Voilà, j'ai fait toutes les analyses, elles se sont faites sans soucis, j'ai bien suivi les étapes.
Voilà les rapports:
COMBOFIX
ComboFix 08-11-22.02 - da flute 2008-11-23 18:10:36.3 - NTFSx86
Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6001.1.1252.1.1036.18.1178 [GMT 1:00]
Lancé depuis: c:\users\da flute\Desktop\Combo-Fix.exe
Commutateurs utilisés :: c:\users\da flute\Desktop\CFScript.txt
* Un nouveau point de restauration a été créé
.
((((((((((((((((((((((((((((( Fichiers créés du 2008-10-23 au 2008-11-23 ))))))))))))))))))))))))))))))))))))
.
2008-11-20 13:12 . 2008-11-21 15:48 252,475,789 --a------ c:\windows\MEMORY.DMP
2008-11-20 13:04 . 2008-11-20 13:08 <REP> d-------- C:\ComboFix(0)
2008-11-20 12:47 . 2008-11-20 21:50 <REP> d-------- C:\ComboFix
2008-11-20 00:34 . 2008-11-20 00:34 <REP> d-------- c:\users\da flute\AppData\Roaming\Malwarebytes
2008-11-20 00:34 . 2008-11-20 00:34 <REP> d-------- c:\users\All Users\Malwarebytes
2008-11-20 00:34 . 2008-11-20 00:34 <REP> d-------- c:\programdata\Malwarebytes
2008-11-20 00:34 . 2008-11-20 00:34 <REP> d-------- c:\program files\Malwarebytes' Anti-Malware
2008-11-20 00:34 . 2008-10-22 16:10 38,496 --a------ c:\windows\System32\drivers\mbamswissarmy.sys
2008-11-20 00:34 . 2008-10-22 16:10 15,504 --a------ c:\windows\System32\drivers\mbam.sys
2008-11-20 00:20 . 2008-11-20 00:20 0 --ahs---- c:\windows\System32\c00AFD49.mat
2008-11-19 22:21 . 2008-11-20 00:05 <REP> d-------- c:\program files\Navilog1
2008-11-19 22:16 . 2008-11-19 22:16 0 --ahs---- c:\windows\System32\c00C5C3C.mat
2008-11-19 22:16 . 2008-11-19 22:16 0 --ahs---- c:\windows\System32\c002B4E8.mat
2008-11-19 21:51 . 2008-11-19 21:51 0 --ahs---- c:\windows\System32\c00D992A.mat
2008-11-19 21:44 . 2008-11-19 21:44 0 --ahs---- c:\windows\System32\c00E657E.mat
2008-11-15 15:56 . 2008-11-16 12:05 <REP> d-------- c:\users\All Users\Sports Interactive
2008-11-15 15:56 . 2008-11-16 12:05 <REP> d-------- c:\programdata\Sports Interactive
2008-11-15 15:12 . 2006-11-29 13:06 3,426,072 --a------ c:\windows\System32\d3dx9_32.dll
2008-11-12 18:06 . 2008-09-10 04:40 1,334,272 --a------ c:\windows\System32\msxml6.dll
2008-11-12 18:06 . 2008-09-05 06:14 1,191,936 --a------ c:\windows\System32\msxml3.dll
2008-11-12 18:06 . 2008-08-27 02:05 212,480 --a------ c:\windows\System32\drivers\mrxsmb10.sys
2008-11-12 15:36 . 2008-11-14 16:36 <REP> d-------- c:\users\da flute\AppData\Roaming\gtk-2.0
2008-11-11 17:09 . 2008-11-19 19:34 <REP> d-------- c:\users\da flute\AppData\Roaming\Azureus
2008-11-11 17:09 . 2008-11-11 17:09 <REP> d-------- c:\users\All Users\Azureus
2008-11-11 17:09 . 2008-11-11 17:09 <REP> d-------- c:\programdata\Azureus
2008-11-11 17:08 . 2008-11-11 19:41 <REP> d-------- c:\program files\Vuze
2008-11-11 17:08 . 2008-11-23 17:52 <REP> d-------- c:\program files\AskSBar
2008-11-09 18:49 . 2008-11-09 18:50 <REP> d-------- c:\program files\Gimp-2.0
2008-11-09 17:29 . 2008-11-10 11:17 <REP> d-------- c:\users\da flute\.gimp-2.6
2008-11-09 17:29 . 2008-11-09 17:29 <REP> d-------- c:\users\da flute\.gegl-0.0
2008-11-06 18:19 . 2008-11-06 18:19 0 --a------ c:\windows\nsreg.dat
2008-11-06 10:48 . 2008-11-06 10:48 <REP> d-------- c:\users\da flute\AppData\Roaming\Inkscape
2008-11-02 18:48 . 2008-08-05 10:49 428,544 --a------ c:\windows\System32\EncDec.dll
2008-11-02 18:48 . 2008-08-05 10:49 293,376 --a------ c:\windows\System32\psisdecd.dll
2008-11-02 18:48 . 2008-08-05 10:48 217,088 --a------ c:\windows\System32\psisrndr.ax
2008-11-02 18:48 . 2008-08-05 10:48 177,664 --a------ c:\windows\System32\mpg2splt.ax
2008-11-02 18:48 . 2008-08-05 10:48 80,896 --a------ c:\windows\System32\MSNP.ax
2008-10-28 22:54 . 2008-08-12 04:39 443,392 --a------ c:\windows\System32\win32spl.dll
2008-10-28 22:54 . 2008-09-18 05:56 147,456 --a------ c:\windows\System32\Faultrep.dll
2008-10-28 22:54 . 2008-09-18 05:56 125,952 --a------ c:\windows\System32\wersvc.dll
2008-10-27 21:36 . 2008-10-27 21:50 <REP> d-------- c:\program files\Inkscape
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-11-20 14:58 21,014 ----a-w c:\users\da flute\AppData\Roaming\wklnhst.dat
2008-11-19 18:34 --------- d-----w c:\program files\Microsoft Works
2008-11-19 18:34 --------- d-----w c:\program files\Microsoft Picture It! 9
2008-11-18 08:12 --------- d-----w c:\programdata\Microsoft Help
2008-11-15 15:16 --------- d-----w c:\users\da flute\AppData\Roaming\Sports Interactive
2008-11-13 22:35 --------- d--h--w c:\program files\InstallShield Installation Information
2008-11-13 22:33 --------- d-----w c:\users\da flute\AppData\Roaming\Sony
2008-11-11 15:53 --------- d-----w c:\program files\eMule
2008-11-06 21:48 --------- d-----w c:\program files\Google
2008-11-06 17:33 --------- d-----w c:\users\da flute\AppData\Roaming\Samsung
2008-11-01 13:47 --------- d-----w c:\program files\Common Files\Symantec Shared
2008-10-21 08:37 --------- d-----w c:\program files\Common Files\Adobe
2008-10-18 16:09 --------- d-----w c:\users\da flute\AppData\Roaming\Toshiba
2008-10-18 12:05 --------- d-----w c:\programdata\FLEXnet
2008-10-18 11:58 --------- d-----w c:\program files\Bonjour
2008-10-18 11:39 --------- d-----w c:\program files\Common Files\Macrovision Shared
2008-10-17 09:57 --------- d-----w c:\program files\PDFCreator Toolbar
2008-10-17 09:39 --------- d-----w c:\program files\Windows Mail
2008-10-16 17:45 --------- d-----w c:\program files\DsNET Corp
2008-10-11 15:49 --------- d-----w c:\programdata\Symantec
2008-10-11 10:33 0 ---ha-w c:\windows\system32\drivers\Msft_User_WpdFs_01_00_00.Wdf
2008-10-05 13:35 --------- d-----w c:\program files\Java
2008-10-05 09:00 --------- d-----w c:\users\da flute\AppData\Roaming\OpenOffice.org2
2008-10-03 22:01 --------- d-----w c:\program files\PDFCreator
2008-10-03 22:00 253,139 ----a-w c:\windows\PDFCreator_Toolbar_Uninstaller_8304.exe
2008-10-03 21:45 --------- d-----w c:\users\da flute\AppData\Roaming\PPTminimizer
2008-10-03 21:27 --------- d-----w c:\program files\OpenOffice.org 2.4
2008-10-03 18:05 --------- d-----w c:\program files\MSBuild
2008-10-03 18:02 --------- d-----w c:\program files\Microsoft.NET
2008-10-03 17:50 --------- d-----w c:\program files\Microsoft Visual Studio 8
2008-10-02 03:49 827,392 ----a-w c:\windows\System32\wininet.dll
2008-09-30 15:43 1,286,152 ----a-w c:\windows\System32\msxml4.dll
2008-09-29 18:38 --------- d-----w c:\program files\Messenger Plus! Live
2008-09-18 05:09 3,601,464 ----a-w c:\windows\System32\ntkrnlpa.exe
2008-09-18 05:09 3,549,240 ----a-w c:\windows\System32\ntoskrnl.exe
2008-09-18 02:16 2,032,640 ----a-w c:\windows\System32\win32k.sys
2008-08-31 14:47 174 --sha-w c:\program files\desktop.ini
2008-08-31 13:28 82,432 ----a-w c:\windows\System32\axaltocm.dll
2008-08-31 13:28 101,888 ----a-w c:\windows\System32\ifxcardm.dll
2008-01-01 21:10 102,768 ----a-w c:\users\da flute\AppData\Roaming\GDIPFONTCACHEV1.DAT
.
((((((((((((((((((((((((((((( snapshot_2008-11-23_18.05.59,44 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-11-21 16:40:42 16,384 --sha-w c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2008-11-23 16:55:04 16,384 --sha-w c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2008-11-21 16:40:42 32,768 --sha-w c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2008-11-23 16:55:04 32,768 --sha-w c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2008-11-21 16:40:42 16,384 --sha-w c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2008-11-23 16:55:04 16,384 --sha-w c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2008-11-23 17:01:35 262,144 ----a-w c:\windows\System32\config\systemprofile\ntuser.dat
+ 2008-11-23 17:10:15 262,144 ----a-w c:\windows\System32\config\systemprofile\ntuser.dat
+ 2008-11-23 17:10:15 262,144 ---ha-w c:\windows\System32\config\systemprofile\ntuser.dat.LOG1
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{0579B4B6-0293-4d73-B02D-5EBB0BA0F0A2}"= "c:\program files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL" [2008-11-11 66912]
[HKEY_CLASSES_ROOT\clsid\{0579b4b6-0293-4d73-b02d-5ebb0ba0f0a2}]
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0579B4B1-0293-4d73-B02D-5EBB0BA0F0A2}]
2008-11-11 17:08 66912 --a------ c:\program files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TOSCDSPD"="c:\program files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe" [2007-06-27 436088]
"MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 5724184]
"AdobeUpdater"="c:\program files\Common Files\Adobe\Updater5\AdobeUpdater.exe" [2007-02-28 2321600]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Camera Assistant Software"="c:\program files\Camera Assistant Software for Toshiba\traybar.exe" [2007-05-22 413696]
"TPwrMain"="c:\program files\TOSHIBA\Power Saver\TPwrMain.EXE" [2007-03-29 411192]
"HSON"="c:\program files\TOSHIBA\TBS\HSON.exe" [2006-12-07 55416]
"SmoothView"="c:\program files\Toshiba\SmoothView\SmoothView.exe" [2007-04-03 509496]
"00TCrdMain"="c:\program files\TOSHIBA\FlashCards\TCrdMain.exe" [2007-05-22 538744]
"KeNotify"="c:\program files\TOSHIBA\Utilities\KeNotify.exe" [2006-11-06 34352]
"SVPWUTIL"="c:\program files\TOSHIBA\Utilities\SVPWUTIL.exe" [2006-03-22 438272]
"topi"="c:\program files\TOSHIBA\Toshiba Online Product Information\topi.exe" [2007-07-10 581632]
"Desktop SMS"="c:\program files\IDM\Desktop SMS\DesktopSMS.exe" [2007-06-18 1507328]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 90112]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-06-08 894512]
"Toshiba Registration"="c:\program files\Toshiba\Registration\ToshibaRegistration.exe" [2007-05-04 571024]
"ccApp"="c:\program files\Common Files\Symantec Shared\ccApp.exe" [2008-10-17 51048]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2006-01-12 155648]
"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784]
"RtHDVCpl"="RtHDVCpl.exe" [2007-07-07 c:\windows\RtHDVCpl.exe]
"NDSTray.exe"="NDSTray.exe" [BU]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\c002B4E8]
2008-11-19 22:16 0 c:\windows\System32\c002B4E8.mat
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.dvacm"= c:\progra~1\COMMON~1\ULEADS~1\vio\dvacm.acm
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0010]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0010.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0010000]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0010000.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0012289]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0012289.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0013E64]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0013E64.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00147E2]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00147E2.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0014A2C]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0014A2C.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0014E0E]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0014E0E.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c001640]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c001640.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0016973]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0016973.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0017300]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0017300.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00178A9]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00178A9.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0017D86]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c0017D86.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0018526]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0018526.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c001AC62]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c001AC62.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c001ADAA]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c001ADAA.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c001B31E]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c001B31E.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c001B6E6]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c001B6E6.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c001B840]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c001B840.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c001CEC1]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c001CEC1.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c001D3A8]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c001D3A8.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c001E161]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c001E161.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c001E60E]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c001E60E.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c001EB90]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c001EB90.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c001EF0A]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c001EF0A.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c001FEA7]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c001FEA7.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0020A78]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0020A78.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0021000]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0021000.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0021100]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c0021100.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00234A6]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c00234A6.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0024524]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0024524.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0025244]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0025244.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00257E0]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00257E0.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0026753]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0026753.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0026BEE]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0026BEE.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0026C40]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0026C40.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0026D40]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0026D40.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0026F08]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0026F08.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00271A4]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c00271A4.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0027E24]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0027E24.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0028E01]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0028E01.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0029614]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0029614.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c002A068]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c002A068.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c002B02E]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c002B02E.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c002B4E8]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c002B4E8.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c002B97E]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c002B97E.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c002C6D3]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c002C6D3.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c002D09]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c002D09.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c002D5B9]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c002D5B9.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c002D905]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c002D905.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c002E172]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c002E172.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c002E46C]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c002E46C.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c002E992]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c002E992.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c002ECDE]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c002ECDE.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c002EF10]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c002EF10.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c002F5B0]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c002F5B0.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c002FA5E]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c002FA5E.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c002FB22]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c002FB22.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c002FF10]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c002FF10.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00306EC]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00306EC.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0031D4E]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0031D4E.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c003201]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c003201.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0032290]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0032290.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0032638]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0032638.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0032D1A]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c0032D1A.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0034066]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0034066.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0034545]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0034545.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0034D1]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0034D1.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0035FE8]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0035FE8.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c003664E]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c003664E.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c003678C]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c003678C.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c003686C]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c003686C.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0037729]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0037729.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0038867]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0038867.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0038CD8]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0038CD8.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c003A264]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c003A264.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c003A7A9]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c003A7A9.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c003A91E]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c003A91E.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c003B3]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c003B3.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c003B69]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c003B69.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c003B70]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c003B70.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c003BD69]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c003BD69.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c003C6F4]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c003C6F4.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c003D4F1]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c003D4F1.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c003F622]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c003F622.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c003F686]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c003F686.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c003FF90]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c003FF90.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0040]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0040.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00402B1]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00402B1.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00404DA]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00404DA.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0041272]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0041272.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0043F]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0043F.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00448C8]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00448C8.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00448C9]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00448C9.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0045122]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0045122.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0045734]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0045734.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00458C9]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00458C9.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00461C4]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00461C4.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0046745]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c0046745.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0046A18]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0046A18.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c004742E]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c004742E.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c004785A]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c004785A.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00481BF]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00481BF.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00485CE]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00485CE.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c004861E]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c004861E.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0048661]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0048661.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0048B90]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0048B90.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0049628]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c0049628.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0049789]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c0049789.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00499FE]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00499FE.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0049F3F]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c0049F3F.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c004A821]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c004A821.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c004B1D1]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c004B1D1.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c004B80C]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c004B80C.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c004C024]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c004C024.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c004C09]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c004C09.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c004C470]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c004C470.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c004CB82]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c004CB82.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c004EC38]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c004EC38.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c004F23F]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c004F23F.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c005012D]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c005012D.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0050714]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0050714.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0051284]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c0051284.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0051BE7]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0051BE7.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0052536]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0052536.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00527C4]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00527C4.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0053900]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0053900.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0053DE4]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0053DE4.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00541F8]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00541F8.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0054804]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0054804.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0054874]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0054874.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00556FE]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00556FE.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c005692]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c005692.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00570D1]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00570D1.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0058119]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0058119.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0059211]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0059211.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00593D2]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00593D2.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c005ACF8]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c005ACF8.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c005AEE4]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c005AEE4.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c005B7C4]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c005B7C4.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c005C0CC]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c005C0CC.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c005C6E3]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c005C6E3.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c005CA38]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c005CA38.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c005CCE0]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c005CCE0.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c005CE0C]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c005CE0C.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c005D10B]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c005D10B.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c005D19D]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c005D19D.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c005D5E4]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c005D5E4.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c005E0F4]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c005E0F4.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c005E1AC]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c005E1AC.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c005E518]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c005E518.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c005E845]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c005E845.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c005EE1E]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c005EE1E.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c005F5C4]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c005F5C4.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c005FC90]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c005FC90.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00614E4]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c00614E4.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00616C6]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00616C6.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0061C3E]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0061C3E.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0062524]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0062524.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00629CB]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00629CB.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0064100]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0064100.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0064474]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0064474.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c006455C]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c006455C.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0064A9]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c0064A9.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0064FBA]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0064FBA.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0065D9]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0065D9.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0065FE1]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0065FE1.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c006623E]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c006623E.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0066DFA]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0066DFA.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c006776C]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c006776C.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0067853]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0067853.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0067F03]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0067F03.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00684A8]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00684A8.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0068790]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0068790.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00690B1]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00690B1.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00696F2]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00696F2.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0069A40]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0069A40.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0069A79]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0069A79.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0069BA5]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0069BA5.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c006A10]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c006A10.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c006A704]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c006A704.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c006A900]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c006A900.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c006AF7E]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c006AF7E.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c006C032]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c006C032.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c006C225]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c006C225.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c006C27C]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c006C27C.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c006C29C]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c006C29C.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c006D885]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c006D885.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c006DCEA]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c006DCEA.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c006EB82]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c006EB82.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c006FB10]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c006FB10.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c006FBC2]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c006FBC2.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c006FEC2]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c006FEC2.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0071E4]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0071E4.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0074069]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0074069.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0075413]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0075413.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0076600]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0076600.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00769C4]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00769C4.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0076EA4]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0076EA4.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0076F90]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0076F90.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0077DF6]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0077DF6.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0078ADC]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0078ADC.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0079040]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0079040.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c007959E]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c007959E.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c007A30A]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c007A30A.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c007A62E]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c007A62E.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c007A813]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c007A813.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c007A841]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c007A841.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c007D69]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c007D69.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c007EB24]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c007EB24.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c007F28E]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c007F28E.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c007FBCD]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c007FBCD.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0080FC0]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0080FC0.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00817D8]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c00817D8.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0082896]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0082896.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0082E96]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c0082E96.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00838B9]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00838B9.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0083F05]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0083F05.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c008400]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c008400.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c008441D]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c008441D.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0084721]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0084721.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0084D29]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0084D29.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0087A24]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c0087A24.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0088108]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0088108.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0088840]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0088840.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0088F00]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0088F00.