Post by katrina on Nov 2, 2014 20:00:23 GMT -8
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 02-11-2014
Ran by Katrina at 2014-11-02 19:50:46 Run:3
Running from C:\Windows\System32\config\systemprofile\Desktop
Loaded Profiles: (Available profiles: Katrina)
Boot Mode: Safe Mode (with Networking)
==============================================
Content of fixlist:
*****************
start
HKLM-x32\...\Run: [Ehwudadanah] => "C:\Users\Katrina\AppData\Roaming\Unqiqequ\idokyco.exe"
C:\Users\Katrina\AppData\Roaming\Unqiqequ\idokyco.exe
C:\Users\Katrina\AppData\Roaming\Unqiqequ
2014-11-02 18:18 - 2014-11-02 18:18 - 40034920 ____T () C:\Windows\SysWOW64\00029358.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 40034920 ____T () C:\Windows\SysWOW64\00026962.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 40034920 ____T () C:\Windows\SysWOW64\00026500.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 40034920 ____T () C:\Windows\SysWOW64\00019169.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 40034920 ____T () C:\Windows\SysWOW64\00015724.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 40034920 ____T () C:\Windows\SysWOW64\00011478.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00032757.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00032662.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00032391.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00031322.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00030333.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00028703.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00028253.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00028145.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00027644.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00026299.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00025667.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00025547.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00024464.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00023811.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00023281.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00021726.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00019912.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00019895.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00019718.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00018716.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00017673.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00017421.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00017035.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00016827.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00015141.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00014771.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00014604.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00012382.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00011942.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00011538.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00009961.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00009894.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00007711.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00006868.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00005705.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00005447.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00005436.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00004827.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00004664.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00003902.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00002995.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00001869.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00000491.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00000292.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00000153.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 40034920 ____T () C:\Windows\SysWOW64\00031921.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 40034920 ____T () C:\Windows\SysWOW64\00018646.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 40034920 ____T () C:\Windows\SysWOW64\00012090.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 40034920 ____T () C:\Windows\SysWOW64\00010806.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 40034920 ____T () C:\Windows\SysWOW64\00008669.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 40034920 ____T () C:\Windows\SysWOW64\00002185.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00031678.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00031414.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00030729.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00030412.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00030367.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00025323.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00024656.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00022947.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00022935.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00019678.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00014029.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00013006.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00012441.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00011958.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00011728.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00011549.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00009537.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00008855.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00008322.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00007439.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00006290.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00004911.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00004679.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00004457.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00003450.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00002695.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00002576.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00002292.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00001823.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00001584.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00031532.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00030382.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00029650.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00029011.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00028984.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00027453.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00025650.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00025495.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00025097.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00024660.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00022864.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00022849.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00021668.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00020000.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00019747.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00018584.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00017749.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00016565.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00014736.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00013005.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00012936.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00012352.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00009910.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00009496.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00009105.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00008849.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00007586.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00005400.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00004907.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00003646.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00003340.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00003280.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00001283.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00000698.tmp
