Logfile of random’s system information tool 1.06 (written by random/random)
Run by andreas at 2005-01-01 01:12:44
Microsoft Windows XP Professional Service Pack 3
System drive C: has 299 MB (6%) free of 5 GB
Total RAM: 479 MB (23% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:14:03, on 01.01.2005
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20815)
Boot mode: Normal
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:Program FilesCommon FilesABBYYFineReader9.00LicensingPENetworkLicenseServer.exe
C:Program FilesBonjourmDNSResponder.exe
C:WINDOWSsystem32DETER177svсhоst.exe
C:WINDOWSsystem32nvsvc32.exe
C:WINDOWSRTHDCPL.EXE
C:Program FilesCyberLinkPowerDVD8PDVD8Serv.exe
C:Program FilesCyberlinkShared Filesbrs.exe
C:WINDOWSsystem32DETER177smss.exe
D:SOFTLingvoLvagent.exe
C:WINDOWSsystem32DETER177lsass.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesTotal CommanderTotalcmd.exe
C:Program FilesQIPqip.exe
C:Program FilesMozilla Firefoxfirefox.exe
C:DOCUME~1andreasLOCALS~1Tempwinovre.exe
C:DOCUME~1andreasLOCALS~1Tempw560a5.exe
C:WINDOWSExplorer.exe
C:Documents and SettingsandreasРабочий столRSIT.exe
C:Program Filestrend microandreas.exe
R1 — HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R0 — HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
F2 — REG:system.ini: Shell=Explorer.exe C:WINDOWSsystem32АHTОMSYS19.exe
O2 — BHO: AcroIEHlprObj Class — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll
O2 — BHO: IEVkbdBHO — {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} — C:Program FilesKaspersky LabKaspersky Anti-Virus 2009ievkbd.dll
O2 — BHO: SSVHelper Class — {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} — C:Program FilesJavajre1.6.0_06binssv.dll
O4 — HKLM..Run: [AVP] «C:Program FilesKaspersky LabKaspersky Anti-Virus 2009avp.exe»
O4 — HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 — HKLM..Run: [nwiz] nwiz.exe /install
O4 — HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 — HKLM..Run: [Alcmtr] ALCMTR.EXE
O4 — HKLM..Run: [RemoteControl8] «C:Program FilesCyberLinkPowerDVD8PDVD8Serv.exe»
O4 — HKLM..Run: [PDVD8LanguageShortcut] «C:Program FilesCyberLinkPowerDVD8LanguageLanguage.exe»
O4 — HKLM..Run: [BDRegion] C:Program FilesCyberlinkShared Filesbrs.exe
O4 — HKLM..Run: [Lingvo Launcher] «D:SOFTLingvoLvagent.exe» /STARTUP
O4 — HKLM..Run: [lsass] C:WINDOWSsystem32DETER177lsass.exe
O4 — HKLM..Run: [сtfmоn.exe] C:WINDOWSsystem32сtfmon.exe
O4 — HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 — HKCU..Run: [сtfmоn.exe] C:WINDOWSsystem32сtfmon.exe
O4 — HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..RunOnce: [IE7_011] regsvr32 /s /n /i:u shell32 (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-19..RunOnce: [IE7_013] rebuild.exe (User ‘LOCAL SERVICE’)
O4 — HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-20..RunOnce: [IE7_011] regsvr32 /s /n /i:u shell32 (User ‘NETWORK SERVICE’)
O4 — HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 — HKUSS-1-5-18..RunOnce: [IE7_011] regsvr32 /s /n /i:u shell32 (User ‘SYSTEM’)
O4 — HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 — HKUS.DEFAULT..RunOnce: [IE7_011] regsvr32 /s /n /i:u shell32 (User ‘Default user’)
O4 — Startup: Total Commander.lnk = C:Program FilesTotal CommanderTotalcmd.exe
O7 — HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem, DisableRegedit=1
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~2Office12EXCEL.EXE/3000
O9 — Extra button: (no name) — {08B0E5C0-4FCB-11CF-AAA5-00401C608501} — C:Program FilesJavajre1.6.0_06binssv.dll
O9 — Extra ‘Tools’ menuitem: Sun Java Console — {08B0E5C0-4FCB-11CF-AAA5-00401C608501} — C:Program FilesJavajre1.6.0_06binssv.dll
O9 — Extra button: Cтатистика защиты веб-трафика — {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} — C:Program FilesKaspersky LabKaspersky Anti-Virus 2009SCIEPlgn.dll
O9 — Extra button: Research — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2Office12REFIEBAR.DLL
O9 — Extra button: (no name) — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 — Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 — {e2e2dd38-d088-4134-82b7-f2ba38496583} — C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O17 — HKLMSystemCCSServicesTcpip..{5A61091D-60A0-49BA-85E0-96B747243C07}: NameServer = 172.17.128.1 172.17.128.2
O18 — Protocol: skype4com — {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} — C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL
O20 — AppInit_DLLs: C:PROGRA~1KASPER~1KASPER~1mzvkbd.dll
O23 — Service: ABBYY FineReader 9.0 PE Licensing Service (ABBYY.Licensing.FineReader.Professional.9.0) — ABBYY (BIT Software) — C:Program FilesCommon FilesABBYYFineReader9.00LicensingPENetworkLicenseServer.exe
O23 — Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) — Apple Computer, Inc. — C:Program FilesBonjourmDNSResponder.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: FLEXnet Licensing Service — Macrovision Europe Ltd. — C:Program FilesCommon FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe
O23 — Service: Служба COM записи компакт-дисков IMAPI (ImapiService) — Корпорация Майкрософт — C:WINDOWSsystem32imapi.exe
O23 — Service: NetMeeting Remote Desktop Sharing (mnmsrvc) — Корпорация Майкрософт — C:WINDOWSsystem32mnmsrvc.exe
O23 — Service: NVIDIA Display Driver Service (NVSvc) — NVIDIA Corporation — C:WINDOWSsystem32nvsvc32.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Диспетчер сеанса справки для удаленного рабочего стола (RDSessMgr) — Корпорация Майкрософт — C:WINDOWSsystem32sessmgr.exe
O23 — Service: Смарт-карты (SCardSvr) — Корпорация Майкрософт — C:WINDOWSSystem32SCardSvr.exe
O23 — Service: Журналы и оповещения производительности (SysmonLog) — Корпорация Майкрософт — C:WINDOWSsystem32smlogsvc.exe
O23 — Service: Теневое копирование тома (VSS) — Корпорация Майкрософт — C:WINDOWSSystem32vssvc.exe
O23 — Service: Адаптер производительности WMI (WmiApSrv) — Корпорация Майкрософт — C:WINDOWSsystem32wbemwmiapsrv.exe
—
End of file — 7418 bytes
======Registry dump======
