OTL logfile created on: 17/07/2011 22:26:20 - Run 1 OTL by OldTimer - Version 3.2.26.1 Folder = C:\Documents and Settings\Kevin John Surgett\My Documents Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy 1021.97 Mb Total Physical Memory | 558.32 Mb Available Physical Memory | 54.63% Memory free 2.40 Gb Paging File | 1.53 Gb Available in Paging File | 63.67% Paging File free Paging file location(s): C:\pagefile.sys 1536 3072 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 108.57 Gb Total Space | 69.84 Gb Free Space | 64.32% Space Free | Partition Type: NTFS Drive D: | 37.24 Gb Total Space | 34.76 Gb Free Space | 93.34% Space Free | Partition Type: NTFS Computer Name: LPP | User Name: Kevin John Surgett | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - C:\Documents and Settings\Kevin John Surgett\My Documents\OTL.exe (OldTimer Tools) PRC - C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe (Lavasoft Limited) PRC - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft Limited) PRC - C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe (Spigot, Inc.) PRC - C:\Program Files\Application Updater\ApplicationUpdater.exe (Spigot, Inc.) PRC - C:\Program Files\AVG\AVG10\avgtray.exe (AVG Technologies CZ, s.r.o.) PRC - C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe (AVG Technologies CZ, s.r.o.) PRC - C:\Program Files\AVG\AVG10\avgnsx.exe (AVG Technologies CZ, s.r.o.) PRC - C:\Program Files\MozyPro (Corporate Edition)\MyBusinessWorksstat.exe (MyBusinessWorks) PRC - C:\Program Files\MozyPro (Corporate Edition)\MyBusinessWorksbackup.exe (MyBusinessWorks) PRC - C:\Program Files\AVG\AVG10\avgcsrvx.exe (AVG Technologies CZ, s.r.o.) PRC - C:\Program Files\AVG\AVG10\avgchsvx.exe (AVG Technologies CZ, s.r.o.) PRC - C:\Program Files\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe (Research In Motion Limited) PRC - C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSMonitor.exe () PRC - C:\Program Files\AVG\AVG10\avgwdsvc.exe (AVG Technologies CZ, s.r.o.) PRC - C:\Program Files\AVG\AVG10\avgrsx.exe (AVG Technologies CZ, s.r.o.) PRC - C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe (PC Tools) PRC - C:\Program Files\Nitro PDF\Reader\NitroPDFReaderDriverService.exe (Nitro PDF Software) PRC - C:\Program Files\AVG\AVG PC Tuneup 2011\BoostSpeed.exe (AVG) PRC - C:\Program Files\WinZip\WZQKPICK.EXE (WinZip Computing, S.L.) PRC - C:\Program Files\BT Business Broadband Desktop Help\btbb\BTHelpNotifier.exe (Alcatel-Lucent) PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation) PRC - C:\WINDOWS\system32\cleanmgr.exe (Microsoft Corporation) PRC - C:\Program Files\Dell Network Assistant\ezi_hnm2.exe (SingleClick Systems) PRC - C:\Program Files\Dell Network Assistant\hnm_svc.exe (SingleClick Systems) PRC - C:\WINDOWS\system32\HPZipm12.exe (HP) PRC - C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe (AOL LLC) PRC - C:\WINDOWS\stsystra.exe (SigmaTel, Inc.) PRC - C:\Program Files\Dell Support\DSAgnt.exe (Gteko Ltd.) PRC - C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation) PRC - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation) PRC - C:\Program Files\Dell\Media Experience\DMXLauncher.exe () PRC - C:\Program Files\Rainbow Technologies\SuperPro\6.1\Server\Server\Win9x\spnsrv9x.exe (Rainbow Technologies) PRC - C:\Program Files\Rainbow Technologies\SuperPro\6.1\Server\Server\WinNT\spnsrvnt.exe (Rainbow Technologies) PRC - C:\Program Files\Common Files\Gerber Technology\acmkmgr.exe (Gerber Technology) PRC - C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe (Hewlett-Packard) PRC - C:\Program Files\Rainbow Technologies\SentinelLM 7.2.0 Server\English\lservnt.exe (Rainbow Technologies, Inc.) [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - C:\Documents and Settings\Kevin John Surgett\My Documents\OTL.exe (OldTimer Tools) MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (Microsoft Corporation) MOD - C:\Program Files\Common Files\Motive\McciContextHook_DSR.dll (Alcatel-Lucent) [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - (Roxio Upnp Server 9) -- File not found SRV - (Roxio UPnP Renderer 9) -- File not found SRV - (HidServ) -- File not found SRV - (AppMgmt) -- File not found SRV - (Lavasoft Ad-Aware Service) -- C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft Limited) SRV - (Application Updater) -- C:\Program Files\Application Updater\ApplicationUpdater.exe (Spigot, Inc.) SRV - (AVGIDSAgent) -- C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe (AVG Technologies CZ, s.r.o.) SRV - (MyBusinessWorksbackup) -- C:\Program Files\MozyPro (Corporate Edition)\MyBusinessWorksbackup.exe (MyBusinessWorks) SRV - (avgwd) -- C:\Program Files\AVG\AVG10\avgwdsvc.exe (AVG Technologies CZ, s.r.o.) SRV - (PCToolsSSDMonitorSvc) -- C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe (PC Tools) SRV - (NitroReaderDriverReadSpool) -- C:\Program Files\Nitro PDF\Reader\NitroPDFReaderDriverService.exe (Nitro PDF Software) SRV - (hnmsvc) -- C:\Program Files\Dell Network Assistant\hnm_svc.exe (SingleClick Systems) SRV - (Pml Driver HPZ12) -- C:\WINDOWS\system32\HPZipm12.exe (HP) SRV - (AOL ACS) -- C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe (AOL LLC) SRV - (IAANTMON) Intel(R) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation) SRV - (SuperProServer) -- C:\Program Files\Rainbow Technologies\SuperPro\6.1\Server\Server\WinNT\spnsrvnt.exe (Rainbow Technologies) SRV - (SentinelLM) -- C:\Program Files\Rainbow Technologies\SentinelLM 7.2.0 Server\English\lservnt.exe (Rainbow Technologies, Inc.) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - (Lbd) -- C:\WINDOWS\system32\DRIVERS\Lbd.sys (Lavasoft AB) DRV - (Lavasoft Kernexplorer) -- C:\Program Files\Lavasoft\Ad-Aware\kernexplorer.sys () DRV - (AVGIDSDriver) -- C:\WINDOWS\system32\drivers\AVGIDSDriver.sys (AVG Technologies CZ, s.r.o. ) DRV - (Avgtdix) -- C:\WINDOWS\system32\drivers\avgtdix.sys (AVG Technologies CZ, s.r.o.) DRV - (MyBusinessWorksFilter) -- C:\WINDOWS\system32\drivers\MyBusinessWorks.sys (Mozy, Inc.) DRV - (Avgrkx86) -- C:\WINDOWS\system32\DRIVERS\avgrkx86.sys (AVG Technologies CZ, s.r.o.) DRV - (Avgmfx86) -- C:\WINDOWS\system32\drivers\avgmfx86.sys (AVG Technologies CZ, s.r.o.) DRV - (AVGIDSEH) -- C:\WINDOWS\system32\DRIVERS\AVGIDSEH.Sys (AVG Technologies CZ, s.r.o. ) DRV - (AVGIDSShim) -- C:\WINDOWS\system32\drivers\AVGIDSShim.sys (AVG Technologies CZ, s.r.o. ) DRV - (AVGIDSFilter) -- C:\WINDOWS\system32\drivers\AVGIDSFilter.sys (AVG Technologies CZ, s.r.o. ) DRV - (Avgldx86) -- C:\WINDOWS\system32\drivers\avgldx86.sys (AVG Technologies CZ, s.r.o.) DRV - (oreans32) -- C:\WINDOWS\system32\drivers\oreans32.sys () DRV - (MREMP50) -- C:\Program Files\Common Files\Motive\MREMP50.sys (Printing Communications Assoc., Inc. (PCAUSA)) DRV - (MRESP50) -- C:\Program Files\Common Files\Motive\MRESP50.sys (Printing Communications Assoc., Inc. (PCAUSA)) DRV - (tmcomm) -- C:\WINDOWS\system32\drivers\tmcomm.sys (Trend Micro Inc.) DRV - (Packet) -- C:\WINDOWS\system32\drivers\packet.sys (SingleClick Systems) DRV - (ASCTRM) -- C:\WINDOWS\System32\drivers\asctrm.sys (Windows (R) 2000 DDK provider) DRV - (STHDA) -- C:\WINDOWS\system32\drivers\sthda.sys (SigmaTel, Inc.) DRV - (DSproct) -- C:\Program Files\Dell Support\GTAction\triggers\DSproct.sys (GTek Technologies Ltd.) DRV - (wanatw) WAN Miniport (ATW) -- C:\WINDOWS\system32\drivers\wanatw4.sys (America Online, Inc.) DRV - (Sentinel) -- C:\WINDOWS\System32\Drivers\SENTINEL.SYS (Rainbow Technologies, Inc.) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.co.uk/ig/dell?hl=en&client=dell-usuk&channel=uk&ibd=5061024 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = www.google.co.uk/ig/dell?hl=en&client=dell-usuk&channel=uk&ibd=5061024 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.co.uk/ig/dell?hl=en&client=dell-usuk&channel=uk&ibd=5061024 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKCU\..\URLSearchHook: {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\IE\4.5\dealioToolbarIE.dll (Spigot, Inc.) IE - HKCU\..\URLSearchHook: {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - Reg Error: Key error. File not found IE - HKCU\..\URLSearchHook: {E38FA08E-F56A-4169-ABF5-5C71E3C153A1} - C:\Program Files\Freeze.com\NetAssistant\NetAssistant.dll (W3i, LLC) IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = [color=#E56717]========== FireFox ==========[/color] FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@Motive.com/NpMotive,version=1.0: C:\Program Files\Common Files\Motive\npMotive.dll (Motive, Inc.) FF - HKLM\Software\MozillaPlugins\@RIM.com/WebSLLauncher,version=1.0: C:\Program Files\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll () FF - HKLM\Software\MozillaPlugins\@viewpoint.com/VMP: C:\Program Files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll () FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll File not found FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files\AVG\AVG10\Firefox4\ [2011/07/12 10:05:16 | 000,000,000 | ---D | M] [2009/08/04 18:53:34 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Kevin John Surgett\Application Data\Mozilla\Extensions [2009/08/04 18:53:34 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Kevin John Surgett\Application Data\Mozilla\Firefox\Profiles\ahxizse6.default\extensions [2010/06/19 13:17:36 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions O1 HOSTS File: ([2008/11/19 19:59:51 | 000,288,056 | R--- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: 192.168.2.2 NPI8FAC91 O1 - Hosts: 127.0.0.1 www.007guard.com O1 - Hosts: 127.0.0.1 007guard.com O1 - Hosts: 127.0.0.1 008i.com O1 - Hosts: 127.0.0.1 www.008k.com O1 - Hosts: 127.0.0.1 008k.com O1 - Hosts: 127.0.0.1 www.00hq.com O1 - Hosts: 127.0.0.1 00hq.com O1 - Hosts: 127.0.0.1 010402.com O1 - Hosts: 127.0.0.1 www.032439.com O1 - Hosts: 127.0.0.1 032439.com O1 - Hosts: 127.0.0.1 www.0scan.com O1 - Hosts: 127.0.0.1 0scan.com O1 - Hosts: 127.0.0.1 1000gratisproben.com O1 - Hosts: 127.0.0.1 www.1000gratisproben.com O1 - Hosts: 127.0.0.1 www.1001namen.com O1 - Hosts: 127.0.0.1 1001namen.com O1 - Hosts: 127.0.0.1 100888290cs.com O1 - Hosts: 127.0.0.1 www.100888290cs.com O1 - Hosts: 127.0.0.1 100sexlinks.com O1 - Hosts: 127.0.0.1 www.100sexlinks.com O1 - Hosts: 127.0.0.1 10sek.com O1 - Hosts: 127.0.0.1 www.10sek.com O1 - Hosts: 127.0.0.1 www.123haustiereundmehr.com O1 - Hosts: 9927 more lines... O2 - BHO: (Dealio Toolbar) - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\IE\4.5\dealioToolbarIE.dll (Spigot, Inc.) O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found. O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG10\avgssie.dll (AVG Technologies CZ, s.r.o.) O2 - BHO: (XML Class) - {500BCA15-57A7-4eaf-8143-8C619470B13D} - Reg Error: Value error. File not found O2 - BHO: (no name) - {64466B8E-20A7-4A4A-AFF4-AAD9CA68B52C} - Reg Error: Value error. File not found O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) O2 - BHO: (CBrowserHelperObject Object) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll (Dell Inc.) O2 - BHO: (NetAssistantBHO Class) - {E38FA08E-F56A-4169-ABF5-5C71E3C153A1} - C:\Program Files\Freeze.com\NetAssistant\NetAssistant.dll (W3i, LLC) O3 - HKLM\..\Toolbar: (Dealio Toolbar) - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\IE\4.5\dealioToolbarIE.dll (Spigot, Inc.) O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found. O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKLM\..\Toolbar: (no name) - SITEguard - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found. O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG10\avgtray.exe (AVG Technologies CZ, s.r.o.) O4 - HKLM..\Run: [btbb_McciTrayApp] C:\Program Files\BT Business Broadband Desktop Help\btbb\BTHelpNotifier.exe (Alcatel-Lucent) O4 - HKLM..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe () O4 - HKLM..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [RIMBBLaunchAgent.exe] C:\Program Files\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe (Research In Motion Limited) O4 - HKLM..\Run: [SearchSettings] C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe (Spigot, Inc.) O4 - HKLM..\Run: [SentinelSuperProServer] C:\Program Files\Rainbow Technologies\SuperPro\6.1\Server\Server\Win9x\spnsrv9x.exe (Rainbow Technologies) O4 - HKLM..\Run: [SigmatelSysTrayApp] C:\WINDOWS\stsystra.exe (SigmaTel, Inc.) O4 - HKLM..\Run: [TomcatStartup 2.5] C:\Program Files\Hewlett-Packard\Toolbox\hpbpsttp.exe (Hewlett-Packard) O4 - HKCU..\Run: [AVG PC Tuneup 2011] C:\Program Files\AVG\AVG PC Tuneup 2011\BoostSpeed.exe (AVG) O4 - HKCU..\Run: [DellSupport] C:\Program Files\Dell Support\DSAgnt.exe (Gteko Ltd.) O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\AccuMark Startup Manager.lnk = C:\WINDOWS\Installer\{AFF233B6-4BE3-4233-AFE0-543B020DC884}\acmkmgr.exe (InstallShield Software Corp.) O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Dell Network Assistant.lnk = C:\WINDOWS\Installer\{0240BDFB-2995-4A3F-8C96-18D41282B716}\Icon0240BDFB3.exe () O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\MozyPro Status.lnk = C:\Program Files\MozyPro (Corporate Edition)\MyBusinessWorksstat.exe (MyBusinessWorks) O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE (WinZip Computing, S.L.) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\control panel present O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\control panel present O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\restrictions present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation) O8 - Extra context menu item: Se&nd to OneNote - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : IExplorer Security - {3B8FB116-D358-48A3-A5C7-DB84F15CBB04} - Reg Error: Value error. File not found O9 - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation) O9 - Extra Button: Public Domain Expert Toolbar Lite - {7EAD9CDA-E227-4164-B269-ADF8A9048C5F} - Reg Error: Key error. File not found O9 - Extra 'Tools' menuitem : Public Domain Expert Toolbar Lite - {7EAD9CDA-E227-4164-B269-ADF8A9048C5F} - Reg Error: Key error. File not found O15 - HKCU\..Trusted Domains: betfair.co.uk ([www] https in Trusted sites) O15 - HKCU\..Trusted Domains: betfair.com ([www] https in Trusted sites) O15 - HKCU\..Trusted Domains: landmarkinfo.co.uk ([]http in Trusted sites) O15 - HKCU\..Trusted Domains: landmarkinfo.co.uk ([]https in Trusted sites) O15 - HKCU\..Trusted Domains: landmarkinfo.co.uk ([www] http in Trusted sites) O15 - HKCU\..Trusted Domains: landmarkinfo.co.uk ([www] https in Trusted sites) O15 - HKCU\..Trusted Domains: promap.co.uk ([]http in Trusted sites) O15 - HKCU\..Trusted Domains: promap.co.uk ([]https in Trusted sites) O15 - HKCU\..Trusted Domains: promap.co.uk ([www] http in Trusted sites) O15 - HKCU\..Trusted Domains: promap.co.uk ([www] https in Trusted sites) O15 - HKCU\..Trusted Domains: promapserver.co.uk ([]http in Trusted sites) O15 - HKCU\..Trusted Domains: promapserver.co.uk ([]https in Trusted sites) O15 - HKCU\..Trusted Domains: promapserver.co.uk ([www] http in Trusted sites) O15 - HKCU\..Trusted Domains: promapserver.co.uk ([www] https in Trusted sites) O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} http://www.ipix.com/viewers/ipixx.cab (iPIX ActiveX Control) O16 - DPF: {1851174C-97BD-4217-A0CC-E908F60D5B7A} https://h50203.www5.hp.com/HPISWeb/Customer/cabs/HPISDataManager.CAB (Hewlett-Packard Online Support Services) O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab (Symantec AntiVirus scanner) O16 - DPF: {33415AC7-AFFA-4D55-B41C-C64C0D07DFCA} http://h50203.www5.hp.com/HPISWeb/Customer/cabs/HPISWebManager.CAB (Hewlett-Packard Printer Diagnostics) O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.5.7.cab (DLM Control) O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} http://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cab (Reg Error: Key error.) O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab (Symantec RuFSI Utility Class) O16 - DPF: {644F656A-013E-4198-BE03-1D7A4F6AB550} https://www.promapserver.co.uk/controls/latest/promap.cab (Promap Control) O16 - DPF: {6B75345B-AA36-438A-BBE6-4078B4C6984D} http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab (HpProductDetection Class) O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1201547957953 (MUWebControl Class) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26) O16 - DPF: {8BBDC81D-81B3-49EE-87E8-47B7A707FAE8} https://www1.gotomeeting.com/default/applets/g2mdlax.cab (GoToMeeting Web Starter) O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O16 - DPF: {DAF7E6E6-D53A-439A-B28D-12271406B8A9} http://mobileapps.blackberry.com/devicesoftware/AxLoader.cab (RIM AxLoader) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254 O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG10\avgpp.dll (AVG Technologies CZ, s.r.o.) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O22 - SharedTaskScheduler: {4d5b7736-a3bc-4e5b-9fa2-1bcc3e587abb} - evacuative - Reg Error: Value error. File not found O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2004/08/10 13:04:08 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG10\avgchsvx.exe /sync) - C:\Program Files\AVG\AVG10\avgchsvx.exe (AVG Technologies CZ, s.r.o.) O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG10\avgrsx.exe /sync /restart) - C:\Program Files\AVG\AVG10\avgrsx.exe (AVG Technologies CZ, s.r.o.) O34 - HKLM BootExecute: (lsdelete) - C:\WINDOWS\System32\lsdelete.exe () O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011/07/17 14:21:15 | 000,036,864 | ---- | C] (Hewlett-Packard) -- C:\WINDOWS\System32\hpbmmjno.dll [2011/07/17 14:21:14 | 000,040,960 | ---- | C] (Hewlett-Packard) -- C:\WINDOWS\System32\d4channel.dll [2011/07/16 23:14:14 | 000,579,584 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Kevin John Surgett\My Documents\OTL.exe [2011/07/16 21:40:24 | 000,101,720 | ---- | C] (Sunbelt Software) -- C:\WINDOWS\System32\drivers\SBREDrv.sys [2011/07/16 21:28:06 | 000,064,512 | ---- | C] (Lavasoft AB) -- C:\WINDOWS\System32\drivers\Lbd.sys [2011/07/16 21:27:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Lavasoft [2011/07/16 17:45:56 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Kevin John Surgett\Recent [2011/07/16 14:01:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\CCleaner [2011/07/16 14:01:36 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner [2011/07/16 11:13:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Kevin John Surgett\Application Data\Search Settings [2011/07/16 11:12:59 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Spigot [2011/07/16 11:12:59 | 000,000,000 | ---D | C] -- C:\Program Files\Dealio Toolbar [2011/07/16 11:12:59 | 000,000,000 | ---D | C] -- C:\Program Files\Application Updater [2011/07/14 17:26:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Kevin John Surgett\Local Settings\Application Data\Downloaded Installations [2011/06/29 21:26:35 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe AIR [2011/06/28 23:03:46 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Software [2011/06/24 19:51:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Kevin John Surgett\My Documents\Credit-Voucher [2011/06/21 17:21:22 | 000,105,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mup.sys [5 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\Documents and Settings\Kevin John Surgett\My Documents\*.tmp files -> C:\Documents and Settings\Kevin John Surgett\My Documents\*.tmp -> ] [1 C:\Documents and Settings\All Users\Application Data\*.tmp files -> C:\Documents and Settings\All Users\Application Data\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011/07/17 22:26:54 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\tmpPrst.dll [2011/07/17 22:26:54 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\lsprst7.dll [2011/07/17 22:24:32 | 000,000,196 | -H-- | M] () -- C:\aaw7boot.cmd [2011/07/17 22:17:00 | 000,000,968 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1477412558-1115514890-2292853418-1012UA.job [2011/07/17 22:01:00 | 000,000,260 | ---- | M] () -- C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job [2011/07/17 21:33:35 | 000,002,333 | ---- | M] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Dell Network Assistant.lnk [2011/07/17 21:33:19 | 000,002,293 | ---- | M] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\AccuMark Startup Manager.lnk [2011/07/17 15:00:00 | 000,000,280 | ---- | M] () -- C:\WINDOWS\tasks\RMSchedule.job [2011/07/17 14:29:35 | 000,000,486 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job [2011/07/17 14:27:39 | 000,053,974 | ---- | M] () -- C:\WINDOWS\hppins01.dat [2011/07/17 14:26:53 | 