2014-11-02 17:58 - 2014-11-02 17:58 - 40034920 ____T () C:\Windows\SysWOW64\00029384.tmp
2014-11-02 17:58 - 2014-11-02 17:58 - 40034920 ____T () C:\Windows\SysWOW64\00029176.tmp
2014-11-02 17:58 - 2014-11-02 17:58 - 40034920 ____T () C:\Windows\SysWOW64\00019492.tmp
2014-11-02 17:58 - 2014-11-02 17:58 - 40034920 ____T () C:\Windows\SysWOW64\00016664.tmp
2014-11-02 17:58 - 2014-11-02 17:58 - 40034920 ____T () C:\Windows\SysWOW64\00010198.tmp
2014-11-02 17:58 - 2014-11-02 17:58 - 40034920 ____T () C:\Windows\SysWOW64\00002270.tmp
2014-11-02 17:58 - 2014-11-02 17:58 - 01176168 ____T () C:\Windows\SysWOW64\00020938.tmp
2014-11-02 17:58 - 2014-11-02 17:58 - 01176168 ____T () C:\Windows\SysWOW64\00020565.tmp
2014-11-02 17:58 - 2014-11-02 17:58 - 01176168 ____T () C:\Windows\SysWOW64\00020108.tmp
2014-11-02 17:58 - 2014-11-02 17:58 - 01176168 ____T () C:\Windows\SysWOW64\00019183.tmp
2014-11-02 17:58 - 2014-11-02 17:58 - 01176168 ____T () C:\Windows\SysWOW64\00018485.tmp
2014-11-02 17:58 - 2014-11-02 17:58 - 01176168 ____T () C:\Windows\SysWOW64\00017848.tmp
2014-11-02 17:58 - 2014-11-02 17:58 - 01176168 ____T () C:\Windows\SysWOW64\00012771.tmp
2014-11-02 17:58 - 2014-11-02 17:58 - 01176168 ____T () C:\Windows\SysWOW64\00010857.tmp
2014-11-02 17:58 - 2014-11-02 17:58 - 01176168 ____T () C:\Windows\SysWOW64\00010445.tmp
2014-11-02 17:58 - 2014-11-02 17:58 - 01176168 ____T () C:\Windows\SysWOW64\00005070.tmp
2014-11-02 17:58 - 2014-11-02 17:58 - 01176168 ____T () C:\Windows\SysWOW64\00001564.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00031745.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00030753.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00030275.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00026506.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00026371.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00025954.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00022412.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00021780.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00021740.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00020985.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00020786.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00019660.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00018702.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00018634.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00016768.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00016736.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00013620.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00011090.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00010875.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00010607.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00009597.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00008973.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00007798.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00005003.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00002635.tmp
2014-11-02 17:12 - 2014-11-02 17:12 - 40034920 ____T () C:\Windows\SysWOW64\00030870.tmp
2014-11-02 17:12 - 2014-11-02 17:12 - 40034920 ____T () C:\Windows\SysWOW64\00024539.tmp
2014-11-02 17:12 - 2014-11-02 17:12 - 40034920 ____T () C:\Windows\SysWOW64\00022447.tmp
2014-11-02 17:12 - 2014-11-02 17:12 - 40034920 ____T () C:\Windows\SysWOW64\00013276.tmp
2014-11-02 17:12 - 2014-11-02 17:12 - 40034920 ____T () C:\Windows\SysWOW64\00006760.tmp
2014-11-02 17:12 - 2014-11-02 17:12 - 40034920 ____T () C:\Windows\SysWOW64\00002203.tmp
2014-11-02 17:12 - 2014-11-02 17:12 - 01176168 ____T () C:\Windows\SysWOW64\00028448.tmp
2014-11-02 17:12 - 2014-11-02 17:12 - 01176168 ____T () C:\Windows\SysWOW64\00027748.tmp
2014-11-02 17:12 - 2014-11-02 17:12 - 01176168 ____T () C:\Windows\SysWOW64\00024531.tmp
2014-11-02 17:12 - 2014-11-02 17:12 - 01176168 ____T () C:\Windows\SysWOW64\00024436.tmp
2014-11-02 17:12 - 2014-11-02 17:12 - 01176168 ____T () C:\Windows\SysWOW64\00023488.tmp
2014-11-02 17:12 - 2014-11-02 17:12 - 01176168 ____T () C:\Windows\SysWOW64\00020997.tmp
2014-11-02 17:12 - 2014-11-02 17:12 - 01176168 ____T () C:\Windows\SysWOW64\00018801.tmp
2014-11-02 17:12 - 2014-11-02 17:12 - 01176168 ____T () C:\Windows\SysWOW64\00018191.tmp
2014-11-02 17:12 - 2014-11-02 17:12 - 01176168 ____T () C:\Windows\SysWOW64\00016747.tmp
2014-11-02 17:12 - 2014-11-02 17:12 - 01176168 ____T () C:\Windows\SysWOW64\00006590.tmp
Reboot:
end
*****************
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Ehwudadanah => value deleted successfully.
"C:\Users\Katrina\AppData\Roaming\Unqiqequ\idokyco.exe" => File/Directory not found.
"C:\Users\Katrina\AppData\Roaming\Unqiqequ" => File/Directory not found.
C:\Windows\SysWOW64\00029358.tmp => Moved successfully.
C:\Windows\SysWOW64\00026962.tmp => Moved successfully.
C:\Windows\SysWOW64\00026500.tmp => Moved successfully.
C:\Windows\SysWOW64\00019169.tmp => Moved successfully.
C:\Windows\SysWOW64\00015724.tmp => Moved successfully.
C:\Windows\SysWOW64\00011478.tmp => Moved successfully.
C:\Windows\SysWOW64\00032757.tmp => Moved successfully.
C:\Windows\SysWOW64\00032662.tmp => Moved successfully.
C:\Windows\SysWOW64\00032391.tmp => Moved successfully.
C:\Windows\SysWOW64\00031322.tmp => Moved successfully.
C:\Windows\SysWOW64\00030333.tmp => Moved successfully.
C:\Windows\SysWOW64\00028703.tmp => Moved successfully.
C:\Windows\SysWOW64\00028253.tmp => Moved successfully.
C:\Windows\SysWOW64\00028145.tmp => Moved successfully.
C:\Windows\SysWOW64\00027644.tmp => Moved successfully.
C:\Windows\SysWOW64\00026299.tmp => Moved successfully.
C:\Windows\SysWOW64\00025667.tmp => Moved successfully.
C:\Windows\SysWOW64\00025547.tmp => Moved successfully.
C:\Windows\SysWOW64\00024464.tmp => Moved successfully.
C:\Windows\SysWOW64\00023811.tmp => Moved successfully.
C:\Windows\SysWOW64\00023281.tmp => Moved successfully.
C:\Windows\SysWOW64\00021726.tmp => Moved successfully.
C:\Windows\SysWOW64\00019912.tmp => Moved successfully.
C:\Windows\SysWOW64\00019895.tmp => Moved successfully.
C:\Windows\SysWOW64\00019718.tmp => Moved successfully.
C:\Windows\SysWOW64\00018716.tmp => Moved successfully.
C:\Windows\SysWOW64\00017673.tmp => Moved successfully.
C:\Windows\SysWOW64\00017421.tmp => Moved successfully.
C:\Windows\SysWOW64\00017035.tmp => Moved successfully.
C:\Windows\SysWOW64\00016827.tmp => Moved successfully.
C:\Windows\SysWOW64\00015141.tmp => Moved successfully.
C:\Windows\SysWOW64\00014771.tmp => Moved successfully.
C:\Windows\SysWOW64\00014604.tmp => Moved successfully.
C:\Windows\SysWOW64\00012382.tmp => Moved successfully.
C:\Windows\SysWOW64\00011942.tmp => Moved successfully.
C:\Windows\SysWOW64\00011538.tmp => Moved successfully.
C:\Windows\SysWOW64\00009961.tmp => Moved successfully.
