:\Users\Home\Local Settings\TEMP\smtmp\4\VLC media player.lnk
----a-w               985 2011-12-22 02:51:47  C:\Users\Home\Local Settings\TEMP\smtmp\4\Winamp.lnk
----a-w               981 2011-01-02 17:17:08  C:\Users\Home\Local Settings\TEMP\smtmp\4\WinRAR.lnk
----a-w             1,093 2011-04-15 01:59:48  C:\Users\Home\Local Settings\TEMP\smtmp\4\WinTV 7.lnk
----a-w             2,207 2012-04-01 20:48:08  C:\Users\Home\Local Settings\TEMP\smtmp\4\WinZip.lnk
----a-w             1,072 2011-07-18 18:42:44  C:\Users\Home\Local Settings\TEMP\smtmp\4\Xara Web Designer 7 Premium.lnk
----a-w             1,193 2012-03-31 01:38:39  C:\Users\Home\Local Settings\TEMP\smtmp\4\Xara Web Designer MX Premium.lnk
    Once done, run this so we can see all is as it should be again.

    Now run the C:\MGtools\GetLogs.bat file by double clicking on it. (Right click and run as admin if using Vista or Windows7) Then attach the new C:\MGlogs.zip file that will be created by running this.
     
    Kestrel13!, Aug 20, 2012
    #10
  11. mvssysprog

    mvssysprog Private E-2

    Good morning...

    I ran unhide and it processed successfully.

    I then followed the directions you sent me

    1) I ran RogueKiller and it found several entries in the registry to delete. I then selected 'delete' and it deleted all but one 'wallpaper' entry. I reran the scan and it found the 'wallpaper' entry, I again tried to delete it but it failed with an 'error'. I have suppled the three RKlogs.

    2) I didn't run the other steps because my desktop and shortcuts appear to be fine.

    3) I reran Getlogs.bat and am including that output.

    Please advise whether I need to do anything further about the 'wallpaper' registry entry.

    Many thanks...

    Dave
     

    Attached Files:

    mvssysprog, Aug 20, 2012
    #11
  12. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    It did not work.

    Some of your shortcuts etc are hidden. (only 1 and 4 apply to you, check the list i gave you and you will see what needs to be restored.)

    Do this and then: Now run the C:\MGtools\GetLogs.bat file by double clicking on it. (Right click and run as admin if using Vista or Windows7) Then attach the new C:\MGlogs.zip file that will be created by running this.
     
    Kestrel13!, Aug 20, 2012
    #12

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds