PC-HELP.CZ

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:01:38 AM, on 5/1/2012
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Safe mode with network support

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\userinit.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://vn.yahoo.com/?fr=mkg029
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://vn.yahoo.com/?fr=mkg029
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: BrowserPlugin - {1C749E08-6B62-11E0-B6DA-075F4824019B} - C:\Documents and Settings\Admin\Local Settings\Application Data\GamePlayLabs Plugin\BHO.dll
O2 - BHO: PK IE Plugin - {1E1B2879-88FF-11D3-8D96-D7ACAC95951A} - C:\WINDOWS\system32\system.inewb.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: Alexa Toolbar - {EA582743-9076-4178-9AA6-7393FDF4D5CE} - C:\Program Files\Alexa Toolbar\AlexaToolbar.10.0.dll
O4 - HKLM\..\Run: [YSearchProtection] "C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [system.ine] C:\WINDOWS\system32\system.ine.exe
O4 - HKLM\..\Policies\Explorer\Run: [SysAnti] C:\Program Files\Common Files\SysAnti.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm (file missing)
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{D7E9CCB9-4B0E-4C5B-991C-A92A66ADF4F5}: NameServer = 8.8.8.8,8.8.4.4
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe

--
End of file - 2894 bytes

Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org

Verze databáze: v2012.04.30.08

Windows XP Service Pack 2 x86 FAT32 (Safe Mode s podporou sítě)
Internet Explorer 6.0.2900.2180
Administrator :: MOBI-83083F0738 [administrátor]

5/1/2012 9:11:41 AM
mbam-log-2012-05-01 (09-17-15).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 213239
Uplynulý čas: 37 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 17
HKLM\SYSTEM\CurrentControlSet\Services\hmtcfn (Worm.Conficker) -> Žádná instrukce nebyla provedena.
HKLM\SYSTEM\CurrentControlSet\Services\gnj (Rootkit.Agent) -> Žádná instrukce nebyla provedena.
HKCR\CLSID\{1C749E08-6B62-11E0-B6DA-075F4824019B} (Spyware.GamePlayLabs) -> Žádná instrukce nebyla provedena.
HKCR\TypeLib\{199C34A4-5436-403F-A250-219E16672570} (Spyware.GamePlayLabs) -> Žádná instrukce nebyla provedena.
HKCR\Interface\{8E7AD93B-3E87-423D-947F-A321FA7E31C4} (Spyware.GamePlayLabs) -> Žádná instrukce nebyla provedena.
HKCR\BHO.BrowserPlugin.1 (Spyware.GamePlayLabs) -> Žádná instrukce nebyla provedena.
HKCR\BHO.BrowserPlugin (Spyware.GamePlayLabs) -> Žádná instrukce nebyla provedena.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1C749E08-6B62-11E0-B6DA-075F4824019B} (Spyware.GamePlayLabs) -> Žádná instrukce nebyla provedena.
HKCR\CLSID\{1E1B2879-88FF-11D3-8D96-D7ACAC95951A} (Monitor.PerfKeylogger) -> Žádná instrukce nebyla provedena.
HKCR\TypeLib\{1E1B286C-88FF-11D3-8D96-D7ACAC95951A} (Monitor.PerfKeylogger) -> Žádná instrukce nebyla provedena.
HKCR\Interface\{1E1B2878-88FF-11D3-8D96-D7ACAC95951A} (Monitor.PerfKeylogger) -> Žádná instrukce nebyla provedena.
HKCR\PK.IE.1 (Monitor.PerfKeylogger) -> Žádná instrukce nebyla provedena.
HKCR\PK.IE (Monitor.PerfKeylogger) -> Žádná instrukce nebyla provedena.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1E1B2879-88FF-11D3-8D96-D7ACAC95951A} (Monitor.PerfKeylogger) -> Žádná instrukce nebyla provedena.
HKCR\PK.IE (PUP.PerfectKeylogger) -> Žádná instrukce nebyla provedena.
HKCR\PK.IE.1 (PUP.PerfectKeylogger) -> Žádná instrukce nebyla provedena.
HKLM\System\CurrentControlSet\Services\DrvKiller (Spyware.OnlineGames) -> Žádná instrukce nebyla provedena.

Nalezené hodnoty v registru: 2
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|system.ine (Monitor.Perflogger) -> Data: C:\WINDOWS\system32\system.ine.exe -> Žádná instrukce nebyla provedena.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run|SysAnti (Trojan.Downloader) -> Data: C:\Program Files\Common Files\SysAnti.exe -> Žádná instrukce nebyla provedena.

Nalezené datové položky v registru: 4
HKLM\SOFTWARE\Microsoft\Security Center|AntiVirusDisableNotify (PUM.Disabled.SecurityCenter) -> Špatný: (1) Dobrý: (0) -> Žádná instrukce nebyla provedena.
HKLM\SOFTWARE\Microsoft\Security Center|FirewallDisableNotify (PUM.Disabled.SecurityCenter) -> Špatný: (1) Dobrý: (0) -> Žádná instrukce nebyla provedena.
HKLM\SOFTWARE\Microsoft\Security Center|UpdatesDisableNotify (PUM.Disabled.SecurityCenter) -> Špatný: (1) Dobrý: (0) -> Žádná instrukce nebyla provedena.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL|CheckedValue (PUM.Hijack.System.Hidden) -> Špatný: (0) Dobrý: (1) -> Žádná instrukce nebyla provedena.