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0089246]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0089246.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0089564]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c0089564.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c008AEBC]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c008AEBC.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c008B39C]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c008B39C.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c008B69D]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c008B69D.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c008BC34]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c008BC34.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c008C347]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c008C347.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c008CFBD]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c008CFBD.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c008D190]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c008D190.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c008FE9E]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c008FE9E.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0090691]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c0090691.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0090900]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0090900.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0090CBC]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0090CBC.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0090FA4]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0090FA4.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0091529]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0091529.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00924B6]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00924B6.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0093B7A]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0093B7A.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0094570]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0094570.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00959BA]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00959BA.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0095C7B]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0095C7B.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0095EE4]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c0095EE4.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0096316]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0096316.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0096F5A]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0096F5A.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c009776E]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c009776E.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c009799]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c009799.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c009831B]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c009831B.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0098C20]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c0098C20.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0098E40]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0098E40.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0098F64]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0098F64.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00991D4]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00991D4.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c009948D]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c009948D.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c0099E06]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c0099E06.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c009A4DA]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c009A4DA.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c009BAC4]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c009BAC4.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c009BCF2]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c009BCF2.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c009CE90]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c009CE90.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c009D1DC]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c009D1DC.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c009D9A3]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c009D9A3.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c009EC32]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c009EC32.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c009EDB0]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c009EDB0.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c009EDC4]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c009EDC4.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c009FDA]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c009FDA.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00A108B]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00A108B.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00A20E4]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00A20E4.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00A2E1A]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00A2E1A.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00A3590]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00A3590.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00A3B32]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c00A3B32.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00A4142]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00A4142.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00A45AE]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00A45AE.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00A4706]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00A4706.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00A4986]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00A4986.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00A646F]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00A646F.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00A6900]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00A6900.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00A71E2]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00A71E2.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00A7982]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c00A7982.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00A7BE0]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c00A7BE0.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00A7F02]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00A7F02.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00A92CE]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00A92CE.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00A9E2C]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00A9E2C.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00AA4DA]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00AA4DA.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00AA5AE]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00AA5AE.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00AB240]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00AB240.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00AC40]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00AC40.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00AD511]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00AD511.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00AE259]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00AE259.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00AFC72]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c00AFC72.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00B0C22]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00B0C22.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00B0F41]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00B0F41.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00B1EC8]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00B1EC8.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00B2195]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00B2195.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00B236]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00B236.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00B31E2]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00B31E2.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00B4450]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00B4450.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00B45A4]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00B45A4.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00B4D98]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00B4D98.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00B5024]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00B5024.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00B5840]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00B5840.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00B5C69]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00B5C69.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00B707C]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00B707C.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00B70FE]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00B70FE.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00B97AD]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c00B97AD.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00BAB8E]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00BAB8E.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00BB3A0]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00BB3A0.