C:\Windows\SysWOW64\00009894.tmp => Moved successfully.
C:\Windows\SysWOW64\00007711.tmp => Moved successfully.
C:\Windows\SysWOW64\00006868.tmp => Moved successfully.
C:\Windows\SysWOW64\00005705.tmp => Moved successfully.
C:\Windows\SysWOW64\00005447.tmp => Moved successfully.
C:\Windows\SysWOW64\00005436.tmp => Moved successfully.
C:\Windows\SysWOW64\00004827.tmp => Moved successfully.
C:\Windows\SysWOW64\00004664.tmp => Moved successfully.
C:\Windows\SysWOW64\00003902.tmp => Moved successfully.
C:\Windows\SysWOW64\00002995.tmp => Moved successfully.
C:\Windows\SysWOW64\00001869.tmp => Moved successfully.
C:\Windows\SysWOW64\00000491.tmp => Moved successfully.
C:\Windows\SysWOW64\00000292.tmp => Moved successfully.
C:\Windows\SysWOW64\00000153.tmp => Moved successfully.
C:\Windows\SysWOW64\00031921.tmp => Moved successfully.
C:\Windows\SysWOW64\00018646.tmp => Moved successfully.
C:\Windows\SysWOW64\00012090.tmp => Moved successfully.
C:\Windows\SysWOW64\00010806.tmp => Moved successfully.
C:\Windows\SysWOW64\00008669.tmp => Moved successfully.
C:\Windows\SysWOW64\00002185.tmp => Moved successfully.
C:\Windows\SysWOW64\00031678.tmp => Moved successfully.
C:\Windows\SysWOW64\00031414.tmp => Moved successfully.
C:\Windows\SysWOW64\00030729.tmp => Moved successfully.
C:\Windows\SysWOW64\00030412.tmp => Moved successfully.
C:\Windows\SysWOW64\00030367.tmp => Moved successfully.
C:\Windows\SysWOW64\00025323.tmp => Moved successfully.
C:\Windows\SysWOW64\00024656.tmp => Moved successfully.
C:\Windows\SysWOW64\00022947.tmp => Moved successfully.
C:\Windows\SysWOW64\00022935.tmp => Moved successfully.
C:\Windows\SysWOW64\00019678.tmp => Moved successfully.
C:\Windows\SysWOW64\00014029.tmp => Moved successfully.
C:\Windows\SysWOW64\00013006.tmp => Moved successfully.
C:\Windows\SysWOW64\00012441.tmp => Moved successfully.
C:\Windows\SysWOW64\00011958.tmp => Moved successfully.
C:\Windows\SysWOW64\00011728.tmp => Moved successfully.
C:\Windows\SysWOW64\00011549.tmp => Moved successfully.
C:\Windows\SysWOW64\00009537.tmp => Moved successfully.
C:\Windows\SysWOW64\00008855.tmp => Moved successfully.
C:\Windows\SysWOW64\00008322.tmp => Moved successfully.
C:\Windows\SysWOW64\00007439.tmp => Moved successfully.
C:\Windows\SysWOW64\00006290.tmp => Moved successfully.
C:\Windows\SysWOW64\00004911.tmp => Moved successfully.
C:\Windows\SysWOW64\00004679.tmp => Moved successfully.
C:\Windows\SysWOW64\00004457.tmp => Moved successfully.
C:\Windows\SysWOW64\00003450.tmp => Moved successfully.
C:\Windows\SysWOW64\00002695.tmp => Moved successfully.
C:\Windows\SysWOW64\00002576.tmp => Moved successfully.
C:\Windows\SysWOW64\00002292.tmp => Moved successfully.
C:\Windows\SysWOW64\00001823.tmp => Moved successfully.
C:\Windows\SysWOW64\00001584.tmp => Moved successfully.
C:\Windows\SysWOW64\00031532.tmp => Moved successfully.
C:\Windows\SysWOW64\00030382.tmp => Moved successfully.
C:\Windows\SysWOW64\00029650.tmp => Moved successfully.
C:\Windows\SysWOW64\00029011.tmp => Moved successfully.
C:\Windows\SysWOW64\00028984.tmp => Moved successfully.
C:\Windows\SysWOW64\00027453.tmp => Moved successfully.
C:\Windows\SysWOW64\00025650.tmp => Moved successfully.
C:\Windows\SysWOW64\00025495.tmp => Moved successfully.
C:\Windows\SysWOW64\00025097.tmp => Moved successfully.
C:\Windows\SysWOW64\00024660.tmp => Moved successfully.
C:\Windows\SysWOW64\00022864.tmp => Moved successfully.
C:\Windows\SysWOW64\00022849.tmp => Moved successfully.
C:\Windows\SysWOW64\00021668.tmp => Moved successfully.
C:\Windows\SysWOW64\00020000.tmp => Moved successfully.
C:\Windows\SysWOW64\00019747.tmp => Moved successfully.
C:\Windows\SysWOW64\00018584.tmp => Moved successfully.
C:\Windows\SysWOW64\00017749.tmp => Moved successfully.
C:\Windows\SysWOW64\00016565.tmp => Moved successfully.
C:\Windows\SysWOW64\00014736.tmp => Moved successfully.
C:\Windows\SysWOW64\00013005.tmp => Moved successfully.
C:\Windows\SysWOW64\00012936.tmp => Moved successfully.
C:\Windows\SysWOW64\00012352.tmp => Moved successfully.
C:\Windows\SysWOW64\00009910.tmp => Moved successfully.