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 231
C:\WINDOWS\system32\system.ine.exe (Monitor.Perflogger) -> Žádná instrukce nebyla provedena.
C:\Program Files\Common Files\SysAnti.exe (Trojan.Downloader) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\system32\05.tmp (Worm.Conficker) -> Žádná instrukce nebyla provedena.
C:\Documents and Settings\Admin\Local Settings\Temp~gnj.tmp (Rootkit.Agent) -> Žádná instrukce nebyla provedena.
C:\Documents and Settings\Admin\Local Settings\Application Data\GamePlayLabs Plugin\BHO.dll (Spyware.GamePlayLabs) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\system32\system.inewb.dll (Monitor.PerfKeylogger) -> Žádná instrukce nebyla provedena.
C:\Documents and Settings\Admin\My Documents\Downloads\ZoolaGamesSetup.exe (PUP.BundleInstaller.IB) -> Žádná instrukce nebyla provedena.
C:\SysAnti.exe (Trojan.Downloader) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\system32\system.inehk.dll (Keylogger.PerfectKeylogger) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\system32\system.iner.exe (Monitor.Perflogger) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\system32\rinst.exe (Monitor.Perflogger) -> Žádná instrukce nebyla provedena.
C:\Documents and Settings\Admin\Local Settings\Temp\RarSFX2\123..exe (Trojan.Downloader) -> Žádná instrukce nebyla provedena.
C:\Documents and Settings\Admin\Local Settings\Temp\RarSFX2\rinst.exe (Monitor.Perflogger) -> Žádná instrukce nebyla provedena.
C:\Documents and Settings\Admin\Local Settings\Temp\RarSFX1\123..exe (Trojan.Downloader) -> Žádná instrukce nebyla provedena.
C:\Documents and Settings\Admin\Local Settings\Temp\RarSFX1\rinst.exe (Monitor.Perflogger) -> Žádná instrukce nebyla provedena.
C:\Documents and Settings\Admin\Local Settings\Temp\RarSFX0\123..exe (Trojan.Downloader) -> Žádná instrukce nebyla provedena.
C:\Documents and Settings\Admin\Local Settings\Temp\RarSFX0\rinst.exe (Monitor.Perflogger) -> Žádná instrukce nebyla provedena.
C:\Documents and Settings\Admin\Local Settings\Temp\RarSFX3\123..exe (Trojan.Downloader) -> Žádná instrukce nebyla provedena.
C:\Documents and Settings\Admin\Local Settings\Temp\RarSFX3\rinst.exe (Monitor.Perflogger) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\gkwcw.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\ousiw.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\gnjgq.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\xrnil.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\owpjg.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\txqad.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\gvgoa.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\bsgng.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\kkews.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\kiurq.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\jvbgr.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\kmvhx.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\suxew.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\frpbs.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\culeq.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\qlkho.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\oeplj.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\fimli.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\nsgwt.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\rvkok.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\cuuwh.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\kkmbp.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\jhqia.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\hgwtg.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\lqlmh.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\hamgh.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\vfdgc.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\bdsax.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\rvtst.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\dukhq.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\wokxp.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\egdjk.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\utgsg.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\mpdrw.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\fwmex.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\pnxvo.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\vsixf.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\psqjs.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\txofl.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\bsceb.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\lvbqv.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\feetl.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\ssbre.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\crwmo.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\biorq.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\sobkc.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\afhqq.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\tcvmr.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\pgfuf.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\arjrc.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\qvvsr.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\sxoia.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\xrapo.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\tvbbm.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\vuvph.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\dcfji.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\nldbm.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\eefni.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\iwmur.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\qkkto.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\wcbeh.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\sojdw.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\svril.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\xmooc.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\vrxhs.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\fbits.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\dedqs.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\fhvhr.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\muuul.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\khxou.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\eepli.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\dmwhb.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\kkaew.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\urqag.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\arexo.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\xwfbm.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\ihdqj.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\nmnrx.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\wlupu.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\fdkur.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\gcfia.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\nmqmq.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\xslfp.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\welcf.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\htvam.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\jjplu.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\wlnij.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\tcsgq.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\hjktg.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\qikgw.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\pskcm.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\xpore.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\mkgvg.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\denes.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\iviuj.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\xjdcl.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\budfd.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\abxmt.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\iqkgq.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\lupqm.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\fsnmq.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\louje.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\cmgfk.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\lnhxl.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\bofnv.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\kaqro.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\oouxu.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\wsvjr.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\khovp.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\snlae.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\agpwo.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\wkqtw.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\xpimi.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\vcfln.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\vkvum.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\oekue.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\grnct.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\srmip.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\wwskg.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\bpfpt.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\ibewn.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\nojhe.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\kslcs.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\kjcmg.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\jomhj.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\cfooa.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\buibc.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\eqiwa.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\cpgkx.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\bqucr.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\pmmrg.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\fvwce.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\jmdhr.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\wxrql.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\lpwqt.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\ofmxi.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\ggvsv.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\xqrke.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\ajvui.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\ajkgv.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\srchf.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\wcueg.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\bhfak.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\qmnxi.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\sxafm.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\vhcpm.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\totdc.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\addfq.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\bxwth.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\ocetw.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\vktlw.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\oatfk.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\jaegr.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\eonud.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\deljp.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\pslgp.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\qdxui.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\gprmv.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\nbshf.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\dwjgn.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\snsqx.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\vandf.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\iqscx.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\duxng.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\otqxk.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\surhr.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\alefg.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\tllvu.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\gaqbr.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\unpdx.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\iejpb.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\xfbqj.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\edpmm.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\kbjne.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\arbqh.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\ounhw.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\macnm.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\iccji.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\knrnl.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\chslg.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\tmoqb.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\oguja.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\wlsae.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\atcvs.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\krkni.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\fslnv.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\awdiq.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\epume.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\xibuw.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\hmwgt.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\qxqog.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\xcvmd.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\abuuo.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\ipoge.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\afkvg.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\tlalj.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\fktgm.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\lupbd.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\jasah.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\hchif.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\dwpoa.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\gchsm.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\avhfr.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\gksel.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\wsfso.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\ojpvi.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\kcsrm.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\Fonts\dnusi.dll (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\system32\bpk.dat (Keylogger) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\system32\inst.dat (Keylogger) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\system32\keystrokes.html (Stolen.data) -> Žádná instrukce nebyla provedena.
C:\WINDOWS\system32\pk.bin (Keylogger) -> Žádná instrukce nebyla provedena.

(konec)

Hezká sbírka...

Zavři ostatní aplikace a prohlížeče, odpoj se od netu a fixni v HJT:
Návod



O17 - HKLM\System\CCS\Services\Tcpip\..\{D7E9CCB9-4B0E-4C5B-991C-A92A66ADF4F5}: NameServer = 8.8.8.8,8.8.4.4
Pokud to neznáš , tak taky fix.

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

. Takže spusť znovu MbAM a dej Scan
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Ukaž výsledky
- ujisti se že máš zatrhnuté všechny vypsané nálezy a klikni na tlačítko Odstranit označené
- když skončí odstraňování tak se ti zobrazí log, tak ho sem dej.
- pak zvol v programu OK a pak program ukonči přes Exit

Můžeš sem pak vložit nový log z MbAM.

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud budou problémy , spusť ho v nouz. režimu.

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org

Database version: v2012.04.30.08

Windows XP Service Pack 2 x86 FAT32
Internet Explorer 6.0.2900.2180
Admin :: MOBI-83083F0738 [administrator]

5/2/2012 9:44:28 PM
mbam-log-2012-05-02 (21-44-28).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 213642
Time elapsed: 3 minute(s), 20 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 18
HKLM\SYSTEM\CurrentControlSet\Services\hmtcfn (Worm.Conficker) -> Quarantined and deleted successfully.
HKLM\SYSTEM\CurrentControlSet\Services\gnj (Rootkit.Agent) -> Quarantined and deleted successfully.
HKCR\CLSID\{1C749E08-6B62-11E0-B6DA-075F4824019B} (Spyware.GamePlayLabs) -> Quarantined and deleted successfully.
HKCR\TypeLib\{199C34A4-5436-403F-A250-219E16672570} (Spyware.GamePlayLabs) -> Quarantined and deleted successfully.
HKCR\Interface\{8E7AD93B-3E87-423D-947F-A321FA7E31C4} (Spyware.GamePlayLabs) -> Quarantined and deleted successfully.
HKCR\BHO.BrowserPlugin.1 (Spyware.GamePlayLabs) -> Quarantined and deleted successfully.
HKCR\BHO.BrowserPlugin (Spyware.GamePlayLabs) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1C749E08-6B62-11E0-B6DA-075F4824019B} (Spyware.GamePlayLabs) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1C749E08-6B62-11E0-B6DA-075F4824019B} (Spyware.GamePlayLabs) -> Quarantined and deleted successfully.
HKCR\CLSID\{1E1B2879-88FF-11D3-8D96-D7ACAC95951A} (Monitor.PerfKeylogger) -> Quarantined and deleted successfully.
HKCR\TypeLib\{1E1B286C-88FF-11D3-8D96-D7ACAC95951A} (Monitor.PerfKeylogger) -> Quarantined and deleted successfully.
HKCR\Interface\{1E1B2878-88FF-11D3-8D96-D7ACAC95951A} (Monitor.PerfKeylogger) -> Quarantined and deleted successfully.
HKCR\PK.IE.1 (Monitor.PerfKeylogger) -> Quarantined and deleted successfully.
HKCR\PK.IE (Monitor.PerfKeylogger) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1E1B2879-88FF-11D3-8D96-D7ACAC95951A} (Monitor.PerfKeylogger) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1E1B2879-88FF-11D3-8D96-D7ACAC95951A} (Monitor.PerfKeylogger) -> Quarantined and deleted successfully.
HKCR\PK.IE (PUP.PerfectKeylogger) -> Quarantined and deleted successfully.
HKCR\PK.IE.1 (PUP.PerfectKeylogger) -> Quarantined and deleted successfully.

Registry Values Detected: 2
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|system.ine (Monitor.Perflogger) -> Data: C:\WINDOWS\system32\system.ine.exe -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run|SysAnti (Trojan.Downloader) -> Data: C:\Program Files\Common Files\SysAnti.exe -> Quarantined and deleted successfully.

Registry Data Items Detected: 4
HKLM\SOFTWARE\Microsoft\Security Center|AntiVirusDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and repaired successfully.
HKLM\SOFTWARE\Microsoft\Security Center|FirewallDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and repaired successfully.
HKLM\SOFTWARE\Microsoft\Security Center|UpdatesDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and repaired successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL|CheckedValue (PUM.Hijack.System.Hidden) -> Bad: (0) Good: (1) -> Quarantined and repaired successfully.

Folders Detected: 0
(No malicious items detected)

