|
Registered User
Join Date: Oct 2007
Posts: 33
OS: XP Pro with SP2
|
Re: Need help with Virus.
Here is the log. I also made a back-up of everything to an external harddrive if that would help.
-c--a-w 28,672 2007-10-10 16:33:48 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1240\snapshot\_REGISTRY_MACHINE_SAM
-c--a-w 45,056 2007-10-10 16:33:45 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1240\snapshot\_REGISTRY_MACHINE_SECURITY
-c--a-w 24,641,536 2007-10-10 16:33:47 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1240\snapshot\_REGISTRY_MACHINE_SOFTWARE
-c--a-w 5,427,200 2007-10-10 16:33:48 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1240\snapshot\_REGISTRY_MACHINE_SYSTEM
-c--a-w 299,008 2007-10-10 16:33:45 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1240\snapshot\_REGISTRY_USER_.DEFAULT
-c--a-w 237,568 2005-07-24 23:32:04 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1240\snapshot\_REGISTRY_USER_NTUSER_S-1-5-18
-c--a-w 233,472 2007-10-10 16:33:44 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1240\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19
-c--a-w 233,472 2007-10-10 16:33:44 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1240\snapshot\_REGISTRY_USER_NTUSER_S-1-5-20
-c--a-w 1,183,744 2007-10-10 16:33:44 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1240\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2000478354-562591055-839522115-1003
-c--a-w 4,423,680 2007-10-10 16:33:45 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1240\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2000478354-562591055-839522115-1004
-c--a-w 1,048,576 2007-08-13 16:42:43 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1240\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2000478354-562591055-839522115-1005
-c-ha-w 786,432 2007-10-04 17:32:14 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1240\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2000478354-562591055-839522115-500
-c--a-w 8,192 2007-10-10 16:33:44 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1240\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19
-c--a-w 8,192 2007-10-10 16:33:44 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1240\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-20
-c--a-w 143,360 2007-10-10 16:33:44 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1240\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2000478354-562591055-839522115-1003
-c--a-w 200,704 2007-10-10 16:33:45 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1240\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2000478354-562591055-839522115-1004
-c--a-w 8,192 2005-04-01 18:12:51 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1240\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2000478354-562591055-839522115-1005
-c-ha-w 262,144 2007-10-04 17:32:14 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1240\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2000478354-562591055-839522115-500
-c--a-w 28,672 2007-10-10 16:34:01 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1241\snapshot\_REGISTRY_MACHINE_SAM
-c--a-w 45,056 2007-10-10 16:33:59 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1241\snapshot\_REGISTRY_MACHINE_SECURITY
-c--a-w 24,641,536 2007-10-10 16:34:01 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1241\snapshot\_REGISTRY_MACHINE_SOFTWARE
-c--a-w 5,427,200 2007-10-10 16:34:01 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1241\snapshot\_REGISTRY_MACHINE_SYSTEM
-c--a-w 299,008 2007-10-10 16:33:59 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1241\snapshot\_REGISTRY_USER_.DEFAULT
-c--a-w 237,568 2005-07-24 23:32:04 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1241\snapshot\_REGISTRY_USER_NTUSER_S-1-5-18
-c--a-w 233,472 2007-10-10 16:33:58 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1241\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19
-c--a-w 233,472 2007-10-10 16:33:58 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1241\snapshot\_REGISTRY_USER_NTUSER_S-1-5-20
-c--a-w 1,183,744 2007-10-10 16:33:59 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1241\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2000478354-562591055-839522115-1003
-c--a-w 4,423,680 2007-10-10 16:33:59 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1241\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2000478354-562591055-839522115-1004
-c--a-w 1,048,576 2007-08-13 16:42:43 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1241\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2000478354-562591055-839522115-1005
-c-ha-w 786,432 2007-10-04 17:32:14 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1241\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2000478354-562591055-839522115-500
-c--a-w 8,192 2007-10-10 16:33:58 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1241\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19
-c--a-w 8,192 2007-10-10 16:33:59 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1241\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-20
-c--a-w 143,360 2007-10-10 16:33:59 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1241\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2000478354-562591055-839522115-1003
-c--a-w 200,704 2007-10-10 16:33:59 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1241\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2000478354-562591055-839522115-1004
-c--a-w 8,192 2005-04-01 18:12:51 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1241\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2000478354-562591055-839522115-1005
-c-ha-w 262,144 2007-10-04 17:32:14 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1241\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2000478354-562591055-839522115-500
-c--a-w 28,672 2007-10-10 20:49:44 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1242\snapshot\_REGISTRY_MACHINE_SAM
-c--a-w 45,056 2007-10-10 20:49:42 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1242\snapshot\_REGISTRY_MACHINE_SECURITY
-c--a-w 24,756,224 2007-10-10 20:49:43 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1242\snapshot\_REGISTRY_MACHINE_SOFTWARE
-c--a-w 5,427,200 2007-10-10 20:49:44 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1242\snapshot\_REGISTRY_MACHINE_SYSTEM
-c--a-w 299,008 2007-10-10 20:49:42 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1242\snapshot\_REGISTRY_USER_.DEFAULT
-c--a-w 237,568 2005-07-24 23:32:04 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1242\snapshot\_REGISTRY_USER_NTUSER_S-1-5-18