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class — C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll [2005-09-24 63136]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}]
IEVkbdBHO Class — C:Program FilesKaspersky LabKaspersky Anti-Virus 2009ievkbd.dll [2008-04-25 62728]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class — C:Program FilesJavajre1.6.0_06binssv.dll [2008-03-25 509328]
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
«AVP»=C:Program FilesKaspersky LabKaspersky Anti-Virus 2009avp.exe [2008-04-25 201992]
«NvCplDaemon»=C:WINDOWSsystem32NvCpl.dll [2006-04-27 7561216]
«nwiz»=nwiz.exe /install []
«RTHDCPL»=C:WINDOWSRTHDCPL.EXE [2007-06-13 16377344]
«Alcmtr»=C:WINDOWSALCMTR.EXE [2005-05-03 147456]
«RemoteControl8″=C:Program FilesCyberLinkPowerDVD8PDVD8Serv.exe [2008-03-20 165160]
«PDVD8LanguageShortcut»=C:Program FilesCyberLinkPowerDVD8LanguageLanguage.exe [2007-12-14 124200]
«BDRegion»=C:Program FilesCyberlinkShared Filesbrs.exe [2008-05-19 161064]
«»= []
«Lingvo Launcher»=D:SOFTLingvoLvagent.exe [2007-07-05 263456]
«lsass»=C:WINDOWSsystem32DETER177lsass.exe [2003-11-11 189952]
«сtfmоn.exe»=C:WINDOWSsystem32сtfmon.exe [2003-11-11 181760]
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«CTFMON.EXE»=C:WINDOWSsystem32ctfmon.exe [2008-04-14 15360]
«сtfmоn.exe»=C:WINDOWSsystem32сtfmon.exe [2003-11-11 181760]
C:Documents and SettingsandreasГлавное менюПрограммыАвтозагрузка
Total Commander.lnk — C:Program FilesTotal CommanderTotalcmd.exe
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWindows]
«AppInit_DLLS»=»C:PROGRA~1KASPER~1KASPER~1mzvkbd.dll»
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyklogon]
C:WINDOWSsystem32klogon.dll [2008-04-25 206088]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — C:WINDOWSsystem32wpdshserviceobj.dll [2007-06-18 133632]
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«DisableRegistryTools»=1
«DisableTaskMgr»=1
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
«dontdisplaylastusername»=0
«legalnoticecaption»=
«legalnoticetext»=
«shutdownwithoutlogon»=1
«undockwithoutlogon»=1
«EnableLUA»=0
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveTypeAutoRun»=36
«NoDriveAutoRun»=FFFFFFFF
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoFolderOptions»=
[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
«C:Program FilesMicrosoft OfficeOffice12OUTLOOK.EXE»=»C:Program FilesMicrosoft OfficeOffice12OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook»
«C:Program FilesBonjourmDNSResponder.exe»=»C:Program FilesBonjourmDNSResponder.exe:*:Enabled:Bonjour»
«D:SOFTinstall_flash_player.exe»=»D:SOFTinstall_flash_player.exe:*:Enabled:ipsec»
«C:WINDOWSExplorer.EXE»=»C:WINDOWSExplorer.exe:*:Enabled:ipsec»
«C:Program FilesCyberlinkShared Filesbrs.exe»=»C:Program FilesCyberlinkShared Filesbrs.exe:*:Enabled:ipsec»
«C:Program FilesQIPqip.exe»=»C:Program FilesQIPqip.exe:*:Enabled:ipsec»
«D:SOFTOtherTestcpu-zcpuz.exe»=»D:SOFTOtherTestcpu-zcpuz.exe:*:Enabled:ipsec»
«E:STUDYMTW6.0b.exe»=»E:STUDYMTW6.0b.exe:*:Enabled:ipsec»
«C:Program FilesCyberLinkPowerDVD8PDVD8Serv.exe»=»C:Program FilesCyberLinkPowerDVD8PDVD8Serv.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwinbmcri.exe»=»C:DOCUME~1andreasLOCALS~1Tempwinbmcri.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Templvhry.exe»=»C:DOCUME~1andreasLOCALS~1Templvhry.exe:*:Enabled:ipsec»
«C:Program FilesCyberLinkPowerDVD8LanguageLanguage.exe»=»C:Program FilesCyberLinkPowerDVD8LanguageLanguage.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempenuc.exe»=»C:DOCUME~1andreasLOCALS~1Tempenuc.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwinywje.exe»=»C:DOCUME~1andreasLOCALS~1Tempwinywje.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempsled.exe»=»C:DOCUME~1andreasLOCALS~1Tempsled.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwinmatp.exe»=»C:DOCUME~1andreasLOCALS~1Tempwinmatp.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempqexwsh.exe»=»C:DOCUME~1andreasLOCALS~1Tempqexwsh.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwinfxcd.exe»=»C:DOCUME~1andreasLOCALS~1Tempwinfxcd.exe:*:Enabled:ipsec»
«C:WINDOWSsystem32nwiz.exe»=»C:WINDOWSsystem32nwiz.exe:*:Enabled:ipsec»
«C:WINDOWSsystem32userinit.exe»=»C:WINDOWSsystem32userinit.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Temphuvx.exe»=»C:DOCUME~1andreasLOCALS~1Temphuvx.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwinepwoa.exe»=»C:DOCUME~1andreasLOCALS~1Tempwinepwoa.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwinsuwlo.exe»=»C:DOCUME~1andreasLOCALS~1Tempwinsuwlo.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwinlrrf.exe»=»C:DOCUME~1andreasLOCALS~1Tempwinlrrf.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwincoimgw.exe»=»C:DOCUME~1andreasLOCALS~1Tempwincoimgw.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempmmjadj.exe»=»C:DOCUME~1andreasLOCALS~1Tempmmjadj.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Temprrnam.exe»=»C:DOCUME~1andreasLOCALS~1Temprrnam.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempydekf.exe»=»C:DOCUME~1andreasLOCALS~1Tempydekf.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwintqrsb.exe»=»C:DOCUME~1andreasLOCALS~1Tempwintqrsb.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwinddjxd.exe»=»C:DOCUME~1andreasLOCALS~1Tempwinddjxd.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempctlk.exe»=»C:DOCUME~1andreasLOCALS~1Tempctlk.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempigqqn.exe»=»C:DOCUME~1andreasLOCALS~1Tempigqqn.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwinafolv.exe»=»C:DOCUME~1andreasLOCALS~1Tempwinafolv.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempvyus.exe»=»C:DOCUME~1andreasLOCALS~1Tempvyus.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwinlhscj.exe»=»C:DOCUME~1andreasLOCALS~1Tempwinlhscj.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwintdlpii.exe»=»C:DOCUME~1andreasLOCALS~1Tempwintdlpii.exe:*:Enabled:ipsec»