Files Detected: 240
C:\Documents and Settings\Admin\My Documents\Downloads\ZoolaGamesSetup.exe (PUP.BundleInstaller.IB) -> No action taken.
C:\WINDOWS\system32\system.ine.exe (Monitor.Perflogger) -> Quarantined and deleted successfully.
C:\Program Files\Common Files\SysAnti.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\05.tmp (Worm.Conficker) -> Quarantined and deleted successfully.
C:\Documents and Settings\Admin\Local Settings\Temp~gnj.tmp (Rootkit.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Admin\Local Settings\Application Data\GamePlayLabs Plugin\BHO.dll (Spyware.GamePlayLabs) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\system.inewb.dll (Monitor.PerfKeylogger) -> Quarantined and deleted successfully.
C:\SysAnti.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\system.inehk.dll (Keylogger.PerfectKeylogger) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\system.iner.exe (Monitor.Perflogger) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\rinst.exe (Monitor.Perflogger) -> Quarantined and deleted successfully.
C:\Documents and Settings\Admin\Local Settings\Temp\RarSFX2\123..exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Documents and Settings\Admin\Local Settings\Temp\RarSFX2\rinst.exe (Monitor.Perflogger) -> Quarantined and deleted successfully.
C:\Documents and Settings\Admin\Local Settings\Temp\RarSFX1\123..exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Documents and Settings\Admin\Local Settings\Temp\RarSFX1\rinst.exe (Monitor.Perflogger) -> Quarantined and deleted successfully.
C:\Documents and Settings\Admin\Local Settings\Temp\RarSFX0\123..exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Documents and Settings\Admin\Local Settings\Temp\RarSFX0\rinst.exe (Monitor.Perflogger) -> Quarantined and deleted successfully.
C:\Documents and Settings\Admin\Local Settings\Temp\RarSFX3\123..exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Documents and Settings\Admin\Local Settings\Temp\RarSFX3\rinst.exe (Monitor.Perflogger) -> Quarantined and deleted successfully.
C:\Documents and Settings\Admin\Local Settings\Temp\RarSFX4\123..exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Documents and Settings\Admin\Local Settings\Temp\RarSFX4\rinst.exe (Monitor.Perflogger) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\gkwcw.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\ousiw.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\gnjgq.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\xrnil.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\owpjg.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\txqad.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\gvgoa.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\bsgng.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\kkews.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\kiurq.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\jvbgr.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\kmvhx.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\suxew.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\frpbs.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\culeq.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\qlkho.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\oeplj.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\fimli.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\nsgwt.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\rvkok.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\cuuwh.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\kkmbp.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\jhqia.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\hgwtg.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\lqlmh.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\hamgh.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\vfdgc.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\bdsax.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\rvtst.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\dukhq.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\wokxp.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\egdjk.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\utgsg.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\mpdrw.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\fwmex.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\pnxvo.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\vsixf.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\psqjs.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\txofl.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\bsceb.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\lvbqv.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\feetl.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\ssbre.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\crwmo.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\biorq.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\sobkc.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\afhqq.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\tcvmr.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\pgfuf.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\arjrc.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\qvvsr.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\sxoia.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\xrapo.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\tvbbm.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\vuvph.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\dcfji.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\nldbm.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\eefni.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\iwmur.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\qkkto.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\wcbeh.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\sojdw.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\svril.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\xmooc.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\vrxhs.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\fbits.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\dedqs.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\fhvhr.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\muuul.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\khxou.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\eepli.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\dmwhb.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\kkaew.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\urqag.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\arexo.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\xwfbm.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\ihdqj.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\nmnrx.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\wlupu.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\fdkur.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\gcfia.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\nmqmq.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\xslfp.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\welcf.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\htvam.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\jjplu.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\wlnij.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\tcsgq.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\hjktg.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\qikgw.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\pskcm.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\xpore.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\mkgvg.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\denes.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\iviuj.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\xjdcl.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\budfd.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\abxmt.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\iqkgq.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\lupqm.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\fsnmq.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\louje.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\cmgfk.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\lnhxl.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\bofnv.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\kaqro.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\oouxu.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\wsvjr.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\khovp.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\snlae.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\agpwo.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\wkqtw.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\xpimi.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\vcfln.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\vkvum.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\oekue.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\grnct.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\srmip.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\wwskg.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\bpfpt.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\ibewn.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\nojhe.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\kslcs.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\kjcmg.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\jomhj.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\cfooa.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\buibc.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\eqiwa.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\cpgkx.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\decwh.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\bqucr.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\stlfk.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\pmmrg.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\earri.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\fvwce.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\mqtfm.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\jmdhr.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\hvsnr.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\wxrql.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\tibus.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\lpwqt.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\vmwgd.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\ofmxi.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\ggvsv.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\xqrke.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\ajvui.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\ajkgv.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\srchf.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\wcueg.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\bhfak.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\qmnxi.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\sxafm.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\vhcpm.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\totdc.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\addfq.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\bxwth.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\ocetw.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\vktlw.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\oatfk.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\jaegr.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\eonud.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\deljp.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\pslgp.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\qdxui.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\gprmv.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\nbshf.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\dwjgn.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\snsqx.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\vandf.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\iqscx.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\duxng.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\otqxk.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\surhr.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\alefg.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\tllvu.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\gaqbr.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\unpdx.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\iejpb.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\xfbqj.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\edpmm.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\kbjne.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\arbqh.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\ounhw.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\macnm.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\iccji.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\knrnl.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\chslg.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\tmoqb.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\oguja.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\wlsae.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\atcvs.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\krkni.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\fslnv.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\awdiq.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\epume.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\xibuw.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\hmwgt.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\qxqog.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\xcvmd.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\abuuo.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\ipoge.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\afkvg.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\tlalj.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\fktgm.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\lupbd.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\jasah.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\hchif.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\dwpoa.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\gchsm.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\avhfr.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\gksel.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\wsfso.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\ojpvi.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\kcsrm.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\dnusi.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\bpk.dat (Keylogger) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\inst.dat (Keylogger) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\keystrokes.html (Stolen.data) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\pk.bin (Keylogger) -> Quarantined and deleted successfully.

(end)

comfix log v priloze

Vlož sem ten log naněkolikrát..