000,039,472 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml [2011/07/17 14:24:56 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2011/07/17 14:24:43 | 000,000,087 | ---- | M] () -- C:\WINDOWS\System32\nsprs.tgz [2011/07/17 14:24:41 | 000,000,073 | ---- | M] () -- C:\WINDOWS\System32\nsprs.dll [2011/07/17 14:24:32 | 000,000,414 | ---- | M] () -- C:\WINDOWS\tasks\AVG PC Tuneup 2011 Integrator Start On Windows Logon.job [2011/07/17 14:24:17 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2011/07/17 14:24:15 | 1071,685,632 | -HS- | M] () -- C:\hiberfil.sys [2011/07/17 14:13:18 | 000,001,785 | ---- | M] () -- C:\WINDOWS\System32\AddPort.ini [2011/07/17 14:13:14 | 000,000,709 | ---- | M] () -- C:\WINDOWS\hpntwksetup.ini [2011/07/17 13:08:00 | 000,000,918 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1477412558-1115514890-2292853418-1012Core1cc2a8b1e02be3e.job [2011/07/17 09:59:58 | 122,570,916 | ---- | M] () -- C:\WINDOWS\System32\drivers\AVG\incavi.avm [2011/07/17 08:46:01 | 000,022,904 | ---- | M] () -- C:\WINDOWS\MyBusinessWorks.flt [2011/07/17 08:46:01 | 000,008,790 | ---- | M] () -- C:\WINDOWS\MyBusinessWorks.blk [2011/07/16 23:14:14 | 000,579,584 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Kevin John Surgett\My Documents\OTL.exe [2011/07/16 21:40:19 | 000,101,720 | ---- | M] (Sunbelt Software) -- C:\WINDOWS\System32\drivers\SBREDrv.sys [2011/07/16 21:40:13 | 000,016,432 | ---- | M] () -- C:\WINDOWS\System32\lsdelete.exe [2011/07/16 21:28:27 | 000,000,797 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Ad-Aware.lnk [2011/07/16 11:04:25 | 000,411,880 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2011/07/15 23:51:12 | 000,503,164 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2011/07/15 23:51:12 | 000,088,018 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2011/07/15 13:59:23 | 000,002,828 | ---- | M] () -- C:\WINDOWS\System32\OEMINFO.PNF [2011/07/14 08:22:31 | 000,005,852 | -HS- | M] () -- C:\WINDOWS\System32\KGyGaAvL.sys [2011/07/14 08:22:26 | 000,000,056 | RHS- | M] () -- C:\WINDOWS\System32\445CE187A5.sys [2011/06/27 17:31:56 | 000,982,229 | ---- | M] () -- C:\Documents and Settings\Kevin John Surgett\My Documents\32 Demoiselle Crescent - Mortgage Statement.jpg [2011/06/27 17:22:28 | 000,982,984 | ---- | M] () -- C:\Documents and Settings\Kevin John Surgett\Desktop\32 Demoiselle Crescent - Mortgage Statement.jpg [2011/06/27 17:11:25 | 000,000,014 | ---- | M] () -- C:\WINDOWS\System32\tmpPrst.tgz [2011/06/24 19:51:08 | 000,027,454 | ---- | M] () -- C:\Documents and Settings\Kevin John Surgett\My Documents\Credit-Voucher.zip [2011/06/24 18:04:18 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat [2011/06/23 16:28:51 | 000,119,346 | ---- | M] () -- C:\Documents and Settings\Kevin John Surgett\My Documents\Witham Train Timetable.pdf [2011/06/22 13:49:20 | 001,159,434 | ---- | M] () -- C:\Documents and Settings\Kevin John Surgett\My Documents\SpecialReport2.pdf [2011/06/22 12:36:47 | 001,710,741 | ---- | M] () -- C:\Documents and Settings\Kevin John Surgett\My Documents\Betting_Rant.pdf [2011/06/20 10:31:32 | 000,064,512 | ---- | M] (Lavasoft AB) -- C:\WINDOWS\System32\drivers\Lbd.sys [2011/06/19 17:44:22 | 000,404,640 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl [5 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\Documents and Settings\Kevin John Surgett\My Documents\*.tmp files -> C:\Documents and Settings\Kevin John Surgett\My Documents\*.tmp -> ] [1 C:\Documents and Settings\All Users\Application Data\*.tmp files -> C:\Documents and Settings\All Users\Application Data\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011/07/17 22:24:32 | 000,000,196 | -H-- | C] () -- C:\aaw7boot.cmd [2011/07/17 14:21:15 | 000,074,752 | ---- | C] () -- C:\WINDOWS\System32\jst.dll [2011/07/17 14:21:15 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\compJNI.dll [2011/07/17 14:21:14 | 000,102,400 | ---- | C] () -- C:\WINDOWS\System32\PMLJNI.dll [2011/07/17 14:05:53 | 000,053,974 | ---- | C] () -- C:\WINDOWS\hppins01.dat [2011/07/17 14:05:53 | 000,002,392 | ---- | C] () -- C:\WINDOWS\hppmdl01.dat [2011/07/17 03:18:55 | 000,016,432 | ---- | C] () -- C:\WINDOWS\System32\lsdelete.exe [2011/07/16 21:28:50 | 000,000,486 | ---- | C] () -- C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job [2011/07/16 21:28:27 | 000,000,797 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Ad-Aware.lnk [2011/06/29 21:36:55 | 000,001,804 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Adobe Reader X.lnk [2011/06/27 17:11:25 | 000,000,014 | ---- | C] () -- C:\WINDOWS\System32\tmpPrst.tgz [2011/06/27 17:11:25 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\tmpPrst.dll [2011/06/27 16:31:22 | 000,982,229 | ---- | C] () -- C:\Documents and Settings\Kevin John Surgett\My Documents\32 Demoiselle Crescent - Mortgage Statement.jpg [2011/06/27 16:21:35 | 000,982,984 | ---- | C] () -- C:\Documents and Settings\Kevin John Surgett\Desktop\32 Demoiselle Crescent - Mortgage Statement.jpg [2011/06/24 19:51:08 | 000,027,454 | ---- | C] () -- C:\Documents and Settings\Kevin John Surgett\My Documents\Credit-Voucher.zip [2011/06/23 16:28:51 | 000,119,346 | ---- | C] () -- C:\Documents and Settings\Kevin John Surgett\My Documents\Witham Train Timetable.pdf [2011/06/22 13:49:19 | 001,159,434 | ---- | C] () -- C:\Documents and Settings\Kevin John Surgett\My Documents\SpecialReport2.pdf [2011/05/12 15:45:49 | 000,180,624 | ---- | C] () -- C:\WINDOWS\System32\Primomonnt.dll [2011/03/22 12:47:39 | 000,000,286 | ---- | C] () -- C:\WINDOWS\reimage.ini [2011/03/22 01:18:27 | 000,037,336 | ---- | C] () -- C:\WINDOWS\System32\CleanMFT32.exe [2011/02/25 15:13:49 | 000,002,048 | ---- | C] () -- C:\WINDOWS\System32\sysprs7.dll [2011/02/25 15:13:49 | 000,001,025 | ---- | C] () -- C:\WINDOWS\System32\serauth2.dll [2011/02/25 15:13:49 | 000,001,025 | ---- | C] () -- C:\WINDOWS\System32\serauth1.dll [2011/02/25 15:13:49 | 000,000,073 | ---- | C] () -- C:\WINDOWS\System32\nsprs.dll [2011/02/25 15:13:49 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\lsprst7.dll [2011/02/25 15:11:56 | 000,000,019 | ---- | C] () -- C:\WINDOWS\AMXPLORE.INI [2011/02/10 05:03:48 | 000,000,314 | ---- | C] () -- C:\WINDOWS\primopdf.ini [2011/02/09 16:36:20 | 000,160,797 | ---- | C] () -- C:\WINDOWS\NoteMagic Uninstaller.exe [2010/11/18 16:30:46 | 000,033,920 | ---- | C] () -- C:\WINDOWS\System32\drivers\oreans32.sys [2010/09/02 20:19:42 | 006,508,324 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-S-1-5-21-1477412558-1115514890-2292853418-1007-0.dat [2010/08/16 12:35:57 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat [2010/08/16 11:15:50 | 011,164,488 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-S-1-5-21-1477412558-1115514890-2292853418-1013-0.dat [2010/07/22 23:54:47 | 001,114,646 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-S-1-5-21-1477412558-1115514890-2292853418-1006-0.dat [2010/07/22 23:54:45 | 000,397,550 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-System.dat [2010/06/25 17:37:37 | 000,000,256 | ---- | C] () -- C:\WINDOWS\System32\pool.bin [2010/06/15 23:42:34 | 000,080,656 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat [2010/01/14 03:41:00 | 000,309,248 | ---- | C] () -- C:\WINDOWS\System32\sqlite36_engine.dll [2010/01/14 03:38:00 | 000,023,552 | ---- | C] () -- C:\WINDOWS\System32\DirectCOM.dll [2009/11/30 13:21:23 | 000,000,037 | ---- | C] () -- C:\WINDOWS\ipixActivex.ini [2009/09/14 09:30:58 | 000,014,336 | ---- | C] () -- C:\Documents and Settings\Kevin John Surgett\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009/08/04 12:17:59 | 000,106,496 | ---- | C] () -- C:\WINDOWS\System32\Converter.dll [2009/06/12 09:20:52 | 000,571,320 | ---- | C] () -- C:\WINDOWS\HPISExe.dat [2009/03/31 13:16:59 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat [2009/01/23 11:10:34 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\18ODW1D5.exe.a_a [2008/05/15 16:12:29 | 000,000,095 | ---- | C] () -- C:\WINDOWS\ANS2000.INI [2008/05/15 16:12:29 | 000,000,020 | -H-- | C] () -- C:\WINDOWS\akebook.ini [2008/05/15 16:12:29 | 000,000,004 | -H-- | C] () -- C:\WINDOWS\a3kebook.ini [2008/01/28 19:57:35 | 000,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2008/01/14 17:47:06 | 000,099,712 | ---- | C] () -- C:\WINDOWS\HPBroker.dll [2008/01/12 18:35:52 | 000,003,072 | ---- | C] () -- C:\Documents and Settings\Kevin John Surgett\Application Data\dvd.bmk [2008/01/12 16:08:04 | 000,000,056 | RHS- | C] () -- C:\WINDOWS\System32\445CE187A5.sys [2008/01/01 20:28:35 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI [2007/11/20 16:48:00 | 000,000,709 | ---- | C] () -- C:\WINDOWS\hpntwksetup.ini [2007/07/27 14:58:24 | 000,001,136 | ---- | C] () -- C:\WINDOWS\mozver.dat [2007/07/13 18:57:50 | 000,005,852 | -HS- | C] () -- C:\WINDOWS\System32\KGyGaAvL.sys [2007/07/13 18:57:50 | 000,000,088 | RHS- | C] () -- C:\WINDOWS\System32\A587E15C44.sys [2007/07/06 21:28:04 | 000,001,785 | ---- | C] () -- C:\WINDOWS\System32\AddPort.ini [2007/07/06 21:28:03 | 000,003,399 | R--- | C] () -- C:\WINDOWS\System32\hptcpmon.ini [2006/11/07 15:28:05 | 000,006,028 | ---- | C] () -- C:\Documents and Settings\Kevin John Surgett\Application Data\wklnhst.dat [2006/11/07 11:16:12 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\instlsp.exe [2006/11/06 15:10:50 | 000,000,141 | ---- | C] () -- C:\Documents and Settings\Kevin John Surgett\Local Settings\Application Data\fusioncache.dat [2006/10/24 00:22:40 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini [2006/10/24 00:16:04 | 000,000,464 | ---- | C] () -- C:\WINDOWS\wininit.ini [2006/10/24 00:12:34 | 000,000,335 | ---- | C] () -- C:\WINDOWS\nsreg.dat [2006/10/24 00:11:22 | 000,712,704 | ---- | C] () -- C:\WINDOWS\System32\DellSystemRestore.dll [2006/10/23 23:49:42 | 000,049,152 | ---- | C] () -- C:\WINDOWS\setpwrcg.exe [2006/10/23 23:49:40 | 000,090,112 | ---- | C] () -- C:\WINDOWS\System32\nvapi.dll [2006/10/23 23:49:16 | 000,000,475 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI [2005/11/10 08:56:34 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\px.ini [2005/08/26 15:28:34 | 000,143,360 | ---- | C] () -- C:\WINDOWS\unzip.exe [2005/08/26 15:28:20 | 000,024,576 | ---- | C] () -- C:\WINDOWS\shortcut.exe [2005/08/26 15:27:58 | 000,045,056 | ---- | C] () -- C:\WINDOWS\devenum.exe [2005/06/30 16:05:42 | 000,332,288 | ---- | C] () -- C:\WINDOWS\System32\WAYVAL32.DLL [2005/01/21 13:41:26 | 000,208,896 | ---- | C] () -- C:\WINDOWS\System32\HPP2800V.DLL [2005/01/20 14:18:56 | 000,000,484 | ---- | C] () -- C:\WINDOWS\System32\HPP2800V.DAT [2004/08/10 13:12:05 | 000,000,839 | ---- | C] () -- C:\WINDOWS\orun32.ini [2004/08/10 13:07:31 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2004/08/10 13:02:15 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [2004/08/10 13:01:18 | 000,001,793 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini [2004/08/10 12:57:52 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2004/08/10 12:57:15 | 000,411,880 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2004/08/10 12:51:21 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat [2004/08/10 12:51:20 | 000,503,164 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat [2004/08/10 12:51:20 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat [2004/08/10 12:51:20 | 000,088,018 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat [2004/08/10 12:51:20 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat [2004/08/10 12:51:18 | 000,004,627 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat [2004/08/10 12:51:17 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin [2004/08/10 12:51:16 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat [2004/08/10 12:51:12 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat [2004/08/10 12:51:11 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin [2004/08/10 12:51:05 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat [2004/08/10 12:50:56 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin [2002/03/21 15:39:02 | 000,073,728 | R--- | C] () -- C:\WINDOWS\System32\UNACEV2.DLL [2002/03/21 13:51:52 | 000,503,808 | R--- | C] () -- C:\WINDOWS\System32\lt_xtrans.dll [2002/03/21 13:51:52 | 000,286,720 | R--- | C] () -- C:\WINDOWS\System32\MrSIDD.dll [2002/03/21 13:51:52 | 000,163,840 | R--- | C] () -- C:\WINDOWS\System32\lt_common.dll [2002/03/21 13:51:52 | 000,126,976 | R--- | C] () -- C:\WINDOWS\System32\lt_trans.dll [2002/03/21 13:51:52 | 000,069,632 | R--- | C] () -- C:\WINDOWS\System32\lt_meta.dll [2002/03/21 13:51:52 | 000,053,248 | R--- | C] () -- C:\WINDOWS\System32\lt_encrypt.dll [2002/03/21 13:51:52 | 000,020,480 | R--- | C] () -- C:\WINDOWS\System32\lt_messagetext.dll [2001/03/28 12:37:14 | 000,000,033 | ---- | C] () -- C:\WINDOWS\hppcap.ini [color=#E56717]========== LOP Check ==========[/color] [2010/05/14 16:40:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ACD Systems [2010/12/04 10:05:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AVG10 [2010/12/04 09:52:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\avg9 [2010/12/04 10:04:44 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\Common Files [2006/11/16 12:42:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\MCA31.tmp [2011/05/21 12:23:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\MFAData [2011/05/12 15:48:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Nitro PDF [2011/03/29 09:03:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Registry Helper [2011/03/23 14:12:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Research In Motion [2007/07/06 21:39:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SingleClick Systems [2008/11/19 13:49:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SITEguard [2008/11/19 14:39:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\STOPzilla! [2011/07/17 22:32:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP [2006/10/24 00:13:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Viewpoint [2011/01/17 14:51:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\WinZip [2011/04/07 18:17:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kevin John Surgett\Application Data\ACD Systems [2010/05/10 10:48:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kevin John Surgett\Application Data\alot [2011/03/16 16:28:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kevin John Surgett\Application Data\Auto Click Profits [2011/01/07 00:32:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kevin John Surgett\Application Data\AVG [2010/12/04 10:08:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kevin John Surgett\Application Data\AVG10 [2010/09/28 12:41:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kevin John Surgett\Application Data\BestDomainFinder [2009/11/06 17:17:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kevin John Surgett\Application Data\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 [2010/08/17 16:28:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kevin John Surgett\Application Data\Dealio [2011/04/18 12:22:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kevin John Surgett\Application Data\eBookPro6 [2011/05/12 17:28:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kevin John Surgett\Application Data\FileZilla [2011/05/07 10:42:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kevin John Surgett\Application Data\KompoZer [2006/11/15 16:22:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kevin John Surgett\Application Data\Leadertech [2010/06/15 23:27:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kevin John Surgett\Application Data\MarketSamurai.6E37012E1CBD7F47B14488FCC715944F3EBDCEDC.1 [2009/08/04 02:24:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kevin John Surgett\Application Data\MSNInstaller [2010/12/10 21:04:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kevin John Surgett\Application Data\Netviewer [2011/06/09 15:55:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kevin John Surgett\Application Data\Nitro PDF [2011/05/12 15:45:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kevin John Surgett\Application Data\OpenCandy [2011/03/22 01:49:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kevin John Surgett\Application Data\Registry Mechanic [2011/04/04 17:45:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kevin John Surgett\Application Data\Research In Motion [2011/07/16 11:13:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kevin John Surgett\Application Data\Search Settings [2006/11/07 15:31:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kevin John Surgett\Application Data\Template [2010/06/18 12:57:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kevin John Surgett\Application Data\Tific [2011/06/14 01:04:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kevin John Surgett\Application Data\TP [2011/03/22 00:59:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kevin John Surgett\Application Data\Uniblue [2011/07/17 14:29:35 | 000,000,486 | ---- | M] () -- C:\WINDOWS\Tasks\Ad-Aware Update (Weekly).job [2011/07/17 14:24:32 | 000,000,414 | ---- | M] () -- C:\WINDOWS\Tasks\AVG PC Tuneup 2011 Integrator Start On Windows Logon.job [2011/07/17 15:00:00 | 000,000,280 | ---- | M] () -- C:\WINDOWS\Tasks\RMSchedule.job [2011/07/17 22:01:00 | 000,000,260 | ---- | M] () -- C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 88 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\vlc-1.1.8-win32.exe:SummaryInformation @Alternate Data Stream - 88 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\SITEWIZARD.zip:SummaryInformation @Alternate Data Stream - 88 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Catalogue.rar:SummaryInformation @Alternate Data Stream - 88 bytes -> C:\Documents and Settings\Kevin John Surgett\Desktop\legitcheck(2).hta:SummaryInformation @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Solicitor - 146 Rotary Way.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Shortcut Publ - goalguide_part3.pdf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Shortcut Publ - goalguide_part1.pdf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Shortcut Publ - goalguide.pdf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Session 1 PDF Report Version.pdf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Service Terms and Conditions.pdf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Search engine results.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\screen.rtf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\SCPublishing.pdf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Scalp X Results for 2008-9.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Scalp X Results for 2008-9 without 1st trade loses.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Scalp X Method.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\SAR.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\REVERSE OF ACCUMULATOR 500.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\repeatsalesprofit.pdf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Repairs and Alterations background.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Ravenswood properties plus others expenditure - 2008-9.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Ravenswood properties plus others expenditure - 2007-8.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Q & A.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\publicdomainfreebie.pdf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Public Domain - profiteering.pdf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Property system.pdf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Property system - finance.pdf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Property system - deals.pdf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Property Refurb Costings.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Property Refurb Costings for 28 NKR.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Property Portfolio Values & Mortgages.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Property Portfolio estimated potential increase.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Property Evalaution Sheet.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Property equity for investments or living X's for next 5 years ONLY.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Property deals.pdf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Property blank.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Property - initial viewing.