C:\Windows\SysWOW64\00009496.tmp => Moved successfully.
C:\Windows\SysWOW64\00009105.tmp => Moved successfully.
C:\Windows\SysWOW64\00008849.tmp => Moved successfully.
C:\Windows\SysWOW64\00007586.tmp => Moved successfully.
C:\Windows\SysWOW64\00005400.tmp => Moved successfully.
C:\Windows\SysWOW64\00004907.tmp => Moved successfully.
C:\Windows\SysWOW64\00003646.tmp => Moved successfully.
C:\Windows\SysWOW64\00003340.tmp => Moved successfully.
C:\Windows\SysWOW64\00003280.tmp => Moved successfully.
C:\Windows\SysWOW64\00001283.tmp => Moved successfully.
C:\Windows\SysWOW64\00000698.tmp => Moved successfully.
C:\Windows\SysWOW64\00029384.tmp => Moved successfully.
C:\Windows\SysWOW64\00029176.tmp => Moved successfully.
C:\Windows\SysWOW64\00019492.tmp => Moved successfully.
C:\Windows\SysWOW64\00016664.tmp => Moved successfully.
C:\Windows\SysWOW64\00010198.tmp => Moved successfully.
C:\Windows\SysWOW64\00002270.tmp => Moved successfully.
C:\Windows\SysWOW64\00020938.tmp => Moved successfully.
C:\Windows\SysWOW64\00020565.tmp => Moved successfully.
C:\Windows\SysWOW64\00020108.tmp => Moved successfully.
C:\Windows\SysWOW64\00019183.tmp => Moved successfully.
C:\Windows\SysWOW64\00018485.tmp => Moved successfully.
C:\Windows\SysWOW64\00017848.tmp => Moved successfully.
C:\Windows\SysWOW64\00012771.tmp => Moved successfully.
C:\Windows\SysWOW64\00010857.tmp => Moved successfully.
C:\Windows\SysWOW64\00010445.tmp => Moved successfully.
C:\Windows\SysWOW64\00005070.tmp => Moved successfully.
C:\Windows\SysWOW64\00001564.tmp => Moved successfully.
C:\Windows\SysWOW64\00031745.tmp => Moved successfully.
C:\Windows\SysWOW64\00030753.tmp => Moved successfully.
C:\Windows\SysWOW64\00030275.tmp => Moved successfully.
C:\Windows\SysWOW64\00026506.tmp => Moved successfully.
C:\Windows\SysWOW64\00026371.tmp => Moved successfully.
C:\Windows\SysWOW64\00025954.tmp => Moved successfully.
C:\Windows\SysWOW64\00022412.tmp => Moved successfully.
C:\Windows\SysWOW64\00021780.tmp => Moved successfully.
C:\Windows\SysWOW64\00021740.tmp => Moved successfully.
C:\Windows\SysWOW64\00020985.tmp => Moved successfully.
C:\Windows\SysWOW64\00020786.tmp => Moved successfully.
C:\Windows\SysWOW64\00019660.tmp => Moved successfully.
C:\Windows\SysWOW64\00018702.tmp => Moved successfully.
C:\Windows\SysWOW64\00018634.tmp => Moved successfully.
C:\Windows\SysWOW64\00016768.tmp => Moved successfully.
C:\Windows\SysWOW64\00016736.tmp => Moved successfully.
C:\Windows\SysWOW64\00013620.tmp => Moved successfully.
C:\Windows\SysWOW64\00011090.tmp => Moved successfully.
C:\Windows\SysWOW64\00010875.tmp => Moved successfully.
C:\Windows\SysWOW64\00010607.tmp => Moved successfully.
C:\Windows\SysWOW64\00009597.tmp => Moved successfully.
C:\Windows\SysWOW64\00008973.tmp => Moved successfully.
C:\Windows\SysWOW64\00007798.tmp => Moved successfully.
C:\Windows\SysWOW64\00005003.tmp => Moved successfully.
C:\Windows\SysWOW64\00002635.tmp => Moved successfully.
C:\Windows\SysWOW64\00030870.tmp => Moved successfully.
C:\Windows\SysWOW64\00024539.tmp => Moved successfully.
C:\Windows\SysWOW64\00022447.tmp => Moved successfully.
C:\Windows\SysWOW64\00013276.tmp => Moved successfully.
C:\Windows\SysWOW64\00006760.tmp => Moved successfully.
C:\Windows\SysWOW64\00002203.tmp => Moved successfully.
C:\Windows\SysWOW64\00028448.tmp => Moved successfully.
C:\Windows\SysWOW64\00027748.tmp => Moved successfully.
C:\Windows\SysWOW64\00024531.tmp => Moved successfully.
C:\Windows\SysWOW64\00024436.tmp => Moved successfully.
C:\Windows\SysWOW64\00023488.tmp => Moved successfully.
C:\Windows\SysWOW64\00020997.tmp => Moved successfully.
C:\Windows\SysWOW64\00018801.tmp => Moved successfully.
C:\Windows\SysWOW64\00018191.tmp => Moved successfully.
C:\Windows\SysWOW64\00016747.tmp => Moved successfully.
C:\Windows\SysWOW64\00006590.tmp => Moved successfully.
The system needed a reboot.