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00BB63A]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c00BB63A.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00BBB32]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00BBB32.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00BC0B4]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00BC0B4.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00BC18B]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00BC18B.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00BC3C7]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00BC3C7.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00BC867]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00BC867.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00BCC22]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00BCC22.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00BDB3A]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c00BDB3A.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00BDC7C]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c00BDC7C.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00BDDB]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00BDDB.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00BEC31]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00BEC31.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00BEE09]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c00BEE09.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00BEE94]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00BEE94.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00BF021]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00BF021.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00BF8D1]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00BF8D1.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00C0090]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c00C0090.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00C00B]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00C00B.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00C0386]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00C0386.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00C2652]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c00C2652.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00C2D10]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c00C2D10.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00C39E7]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00C39E7.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00C3DC9]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00C3DC9.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00C4DA9]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00C4DA9.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00C66F6]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00C66F6.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00C67A1]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c00C67A1.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00C7440]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00C7440.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00C781E]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00C781E.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00C78E9]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00C78E9.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00C7B88]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c00C7B88.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00C7D52]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00C7D52.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00C9788]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00C9788.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00C9A91]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00C9A91.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00CA532]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00CA532.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00CA5AC]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00CA5AC.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00CA8E7]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00CA8E7.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00CACA9]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00CACA9.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00CB0B4]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00CB0B4.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00CB411]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00CB411.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00CB729]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00CB729.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00CB9CD]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00CB9CD.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00CBACC]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00CBACC.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00CBC8]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00CBC8.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00CCD31]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00CCD31.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00CDE41]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00CDE41.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00CF735]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00CF735.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00D0876]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00D0876.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00D16D1]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00D16D1.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00D29B0]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00D29B0.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00D2FD6]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00D2FD6.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00D37D5]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00D37D5.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00D3CBA]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00D3CBA.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00D4F96]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00D4F96.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00D766B]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00D766B.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00D7AB8]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00D7AB8.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00D88FE]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00D88FE.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00D8B63]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00D8B63.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00D9108]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00D9108.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00D9280]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00D9280.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00DBA84]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c00DBA84.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00DBE2]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00DBE2.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00DC04]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00DC04.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00DC571]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00DC571.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00DCE03]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c00DCE03.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00DD072]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00DD072.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00DD308]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00DD308.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00DD413]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00DD413.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00DD8FA]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00DD8FA.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00DD9A9]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00DD9A9.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00DDC81]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00DDC81.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00DE588]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00DE588.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00DE9A9]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00DE9A9.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00E0C10]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00E0C10.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00E0F32]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00E0F32.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00E1690]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00E1690.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00E216E]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00E216E.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00E401A]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00E401A.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00E64D0]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00E64D0.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00E6536]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00E6536.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00E66A0]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c00E66A0.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00E7136]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00E7136.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00E75C4]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00E75C4.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00E7A78]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00E7A78.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00E7CC6]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00E7CC6.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00EA144]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00EA144.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00EA445]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00EA445.