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\promoteoffline.pdf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\PRE-ORDER FORM.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Place History.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Pension change of account details.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Payplan doc.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Payment Authorization Form.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Pay back of £100k.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Pat - re props.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Partner in 4KW.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Palmer & Partners - blank.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Omega_module1dwnld.pdf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Omega fingerprint.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Omega CD4 - NEWSFEED SOURCE LINKS.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\OFT - CCA doc.pdf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\NKR spend.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\New Wordpad Document.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Myhome - return of uniforms to Tam.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Myhome - invoice for Chigwell.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Motor Insurance - Esure.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Mortgage History for Leewood House & 4 Kinnaird Way.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Mortgage History for 8 Bonny Crescent, 32 Demoiselle Crescent, 24 Spring Way & 28 New Kiln Road.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Mortgage differences from last year.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Monthly Outgoings.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Money_Mastery_Guidebook_and_Progress_Tracker.pdf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Monday Joy.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\MM-Mar240308.pdf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\millionairemindset.pdf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Mercers letter.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\MBNA settlement letter.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\MBNA - settlement offer.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\maxweb flyer.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\MaxWeb flyer A5 - 3-12-08.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Masters Super Scalper.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Masters Super Scalper Results for 2008-9.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Masters Super Scalper Instructions.pdf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Masters Super Scalper Instructions.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Masters Super Scalper Instructions v2.pdf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Masters Super Scalp Results for2009.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Masters Super Scalp Results for2009 - Simon.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Masters Super Scalp Results for 2009 - members.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Martyn Stevens Selections.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\LPP - Targets and Conversions.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Losing sequence.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Lloyds payment arrangements.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Lloyds Credit Card letter.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Lloyds Credit Card - SCM letter.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Live Horse Strategy.pdf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Liquid Millionaire.pdf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Liam - transport letter for 2009.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Letter requesting a copy of your agreement.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Letter from their broker.jpg:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Laying Results.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\LAY AND WIN RULES.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Lay And Win File.pdf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\LandPropertySpecialReport.pdf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Land Property - SpecialReportLetter.pdf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Land and Property Partner Business expenditure for 2009-10.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\KJSCV1.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\KJS - Curriculum Vitae.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Kilowen Farm.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\K & G Surgett Holdings.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\K & G Surgett Holdings - updated template.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\K & G Surgett Holdings - Plumbing (Mike).doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\K & G Surgett Holdings - plumber bill.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\K & G Surgett Holdings - Penningtons.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\K & G Surgett Holdings - Green Cartridges.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\K & G Surgett Holdings - Compliment Slip.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\K & G Surgett Holdings - Burglar Alarm.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Joe Boyle Solicitor Details.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Jewellery List.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Jay_Fran Tarkenton_Beach.pdf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\IWJS (septic tank co.) letter.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Internet Marketing - fourstepprocess.pdf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\IMPEX Workbook.pdf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\IMPEX 1 Workbook.pdf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\HOT NEW SECRET SOURCES.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Holdings Account balance.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\HMO.pdf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Hi Joe.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Heaven.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Hearing Aids Resources.rtf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Hearing Aids background.rtf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Hearing Aids - HSL Price range(1).xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Haart - Plots 3 & 8 Salisbury Court.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Gt Maplestead VDS Time log (blank) - volunteer hours.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Gt Maplestead VDS Time log - volunteer hours.