ComboFix 12-05-02.02 - Admin 05/02/2012 22:02:04.1.1 - FAT32x86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1012.705 [GMT 7:00]
Running from: c:\documents and settings\Admin\Desktop\ComboFix.exe
AV: Kaspersky Anti-Virus *Disabled/Outdated* {2C4D4BC6-0793-4956-A9F9-E252435469C0}
FW: Kaspersky Anti-Virus *Disabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0}
* Created a new restore point
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\Autorun.inf
C:\CFLog
c:\documents and settings\Admin\Application Data\IDM\idmmzcc3
c:\documents and settings\Admin\Application Data\IDM\idmmzcc3\chrome.manifest
c:\documents and settings\Admin\Application Data\IDM\idmmzcc3\chrome\idmmzcc.jar
c:\documents and settings\Admin\Application Data\IDM\idmmzcc3\components\idmmzcc.dll
c:\documents and settings\Admin\Application Data\IDM\idmmzcc3\components\iIDMMzCC.xpt
c:\documents and settings\Admin\Application Data\IDM\idmmzcc3\components2\idmhelper.js
c:\documents and settings\Admin\Application Data\IDM\idmmzcc3\components2\idmhelper2.js
c:\documents and settings\Admin\Application Data\IDM\idmmzcc3\components2\idmmzcc.dll
c:\documents and settings\Admin\Application Data\IDM\idmmzcc3\components2\idmmzcc64.dll
c:\documents and settings\Admin\Application Data\IDM\idmmzcc3\components2\iIDMHelper.xpt
c:\documents and settings\Admin\Application Data\IDM\idmmzcc3\components2\iIDMHelper2.xpt
c:\documents and settings\Admin\Application Data\IDM\idmmzcc3\components2\iIDMMzCC.xpt
c:\documents and settings\Admin\Application Data\IDM\idmmzcc3\install.js
c:\documents and settings\Admin\Application Data\IDM\idmmzcc3\install.rdf
c:\documents and settings\Admin\Application Data\IDM\idmmzcc3\META-INF\manifest.mf
c:\documents and settings\Admin\Application Data\IDM\idmmzcc3\META-INF\zigbert.rsa
c:\documents and settings\Admin\Application Data\IDM\idmmzcc3\META-INF\zigbert.sf
c:\documents and settings\Admin\WINDOWS
c:\documents and settings\Administrator\WINDOWS
c:\documents and settings\antran\WINDOWS
c:\documents and settings\Default User\WINDOWS
c:\program files\alexa toolbar
c:\program files\alexa toolbar\AlexaToolbar.10.0.dll
c:\program files\alexa toolbar\AlexaToolbar.10.0.Uninstall.exe
c:\program files\alexa toolbar\AlexaToolbarSSB.10.0.dll
c:\program files\alexa toolbar\AlxSSBPS.dll
c:\windows\system32\drivers\etc\hosts.txt
c:\windows\system32\dt
c:\windows\system32\dt\2012-04-25_08-54-37-7474984
c:\windows\system32\dt\2012-04-25_08-59-37-7769875
c:\windows\system32\dt\2012-04-25_09-04-37-8069875
c:\windows\system32\dt\2012-04-25_09-09-33-8366203
c:\windows\system32\dt\2012-04-25_09-14-37-8669890
c:\windows\system32\dt\2012-04-25_09-19-31-8964437
c:\windows\system32\dt\2012-04-25_09-24-31-9264421
c:\windows\system32\dt\2012-04-25_09-29-31-9564421
c:\windows\system32\dt\2012-04-25_09-34-31-9864468
c:\windows\system32\dt\2012-04-25_09-39-31-10164453
c:\windows\system32\dt\2012-04-25_09-44-31-10464468
c:\windows\system32\dt\2012-04-25_09-49-32-10764593
c:\windows\system32\dt\2012-04-25_09-54-31-11064546
c:\windows\system32\dt\2012-04-25_09-59-31-11364437
c:\windows\system32\dt\2012-04-25_10-04-32-11665046
c:\windows\system32\dt\2012-04-25_10-09-31-11964437
c:\windows\system32\dt\2012-04-25_10-14-31-12264562
c:\windows\system32\dt\2012-04-25_10-19-31-12564468
c:\windows\system32\dt\2012-04-25_10-24-32-12864656
c:\windows\system32\dt\2012-04-25_10-29-32-13164828
c:\windows\system32\dt\2012-04-25_10-34-31-13464859
c:\windows\system32\dt\2012-04-25_10-39-31-13764562
c:\windows\system32\dt\2012-04-25_10-44-37-14070031
c:\windows\system32\dt\2012-04-25_10-49-36-14369031
c:\windows\system32\dt\2012-04-25_10-54-40-14673046
c:\windows\system32\dt\2012-04-25_10-59-36-14969031
c:\windows\system32\dt\2012-04-25_11-04-31-15264625
c:\windows\system32\dt\2012-04-25_11-09-31-15564625
c:\windows\system32\dt\2012-04-25_11-14-31-15864578
c:\windows\system32\dt\2012-04-25_14-40-52-333812
c:\windows\system32\dt\2012-04-25_14-45-52-633796
c:\windows\system32\dt\2012-04-25_14-50-52-933796
c:\windows\system32\dt\2012-04-25_14-55-52-1233812
c:\windows\system32\dt\2012-04-25_15-00-52-1533828
c:\windows\system32\dt\2012-04-25_15-05-52-1833796
c:\windows\system32\dt\2012-04-25_15-10-52-2134156
c:\windows\system32\dt\2012-04-25_15-15-52-2434328
c:\windows\system32\dt\2012-04-25_15-20-52-2734109
c:\windows\system32\dt\2012-04-25_15-25-52-3033953
c:\windows\system32\dt\2012-04-25_15-30-52-3334265
c:\windows\system32\dt\2012-04-25_15-35-52-3634093