-c--a-w 233,472 2007-10-10 20:49:41 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1242\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19
-c--a-w 233,472 2007-10-10 20:49:41 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1242\snapshot\_REGISTRY_USER_NTUSER_S-1-5-20
-c--a-w 1,404,928 2007-10-10 20:49:41 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1242\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2000478354-562591055-839522115-1003
-c--a-w 4,423,680 2007-10-10 20:47:09 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1242\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2000478354-562591055-839522115-1004
-c--a-w 1,048,576 2007-08-13 16:42:43 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1242\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2000478354-562591055-839522115-1005
-c-ha-w 786,432 2007-10-04 17:32:14 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1242\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2000478354-562591055-839522115-500
-c--a-w 8,192 2007-10-10 20:49:41 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1242\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19
-c--a-w 8,192 2007-10-10 20:49:41 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1242\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-20
-c--a-w 143,360 2007-10-10 20:49:41 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1242\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2000478354-562591055-839522115-1003
-c--a-w 200,704 2007-10-10 16:46:56 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1242\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2000478354-562591055-839522115-1004
-c--a-w 8,192 2005-04-01 18:12:51 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1242\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2000478354-562591055-839522115-1005
-c-ha-w 262,144 2007-10-04 17:32:14 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1242\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2000478354-562591055-839522115-500
-c--a-w 28,672 2007-10-11 21:36:38 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1243\snapshot\_REGISTRY_MACHINE_SAM
-c--a-w 45,056 2007-10-11 21:36:35 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1243\snapshot\_REGISTRY_MACHINE_SECURITY
-c--a-w 24,756,224 2007-10-11 21:36:37 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1243\snapshot\_REGISTRY_MACHINE_SOFTWARE
-c--a-w 5,427,200 2007-10-11 21:36:37 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1243\snapshot\_REGISTRY_MACHINE_SYSTEM
-c--a-w 299,008 2007-10-11 21:36:35 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1243\snapshot\_REGISTRY_USER_.DEFAULT
-c--a-w 237,568 2005-07-24 23:32:04 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1243\snapshot\_REGISTRY_USER_NTUSER_S-1-5-18
-c--a-w 233,472 2007-10-11 21:36:35 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1243\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19
-c--a-w 233,472 2007-10-11 21:36:35 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1243\snapshot\_REGISTRY_USER_NTUSER_S-1-5-20
-c--a-w 1,413,120 2007-10-11 21:36:35 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1243\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2000478354-562591055-839522115-1003
-c--a-w 4,423,680 2007-10-10 20:47:09 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1243\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2000478354-562591055-839522115-1004
-c--a-w 1,048,576 2007-08-13 16:42:43 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1243\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2000478354-562591055-839522115-1005
-c-ha-w 786,432 2007-10-04 17:32:14 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1243\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2000478354-562591055-839522115-500
-c--a-w 8,192 2007-10-11 21:36:35 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1243\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19
-c--a-w 8,192 2007-10-11 21:36:35 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1243\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-20
-c--a-w 143,360 2007-10-11 21:36:35 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1243\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2000478354-562591055-839522115-1003
-c--a-w 200,704 2007-10-10 16:46:56 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1243\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2000478354-562591055-839522115-1004
-c--a-w 8,192 2005-04-01 18:12:51 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1243\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2000478354-562591055-839522115-1005
-c-ha-w 262,144 2007-10-04 17:32:14 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1243\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2000478354-562591055-839522115-500
-c--a-w 28,672 2007-10-12 16:33:07 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1244\snapshot\_REGISTRY_MACHINE_SAM
-c--a-w 45,056 2007-10-12 16:33:05 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1244\snapshot\_REGISTRY_MACHINE_SECURITY
-c--a-w 24,756,224 2007-10-12 16:33:07 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1244\snapshot\_REGISTRY_MACHINE_SOFTWARE
-c--a-w 5,427,200 2007-10-12 16:33:07 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1244\snapshot\_REGISTRY_MACHINE_SYSTEM
-c--a-w 299,008 2007-10-12 16:33:05 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1244\snapshot\_REGISTRY_USER_.DEFAULT
-c--a-w 237,568 2005-07-24 23:32:04 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1244\snapshot\_REGISTRY_USER_NTUSER_S-1-5-18
-c--a-w 233,472 2007-10-12 16:33:04 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1244\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19
-c--a-w 233,472 2007-10-12 16:33:05 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1244\snapshot\_REGISTRY_USER_NTUSER_S-1-5-20
-c--a-w 1,413,120 2007-10-12 16:33:05 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1244\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2000478354-562591055-839522115-1003
-c--a-w 4,423,680 2007-10-12 16:33:05 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1244\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2000478354-562591055-839522115-1004
-c--a-w 1,048,576 2007-08-13 16:42:43 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1244\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2000478354-562591055-839522115-1005
-c-ha-w 786,432 2007-10-04 17:32:14 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1244\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2000478354-562591055-839522115-500