«C:Program FilesTotal CommanderTotalcmd.exe»=»C:Program FilesTotal CommanderTotalcmd.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwinkricsd.exe»=»C:DOCUME~1andreasLOCALS~1Tempwinkricsd.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwinoquoje.exe»=»C:DOCUME~1andreasLOCALS~1Tempwinoquoje.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempdnow.exe»=»C:DOCUME~1andreasLOCALS~1Tempdnow.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwinxfbbum.exe»=»C:DOCUME~1andreasLOCALS~1Tempwinxfbbum.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwinjxwgm.exe»=»C:DOCUME~1andreasLOCALS~1Tempwinjxwgm.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempbkoyb.exe»=»C:DOCUME~1andreasLOCALS~1Tempbkoyb.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwinfpsmvf.exe»=»C:DOCUME~1andreasLOCALS~1Tempwinfpsmvf.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwinwxfye.exe»=»C:DOCUME~1andreasLOCALS~1Tempwinwxfye.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempybym.exe»=»C:DOCUME~1andreasLOCALS~1Tempybym.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Templwovjd.exe»=»C:DOCUME~1andreasLOCALS~1Templwovjd.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempkrrfcx.exe»=»C:DOCUME~1andreasLOCALS~1Tempkrrfcx.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwinpdcq.exe»=»C:DOCUME~1andreasLOCALS~1Tempwinpdcq.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwiniqgww.exe»=»C:DOCUME~1andreasLOCALS~1Tempwiniqgww.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Temposfn.exe»=»C:DOCUME~1andreasLOCALS~1Temposfn.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Temphlfdh.exe»=»C:DOCUME~1andreasLOCALS~1Temphlfdh.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwinpmprr.exe»=»C:DOCUME~1andreasLOCALS~1Tempwinpmprr.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempjvqec.exe»=»C:DOCUME~1andreasLOCALS~1Tempjvqec.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempulhyd.exe»=»C:DOCUME~1andreasLOCALS~1Tempulhyd.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwinemfj.exe»=»C:DOCUME~1andreasLOCALS~1Tempwinemfj.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Temppjjdes.exe»=»C:DOCUME~1andreasLOCALS~1Temppjjdes.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempsqlfpx.exe»=»C:DOCUME~1andreasLOCALS~1Tempsqlfpx.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempplkp.exe»=»C:DOCUME~1andreasLOCALS~1Tempplkp.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwinghwyg.exe»=»C:DOCUME~1andreasLOCALS~1Tempwinghwyg.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwinuojiq.exe»=»C:DOCUME~1andreasLOCALS~1Tempwinuojiq.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwinajbbxn.exe»=»C:DOCUME~1andreasLOCALS~1Tempwinajbbxn.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Templutie.exe»=»C:DOCUME~1andreasLOCALS~1Templutie.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempochct.exe»=»C:DOCUME~1andreasLOCALS~1Tempochct.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwinbbsfi.exe»=»C:DOCUME~1andreasLOCALS~1Tempwinbbsfi.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwinqlraue.exe»=»C:DOCUME~1andreasLOCALS~1Tempwinqlraue.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempaypweg.exe»=»C:DOCUME~1andreasLOCALS~1Tempaypweg.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwinxqajhx.exe»=»C:DOCUME~1andreasLOCALS~1Tempwinxqajhx.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempjrrcb.exe»=»C:DOCUME~1andreasLOCALS~1Tempjrrcb.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempkcxopu.exe»=»C:DOCUME~1andreasLOCALS~1Tempkcxopu.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwinxfujsv.exe»=»C:DOCUME~1andreasLOCALS~1Tempwinxfujsv.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwinupfqxj.exe»=»C:DOCUME~1andreasLOCALS~1Tempwinupfqxj.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwinjodb.exe»=»C:DOCUME~1andreasLOCALS~1Tempwinjodb.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwinusmbo.exe»=»C:DOCUME~1andreasLOCALS~1Tempwinusmbo.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempgeyfp.exe»=»C:DOCUME~1andreasLOCALS~1Tempgeyfp.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwinhylu.exe»=»C:DOCUME~1andreasLOCALS~1Tempwinhylu.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwinsxbi.exe»=»C:DOCUME~1andreasLOCALS~1Tempwinsxbi.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwinordbu.exe»=»C:DOCUME~1andreasLOCALS~1Tempwinordbu.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempawuji.exe»=»C:DOCUME~1andreasLOCALS~1Tempawuji.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempqsxgc.exe»=»C:DOCUME~1andreasLOCALS~1Tempqsxgc.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwinrjjia.exe»=»C:DOCUME~1andreasLOCALS~1Tempwinrjjia.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwinhopqo.exe»=»C:DOCUME~1andreasLOCALS~1Tempwinhopqo.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwinbkemny.exe»=»C:DOCUME~1andreasLOCALS~1Tempwinbkemny.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempdnxe.exe»=»C:DOCUME~1andreasLOCALS~1Tempdnxe.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwindwix.exe»=»C:DOCUME~1andreasLOCALS~1Tempwindwix.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Temptljw.exe»=»C:DOCUME~1andreasLOCALS~1Temptljw.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempvkjr.exe»=»C:DOCUME~1andreasLOCALS~1Tempvkjr.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwintjjwdd.exe»=»C:DOCUME~1andreasLOCALS~1Tempwintjjwdd.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempnrsee.exe»=»C:DOCUME~1andreasLOCALS~1Tempnrsee.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwindtxkhb.exe»=»C:DOCUME~1andreasLOCALS~1Tempwindtxkhb.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempcshue.exe»=»C:DOCUME~1andreasLOCALS~1Tempcshue.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwinqkmfq.exe»=»C:DOCUME~1andreasLOCALS~1Tempwinqkmfq.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwinvniwe.exe»=»C:DOCUME~1andreasLOCALS~1Tempwinvniwe.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempmdvmrt.exe»=»C:DOCUME~1andreasLOCALS~1Tempmdvmrt.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempcgsn.exe»=»C:DOCUME~1andreasLOCALS~1Tempcgsn.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwinxwvy.exe»=»C:DOCUME~1andreasLOCALS~1Tempwinxwvy.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempwinxpmaq.exe»=»C:DOCUME~1andreasLOCALS~1Tempwinxpmaq.exe:*:Enabled:ipsec»