==== End of Fixlog ====
Ran by Katrina at 2014-11-02 19:50:46 Run:3
Running from C:\Windows\System32\config\systemprofile\Desktop
Loaded Profiles: (Available profiles: Katrina)
Boot Mode: Safe Mode (with Networking)
==============================================
Content of fixlist:
*****************
start
HKLM-x32\...\Run: [Ehwudadanah] => "C:\Users\Katrina\AppData\Roaming\Unqiqequ\idokyco.exe"
C:\Users\Katrina\AppData\Roaming\Unqiqequ\idokyco.exe
C:\Users\Katrina\AppData\Roaming\Unqiqequ
2014-11-02 18:18 - 2014-11-02 18:18 - 40034920 ____T () C:\Windows\SysWOW64\00029358.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 40034920 ____T () C:\Windows\SysWOW64\00026962.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 40034920 ____T () C:\Windows\SysWOW64\00026500.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 40034920 ____T () C:\Windows\SysWOW64\00019169.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 40034920 ____T () C:\Windows\SysWOW64\00015724.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 40034920 ____T () C:\Windows\SysWOW64\00011478.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00032757.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00032662.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00032391.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00031322.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00030333.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00028703.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00028253.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00028145.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00027644.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00026299.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00025667.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00025547.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00024464.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00023811.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00023281.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00021726.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00019912.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00019895.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00019718.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00018716.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00017673.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00017421.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00017035.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00016827.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00015141.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00014771.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00014604.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00012382.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00011942.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00011538.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00009961.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00009894.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00007711.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00006868.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00005705.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00005447.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00005436.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00004827.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00004664.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00003902.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00002995.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00001869.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00000491.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00000292.tmp
2014-11-02 18:18 - 2014-11-02 18:18 - 01176168 ____T () C:\Windows\SysWOW64\00000153.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 40034920 ____T () C:\Windows\SysWOW64\00031921.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 40034920 ____T () C:\Windows\SysWOW64\00018646.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 40034920 ____T () C:\Windows\SysWOW64\00012090.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 40034920 ____T () C:\Windows\SysWOW64\00010806.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 40034920 ____T () C:\Windows\SysWOW64\00008669.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 40034920 ____T () C:\Windows\SysWOW64\00002185.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00031678.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00031414.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00030729.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00030412.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00030367.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00025323.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00024656.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00022947.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00022935.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00019678.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00014029.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00013006.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00012441.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00011958.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00011728.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00011549.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00009537.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00008855.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00008322.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00007439.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00006290.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00004911.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00004679.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00004457.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00003450.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00002695.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00002576.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00002292.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00001823.tmp
2014-11-02 18:08 - 2014-11-02 18:08 - 01176168 ____T () C:\Windows\SysWOW64\00001584.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00031532.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00030382.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00029650.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00029011.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00028984.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00027453.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00025650.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00025495.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00025097.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00024660.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00022864.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00022849.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00021668.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00020000.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00019747.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00018584.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00017749.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00016565.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00014736.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00013005.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00012936.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00012352.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00009910.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00009496.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00009105.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00008849.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00007586.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00005400.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00004907.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00003646.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00003340.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00003280.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00001283.tmp