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00EA89E]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00EA89E.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00EAD80]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00EAD80.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00EBBE3]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c00EBBE3.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00EBFBE]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00EBFBE.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00ED939]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00ED939.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00EE456]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00EE456.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00EF0D2]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00EF0D2.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00EF46A]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00EF46A.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00F05B3]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00F05B3.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00F0874]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00F0874.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00F10B9]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00F10B9.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00F165A]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00F165A.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00F228F]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00F228F.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00F2400]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00F2400.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00F28E4]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00F28E4.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00F29D2]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c00F29D2.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00F2AAF]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c00F2AAF.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00F3A56]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00F3A56.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00F4126]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00F4126.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00F63B1]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00F63B1.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00F6464]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c00F6464.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00F6C3A]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00F6C3A.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00F7FB4]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c00F7FB4.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00F7FF3]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c00F7FF3.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00F846]
--ahs---- 2008-11-20 08:58 20992 c:\users\da flute\AppData\Roaming\c00F846.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00F91AD]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00F91AD.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00F990F]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00F990F.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00FA3E4]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00FA3E4.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00FA7A1]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00FA7A1.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00FB852]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00FB852.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00FB85A]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00FB85A.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00FC583]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00FC583.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00FCFDC]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00FCFDC.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00FDA2C]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00FDA2C.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c00FDD6C]
--ahs---- 2008-11-20 08:02 20992 c:\users\da flute\AppData\Roaming\c00FDD6C.mat
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
--a------ 2007-06-29 06:24 286720 c:\program files\QuickTime\QTTask.exe
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UacDisableNotify"=dword:00000001
"InternetSettingsDisableNotify"=dword:00000001
"AutoUpdateDisableNotify"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{E13B20E4-803B-491E-8A42-379E05A6D7BD}"= c:\program files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
"{5AC6B7EB-6F12-4ED5-9867-48FF05758BB0}"= UDP:c:\program files\eMule\emule.exe:eMule
"{21446F4E-2F39-494C-B98A-741B0EB42815}"= TCP:c:\program files\eMule\emule.exe:eMule
"{3705BCE4-12D2-42CA-B40E-1CB8A80163DB}"= UDP:c:\program files\LimeWire\LimeWire.exe:LimeWire
"{CDF77771-6C11-4F4D-A848-ECEDA7422CAE}"= TCP:c:\program files\LimeWire\LimeWire.exe:LimeWire
"{C0EB7E8D-57D8-412F-9D9C-5E9E4D7BB7BC}"= UDP:c:\program files\Codemasters\Le Seigneur des anneaux Online\lotroclient.exe:lotroclient
"{ACE42427-6AB7-44C2-AB45-A563B21B627C}"= TCP:c:\program files\Codemasters\Le Seigneur des anneaux Online\lotroclient.exe:lotroclient
"{09D1076A-1F05-4974-97EA-662312D682D0}"= UDP:c:\program files\Codemasters\Le Seigneur des anneaux Online\TurbineInvoker.exe:TurbineInvoker
"{D9EDD5D7-CC67-4D6E-9CEE-23F1E345A5C8}"= TCP:c:\program files\Codemasters\Le Seigneur des anneaux Online\TurbineInvoker.exe:TurbineInvoker
"{A362C5A7-6413-447E-90EA-38A7E7C3C059}"= Disabled:UDP:c:\program files\Codemasters\Le Seigneur des anneaux Online\TurbineLauncher.exe:TurbineLauncher
"{9BE5508B-0878-4FDC-9387-58DFEACAFFF6}"= Disabled:TCP:c:\program files\Codemasters\Le Seigneur des anneaux Online\TurbineLauncher.exe:TurbineLauncher
"{15E0727D-4C7E-41E9-9693-C3A972701D85}"= UDP:4662:emule
"{94B89F3E-D61B-42EE-AF6E-1084A6A12664}"= TCP:4672:emule
"TCP Query User{469E37F9-F0B4-4CEA-894D-02B64C5C439B}c:\\program files\\common files\\nero\\nero web\\setupx.exe"= UDP:c:\program files\common files\nero\nero web\setupx.exe:Nero Installer
"UDP Query User{1FA9A288-68EF-4217-A184-F0AD2195A825}c:\\program files\\common files\\nero\\nero web\\setupx.exe"= TCP:c:\program files\common files\nero\nero web\setupx.exe:Nero Installer
"TCP Query User{8D99EFC1-401E-43FA-910E-AEC4CC8B0F7B}c:\\users\\da flute\\appdata\\local\\temp\\onlineupdate8\\setupxu.exe"= UDP:c:\users\da flute\appdata\local\temp\onlineupdate8\setupxu.exe:setupxu.exe
"UDP Query User{7DC14EDD-7E89-4453-9B61-939C4BCF0171}c:\\users\\da flute\\appdata\\local\\temp\\onlineupdate8\\setupxu.exe"= TCP:c:\users\da flute\appdata\local\temp\onlineupdate8\setupxu.exe:setupxu.exe
"{72BB0C5A-4B62-44AC-B448-E0858DFCF1E6}"= UDP:c:\program files\Sports Interactive\Football Manager 2008\fm.exe:Football Manager 2008
"{A527629A-444D-4CA1-968B-EB1DE172D405}"= TCP:c:\program files\Sports Interactive\Football Manager 2008\fm.exe:Football Manager 2008
"{03170058-34B5-40C8-802E-D02D9A0447D8}"= UDP:c:\program files\Sony Ericsson\Sony Ericsson Media Manager 1.0\MediaManager.exe:Sony Ericsson Media Manager 1.0
"{F140E44E-F93F-4C97-BEFE-94E43026DE3A}"= TCP:c:\program files\Sony Ericsson\Sony Ericsson Media Manager 1.0\MediaManager.exe:Sony Ericsson Media Manager 1.0
"{D84327D3-3DDF-48B3-93F3-7F973AEC82FE}"= TCP:6004|c:\program files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook
"TCP Query User{E8BCF5F6-2ADC-450E-88ED-E66FC9918CCC}c:\\program files\\vuze\\azureus.exe"= UDP:c:\program files\vuze\azureus.exe:Azureus
"UDP Query User{225D501F-332A-422C-8F78-B9C48E5E12EB}c:\\program files\\vuze\\azureus.exe"= TCP:c:\program files\vuze\azureus.exe:Azureus
"{4320DF04-CD75-45B6-A37B-F5DDD56F8C78}"= UDP:c:\program files\Sports Interactive\Football Manager 2009\fm.exe:Football Manager 2009
"{EAAD8D78-4407-4849-8F4F-3BC859A7875E}"= TCP:c:\program files\Sports Interactive\Football Manager 2009\fm.exe:Football Manager 2009
"{5A439AB8-2812-47E2-985F-F6081D48A8A0}"= UDP:c:\program files\Sports Interactive\Football Manager 2009\fm.exe:Football Manager 2009
"{53777DB8-90AB-4A2C-9E12-0F3B196F0617}"= TCP:c:\program files\Sports Interactive\Football Manager 2009\fm.exe:Football Manager 2009
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]
"EnableFirewall"= 0 (0x0)
R0 AtiPcie;ATI PCI Express (3GIO) Filter;c:\windows\system32\DRIVERS\AtiPcie.sys [2007-08-29 7680]
R0 CplIR;Embedded IR Driver;c:\windows\system32\DRIVERS\CplIR.SYS [2007-03-06 14848]
R1 IDSvix86;Symantec Intrusion Prevention Driver;\??\c:\progra~2\Symantec\DEFINI~1\SymcData\ipsdefs\20081120.001\IDSvix86.sys [2008-11-21 270384]
R2 LiveUpdate Notice;LiveUpdate Notice;"c:\program files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon [2008-02-08 149352]
R3 atikmdag;atikmdag;c:\windows\system32\DRIVERS\atikmdag.sys [2007-08-29 2600960]
R3 SYMNDISV;SYMNDISV;c:\windows\system32\Drivers\SYMNDISV.SYS [2008-06-13 41008]
S3 COH_Mon;COH_Mon;\??\c:\windows\system32\Drivers\COH_Mon.sys [2007-05-29 23888]
*Newly Created Service* - CATCHME
.
Contenu du dossier 'Tâches planifiées'
2008-11-17 c:\windows\Tasks\Norton AntiVirus - Effectuer une analyse complète du système - da flute.job
- c:\program files\Norton AntiVirus\Navw32.exe [2007-08-26 18:19]
.
**************************************************************************
catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2008-11-23 18:12:53
Windows 6.0.6001 Service Pack 1 NTFS
Recherche de processus cachés ...
Recherche d'éléments en démarrage automatique cachés ...
Recherche de fichiers cachés ...
c:\users\DAFLUT~1\AppData\Local\Temp\catchme.dll 53248 bytes executable
Scan terminé avec succès
Fichiers cachés: 1
**************************************************************************
.
Heure de fin: 2008-11-23 18:14:30
ComboFix-quarantined-files.txt 2008-11-23 17:14:22
ComboFix2.txt 2008-11-23 17:07:17
ComboFix3.txt 2008-11-21 17:35:18
ComboFix4.txt 2008-11-21 14:59:41
Avant-CF: 45,974,052,864 octets libres
Après-CF: 45,523,824,640 octets libres
1076 --- E O F --- 2008-11-18 08:12:53