«C:DOCUME~1andreasLOCALS~1Tempnusep.exe»=»C:DOCUME~1andreasLOCALS~1Tempnusep.exe:*:Enabled:ipsec»
[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%Network Diagnosticxpnetdiag.exe»=»%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000»
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{00132af3-1ae6-11de-804f-b8128c220f2b}]
shellAUtoPlaycommand — G:hfaj.exe
shellAutoRuncommand — G:hfaj.exe
shellexPLorecommand — G:hfaj.exe
shelloPEncommand — G:hfaj.exe
[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{0436e334-0f43-11de-804d-93320568a409}]
shellaUtoplaycommand — G:uaud.pif
shellAutoRuncommand — G:uaud.pif
shellexplOREcommand — G:uaud.pif
shelloPENcommand — G:uaud.pif
[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{0436e35b-0f43-11de-804d-ccb04b4720df}]
shellAUtoplaYcommand — G:nvtfir.exe
shellAutoRuncommand — G:nvtfir.exe
shelleXPlorecommand — G:nvtfir.exe
shellopEncommand — G:nvtfir.exe
[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{359e6aba-5b80-11d9-807f-0090f551b9e1}]
shellAUtopLAYcommand — G:rbusq.pif
shellAutoRuncommand — G:rbusq.pif
shellexplORecommand — G:rbusq.pif
shelloPencommand — G:rbusq.pif
======List of files/folders created in the last 1 months======
2009-05-19 00:30:23 —-A—- C:WINDOWSUSBV102.ini
2009-05-19 00:30:22 —-D—- C:Program FilesT1
2009-04-17 19:29:54 —-D—- C:Program FilesVirtualDub
2009-04-09 22:43:18 —-A—- C:WINDOWSsystem32CapabilityTable.exe
2009-04-09 22:42:51 —-A—- C:WINDOWSsystem32nvusmb.exe
2009-04-09 22:42:28 —-A—- C:WINDOWSsystem32nvconrm.dll
2009-04-09 22:42:27 —-A—- C:WINDOWSsystem32fdco_l2052.dll
2009-04-09 22:42:27 —-A—- C:WINDOWSsystem32fdco_l1046.dll
2009-04-09 22:42:27 —-A—- C:WINDOWSsystem32fdco_l1042.dll
2009-04-09 22:42:26 —-A—- C:WINDOWSsystem32fdco1.dll
2009-04-09 22:42:26 —-A—- C:WINDOWSsystem32fdco_l1041.dll
2009-04-09 22:42:26 —-A—- C:WINDOWSsystem32fdco_l1040.dll
2009-04-09 22:42:26 —-A—- C:WINDOWSsystem32fdco_l1036.dll
2009-04-09 22:42:26 —-A—- C:WINDOWSsystem32fdco_l1034.dll
2009-04-09 22:42:26 —-A—- C:WINDOWSsystem32fdco_l1031.dll
2009-04-09 22:42:26 —-A—- C:WINDOWSsystem32fdco_l1028.dll
2009-04-09 22:42:26 —-A—- C:WINDOWSsystem32bdco1ins.dll
2009-04-09 22:42:26 —-A—- C:WINDOWSsystem32bdco1.dll
2009-04-09 22:41:57 —-A—- C:WINDOWSsystem32nvunrm.exe
2009-03-31 11:57:39 —-SHD—- C:RECYCLER
2009-03-26 01:06:49 —-D—- C:WINDOWSMinidump
2009-03-20 12:52:13 —-D—- C:Documents and SettingsAll UsersApplication DataFLEXnet
2009-03-14 16:45:28 —-D—- C:Program FilesBonjour
2009-03-14 16:35:49 —-D—- C:Program FilesCommon FilesMacrovision Shared
2009-03-13 00:20:12 —-D—- C:Documents and SettingsandreasApplication DataMedia Player Classic
2009-03-12 22:34:13 —-D—- C:Documents and SettingsandreasApplication DataCyberLink
2009-03-12 22:33:46 —-D—- C:Documents and SettingsAll UsersApplication DataCyberLink
2009-03-12 22:33:27 —-D—- C:Program FilesCommon FilesCyberLink
2009-03-12 22:32:50 —-D—- C:Program FilesCyberLink
2009-03-12 22:32:17 —-A—- C:WINDOWSsystem32msxml3a.dll
2009-03-11 22:01:32 —-D—- C:Program FilesQIP
2009-03-10 20:39:18 —-D—- C:Program FilesHide Folders XP 2
2009-03-10 14:12:39 —-D—- C:Documents and SettingsandreasApplication DataESMA
2009-03-10 14:12:12 —-D—- C:Documents and SettingsandreasApplication DataMacromedia
2009-03-10 14:11:13 —-D—- C:Program FilesESMA Ltd
2009-03-09 23:14:18 —-N—- C:WINDOWSsystem32vxblock.dll
2009-03-09 23:14:18 —-N—- C:WINDOWSsystem32pxwave.dll
2009-03-09 23:14:18 —-N—- C:WINDOWSsystem32pxsfs.dll
2009-03-09 23:14:18 —-N—- C:WINDOWSsystem32pxmas.dll
2009-03-09 23:14:18 —-N—- C:WINDOWSsystem32pxinsa64.exe
2009-03-09 23:14:18 —-N—- C:WINDOWSsystem32pxhpinst.exe
2009-03-09 23:14:18 —-N—- C:WINDOWSsystem32pxdrv.dll
2009-03-09 23:14:18 —-N—- C:WINDOWSsystem32pxcpya64.exe
2009-03-09 23:14:18 —-N—- C:WINDOWSsystem32pxafs.dll
2009-03-09 23:14:17 —-N—- C:WINDOWSsystem32px.dll
2009-03-09 23:14:13 —-D—- C:Program FilesWinamp
2009-03-09 23:14:13 —-D—- C:Documents and SettingsandreasApplication DataWinamp
2009-03-09 23:03:01 —-D—- C:Documents and SettingsandreasApplication DataMozilla
2009-03-09 23:02:00 —-A—- C:WINDOWSModemLog_Motorola USB Modem.txt
2009-03-08 23:19:40 —-A—- C:WINDOWSsystem32h323log.txt
2009-03-08 23:17:45 —-A—- C:WINDOWSsystem32usbui.dll
2009-03-08 23:16:26 —-A—- C:WINDOWSsystem32PerfStringBackup.INI
2009-03-08 23:16:25 —-SHD—- C:WINDOWSInstaller
2009-03-08 23:16:25 —-D—- C:Program FilesCommon FilesODBC
2009-03-08 23:16:25 —-A—- C:WINDOWSODBCINST.INI
2009-03-08 23:16:21 —-D—- C:Program FilesCommon FilesSpeechEngines
2009-03-08 23:16:21 —-D—- C:Program FilesCommon FilesMicrosoft Shared
2009-03-08 23:16:20 —-RD—- C:Program Files
2009-03-08 23:16:20 —-D—- C:Program FilesCommon Files
2009-03-08 23:16:17 —-RA—- C:WINDOWSsystem32kbdtuq.dll
2009-03-08 23:16:17 —-RA—- C:WINDOWSsystem32kbdtuf.dll
2009-03-08 23:16:17 —-RA—- C:WINDOWSsystem32kbdazel.dll
2009-03-08 23:16:15 —-RA—- C:WINDOWSsystem32kbdhept.dll
2009-03-08 23:16:15 —-RA—- C:WINDOWSsystem32kbdhela3.dll
2009-03-08 23:16:15 —-RA—- C:WINDOWSsystem32kbdhela2.dll
2009-03-08 23:16:15 —-RA—- C:WINDOWSsystem32kbdhe319.dll
2009-03-08 23:16:15 —-RA—- C:WINDOWSsystem32kbdhe220.dll
2009-03-08 23:16:15 —-RA—- C:WINDOWSsystem32kbdhe.dll
2009-03-08 23:16:15 —-RA—- C:WINDOWSsystem32kbdgkl.dll
2009-03-08 23:16:14 —-RA—- C:WINDOWSsystem32kbdlv1.dll
2009-03-08 23:16:14 —-RA—- C:WINDOWSsystem32kbdlv.dll
2009-03-08 23:16:14 —-RA—- C:WINDOWSsystem32kbdlt1.dll
2009-03-08 23:16:14 —-RA—- C:WINDOWSsystem32kbdlt.dll
2009-03-08 23:16:14 —-RA—- C:WINDOWSsystem32kbdest.dll
2009-03-08 23:16:12 —-RA—- C:WINDOWSsystem32kbdycl.dll
2009-03-08 23:16:12 —-RA—- C:WINDOWSsystem32kbdsl1.dll