2014-11-02 17:59 - 2014-11-02 17:59 - 01176168 ____T () C:\Windows\SysWOW64\00000698.tmp
2014-11-02 17:58 - 2014-11-02 17:58 - 40034920 ____T () C:\Windows\SysWOW64\00029384.tmp
2014-11-02 17:58 - 2014-11-02 17:58 - 40034920 ____T () C:\Windows\SysWOW64\00029176.tmp
2014-11-02 17:58 - 2014-11-02 17:58 - 40034920 ____T () C:\Windows\SysWOW64\00019492.tmp
2014-11-02 17:58 - 2014-11-02 17:58 - 40034920 ____T () C:\Windows\SysWOW64\00016664.tmp
2014-11-02 17:58 - 2014-11-02 17:58 - 40034920 ____T () C:\Windows\SysWOW64\00010198.tmp
2014-11-02 17:58 - 2014-11-02 17:58 - 40034920 ____T () C:\Windows\SysWOW64\00002270.tmp
2014-11-02 17:58 - 2014-11-02 17:58 - 01176168 ____T () C:\Windows\SysWOW64\00020938.tmp
2014-11-02 17:58 - 2014-11-02 17:58 - 01176168 ____T () C:\Windows\SysWOW64\00020565.tmp
2014-11-02 17:58 - 2014-11-02 17:58 - 01176168 ____T () C:\Windows\SysWOW64\00020108.tmp
2014-11-02 17:58 - 2014-11-02 17:58 - 01176168 ____T () C:\Windows\SysWOW64\00019183.tmp
2014-11-02 17:58 - 2014-11-02 17:58 - 01176168 ____T () C:\Windows\SysWOW64\00018485.tmp
2014-11-02 17:58 - 2014-11-02 17:58 - 01176168 ____T () C:\Windows\SysWOW64\00017848.tmp
2014-11-02 17:58 - 2014-11-02 17:58 - 01176168 ____T () C:\Windows\SysWOW64\00012771.tmp
2014-11-02 17:58 - 2014-11-02 17:58 - 01176168 ____T () C:\Windows\SysWOW64\00010857.tmp
2014-11-02 17:58 - 2014-11-02 17:58 - 01176168 ____T () C:\Windows\SysWOW64\00010445.tmp
2014-11-02 17:58 - 2014-11-02 17:58 - 01176168 ____T () C:\Windows\SysWOW64\00005070.tmp
2014-11-02 17:58 - 2014-11-02 17:58 - 01176168 ____T () C:\Windows\SysWOW64\00001564.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00031745.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00030753.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00030275.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00026506.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00026371.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00025954.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00022412.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00021780.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00021740.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00020985.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00020786.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00019660.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00018702.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00018634.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00016768.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00016736.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00013620.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00011090.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00010875.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00010607.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00009597.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00008973.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00007798.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00005003.tmp
2014-11-02 17:13 - 2014-11-02 17:13 - 01176168 ____T () C:\Windows\SysWOW64\00002635.tmp
2014-11-02 17:12 - 2014-11-02 17:12 - 40034920 ____T () C:\Windows\SysWOW64\00030870.tmp
2014-11-02 17:12 - 2014-11-02 17:12 - 40034920 ____T () C:\Windows\SysWOW64\00024539.tmp
2014-11-02 17:12 - 2014-11-02 17:12 - 40034920 ____T () C:\Windows\SysWOW64\00022447.tmp
2014-11-02 17:12 - 2014-11-02 17:12 - 40034920 ____T () C:\Windows\SysWOW64\00013276.tmp
2014-11-02 17:12 - 2014-11-02 17:12 - 40034920 ____T () C:\Windows\SysWOW64\00006760.tmp
2014-11-02 17:12 - 2014-11-02 17:12 - 40034920 ____T () C:\Windows\SysWOW64\00002203.tmp
2014-11-02 17:12 - 2014-11-02 17:12 - 01176168 ____T () C:\Windows\SysWOW64\00028448.tmp
2014-11-02 17:12 - 2014-11-02 17:12 - 01176168 ____T () C:\Windows\SysWOW64\00027748.tmp
2014-11-02 17:12 - 2014-11-02 17:12 - 01176168 ____T () C:\Windows\SysWOW64\00024531.tmp
2014-11-02 17:12 - 2014-11-02 17:12 - 01176168 ____T () C:\Windows\SysWOW64\00024436.tmp
2014-11-02 17:12 - 2014-11-02 17:12 - 01176168 ____T () C:\Windows\SysWOW64\00023488.tmp
2014-11-02 17:12 - 2014-11-02 17:12 - 01176168 ____T () C:\Windows\SysWOW64\00020997.tmp
2014-11-02 17:12 - 2014-11-02 17:12 - 01176168 ____T () C:\Windows\SysWOW64\00018801.tmp
2014-11-02 17:12 - 2014-11-02 17:12 - 01176168 ____T () C:\Windows\SysWOW64\00018191.tmp
2014-11-02 17:12 - 2014-11-02 17:12 - 01176168 ____T () C:\Windows\SysWOW64\00016747.tmp
2014-11-02 17:12 - 2014-11-02 17:12 - 01176168 ____T () C:\Windows\SysWOW64\00006590.tmp
Reboot:
end
*****************
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Ehwudadanah => value deleted successfully.
"C:\Users\Katrina\AppData\Roaming\Unqiqequ\idokyco.exe" => File/Directory not found.
"C:\Users\Katrina\AppData\Roaming\Unqiqequ" => File/Directory not found.
C:\Windows\SysWOW64\00029358.tmp => Moved successfully.
C:\Windows\SysWOW64\00026962.tmp => Moved successfully.
C:\Windows\SysWOW64\00026500.tmp => Moved successfully.
C:\Windows\SysWOW64\00019169.tmp => Moved successfully.
C:\Windows\SysWOW64\00015724.tmp => Moved successfully.
C:\Windows\SysWOW64\00011478.tmp => Moved successfully.
C:\Windows\SysWOW64\00032757.tmp => Moved successfully.
C:\Windows\SysWOW64\00032662.tmp => Moved successfully.
C:\Windows\SysWOW64\00032391.tmp => Moved successfully.
C:\Windows\SysWOW64\00031322.tmp => Moved successfully.
C:\Windows\SysWOW64\00030333.tmp => Moved successfully.
C:\Windows\SysWOW64\00028703.tmp => Moved successfully.
C:\Windows\SysWOW64\00028253.tmp => Moved successfully.
C:\Windows\SysWOW64\00028145.tmp => Moved successfully.
C:\Windows\SysWOW64\00027644.tmp => Moved successfully.
C:\Windows\SysWOW64\00026299.tmp => Moved successfully.
C:\Windows\SysWOW64\00025667.tmp => Moved successfully.
C:\Windows\SysWOW64\00025547.tmp => Moved successfully.
C:\Windows\SysWOW64\00024464.tmp => Moved successfully.
C:\Windows\SysWOW64\00023811.tmp => Moved successfully.
C:\Windows\SysWOW64\00023281.tmp => Moved successfully.
C:\Windows\SysWOW64\00021726.tmp => Moved successfully.
C:\Windows\SysWOW64\00019912.tmp => Moved successfully.
C:\Windows\SysWOW64\00019895.tmp => Moved successfully.
C:\Windows\SysWOW64\00019718.tmp => Moved successfully.
C:\Windows\SysWOW64\00018716.tmp => Moved successfully.
C:\Windows\SysWOW64\00017673.tmp => Moved successfully.
C:\Windows\SysWOW64\00017421.tmp => Moved successfully.
C:\Windows\SysWOW64\00017035.tmp => Moved successfully.
C:\Windows\SysWOW64\00016827.tmp => Moved successfully.
C:\Windows\SysWOW64\00015141.tmp => Moved successfully.
C:\Windows\SysWOW64\00014771.tmp => Moved successfully.
C:\Windows\SysWOW64\00014604.tmp => Moved successfully.
C:\Windows\SysWOW64\00012382.tmp => Moved successfully.