c:\windows\system32\dt\2012-04-25_15-40-52-3934015
c:\windows\system32\dt\2012-04-25_15-45-52-4234156
c:\windows\system32\dt\2012-04-25_15-50-52-4533968
c:\windows\system32\dt\2012-04-25_15-55-52-4833953
c:\windows\system32\dt\2012-04-25_16-00-52-5133812
c:\windows\system32\dt\2012-04-25_16-05-52-5434031
c:\windows\system32\dt\2012-04-25_16-10-52-5733984
c:\windows\system32\dt\2012-04-25_16-15-52-6033875
c:\windows\system32\dt\2012-04-25_16-20-52-6334093
c:\windows\system32\dt\2012-04-25_16-25-52-6633953
c:\windows\system32\dt\2012-04-25_16-30-52-6934218
c:\windows\system32\dt\2012-04-25_16-35-52-7234265
c:\windows\system32\dt\2012-04-25_16-40-52-7533984
c:\windows\system32\dt\2012-04-25_16-45-52-7833812
c:\windows\system32\dt\2012-04-25_16-50-52-8133953
c:\windows\system32\dt\2012-04-25_16-55-52-8433875
c:\windows\system32\dt\2012-04-25_17-23-29-333109
c:\windows\system32\dt\2012-04-25_17-28-29-633125
c:\windows\system32\dt\2012-04-25_17-33-29-933140
c:\windows\system32\dt\2012-04-25_17-38-29-1233140
c:\windows\system32\dt\2012-04-25_17-43-29-1533125
c:\windows\system32\dt\2012-04-25_17-48-29-1833140
c:\windows\system32\dt\2012-04-25_17-53-29-2133171
c:\windows\system32\dt\2012-04-25_17-58-29-2433140
c:\windows\system32\dt\2012-04-25_18-03-29-2733125
c:\windows\system32\dt\2012-04-25_18-08-29-3033171
c:\windows\system32\dt\2012-04-25_18-13-29-3333140
c:\windows\system32\dt\2012-04-25_18-18-29-3633140
c:\windows\system32\dt\2012-04-25_18-23-29-3933140
c:\windows\system32\dt\2012-04-26_08-36-24-333640
c:\windows\system32\dt\2012-04-26_08-41-24-633562
c:\windows\system32\dt\2012-04-26_08-46-23-933546
c:\windows\system32\dt\2012-04-26_08-51-24-1233593
c:\windows\system32\dt\2012-04-26_08-56-27-1537390
c:\windows\system32\dt\2012-04-26_09-01-28-1837671
c:\windows\system32\dt\2012-04-26_09-06-27-2137265
c:\windows\system32\dt\2012-04-26_09-11-27-2437593
c:\windows\system32\dt\2012-04-26_09-16-27-2737531
c:\windows\system32\dt\2012-04-26_09-21-28-3038453
c:\windows\system32\dt\2012-04-26_09-26-28-3337640
c:\windows\system32\dt\2012-04-26_09-31-27-3637343
c:\windows\system32\dt\2012-04-26_09-36-28-3938562
c:\windows\system32\dt\2012-04-26_09-41-27-4237343
c:\windows\system32\dt\2012-04-26_10-41-08-331562
c:\windows\system32\dt\2012-04-26_10-46-09-631640
c:\windows\system32\dt\2012-04-26_10-51-09-931562
c:\windows\system32\dt\2012-04-26_10-56-08-1231515
c:\windows\system32\dt\2012-04-26_11-01-09-1531843
c:\windows\system32\dt\2012-04-26_11-06-08-1831546
c:\windows\system32\dt\2012-04-26_11-11-08-2131515
c:\windows\system32\dt\2012-04-26_11-16-08-2431515
c:\windows\system32\dt\2012-04-26_11-21-08-2731531
c:\windows\system32\dt\2012-04-26_11-26-08-3031546
c:\windows\system32\dt\2012-04-26_11-31-08-3331531
c:\windows\system32\dt\2012-04-26_11-36-09-3631781
c:\windows\system32\dt\2012-04-26_13-03-14-336578
c:\windows\system32\dt\2012-04-26_13-08-14-636140
c:\windows\system32\dt\2012-04-26_13-13-14-936328
c:\windows\system32\dt\2012-04-26_13-18-14-1236296
c:\windows\system32\dt\2012-04-26_13-23-14-1536265
c:\windows\system32\dt\2012-04-26_13-28-14-1836218
c:\windows\system32\dt\2012-04-26_13-33-14-2136421
c:\windows\system32\dt\2012-04-26_13-38-14-2436265
c:\windows\system32\dt\2012-04-26_13-43-14-2736312
c:\windows\system32\dt\2012-04-26_13-48-14-3036359
c:\windows\system32\dt\2012-04-26_13-53-14-3336187
c:\windows\system32\dt\2012-04-26_13-58-14-3636343
c:\windows\system32\dt\2012-04-26_14-03-14-3936328
c:\windows\system32\dt\2012-04-26_14-08-14-4236343
c:\windows\system32\dt\2012-04-26_14-13-14-4536375
c:\windows\system32\dt\2012-04-26_14-18-14-4836531
c:\windows\system32\dt\2012-04-26_14-23-14-5136437
c:\windows\system32\dt\2012-04-26_14-28-14-5436000
c:\windows\system32\dt\2012-04-26_14-33-14-5736000
c:\windows\system32\dt\2012-04-26_14-38-14-6036328
c:\windows\system32\dt\2012-04-26_14-43-14-6336546
c:\windows\system32\dt\2012-04-26_14-48-14-6636000
c:\windows\system32\dt\2012-04-26_14-53-14-6936390
c:\windows\system32\dt\2012-04-26_14-58-14-7236578
c:\windows\system32\dt\2012-04-26_15-03-14-7536640
c:\windows\system32\dt\2012-04-26_15-08-14-7836312
c:\windows\system32\dt\2012-04-26_15-13-14-8136000
c:\windows\system32\dt\2012-04-26_15-18-14-8436390
c:\windows\system32\dt\2012-04-26_15-23-14-8736281
c:\windows\system32\dt\2012-04-26_15-28-14-9036000
c:\windows\system32\dt\2012-04-26_15-33-14-9336328
c:\windows\system32\dt\2012-04-26_15-38-14-9636578
c:\windows\system32\dt\2012-04-26_15-43-14-9936265
