| |
Evidence Eliminator Log
START
Evidence Eliminator Log v5.058 started work: 07/16/2004 13:04:41
Release Build 1
Beginning Quick Mode procedure.
OS Detected: WinXP [winnt 5.1.2500, CSDVersion Service Pack 1#]
Disabling any selected Screen Saver...
-----c:\\\\autoexec.bat-----
-----c:\\\\config.sys-----
--------------------------------------------------
\\\\SystemRoot\\\\System32\\\\smss.exe
\\\\??\\\\C:\\\\WINNT\\\\system32\\\\winlogon.exe
C:\\\\WINNT\\\\system32\\\\services.exe
C:\\\\WINNT\\\\system32\\\\lsass.exe
C:\\\\WINNT\\\\system32\\\\svchost.exe
C:\\\\WINNT\\\\System32\\\\svchost.exe
C:\\\\WINNT\\\\Explorer.EXE
C:\\\\WINNT\\\\system32\\\\spoolsv.exe
C:\\\\Program Files\\\\Common Files\\\\Symantec Shared\\\\ccEvtMgr.exe
C:\\\\Program Files\\\\Alcatel\\\\SpeedTouch USB\\\\Dragdiag.exe
C:\\\\Program Files\\\\Common Files\\\\Symantec Shared\\\\ccApp.exe
C:\\\\Program Files\\\\Microsoft Hardware\\\\Mouse\\\\point32.exe
C:\\\\PROGRA~1\\\\PESTPA~1\\\\PPControl.exe
C:\\\\PROGRA~1\\\\PESTPA~1\\\\PPMemCheck.exe
C:\\\\PROGRA~1\\\\PESTPA~1\\\\CookiePatrol.exe
C:\\\\Program Files\\\\Evidence Eliminator\\\\ee.exe
C:\\\\Palm\\\\HOTSYNC.EXE
C:\\\\Program Files\\\\FinePixViewer\\\\QuickDCF.exe
C:\\\\Program Files\\\\Adobe\\\\Acrobat 5.0\\\\Distillr\\\\AcroTray.exe
C:\\\\Program Files\\\\Norton AntiVirus\\\\navapsvc.exe
C:\\\\WINNT\\\\System32\\\\nvsvc32.exe
C:\\\\WINNT\\\\System32\\\\svchost.exe
C:\\\\Program Files\\\\Messenger\\\\msmsgs.exe
--------------------------------------------------
Generating random data...
Eliminating Folder: C:\\\\recycled\\\\
Scanning C:\\\\recycled\\\\ for mask *.* ... please wait...
Files found: 2
Eliminating File: C:\\\\recycled\\\\desktop.ini
Eliminating File: C:\\\\recycled\\\\INFO2 [0]
Eliminated 1 file(s)
Eliminating folder tree: C:\\\\recycled\\\\ excluding root folder...
Custom Folder C:\\\\Documents and Settings\\\\private code\\\\Cookies\\\\
Eliminating Folder: C:\\\\Documents and Settings\\\\private code\\\\Cookies\\\\
Scanning C:\\\\Documents and Settings\\\\private code\\\\Cookies\\\\ for mask *.* ... please wait...
Files found: 10
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Cookies\\\\index.dat
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Cookies\\\\private code@google[1].txt [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Cookies\\\\private code@www.ladbrokes[1].txt [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Cookies\\\\private code@spodds[1].txt [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Cookies\\\\private code@www.betfair[1].txt [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Cookies\\\\private code@oddschecker[1].txt [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Cookies\\\\private code@LPplayersonly[2].txt [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Cookies\\\\private code@www.willhill[1].txt [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Cookies\\\\private code@net-filter[1].txt [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Cookies\\\\private code@alexa[2].txt [0]
Eliminated 9 file(s) Skipped: 1
Eliminating folder tree: C:\\\\Documents and Settings\\\\private code\\\\Cookies\\\\ excluding root folder...
Drive Scan no. 1 C:\\\\
Scanning C:\\\\ for mask *.tmp ... please wait...
Files found: 58
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Local Settings\\\\Temp\\\\~DFD2A6.tmp [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Local Settings\\\\Temp\\\\~DFE973.tmp [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Local Settings\\\\Temp\\\\~DFFF12.tmp [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Local Settings\\\\Temp\\\\~DF1C9D.tmp [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Local Settings\\\\Temp\\\\~DF377D.tmp [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Local Settings\\\\Temp\\\\~DF62A9.tmp [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Local Settings\\\\Temp\\\\~DF863D.tmp [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Local Settings\\\\Temp\\\\~DFA585.tmp [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Local Settings\\\\Temp\\\\~DFC9E6.tmp [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Local Settings\\\\Temp\\\\~DFE793.tmp [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Local Settings\\\\Temp\\\\~DFFCDE.tmp [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Local Settings\\\\Temp\\\\~DFCA6.tmp [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Local Settings\\\\Temp\\\\~DF3C0D.tmp [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Local Settings\\\\Temp\\\\~DF5A7F.tmp [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Local Settings\\\\Temp\\\\~DF822D.tmp [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Local Settings\\\\Temp\\\\~DFA1E7.tmp [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Local Settings\\\\Temp\\\\~DFCDD4.tmp [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Local Settings\\\\Temp\\\\~DFFA4.tmp [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Local Settings\\\\Temp\\\\~DF342A.tmp [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Local Settings\\\\Temp\\\\~DF4DB2.tmp [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Local Settings\\\\Temp\\\\~DF7E14.tmp [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Local Settings\\\\Temp\\\\~DF9442.tmp [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Local Settings\\\\Temp\\\\~DFBB90.tmp [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Local Settings\\\\Temp\\\\~DFDC14.tmp [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Local Settings\\\\Temp\\\\~DFF57F.tmp [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Local Settings\\\\Temp\\\\~DF1AD0.tmp [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Local Settings\\\\Temp\\\\~DF351E.tmp [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Local Settings\\\\Temp\\\\~DF5058.tmp [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Local Settings\\\\Temp\\\\~DF5E50.tmp [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Local Settings\\\\Temp\\\\~DFA2F4.tmp [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Local Settings\\\\Temp\\\\~DFC1EA.tmp [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Local Settings\\\\Temp\\\\~DFDE52.tmp [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Local Settings\\\\Temp\\\\~DFFDBF.tmp [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Local Settings\\\\Temp\\\\~DF1C0A.tmp [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Local Settings\\\\Temp\\\\~DF4492.tmp [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Local Settings\\\\Temp\\\\~DF5EBB.tmp [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Local Settings\\\\Temp\\\\~DF7BF0.tmp [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Local Settings\\\\Temp\\\\~DF9795.tmp [0]
Eliminating File: C:\\\\Documents and Settings\\\\private code\\\\Local Settings\\\\Temp\\\\~DFBB6C.tmp |