C:\Windows\SysWOW64\00011942.tmp => Moved successfully.
C:\Windows\SysWOW64\00011538.tmp => Moved successfully.
C:\Windows\SysWOW64\00009961.tmp => Moved successfully.
C:\Windows\SysWOW64\00009894.tmp => Moved successfully.
C:\Windows\SysWOW64\00007711.tmp => Moved successfully.
C:\Windows\SysWOW64\00006868.tmp => Moved successfully.
C:\Windows\SysWOW64\00005705.tmp => Moved successfully.
C:\Windows\SysWOW64\00005447.tmp => Moved successfully.
C:\Windows\SysWOW64\00005436.tmp => Moved successfully.
C:\Windows\SysWOW64\00004827.tmp => Moved successfully.
C:\Windows\SysWOW64\00004664.tmp => Moved successfully.
C:\Windows\SysWOW64\00003902.tmp => Moved successfully.
C:\Windows\SysWOW64\00002995.tmp => Moved successfully.
C:\Windows\SysWOW64\00001869.tmp => Moved successfully.
C:\Windows\SysWOW64\00000491.tmp => Moved successfully.
C:\Windows\SysWOW64\00000292.tmp => Moved successfully.
C:\Windows\SysWOW64\00000153.tmp => Moved successfully.
C:\Windows\SysWOW64\00031921.tmp => Moved successfully.
C:\Windows\SysWOW64\00018646.tmp => Moved successfully.
C:\Windows\SysWOW64\00012090.tmp => Moved successfully.
C:\Windows\SysWOW64\00010806.tmp => Moved successfully.
C:\Windows\SysWOW64\00008669.tmp => Moved successfully.
C:\Windows\SysWOW64\00002185.tmp => Moved successfully.
C:\Windows\SysWOW64\00031678.tmp => Moved successfully.
C:\Windows\SysWOW64\00031414.tmp => Moved successfully.
C:\Windows\SysWOW64\00030729.tmp => Moved successfully.
C:\Windows\SysWOW64\00030412.tmp => Moved successfully.
C:\Windows\SysWOW64\00030367.tmp => Moved successfully.
C:\Windows\SysWOW64\00025323.tmp => Moved successfully.
C:\Windows\SysWOW64\00024656.tmp => Moved successfully.
C:\Windows\SysWOW64\00022947.tmp => Moved successfully.
C:\Windows\SysWOW64\00022935.tmp => Moved successfully.
C:\Windows\SysWOW64\00019678.tmp => Moved successfully.
C:\Windows\SysWOW64\00014029.tmp => Moved successfully.
C:\Windows\SysWOW64\00013006.tmp => Moved successfully.
C:\Windows\SysWOW64\00012441.tmp => Moved successfully.
C:\Windows\SysWOW64\00011958.tmp => Moved successfully.
C:\Windows\SysWOW64\00011728.tmp => Moved successfully.
C:\Windows\SysWOW64\00011549.tmp => Moved successfully.
C:\Windows\SysWOW64\00009537.tmp => Moved successfully.
C:\Windows\SysWOW64\00008855.tmp => Moved successfully.
C:\Windows\SysWOW64\00008322.tmp => Moved successfully.
C:\Windows\SysWOW64\00007439.tmp => Moved successfully.
C:\Windows\SysWOW64\00006290.tmp => Moved successfully.
C:\Windows\SysWOW64\00004911.tmp => Moved successfully.
C:\Windows\SysWOW64\00004679.tmp => Moved successfully.
C:\Windows\SysWOW64\00004457.tmp => Moved successfully.
C:\Windows\SysWOW64\00003450.tmp => Moved successfully.
C:\Windows\SysWOW64\00002695.tmp => Moved successfully.
C:\Windows\SysWOW64\00002576.tmp => Moved successfully.
C:\Windows\SysWOW64\00002292.tmp => Moved successfully.
C:\Windows\SysWOW64\00001823.tmp => Moved successfully.
C:\Windows\SysWOW64\00001584.tmp => Moved successfully.
C:\Windows\SysWOW64\00031532.tmp => Moved successfully.
C:\Windows\SysWOW64\00030382.tmp => Moved successfully.
C:\Windows\SysWOW64\00029650.tmp => Moved successfully.
C:\Windows\SysWOW64\00029011.tmp => Moved successfully.
C:\Windows\SysWOW64\00028984.tmp => Moved successfully.
C:\Windows\SysWOW64\00027453.tmp => Moved successfully.
C:\Windows\SysWOW64\00025650.tmp => Moved successfully.
C:\Windows\SysWOW64\00025495.tmp => Moved successfully.
C:\Windows\SysWOW64\00025097.tmp => Moved successfully.
C:\Windows\SysWOW64\00024660.tmp => Moved successfully.
C:\Windows\SysWOW64\00022864.tmp => Moved successfully.
C:\Windows\SysWOW64\00022849.tmp => Moved successfully.
C:\Windows\SysWOW64\00021668.tmp => Moved successfully.
C:\Windows\SysWOW64\00020000.tmp => Moved successfully.
C:\Windows\SysWOW64\00019747.tmp => Moved successfully.
C:\Windows\SysWOW64\00018584.tmp => Moved successfully.
C:\Windows\SysWOW64\00017749.tmp => Moved successfully.
C:\Windows\SysWOW64\00016565.tmp => Moved successfully.
C:\Windows\SysWOW64\00014736.tmp => Moved successfully.
C:\Windows\SysWOW64\00013005.tmp => Moved successfully.