2009-03-08 23:16:12 —-RA—- C:WINDOWSsystem32kbdsl.dll
2009-03-08 23:16:12 —-RA—- C:WINDOWSsystem32kbdro.dll
2009-03-08 23:16:12 —-RA—- C:WINDOWSsystem32kbdpl1.dll
2009-03-08 23:16:12 —-RA—- C:WINDOWSsystem32kbdpl.dll
2009-03-08 23:16:12 —-RA—- C:WINDOWSsystem32kbdhu1.dll
2009-03-08 23:16:12 —-RA—- C:WINDOWSsystem32kbdhu.dll
2009-03-08 23:16:12 —-RA—- C:WINDOWSsystem32kbdcz2.dll
2009-03-08 23:16:12 —-RA—- C:WINDOWSsystem32kbdcz1.dll
2009-03-08 23:16:12 —-RA—- C:WINDOWSsystem32kbdcz.dll
2009-03-08 23:16:12 —-RA—- C:WINDOWSsystem32kbdcr.dll
2009-03-08 23:16:12 —-RA—- C:WINDOWSsystem32KBDAL.DLL
2009-03-08 23:16:09 —-A—- C:WINDOWSsystem32kbduzb.dll
2009-03-08 23:16:09 —-A—- C:WINDOWSsystem32kbdtat.dll
2009-03-08 23:16:09 —-A—- C:WINDOWSsystem32kbdmon.dll
2009-03-08 23:16:09 —-A—- C:WINDOWSsystem32kbdkyr.dll
2009-03-08 23:16:09 —-A—- C:WINDOWSsystem32kbdaze.dll
2009-03-08 23:16:08 —-A—- C:WINDOWSsystem32kbdycc.dll
2009-03-08 23:16:08 —-A—- C:WINDOWSsystem32kbdur.dll
2009-03-08 23:16:08 —-A—- C:WINDOWSsystem32kbdkaz.dll
2009-03-08 23:16:08 —-A—- C:WINDOWSsystem32kbdbu.dll
2009-03-08 23:16:08 —-A—- C:WINDOWSsystem32kbdblr.dll
2009-03-08 23:16:07 —-A—- C:WINDOWSsystem32irclass.dll
2009-03-08 23:16:07 —-A—- C:WINDOWSsystem32dgsetup.dll
2009-03-08 23:16:07 —-A—- C:WINDOWSsystem32dgrpsetu.dll
2009-03-08 23:16:06 —-A—- C:WINDOWSsystem32spxcoins.dll
2009-03-08 23:16:06 —-A—- C:WINDOWSsystem32EqnClass.Dll
2009-03-08 23:16:04 —-N—- C:WINDOWSsystem32CONFIG.TMP
2009-03-08 23:16:04 —-A—- C:WINDOWSTASKMAN.EXE
2009-03-08 23:16:04 —-A—- C:WINDOWSsystem32batt.dll
2009-03-08 23:16:03 —-A—- C:WINDOWSsystem32storprop.dll
2009-03-08 23:16:03 —-A—- C:WINDOWSNOTEPAD.EXE
2009-03-08 23:15:53 —-ASH—- C:Documents and SettingsAll UsersApplication Datadesktop.ini
2009-03-08 23:15:48 —-RA—- C:WINDOWSSET8.tmp
2009-03-08 23:15:45 —-RA—- C:WINDOWSSET4.tmp
2009-03-08 23:15:43 —-RA—- C:WINDOWSSET3.tmp
2009-03-08 23:15:38 —-D—- C:WINDOWSsystem32CatRoot2
2009-03-08 23:15:38 —-D—- C:WINDOWSsystem32CatRoot
2009-03-08 23:15:32 —-SD—- C:Documents and SettingsAll UsersApplication DataMicrosoft
2009-03-08 23:15:08 —-A—- C:WINDOWSsetuplog.txt
2009-03-08 23:15:04 —-D—- C:Documents and Settings
2009-03-08 23:15:03 —-SHD—- C:System Volume Information
2009-03-08 23:13:45 —-SH—- C:boot.ini
2009-03-08 23:09:12 —-RSHDC—- C:WINDOWSsystem32dllcache
2009-03-08 23:09:12 —-RSD—- C:WINDOWSFonts
2009-03-08 23:09:12 —-RD—- C:WINDOWSWeb
2009-03-08 23:09:12 —-HD—- C:WINDOWSinf
2009-03-08 23:09:12 —-D—- C:WINDOWSWinSxS
2009-03-08 23:09:12 —-D—- C:WINDOWStwain_32
2009-03-08 23:09:12 —-D—- C:WINDOWSTemp
2009-03-08 23:09:12 —-D—- C:WINDOWSsystem32wins
2009-03-08 23:09:12 —-D—- C:WINDOWSsystem32wbem
2009-03-08 23:09:12 —-D—- C:WINDOWSsystem32usmt
2009-03-08 23:09:12 —-D—- C:WINDOWSsystem32spool
2009-03-08 23:09:12 —-D—- C:WINDOWSsystem32ShellExt
2009-03-08 23:09:12 —-D—- C:WINDOWSsystem32Setup
2009-03-08 23:09:12 —-D—- C:WINDOWSsystem32ru-ru
2009-03-08 23:09:12 —-D—- C:WINDOWSsystem32ru
2009-03-08 23:09:12 —-D—- C:WINDOWSsystem32ras
2009-03-08 23:09:12 —-D—- C:WINDOWSsystem32oobe
2009-03-08 23:09:12 —-D—- C:WINDOWSsystem32npp
2009-03-08 23:09:12 —-D—- C:WINDOWSsystem32mui
2009-03-08 23:09:12 —-D—- C:WINDOWSsystem32inetsrv
2009-03-08 23:09:12 —-D—- C:WINDOWSsystem32IME
2009-03-08 23:09:12 —-D—- C:WINDOWSsystem32icsxml
2009-03-08 23:09:12 —-D—- C:WINDOWSsystem32ias
2009-03-08 23:09:12 —-D—- C:WINDOWSsystem32export
2009-03-08 23:09:12 —-D—- C:WINDOWSsystem32drivers
2009-03-08 23:09:12 —-D—- C:WINDOWSsystem32dhcp
2009-03-08 23:09:12 —-D—- C:WINDOWSsystem32config
2009-03-08 23:09:12 —-D—- C:WINDOWSsystem323com_dmi
2009-03-08 23:09:12 —-D—- C:WINDOWSsystem323076
2009-03-08 23:09:12 —-D—- C:WINDOWSsystem322052
2009-03-08 23:09:12 —-D—- C:WINDOWSsystem321054
2009-03-08 23:09:12 —-D—- C:WINDOWSsystem321049
2009-03-08 23:09:12 —-D—- C:WINDOWSsystem321042
2009-03-08 23:09:12 —-D—- C:WINDOWSsystem321041
2009-03-08 23:09:12 —-D—- C:WINDOWSsystem321037
2009-03-08 23:09:12 —-D—- C:WINDOWSsystem321033
2009-03-08 23:09:12 —-D—- C:WINDOWSsystem321031
2009-03-08 23:09:12 —-D—- C:WINDOWSsystem321028
2009-03-08 23:09:12 —-D—- C:WINDOWSsystem321025
2009-03-08 23:09:12 —-D—- C:WINDOWSsystem32
2009-03-08 23:09:12 —-D—- C:WINDOWSsystem
2009-03-08 23:09:12 —-D—- C:WINDOWSsecurity
2009-03-08 23:09:12 —-D—- C:WINDOWSResources
2009-03-08 23:09:12 —-D—- C:WINDOWSrepair
2009-03-08 23:09:12 —-D—- C:WINDOWSProvisioning
2009-03-08 23:09:12 —-D—- C:WINDOWSPeerNet
2009-03-08 23:09:12 —-D—- C:WINDOWSpchealth
2009-03-08 23:09:12 —-D—- C:WINDOWSNetwork Diagnostic
2009-03-08 23:09:12 —-D—- C:WINDOWSmui
2009-03-08 23:09:12 —-D—- C:WINDOWSmsapps
2009-03-08 23:09:12 —-D—- C:WINDOWSmsagent
2009-03-08 23:09:12 —-D—- C:WINDOWSMedia
2009-03-08 23:09:12 —-D—- C:WINDOWSL2Schemas
2009-03-08 23:09:12 —-D—- C:WINDOWSjava
2009-03-08 23:09:12 —-D—- C:WINDOWSime
2009-03-08 23:09:12 —-D—- C:WINDOWSHelp
2009-03-08 23:09:12 —-D—- C:WINDOWSehome
2009-03-08 23:09:12 —-D—- C:WINDOWSDriver Cache
2009-03-08 23:09:12 —-D—- C:WINDOWSDebug
2009-03-08 23:09:12 —-D—- C:WINDOWSCursors
2009-03-08 23:09:12 —-D—- C:WINDOWSConnection Wizard
2009-03-08 23:09:12 —-D—- C:WINDOWSConfig
2009-03-08 23:09:12 —-D—- C:WINDOWSAppPatch
2009-03-08 23:09:12 —-D—- C:WINDOWSaddins
2009-03-08 23:09:12 —-D—- C:WINDOWS
2009-03-08 23:06:37 —-D—- C:Program FilesADSoft
2009-03-08 23:06:22 —-D—- C:Program FilesPenguin Puzzle
2009-03-08 23:06:05 —-D—- C:Program FilesCornerChaos
2009-03-08 22:28:11 —-D—- C:Program FilesLight Alloy
2009-03-08 22:26:53 —-A—- C:WINDOWSsystem32unrar.dll
2009-03-08 22:26:42 —-A—- C:WINDOWSsystem32yv12vfw.dll
2009-03-08 22:26:41 —-A—- C:WINDOWSsystem32xvidvfw.dll
2009-03-08 22:26:40 —-A—- C:WINDOWSsystem32qt-dx331.dll
2009-03-08 22:26:40 —-A—- C:WINDOWSsystem32dpl100.dll
2009-03-08 22:26:39 —-A—- C:WINDOWSsystem32ff_vfw.dll.manifest
2009-03-08 22:26:38 —-A—- C:WINDOWSsystem32ff_vfw.dll
2009-03-08 22:26:33 —-D—- C:Program FilesK-Lite Codec Pack
2009-03-08 22:23:31 —-D—- C:Program FilesMicrosoft Works
2009-03-08 22:23:08 —-D—- C:Program FilesMicrosoft Visual Studio
