========== Files/Folders - Created Within 30 Days ==========
[2012/05/31 16:46:25 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2012/05/31 11:18:18 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\Temporary Projects
[2012/05/29 15:24:39 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2012/05/29 14:56:32 | 000,000,000 | ---D | C] -- C:\Windows\temp
[2012/05/29 10:08:26 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2012/05/29 10:08:26 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2012/05/29 10:08:26 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2012/05/29 10:08:20 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT
[2012/05/29 10:08:16 | 000,000,000 | ---D | C] -- C:\Qoobox
[2012/05/29 10:06:40 | 004,530,813 | R--- | C] (Swearware) -- C:\Users\User\Desktop\ComboFix.exe
[2012/05/28 14:22:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab
[2012/05/28 00:23:40 | 000,000,000 | -H-D | C] -- C:\Windows\AxInstSV
[2012/05/27 20:44:30 | 000,000,000 | ---D | C] -- C:\_OTL
[2012/05/27 20:41:02 | 000,000,000 | ---D | C] -- C:\ERDNT
[2012/05/27 20:39:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ERUNT
[2012/05/27 20:39:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ERUNT
[2012/05/27 14:57:23 | 004,731,392 | ---- | C] (AVAST Software) -- C:\Users\User\Desktop\aswMBR.exe
[2012/05/27 14:38:52 | 000,595,968 | ---- | C] (OldTimer Tools) -- C:\Users\User\Desktop\OTL.exe
[2012/05/27 11:35:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012/05/27 11:35:23 | 000,024,904 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2012/05/27 11:35:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2012/05/26 20:01:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Trend Micro
[2012/05/26 16:52:47 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Malwarebytes
[2012/05/26 16:52:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012/05/25 12:16:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
[2012/05/22 23:33:31 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Microsoft Corporation
[2012/05/22 09:58:47 | 000,000,000 | ---D | C] -- C:\Windows\symbols
[2012/05/22 09:56:57 | 000,000,000 | ---D | C] -- C:\ProgramData\VS
[2012/05/22 09:53:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio 9.0
[2012/05/22 09:52:39 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET
[2012/05/21 22:56:09 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\Microsoft_Corporation
[2012/05/21 19:52:40 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\RsFx
[2012/05/21 19:52:08 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Visual Studio 9.0
[2012/05/21 19:51:59 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\1033
[2012/05/21 19:51:59 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\1033
[2012/05/21 19:50:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft SQL Server 2008
[2012/05/21 19:50:17 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft SQL Server
[2012/05/21 19:48:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft SQL Server
[2012/05/21 19:48:10 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Synchronization Services
[2012/05/21 19:48:10 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft SQL Server Compact Edition
[2012/05/21 19:48:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Synchronization Services
[2012/05/21 19:47:36 | 000,000,000 | ---D | C] -- C:\Users\User\Documents\Visual Studio 2010
[2012/05/21 19:47:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2010 Express
[2012/05/21 19:46:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio 10.0
[2012/05/21 19:46:04 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Visual Studio 10.0
[2012/05/21 19:46:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft SDKs
[2012/05/21 19:46:04 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Help Viewer
[2012/05/17 16:50:46 | 000,000,000 | ---D | C] -- C:\Program Files\CPUID
[2012/05/15 10:41:40 | 000,000,000 | ---D | C] -- C:\Windows\W7SBC
[2012/05/13 22:58:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
[2012/05/13 22:58:02 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight
[2012/05/13 22:58:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Silverlight
[2012/05/06 12:23:27 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\BlueStacksSetup
[2012/05/06 12:23:27 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\BlueStacks
[2012/05/04 23:03:54 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Youtube Downloader HD
========== Files - Modified Within 30 Days ==========
[2012/06/01 12:15:05 | 000,000,894 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/06/01 11:59:43 | 000,021,296 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/06/01 11:59:43 | 000,021,296 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/06/01 11:53:30 | 000,000,890 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/06/01 11:51:54 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/06/01 11:51:46 | 3153,727,488 | -HS- | M] () -- C:\hiberfil.sys
[2012/06/01 04:04:22 | 000,000,904 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-326096136-1704205804-531090515-1002UA1cd3f446571cd87.job
[2012/05/31 16:50:00 | 000,000,852 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-326096136-1704205804-531090515-1002Core1cd3f44651f1871.job
[2012/05/31 16:41:31 | 000,001,216 | ---- | M] () -- C:\Users\User\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2012/05/31 13:09:34 | 006,201,878 | ---- | M] () -- C:\Users\User\Desktop\Map of grey.pdf
[2012/05/31 13:09:20 | 006,325,660 | ---- | M] () -- C:\Users\User\Desktop\map of grey.odt
[2012/05/31 10:17:42 | 000,397,760 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012/05/30 15:58:02 | 006,310,314 | ---- | M] () -- C:\Users\User\Desktop\mapgreyalt.png
[2012/05/30 15:37:32 | 007,597,581 | ---- | M] () -- C:\Users\User\Desktop\mapgreyalt.pdn
[2012/05/30 15:21:34 | 006,395,065 | ---- | M] () -- C:\Users\User\Desktop\mapgrey.png
[2012/05/30 15:20:46 | 007,605,816 | ---- | M] () -- C:\Users\User\Desktop\mapgrey.pdn
[2012/05/30 15:05:15 | 000,889,848 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012/05/30 15:05:15 | 000,740,726 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012/05/30 15:05:15 | 000,157,614 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012/05/30 15:02:14 | 000,287,515 | ---- | M] () -- C:\Users\User\Desktop\img014.jpg
[2012/05/30 15:01:30 | 000,117,780 | ---- | M] () -- C:\Users\User\Desktop\img013.jpg
[2012/05/30 13:20:13 | 004,695,170 | ---- | M] () -- C:\Users\User\Desktop\old_paper_stock_02_by_ftourini-d48ubt0.png
[2012/05/30 12:49:56 | 000,087,207 | ---- | M] () -- C:\Users\User\Desktop\img012.jpg
[2012/05/30 12:48:44 | 000,105,733 | ---- | M] () -- C:\Users\User\Desktop\img011.jpg
[2012/05/30 11:30:04 | 002,490,708 | ---- | M] () -- C:\Users\User\Desktop\grey aerial map.png
[2012/05/29 15:43:50 | 000,001,449 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\quickset.lnk
[2012/05/29 14:52:02 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
[2012/05/29 10:06:43 | 004,530,813 | R--- | M] (Swearware) -- C:\Users\User\Desktop\ComboFix.exe
[2012/05/27 18:16:03 | 000,007,614 | ---- | M] () -- C:\Users\User\AppData\Local\Resmon.ResmonCfg
[2012/05/27 15:29:44 | 000,000,512 | ---- | M] () -- C:\Users\User\Desktop\MBR.dat
[2012/05/27 14:57:49 | 004,731,392 | ---- | M] (AVAST Software) -- C:\Users\User\Desktop\aswMBR.exe
[2012/05/27 14:39:03 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Users\User\Desktop\OTL.exe
[2012/05/27 13:08:18 | 695,763,830 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2012/05/26 20:01:03 | 000,892,901 | ---- | M] () -- C:\Users\User\AppData\Local\census.cache
[2012/05/26 20:00:32 | 000,115,252 | ---- | M] () -- C:\Users\User\AppData\Local\ars.cache
[2012/05/26 19:49:30 | 000,000,036 | ---- | M] () -- C:\Users\User\AppData\Local\housecall.guid.cache
[2012/05/26 17:03:51 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
[2012/05/16 07:55:53 | 000,925,184 | ---- | M] () -- C:\Windows\expstart.exe