C:\Windows\SysWOW64\00012936.tmp => Moved successfully.
C:\Windows\SysWOW64\00012352.tmp => Moved successfully.
C:\Windows\SysWOW64\00009910.tmp => Moved successfully.
C:\Windows\SysWOW64\00009496.tmp => Moved successfully.
C:\Windows\SysWOW64\00009105.tmp => Moved successfully.
C:\Windows\SysWOW64\00008849.tmp => Moved successfully.
C:\Windows\SysWOW64\00007586.tmp => Moved successfully.
C:\Windows\SysWOW64\00005400.tmp => Moved successfully.
C:\Windows\SysWOW64\00004907.tmp => Moved successfully.
C:\Windows\SysWOW64\00003646.tmp => Moved successfully.
C:\Windows\SysWOW64\00003340.tmp => Moved successfully.
C:\Windows\SysWOW64\00003280.tmp => Moved successfully.
C:\Windows\SysWOW64\00001283.tmp => Moved successfully.
C:\Windows\SysWOW64\00000698.tmp => Moved successfully.
C:\Windows\SysWOW64\00029384.tmp => Moved successfully.
C:\Windows\SysWOW64\00029176.tmp => Moved successfully.
C:\Windows\SysWOW64\00019492.tmp => Moved successfully.
C:\Windows\SysWOW64\00016664.tmp => Moved successfully.
C:\Windows\SysWOW64\00010198.tmp => Moved successfully.
C:\Windows\SysWOW64\00002270.tmp => Moved successfully.
C:\Windows\SysWOW64\00020938.tmp => Moved successfully.
C:\Windows\SysWOW64\00020565.tmp => Moved successfully.
C:\Windows\SysWOW64\00020108.tmp => Moved successfully.
C:\Windows\SysWOW64\00019183.tmp => Moved successfully.
C:\Windows\SysWOW64\00018485.tmp => Moved successfully.
C:\Windows\SysWOW64\00017848.tmp => Moved successfully.
C:\Windows\SysWOW64\00012771.tmp => Moved successfully.
C:\Windows\SysWOW64\00010857.tmp => Moved successfully.
C:\Windows\SysWOW64\00010445.tmp => Moved successfully.
C:\Windows\SysWOW64\00005070.tmp => Moved successfully.
C:\Windows\SysWOW64\00001564.tmp => Moved successfully.
C:\Windows\SysWOW64\00031745.tmp => Moved successfully.
C:\Windows\SysWOW64\00030753.tmp => Moved successfully.
C:\Windows\SysWOW64\00030275.tmp => Moved successfully.
C:\Windows\SysWOW64\00026506.tmp => Moved successfully.
C:\Windows\SysWOW64\00026371.tmp => Moved successfully.
C:\Windows\SysWOW64\00025954.tmp => Moved successfully.
C:\Windows\SysWOW64\00022412.tmp => Moved successfully.
C:\Windows\SysWOW64\00021780.tmp => Moved successfully.
C:\Windows\SysWOW64\00021740.tmp => Moved successfully.
C:\Windows\SysWOW64\00020985.tmp => Moved successfully.
C:\Windows\SysWOW64\00020786.tmp => Moved successfully.
C:\Windows\SysWOW64\00019660.tmp => Moved successfully.
C:\Windows\SysWOW64\00018702.tmp => Moved successfully.
C:\Windows\SysWOW64\00018634.tmp => Moved successfully.
C:\Windows\SysWOW64\00016768.tmp => Moved successfully.
C:\Windows\SysWOW64\00016736.tmp => Moved successfully.
C:\Windows\SysWOW64\00013620.tmp => Moved successfully.
C:\Windows\SysWOW64\00011090.tmp => Moved successfully.
C:\Windows\SysWOW64\00010875.tmp => Moved successfully.
C:\Windows\SysWOW64\00010607.tmp => Moved successfully.
C:\Windows\SysWOW64\00009597.tmp => Moved successfully.
C:\Windows\SysWOW64\00008973.tmp => Moved successfully.
C:\Windows\SysWOW64\00007798.tmp => Moved successfully.
C:\Windows\SysWOW64\00005003.tmp => Moved successfully.
C:\Windows\SysWOW64\00002635.tmp => Moved successfully.
C:\Windows\SysWOW64\00030870.tmp => Moved successfully.
C:\Windows\SysWOW64\00024539.tmp => Moved successfully.
C:\Windows\SysWOW64\00022447.tmp => Moved successfully.
C:\Windows\SysWOW64\00013276.tmp => Moved successfully.
C:\Windows\SysWOW64\00006760.tmp => Moved successfully.
C:\Windows\SysWOW64\00002203.tmp => Moved successfully.
C:\Windows\SysWOW64\00028448.tmp => Moved successfully.
C:\Windows\SysWOW64\00027748.tmp => Moved successfully.
C:\Windows\SysWOW64\00024531.tmp => Moved successfully.
C:\Windows\SysWOW64\00024436.tmp => Moved successfully.
C:\Windows\SysWOW64\00023488.tmp => Moved successfully.
C:\Windows\SysWOW64\00020997.tmp => Moved successfully.
C:\Windows\SysWOW64\00018801.tmp => Moved successfully.
C:\Windows\SysWOW64\00018191.tmp => Moved successfully.
C:\Windows\SysWOW64\00016747.tmp => Moved successfully.
C:\Windows\SysWOW64\00006590.tmp => Moved successfully.
The system needed a reboot.
==== End of Fixlog ====