c:\windows\system32\dt\2012-04-26_15-48-14-10236000
c:\windows\system32\dt\2012-04-26_15-53-14-10536203
c:\windows\system32\dt\2012-04-26_15-58-15-10836906
c:\windows\system32\dt\2012-04-26_16-03-14-11136234
c:\windows\system32\dt\2012-04-26_16-08-14-11436265
c:\windows\system32\dt\2012-04-26_16-13-14-11736250
c:\windows\system32\dt\2012-04-26_16-18-14-12036296
c:\windows\system32\dt\2012-04-26_16-23-14-12336234
c:\windows\system32\dt\2012-04-26_16-28-14-12636250
c:\windows\system32\dt\2012-04-26_16-33-14-12936234
c:\windows\system32\dt\2012-04-26_16-38-14-13236031
c:\windows\system32\dt\2012-04-26_16-43-14-13536234
c:\windows\system32\dt\2012-04-26_16-48-14-13836015
c:\windows\system32\dt\2012-04-26_16-53-14-14136031
c:\windows\system32\dt\2012-04-26_21-41-09-495859
c:\windows\system32\dt\2012-04-26_21-46-09-795859
c:\windows\system32\dt\2012-04-26_21-51-09-1095875
c:\windows\system32\dt\2012-04-26_21-56-09-1395843
c:\windows\system32\dt\2012-04-26_22-01-09-1696312
c:\windows\system32\dt\2012-04-26_22-06-09-1995953
c:\windows\system32\dt\2012-04-26_22-21-09-2895906
c:\windows\system32\dt\2012-04-26_22-26-09-3195937
c:\windows\system32\dt\2012-04-26_22-31-09-3496265
c:\windows\system32\dt\2012-04-26_22-41-09-4096109
c:\windows\system32\dt\2012-04-26_22-46-09-4395906
c:\windows\system32\dt\2012-04-26_22-51-10-4698437
c:\windows\system32\dt\2012-04-26_22-56-09-4995968
c:\windows\system32\dt\2012-04-26_23-01-09-5296250
c:\windows\system32\dt\2012-04-27_10-19-18-547890
c:\windows\system32\dt\2012-04-27_10-24-08-833515
c:\windows\system32\dt\2012-04-27_10-29-13-1137906
c:\windows\system32\dt\2012-04-27_10-34-13-1437968
c:\windows\system32\dt\2012-04-27_10-39-13-1737921
c:\windows\system32\dt\2012-04-27_10-44-13-2037921
c:\windows\system32\dt\2012-04-27_10-49-14-2338937
c:\windows\system32\dt\2012-04-27_10-54-08-2633234
c:\windows\system32\dt\2012-04-27_10-59-08-2933218
c:\windows\system32\dt\2012-04-27_11-04-08-3233218
c:\windows\system32\dt\2012-04-27_11-09-08-3533218
c:\windows\system32\dt\2012-04-27_11-14-08-3833218
c:\windows\system32\dt\2012-04-27_11-19-08-4133234
c:\windows\system32\dt\2012-04-27_11-24-08-4433218
c:\windows\system32\dt\2012-04-27_11-29-08-4733234
c:\windows\system32\dt\2012-04-27_12-32-44-330718
c:\windows\system32\dt\2012-04-27_12-37-44-630734
c:\windows\system32\dt\2012-04-27_12-47-44-1230765
c:\windows\system32\dt\2012-04-27_12-52-44-1531046
c:\windows\system32\dt\2012-04-27_12-57-44-1830687
c:\windows\system32\dt\2012-04-27_13-02-44-2130750
c:\windows\system32\dt\2012-04-27_13-07-44-2430687
c:\windows\system32\dt\2012-04-27_13-12-44-2730703
c:\windows\system32\dt\2012-04-27_13-17-44-3030828
c:\windows\system32\dt\2012-04-27_13-22-44-3330750
c:\windows\system32\dt\2012-04-27_13-27-44-3630687
c:\windows\system32\dt\2012-04-27_13-32-44-3930687
c:\windows\system32\dt\2012-04-27_13-37-44-4230703
c:\windows\system32\dt\2012-04-27_13-42-44-4530671
c:\windows\system32\dt\2012-04-27_13-47-44-4830687
c:\windows\system32\dt\2012-04-27_13-52-44-5130750
c:\windows\system32\dt\2012-04-27_13-57-44-5431218
c:\windows\system32\dt\2012-04-27_14-02-44-5730921
c:\windows\system32\dt\2012-04-27_14-07-44-6030703
c:\windows\system32\dt\2012-04-27_14-12-44-6330890
c:\windows\system32\dt\2012-04-27_14-17-44-6631156
c:\windows\system32\dt\2012-04-27_14-22-44-6930703
c:\windows\system32\dt\2012-04-27_16-12-30-328609
c:\windows\system32\dt\2012-04-27_16-17-30-628640
c:\windows\system32\dt\2012-04-27_16-22-30-928718
c:\windows\system32\dt\2012-04-27_16-27-30-1228812
c:\windows\system32\dt\2012-04-27_16-32-30-1528609
c:\windows\system32\dt\2012-04-27_16-37-30-1828734
c:\windows\system32\dt\2012-04-27_16-42-30-2128671
c:\windows\system32\dt\2012-04-27_16-47-30-2429718
c:\windows\system32\dt\2012-04-27_16-52-30-2728671
c:\windows\system32\dt\2012-04-27_16-57-30-3028781
c:\windows\system32\dt\2012-04-27_17-51-03-609390
c:\windows\system32\dt\2012-04-27_17-56-03-909312
c:\windows\system32\dt\2012-04-27_18-01-03-1209250
c:\windows\system32\dt\2012-04-27_18-06-03-1509296
c:\windows\system32\dt\2012-04-27_19-29-00-330000
c:\windows\system32\dt\2012-04-28_04-45-23-351890
c:\windows\system32\dt\2012-04-28_04-50-23-651906
c:\windows\system32\dt\2012-04-28_04-55-23-951953
c:\windows\system32\dt\2012-04-28_05-00-23-1251906
c:\windows\system32\dt\2012-04-28_05-05-23-1551906
c:\windows\system32\dt\2012-04-28_05-10-23-1851890
c:\windows\system32\dt\2012-04-28_05-15-23-2151906
c:\windows\system32\dt\2012-04-28_05-20-23-2451890