2009-03-08 22:23:07 —-D—- C:Program FilesCommon FilesDESIGNER
2009-03-08 22:20:07 —-D—- C:WINDOWSSHELLNEW
2009-03-08 22:19:30 —-D—- C:Program FilesMicrosoft Office
2009-03-08 22:19:28 —-D—- C:Documents and SettingsAll UsersApplication DataMicrosoft Help
2009-03-08 22:02:47 —-D—- C:Program FilesMozilla Firefox
2009-03-08 22:00:36 —-DC—- C:WINDOWSsystem32DRVSTORE
2009-03-08 22:00:29 —-D—- C:WINDOWStiinst
2009-03-08 21:57:23 —-D—- C:WINDOWSpss
2009-03-08 21:57:12 —-D—- C:Documents and SettingsandreasApplication DataSun
2009-03-08 21:56:50 —-D—- C:Documents and SettingsandreasApplication DataAdobe
2009-03-08 21:56:05 —-D—- C:WINDOWSsystem32Lang
2009-03-08 21:55:53 —-D—- C:Documents and SettingsAll UsersApplication DatanView_Profiles
2009-03-08 21:54:21 —-A—- C:WINDOWSsystem32ChCfg.exe
2009-03-08 21:53:57 —-D—- C:WINDOWSsystem32RTCOM
2009-03-08 21:53:55 —-A—- C:WINDOWSsystem32ksuser.dll
2009-03-08 21:53:48 —-A—- C:WINDOWSSoundMan.exe
2009-03-08 21:53:47 —-A—- C:WINDOWSSkyTel.exe
2009-03-08 21:53:47 —-A—- C:WINDOWSRtlUpd.exe
2009-03-08 21:53:46 —-A—- C:WINDOWSRTLCPL.exe
2009-03-08 21:53:42 —-A—- C:WINDOWSRTHDCPL.exe
2009-03-08 21:53:41 —-A—- C:WINDOWSMicCal.exe
2009-03-08 21:53:39 —-A—- C:WINDOWSalcwzrd.exe
2009-03-08 21:53:39 —-A—- C:WINDOWSAlcmtr.exe
2009-03-08 21:53:38 —-HD—- C:Program FilesInstallShield Installation Information
2009-03-08 21:53:38 —-D—- C:Program FilesRealtek
2009-03-08 21:53:20 —-A—- C:WINDOWSRtlExUpd.dll
2009-03-08 21:53:20 —-A—- C:WINDOWSHideWin.exe
2009-03-08 21:50:59 —-D—- C:WINDOWSnview
2009-03-08 21:50:59 —-A—- C:WINDOWSsystem32nvudisp.exe
2009-03-08 21:50:51 —-A—- C:WINDOWSsystem32NVUNINST.EXE
2009-03-08 21:50:43 —-D—- C:Program FilesCommon FilesInstallShield
2009-03-08 21:38:49 —-D—- C:Documents and SettingsandreasApplication DataWinRAR
2009-03-08 21:38:36 —-D—- C:Program FilesKaspersky Lab
2009-03-08 21:38:36 —-D—- C:Documents and SettingsAll UsersApplication DataKaspersky Lab
2009-03-08 21:37:54 —-D—- C:Documents and SettingsAll UsersApplication DataKaspersky Lab Setup Files
2009-03-08 21:35:47 —-D—- C:Program FilesTotal Commander
2009-03-08 21:34:29 —-A—- C:WINDOWSsystem32wmpns.dll
2009-03-08 21:34:27 —-D—- C:Documents and SettingsandreasApplication DataIdentities
2009-03-08 21:34:24 —-HD—- C:Program FilesUninstall Information
2009-03-08 21:34:18 —-SD—- C:Documents and SettingsandreasApplication DataMicrosoft
2009-03-08 21:34:18 —-ASH—- C:Documents and SettingsandreasApplication Datadesktop.ini
2009-03-08 21:33:41 —-D—- C:WINDOWSPrefetch
2009-03-08 21:33:41 —-A—- C:WINDOWSSchedLgU.Txt
2009-03-08 21:29:28 —-D—- C:WINDOWSsystem32xircom
2009-03-08 21:29:28 —-D—- C:Program Filesxerox
2009-03-08 21:29:28 —-D—- C:Program Filesmicrosoft frontpage
2009-03-08 21:29:13 —-SD—- C:WINDOWSsystem32Microsoft
2009-03-08 21:29:13 —-A—- C:WINDOWSsystem32javaws.exe
2009-03-08 21:29:13 —-A—- C:WINDOWSsystem32javaw.exe
2009-03-08 21:29:13 —-A—- C:WINDOWSsystem32java.exe
2009-03-08 21:28:49 —-D—- C:Program FilesJava
2009-03-08 21:28:48 —-D—- C:Program FilesCommon FilesJava
2009-03-08 21:28:31 —-D—- C:Program FilesMSXML 4.0
2009-03-08 21:28:25 —-A—- C:WINDOWSsystem32rebuild.exe
2009-03-08 21:28:20 —-D—- C:WINDOWSassembly
2009-03-08 21:28:15 —-D—- C:WINDOWSMicrosoft.NET
2009-03-08 21:27:59 —-A—- C:WINDOWSsystem32wrap_oal.dll
2009-03-08 21:27:59 —-A—- C:WINDOWSsystem32W95INF32.DLL
2009-03-08 21:27:59 —-A—- C:WINDOWSsystem32W95INF16.DLL
2009-03-08 21:27:59 —-A—- C:WINDOWSsystem32vcompd.dll
2009-03-08 21:27:59 —-A—- C:WINDOWSsystem32Vbrun300.dll
2009-03-08 21:27:59 —-A—- C:WINDOWSsystem32vbrun200.dll
2009-03-08 21:27:59 —-A—- C:WINDOWSsystem32vbrun100.dll
2009-03-08 21:27:59 —-A—- C:WINDOWSsystem32Vb40032.dll
2009-03-08 21:27:59 —-A—- C:WINDOWSsystem32Vb40016.dll
2009-03-08 21:27:59 —-A—- C:WINDOWSsystem32ssleay32.dll
2009-03-08 21:27:59 —-A—- C:WINDOWSsystem32OpenAL32.dll
2009-03-08 21:27:59 —-A—- C:WINDOWSsystem32msvcrtd.dll
2009-03-08 21:27:59 —-A—- C:WINDOWSsystem32msvcr80d.dll
2009-03-08 21:27:59 —-A—- C:WINDOWSsystem32msvcr71d.dll
2009-03-08 21:27:59 —-A—- C:WINDOWSsystem32MSVCR70d.dll
2009-03-08 21:27:59 —-A—- C:WINDOWSsystem32msvcr70.dll
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32msvcp80d.dll
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32msvcp71d.dll
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32MSVCP70.DLL
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32MSVCP60D.DLL
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32msvcm80d.dll
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32MSVCIRTD.DLL
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32msvci70.dll
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32MSSTKPRP.DLL
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32msstdfmt.dll
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32MMVCR70.dll
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32MMVCP70.dll
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32mfcm80ud.dll
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32mfcm80d.dll
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32mfc80ud.dll
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32mfc80d.dll
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32mfc71ud.dll
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32MFC71u.dll
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32MFC71KOR.DLL
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32MFC71JPN.DLL
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32MFC71ITA.DLL
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32MFC71FRA.DLL
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32MFC71ESP.DLL
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32MFC71ENU.DLL
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32MFC71DEU.DLL
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32mfc71d.dll
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32MFC71CHT.DLL
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32MFC71CHS.DLL
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32MFC71.dll