-c--a-w 8,192 2007-10-12 16:33:04 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1244\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19
-c--a-w 8,192 2007-10-12 16:33:05 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1244\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-20
-c--a-w 143,360 2007-10-12 16:33:05 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1244\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2000478354-562591055-839522115-1003
-c--a-w 200,704 2007-10-12 16:33:05 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1244\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2000478354-562591055-839522115-1004
-c--a-w 8,192 2005-04-01 18:12:51 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1244\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2000478354-562591055-839522115-1005
-c-ha-w 262,144 2007-10-04 17:32:14 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1244\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2000478354-562591055-839522115-500
-c--a-w 28,672 2007-10-14 22:08:26 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1245\snapshot\_REGISTRY_MACHINE_SAM
-c--a-w 45,056 2007-10-14 22:08:24 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1245\snapshot\_REGISTRY_MACHINE_SECURITY
-c--a-w 24,838,144 2007-10-14 22:08:26 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1245\snapshot\_REGISTRY_MACHINE_SOFTWARE
-c--a-w 5,427,200 2007-10-14 22:08:26 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1245\snapshot\_REGISTRY_MACHINE_SYSTEM
-c--a-w 299,008 2007-10-14 22:08:24 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1245\snapshot\_REGISTRY_USER_.DEFAULT
-c--a-w 237,568 2005-07-24 23:32:04 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1245\snapshot\_REGISTRY_USER_NTUSER_S-1-5-18
-c--a-w 233,472 2007-10-14 22:08:23 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1245\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19
-c--a-w 233,472 2007-10-14 22:08:23 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1245\snapshot\_REGISTRY_USER_NTUSER_S-1-5-20
-c--a-w 1,859,584 2007-10-14 22:08:23 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1245\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2000478354-562591055-839522115-1003
-c--a-w 4,423,680 2007-10-14 22:08:24 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1245\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2000478354-562591055-839522115-1004
-c--a-w 1,048,576 2007-08-13 16:42:43 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1245\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2000478354-562591055-839522115-1005
-c-ha-w 786,432 2007-10-14 21:47:37 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1245\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2000478354-562591055-839522115-500
-c--a-w 8,192 2007-10-14 22:08:23 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1245\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19
-c--a-w 8,192 2007-10-14 22:08:23 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1245\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-20
-c--a-w 200,704 2007-10-14 22:08:24 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1245\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2000478354-562591055-839522115-1004
-c--a-w 8,192 2005-04-01 18:12:51 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1245\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2000478354-562591055-839522115-1005
-c-ha-w 262,144 2007-10-04 17:32:14 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1245\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2000478354-562591055-839522115-500
-c--a-w 28,672 2007-10-15 01:07:41 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1246\snapshot\_REGISTRY_MACHINE_SAM
-c--a-w 45,056 2007-10-15 01:07:38 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1246\snapshot\_REGISTRY_MACHINE_SECURITY
-c--a-w 24,838,144 2007-10-15 01:07:40 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1246\snapshot\_REGISTRY_MACHINE_SOFTWARE
-c--a-w 5,427,200 2007-10-15 01:07:41 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1246\snapshot\_REGISTRY_MACHINE_SYSTEM
-c--a-w 299,008 2007-10-15 01:07:38 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1246\snapshot\_REGISTRY_USER_.DEFAULT
-c--a-w 237,568 2005-07-24 23:32:04 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1246\snapshot\_REGISTRY_USER_NTUSER_S-1-5-18
-c--a-w 233,472 2007-10-15 01:07:37 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1246\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19
-c--a-w 233,472 2007-10-15 01:07:38 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1246\snapshot\_REGISTRY_USER_NTUSER_S-1-5-20
-c-ha-w 2,097,152 2007-10-14 22:15:18 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1246\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2000478354-562591055-839522115-1003
-c--a-w 4,423,680 2007-10-15 01:07:38 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1246\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2000478354-562591055-839522115-1004
-c--a-w 1,048,576 2007-08-13 16:42:43 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1246\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2000478354-562591055-839522115-1005
-c-ha-w 786,432 2007-10-14 21:47:37 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1246\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2000478354-562591055-839522115-500
-c--a-w 8,192 2007-10-15 01:07:38 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1246\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19
-c--a-w 8,192 2007-10-15 01:07:38 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1246\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-20
-c-ha-w 262,144 2007-10-13 00:30:42 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1246\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2000478354-562591055-839522115-1003
-c--a-w 200,704 2007-10-15 01:07:38 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1246\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2000478354-562591055-839522115-1004
-c--a-w 8,192 2005-04-01 18:12:51 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1246\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2000478354-562591055-839522115-1005
-c-ha-w 262,144 2007-10-04 17:32:14 C:\System Volume Information\_restore{F9D1F509-BDC8-4DC8-917D-8B0EFA11A8EC}\RP1246\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2000478354-562591055-839522115-500
|