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\graham_lauries_method_for13pips.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Govt_Surplus_Download.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Gosfield Golf Lunch Menu.jpg:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Golf & Poker.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Golf - Tims team.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Gaynor ad.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\gateway_user_id.pdf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\FX Predictor Results.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\FX Predictor Results for 2009.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\FX Predictor Account for 2009.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Full & Final.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\fourstepprocess.pdf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Fayes legend.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Fail to plan.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Example of Time log - volunteer hours.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Estimate.jpg:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Estimate with VAT.jpg:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Estimate with VAT 001.jpg:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\ebayclassifieds.pdf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\EBAY Targets 2010.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Earlybird System.pdf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Earlybird account.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Doorstep visit 2.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Doorstep visit 1.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Dominican_Guide.pdf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\discoveringyourtalents.pdf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\DISC-Kevin_Surgett[1].pdf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\DCS-InfoPack.pdf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\David Martin Group - blank.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Daily Sheet.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\CSSS figures.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Credit Cards.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Credit Cards - target.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\covering_letter_jane_brown.pdf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Coventry Building Society letter.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Copy of Summary of payments received from Property Management co for.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Copy of Ravenswood properties plus others expenditure - 2008-9.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Copy of Ravenswood properties plus others expenditure - 2007-8.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Copy of Ravenswood properties plus others expenditure - 2006-7.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Copy of Ravenswood properties expenditure - 2005-6.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Copy of Credit Cards.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\ConvertRentalIncomeToPropertyValue-V02b.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Compendium_1209.pdf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\ChatLog Wednesday 16th June 2010 Webinar with Andy Shaw 2010_06_16 20_50.rtf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\CCA request letter.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\CCA Letter to MBNA.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\CCA Letter to MBNA - 8208.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\CCA Letter to MBNA - 0435.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\CCA Letter to BC.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\CCA Letter to BC - 2007.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\CCA Letter to BC - 2005.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Cash-Machine.pdf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Canonbury return.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Calculating growth.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Buy To Let figures for 4 Magnus Drive.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Buy 2 Let calculations.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Buy 2 Let calculations on 130%.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Buy 2 Let calculations on 125%.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Buy 2 Let calculations on 100%.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Bumper replacement quotation.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Building Insurance quote for Multi Property.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Bromley Road.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Brokers.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Breezemaxweb potential.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Bookies.pdf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\BIB_LICENSE_AGREEMENT.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\BettingExchangeProfits.pdf:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\bathroom ideas.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Barclaycard.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Bank Manager - closure of Myhome account.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Bairstow Eves - blank.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Assets & Liabilities.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\Accountant fee payment.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\8 Ballantyne Drive.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\4 Roman House, Alan Way.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\4 Magnus Drive, Mill Road.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\3 King Stephen Road, New Town.xls:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\2009 Rob Townrow Memorial Trophy.doc:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kevin John Surgett\My Documents\20 Rules of Trading Forex.doc:Roxio EMC Stream @Alternate Data Stream - 152 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:0B4227B4 @Alternate Data Stream - 150 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D1B5B4F1 @Alternate Data Stream - 125 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5C321E34 @Alternate Data Stream - 124 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:BEB71B81 @Alternate Data Stream - 124 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:0B4227B4 @Alternate Data Stream - 120 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:399EDB8F < End of report >