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32mfc70ud.dll
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32mfc70u.dll
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32mfc70kor.dll
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32mfc70jpn.dll
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32mfc70ita.dll
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32mfc70fra.dll
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32mfc70esp.dll
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32mfc70enu.dll
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32mfc70deu.dll
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32mfc70d.dll
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32mfc70cht.dll
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32mfc70chs.dll
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32mfc70.dll
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32mfc42d.dll
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32libeay32.dll
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32AutoItX3.dll
2009-03-08 21:27:58 —-A—- C:WINDOWSsystem32atl70.dll
2009-03-08 21:27:36 —-D—- C:temp
2009-03-08 21:27:36 —-A—- C:WINDOWSsystem32WNASPI32.DLL
2009-03-08 21:27:36 —-A—- C:WINDOWSsystem32ASPICHK.EXE
2009-03-08 21:27:29 —-D—- C:Program FilesCommon FilesAdobe
2009-03-08 21:27:27 —-D—- C:Program FilesAdobe
2009-03-08 21:27:27 —-D—- C:Documents and SettingsAll UsersApplication DataAdobe
2009-03-08 21:26:57 —-A—- C:WINDOWScontrol.ini
2009-03-08 21:26:57 —-A—- C:AUTOEXEC.BAT
2009-03-08 21:26:44 —-A—- C:WINDOWSOEWABLog.txt
2009-03-08 21:26:38 —-A—- C:WINDOWSsystem32mapi32.dll
2009-03-08 21:25:26 —-RAH—- C:WINDOWSsystem32logonui.exe.manifest
2009-03-08 21:25:21 —-RAH—- C:WINDOWSsystem32cdplayer.exe.manifest
2009-03-08 21:25:13 —-HD—- C:Program FilesWindowsUpdate
2009-03-08 21:25:08 —-D—- C:Program FilesOnline Services
2009-03-08 21:24:50 —-D—- C:WINDOWSsystem32DirectX
2009-03-08 21:24:43 —-A—- C:WINDOWSsystem32atrace.dll
2009-03-08 21:24:40 —-A—- C:WINDOWSsystem32desktop.ini
2009-03-08 21:24:40 —-A—- C:WINDOWSdesktop.ini
2009-03-08 21:24:34 —-A—- C:WINDOWSsystem32nmevtmsg.dll
2009-03-08 21:24:33 —-A—- C:WINDOWSsystem32acctres.dll
2009-03-08 21:24:32 —-D—- C:Program FilesCommon FilesServices
2009-03-08 21:24:30 —-SD—- C:WINDOWSTasks
2009-03-08 21:24:30 —-A—- C:WINDOWSsystem32icfgnt5.dll
2009-03-08 21:24:29 —-D—- C:Program FilesCommon FilesMSSoap
2009-03-08 21:24:25 —-D—- C:WINDOWSsrchasst
2009-03-08 21:24:24 —-D—- C:WINDOWSsystem32Macromed
2009-03-08 21:24:21 —-A—- C:WINDOWSsystem32wuweb.dll
2009-03-08 21:24:21 —-A—- C:WINDOWSsystem32wucltui.dll
2009-03-08 21:24:21 —-A—- C:WINDOWSsystem32wuauserv.dll
2009-03-08 21:24:21 —-A—- C:WINDOWSsystem32wuaueng1.dll
2009-03-08 21:24:21 —-A—- C:WINDOWSsystem32wuaueng.dll
2009-03-08 21:24:20 —-A—- C:WINDOWSsystem32wups.dll
2009-03-08 21:24:20 —-A—- C:WINDOWSsystem32wuauclt1.exe
2009-03-08 21:24:20 —-A—- C:WINDOWSsystem32wuauclt.exe
2009-03-08 21:24:20 —-A—- C:WINDOWSsystem32wuapi.dll
2009-03-08 21:24:20 —-A—- C:WINDOWSsystem32qmgrprxy.dll
2009-03-08 21:24:20 —-A—- C:WINDOWSsystem32qmgr.dll
2009-03-08 21:24:20 —-A—- C:WINDOWSsystem32bitsprx4.dll
2009-03-08 21:24:20 —-A—- C:WINDOWSsystem32bitsprx3.dll
2009-03-08 21:24:20 —-A—- C:WINDOWSsystem32bitsprx2.dll
2009-03-08 21:24:16 —-D—- C:Program FilesMovie Maker
2009-03-08 21:23:58 —-A—- C:WINDOWSsystem32safrslv.dll
2009-03-08 21:23:58 —-A—- C:WINDOWSsystem32safrdm.dll
2009-03-08 21:23:58 —-A—- C:WINDOWSsystem32safrcdlg.dll
2009-03-08 21:23:58 —-A—- C:WINDOWSsystem32racpldlg.dll
2009-03-08 21:23:54 —-A—- C:WINDOWSsystem32fltMc.exe
2009-03-08 21:23:54 —-A—- C:WINDOWSsystem32fltlib.dll
2009-03-08 21:23:53 —-D—- C:WINDOWSsystem32Restore
2009-03-08 21:23:53 —-A—- C:WINDOWSsystem32srsvc.dll
2009-03-08 21:23:53 —-A—- C:WINDOWSsystem32srrstr.dll
2009-03-08 21:23:53 —-A—- C:WINDOWSsystem32srclient.dll
2009-03-08 21:23:52 —-A—- C:WINDOWSsystem32nmmkcert.dll
2009-03-08 21:23:52 —-A—- C:WINDOWSsystem32msconf.dll
2009-03-08 21:23:52 —-A—- C:WINDOWSsystem32mnmsrvc.exe
2009-03-08 21:23:52 —-A—- C:WINDOWSsystem32mnmdd.dll
2009-03-08 21:23:52 —-A—- C:WINDOWSsystem32isrdbg32.dll
2009-03-08 21:23:52 —-A—- C:WINDOWSsystem32ils.dll
2009-03-08 21:23:49 —-D—- C:Program FilesNetMeeting
2009-03-08 21:23:49 —-A—- C:WINDOWSsystem32msoert2.dll
2009-03-08 21:23:49 —-A—- C:WINDOWSsystem32msoeacct.dll
2009-03-08 21:23:48 —-A—- C:WINDOWSsystem32inetres.dll
2009-03-08 21:23:47 —-A—- C:WINDOWSsystem32inetcomm.dll
2009-03-08 21:23:46 —-D—- C:Program FilesOutlook Express
2009-03-08 21:23:46 —-A—- C:WINDOWSsystem32schedsvc.dll
2009-03-08 21:23:45 —-A—- C:WINDOWSsystem32mstinit.exe
2009-03-08 21:23:45 —-A—- C:WINDOWSsystem32mstask.dll
2009-03-08 21:23:45 —-A—- C:WINDOWSsystem32isign32.dll
2009-03-08 21:23:45 —-A—- C:WINDOWSsystem32inetcfg.dll
2009-03-08 21:23:45 —-A—- C:WINDOWSsystem32icwphbk.dll
2009-03-08 21:23:45 —-A—- C:WINDOWSsystem32icwdial.dll
2009-03-08 21:23:39 —-D—- C:Program FilesCommon FilesSystem
2009-03-08 21:22:47 —-D—- C:Program FilesComPlus Applications
2009-03-08 21:22:44 —-A—- C:WINDOWSvbaddin.ini
2009-03-08 21:22:44 —-A—- C:WINDOWSvb.ini
2009-03-08 21:22:37 —-D—- C:WINDOWSRegistration
2009-03-08 21:22:11 —-D—- C:Program FilesWindows Media Player
2009-03-08 21:22:10 —-D—- C:Program FilesWindows Media Connect 2
2009-03-08 21:22:00 —-D—- C:Program FilesWinRAR
2009-03-08 21:21:58 —-D—- C:WINDOWSsystem32PreInstall
2009-03-08 21:21:57 —-D—- C:WINDOWSSoftwareDistribution
2009-03-08 21:21:57 —-A—- C:WINDOWSsystem32muweb.dll
2009-03-08 21:21:53 —-SD—- C:WINDOWSDownloaded Program Files
2009-03-08 21:21:53 —-RD—- C:WINDOWSOffline Web Pages
2009-03-08 21:21:53 —-A—- C:WINDOWSsystem32winfxdocobj.exe
2009-03-08 21:21:52 —-A—- C:WINDOWSsystem32msfeedssync.exe
2009-03-08 21:21:51 —-D—- C:WINDOWSwbem
2009-03-08 21:21:51 —-A—- C:WINDOWSsystem32msfeedsbs.dll
2009-03-08 21:21:49 —-A—- C:WINDOWSsystem32ieframe.dll.mui
2009-03-08 21:21:48 —-D—- C:Program FilesInternet Explorer
2009-03-08 21:21:48 —-A—- C:WINDOWSsystem32advpack.dll.mui
2009-03-08 21:21:46 —-A—- C:WINDOWSsystem32wul_lng.ini
2009-03-08 21:21:46 —-A—- C:WINDOWSsystem32gpprefcl.dll
2009-03-08 21:21:45 —-D—- C:WINDOWSsystem32cplicons
2009-03-08 21:21:45 —-A—- C:WINDOWSsystem32wul.exe
2009-03-08 21:21:45 —-A—- C:WINDOWSsystem32TweakUI.exe
2009-03-08 21:21:45 —-A—- C:WINDOWSsystem32pserv2.exe
2009-03-08 21:21:45 —-A—- C:WINDOWSsystem32MS_Auto.exe
2009-03-08 21:21:45 —-A—- C:WINDOWSsystem32Hoster.exe
2009-03-08 21:21:45 —-A—- C:WINDOWSsystem32BootSafe.exe
2009-03-08 21:21:43 —-A—- C:WINDOWSsystem32divx.dll
2009-03-08 21:21:42 —-A—- C:WINDOWSsystem32xvidcore.dll
2009-03-08 21:21:42 —-A—- C:WINDOWSsystem32vsfilter.dll
2009-03-08 21:21:38 —-D—- C:Program FilesMessenger
2009-03-08 21:21:38 —-A—- C:WINDOWSsystem32write.exe
2009-03-08 21:21:29 —-A—- C:WINDOWSsystem32sndvol32.exe
2009-03-08 21:21:29 —-A—- C:WINDOWSsystem32hticons.dll
2009-03-08 21:21:29 —-A—- C:WINDOWSsystem32avwav.dll
2009-03-08 21:21:29 —-A—- C:WINDOWSsystem32avtapi.dll
2009-03-08 21:21:29 —-A—- C:WINDOWSsystem32avmeter.dll
2009-03-08 21:21:28 —-A—- C:WINDOWSsystem32winchat.exe
2009-03-08 21:21:22 —-A—- C:WINDOWSsystem32getuname.dll
2009-03-08 21:21:22 —-A—- C:WINDOWSsystem32charmap.exe
2009-03-08 21:21:21 —-A—- C:WINDOWSsystem32winmine.exe
2009-03-08 21:21:21 —-A—- C:WINDOWSsystem32sol.exe
2009-03-08 21:21:21 —-A—- C:WINDOWSsystem32mshearts.exe
2009-03-08 21:21:21 —-A—- C:WINDOWSsystem32calc.exe
2009-03-08 21:21:20 —-A—- C:WINDOWSsystem32usrlogon.cmd
2009-03-08 21:21:20 —-A—- C:WINDOWSsystem32tsshutdn.exe
2009-03-08 21:21:20 —-A—- C:WINDOWSsystem32tslabels.ini
2009-03-08 21:21:20 —-A—- C:WINDOWSsystem32tskill.exe
2009-03-08 21:21:20 —-A—- C:WINDOWSsystem32tsdiscon.exe
2009-03-08 21:21:20 —-A—- C:WINDOWSsystem32tscon.exe
2009-03-08 21:21:20 —-A—- C:WINDOWSsystem32shadow.exe
2009-03-08 21:21:20 —-A—- C:WINDOWSsystem32rwinsta.exe
2009-03-08 21:21:20 —-A—- C:WINDOWSsystem32reset.exe
2009-03-08 21:21:20 —-A—- C:WINDOWSsystem32regini.exe
2009-03-08 21:21:20 —-A—- C:WINDOWSsystem32freecell.exe
2009-03-08 21:21:19 —-A—- C:WINDOWSsystem32rdpcfgex.dll
2009-03-08 21:21:19 —-A—- C:WINDOWSsystem32qwinsta.exe
2009-03-08 21:21:19 —-A—- C:WINDOWSsystem32qappsrv.exe
2009-03-08 21:21:19 —-A—- C:WINDOWSsystem32msg.exe
2009-03-08 21:21:19 —-A—- C:WINDOWSsystem32msdtcprf.ini
2009-03-08 21:21:19 —-A—- C:WINDOWSsystem32logoff.exe
2009-03-08 21:21:19 —-A—- C:WINDOWSsystem32cdmodem.dll
2009-03-08 21:21:13 —-A—- C:WINDOWSsystem32wmimgmt.msc
2009-03-08 21:21:12 —-A—- C:WINDOWSsystem32sndrec32.exe
2009-03-08 21:21:12 —-A—- C:WINDOWSsystem32mplay32.exe
2009-03-08 21:21:12 —-A—- C:WINDOWSsystem32hypertrm.dll
2009-03-08 21:21:12 —-A—- C:WINDOWSsystem32accwiz.exe
2009-03-08 21:21:11 —-D—- C:Program FilesWindows NT
2009-03-08 21:21:11 —-A—- C:WINDOWSsystem32spider.exe
2009-03-08 21:21:11 —-A—- C:WINDOWSsystem32mspaint.exe
2009-03-08 21:21:11 —-A—- C:WINDOWSsystem32clipbrd.exe
2009-03-08 21:21:10 —-A—- C:WINDOWSsystem32tsgqec.dll
2009-03-08 21:21:10 —-A—- C:WINDOWSsystem32tscfgwmi.dll
2009-03-08 21:21:09 —-A—- C:WINDOWSsystem32rhttpaa.dll
2009-03-08 21:21:09 —-A—- C:WINDOWSsystem32mstscax.dll
2009-03-08 21:21:09 —-A—- C:WINDOWSsystem32mstsc.exe
2009-03-08 21:21:09 —-A—- C:WINDOWSsystem32aaclient.dll
2009-03-08 21:21:08 —-A—- C:WINDOWSsystem32termsrv.dll
2009-03-08 21:21:08 —-A—- C:WINDOWSsystem32sessmgr.exe
2009-03-08 21:21:08 —-A—- C:WINDOWSsystem32remotepg.dll
2009-03-08 21:21:08 —-A—- C:WINDOWSsystem32rdshost.exe
2009-03-08 21:21:08 —-A—- C:WINDOWSsystem32rdsaddin.exe
2009-03-08 21:21:08 —-A—- C:WINDOWSsystem32rdpwsx.dll
2009-03-08 21:21:08 —-A—- C:WINDOWSsystem32rdpsnd.dll
2009-03-08 21:21:08 —-A—- C:WINDOWSsystem32rdchost.dll
2009-03-08 21:21:07 —-D—- C:WINDOWSsystem32MsDtc
2009-03-08 21:21:07 —-A—- C:WINDOWSsystem32rdpclip.exe
2009-03-08 21:21:07 —-A—- C:WINDOWSsystem32qprocess.exe
2009-03-08 21:21:07 —-A—- C:WINDOWSsystem32mtxoci.dll
2009-03-08 21:21:07 —-A—- C:WINDOWSsystem32msdtcuiu.dll
2009-03-08 21:21:07 —-A—- C:WINDOWSsystem32icaapi.dll
2009-03-08 21:21:07 —-A—- C:WINDOWSsystem32cfgbkend.dll
2009-03-08 21:21:06 —-A—- C:WINDOWSsystem32xolehlp.dll
2009-03-08 21:21:06 —-A—- C:WINDOWSsystem32msdtctm.dll
2009-03-08 21:21:06 —-A—- C:WINDOWSsystem32msdtcprx.dll
2009-03-08 21:21:06 —-A—- C:WINDOWSsystem32msdtclog.dll
2009-03-08 21:21:06 —-A—- C:WINDOWSsystem32msdtc.exe
2009-03-08 21:21:05 —-D—- C:WINDOWSsystem32Com
2009-03-08 21:21:05 —-A—- C:WINDOWSsystem32stclient.dll
2009-03-08 21:21:05 —-A—- C:WINDOWSsystem32mtxlegih.dll
2009-03-08 21:21:05 —-A—- C:WINDOWSsystem32mtxex.dll
2009-03-08 21:21:05 —-A—- C:WINDOWSsystem32mtxdm.dll
2009-03-08 21:21:05 —-A—- C:WINDOWSsystem32dcomcnfg.exe
2009-03-08 21:21:05 —-A—- C:WINDOWSsystem32comrepl.dll
2009-03-08 21:21:05 —-A—- C:WINDOWSsystem32comaddin.dll
2009-03-08 21:21:05 —-A—- C:WINDOWSsystem32colbact.dll
2009-03-08 21:21:04 —-A—- C:WINDOWSsystem32comsvcs.dll
2009-03-08 21:21:04 —-A—- C:WINDOWSsystem32clbcatex.dll
2009-03-08 21:21:04 —-A—- C:WINDOWSsystem32catsrvut.dll
2009-03-08 21:21:04 —-A—- C:WINDOWSsystem32catsrvps.dll
2009-03-08 21:21:04 —-A—- C:WINDOWSsystem32catsrv.dll
2009-03-08 21:21:03 —-A—- C:WINDOWSsystem32comuid.dll
2009-03-08 21:21:03 —-A—- C:WINDOWSsystem32comsnap.dll
2009-03-08 21:21:03 —-A—- C:WINDOWSsystem32clbcatq.dll
2009-03-08 21:20:57 —-A—- C:WINDOWSsystem32servdeps.dll
2009-03-08 21:20:57 —-A—- C:WINDOWSsystem32mmfutil.dll
2009-03-08 21:20:57 —-A—- C:WINDOWSsystem32licwmi.dll
2009-03-08 21:20:57 —-A—- C:WINDOWSsystem32cmprops.dll
2008-07-04 14:47:06 —-A—- C:WINDOWSsystem32ntkrnlpa.exe
2008-07-04 14:47:04 —-A—- C:WINDOWSsystem32wzcsvc.dll
2008-07-04 14:47:04 —-A—- C:WINDOWSsystem32wzcsapi.dll
2008-07-04 14:47:04 —-A—- C:WINDOWSsystem32pjlmon.dll
2008-07-04 14:47:04 —-A—- C:WINDOWSsystem32pid.dll
2008-07-04 14:47:04 —-A—- C:WINDOWSsystem32msyuv.dll
2008-07-04 14:47:04 —-A—- C:WINDOWSsystem32iyuv_32.dll
2008-07-04 14:47:04 —-A—- C:WINDOWSsystem32hid.dll
2008-07-04 14:47:04 —-A—- C:WINDOWSsystem32dmutil.dll