c:\windows\system32\dt\2012-04-28_08-31-00-334234
c:\windows\system32\dt\2012-04-28_08-36-00-634390
c:\windows\system32\dt\2012-04-28_08-41-00-934359
c:\windows\system32\dt\2012-04-28_08-46-01-1234796
c:\windows\system32\dt\2012-04-28_08-51-00-1534343
c:\windows\system32\dt\2012-04-28_08-56-00-1834343
c:\windows\system32\dt\2012-04-28_09-01-00-2134375
c:\windows\system32\dt\2012-04-28_09-06-01-2434593
c:\windows\system32\dt\2012-04-28_09-11-00-2734421
c:\windows\system32\dt\2012-04-28_09-16-00-3034437
c:\windows\system32\dt\2012-04-28_09-21-00-3334343
c:\windows\system32\dt\2012-04-28_09-26-00-3634359
c:\windows\system32\dt\2012-04-28_09-31-00-3934375
c:\windows\system32\dt\2012-04-28_09-36-01-4235218
c:\windows\system32\dt\2012-04-28_09-41-00-4534406
c:\windows\system32\dt\2012-04-28_09-46-00-4834375
c:\windows\system32\dt\2012-04-28_09-51-00-5134343
c:\windows\system32\dt\2012-04-28_09-56-00-5434390
c:\windows\system32\dt\2012-04-28_10-01-01-5734984
c:\windows\system32\dt\2012-04-28_10-06-00-6034343
c:\windows\system32\dt\2012-04-28_11-15-57-327078
c:\windows\system32\dt\2012-04-28_11-25-57-927031
c:\windows\system32\dt\2012-04-28_11-30-57-1227031
c:\windows\system32\dt\2012-04-28_16-46-48-321765
c:\windows\system32\dt\2012-04-28_16-51-48-621750
c:\windows\system32\dt\2012-04-28_16-56-48-921750
c:\windows\system32\dt\2012-04-28_17-01-48-1221734
c:\windows\system32\dt\2012-04-28_18-58-06-328218
c:\windows\system32\dt\2012-04-28_19-03-05-627140
c:\windows\system32\dt\2012-04-28_19-08-05-926812
c:\windows\system32\dt\2012-04-28_19-13-05-1226828
c:\windows\system32\dt\2012-04-28_19-23-49-472468
c:\windows\system32\dt\2012-04-28_19-28-50-782968
c:\windows\system32\dt\2012-04-28_19-33-52-1075484
c:\windows\system32\dt\2012-04-28_19-53-49-2272437
c:\windows\system32\dt\2012-04-28_19-58-49-2572437
c:\windows\system32\dt\2012-04-28_20-03-49-2872562
c:\windows\system32\dt\2012-04-28_20-08-50-3172593
c:\windows\system32\dt\2012-04-28_20-13-50-3472640
c:\windows\system32\dt\2012-04-28_20-18-51-3786312
c:\windows\system32\dt\2012-04-28_20-23-59-4085218
c:\windows\system32\dt\2012-04-28_20-28-59-4384812
c:\windows\system32\dt\2012-04-28_20-33-49-4672640
c:\windows\system32\dt\2012-04-28_20-38-49-4972484
c:\windows\system32\dt\2012-04-28_20-43-51-5280859
c:\windows\system32\dt\2012-04-28_20-48-50-5572843
c:\windows\system32\dt\2012-04-28_20-53-59-5885671
c:\windows\system32\dt\2012-04-28_20-58-59-6187296
c:\windows\system32\dt\2012-04-28_21-03-59-6482312
c:\windows\system32\dt\2012-04-28_21-08-59-6782312
c:\windows\system32\dt\2012-04-28_21-13-54-7082312
c:\windows\system32\dt\2012-04-28_21-18-59-7382343
c:\windows\system32\dt\2012-04-28_21-36-39-324046
c:\windows\system32\dt\2012-04-28_21-41-39-624031
c:\windows\system32\dt\2012-04-28_21-46-39-924031
c:\windows\system32\dt\2012-04-28_21-51-39-1224031
c:\windows\system32\dt\2012-04-28_21-56-39-1524250
c:\windows\system32\dt\2012-04-28_22-01-39-1824062
c:\windows\system32\dt\2012-04-28_22-06-39-2124109
c:\windows\system32\dt\2012-04-28_22-11-39-2424078
c:\windows\system32\dt\2012-04-28_22-16-39-2724109
c:\windows\system32\dt\2012-04-28_22-21-39-3024078
c:\windows\system32\dt\2012-04-28_22-26-39-3323890
c:\windows\system32\dt\2012-04-28_22-37-43-324578
c:\windows\system32\dt\2012-04-28_22-42-43-624203
c:\windows\system32\dt\2012-04-28_22-47-43-924375
c:\windows\system32\dt\2012-04-28_22-52-43-1224250
c:\windows\system32\dt\2012-04-28_22-57-43-1524218
c:\windows\system32\dt\2012-04-28_23-02-43-1824328
c:\windows\system32\dt\2012-04-28_23-07-43-2124437
c:\windows\system32\dt\2012-04-28_23-12-43-2424468
c:\windows\system32\dt\2012-04-28_23-17-43-2724484
c:\windows\system32\dt\2012-04-28_23-22-43-3024515
c:\windows\system32\dt\2012-04-28_23-27-43-3324187
c:\windows\system32\dt\2012-04-29_08-48-57-327593
c:\windows\system32\dt\2012-04-29_08-53-57-628046
c:\windows\system32\dt\2012-04-29_08-58-57-927671
c:\windows\system32\dt\2012-04-29_09-03-57-1227812
c:\windows\system32\dt\2012-04-29_09-08-57-1527687
c:\windows\system32\dt\2012-04-29_09-13-57-1828281
c:\windows\system32\dt\2012-04-29_09-18-57-2128375
c:\windows\system32\dt\2012-04-29_09-23-57-2428171
c:\windows\system32\dt\2012-04-29_09-28-57-2728171
c:\windows\system32\dt\2012-04-29_09-33-57-3028031
c:\windows\system32\dt\2012-04-29_09-38-57-3327671
c:\windows\system32\dt\2012-04-29_09-43-57-3628000
c:\windows\system32\dt\2012-04-29_09-48-57-3927781
c:\windows\system32\dt\2012-04-29_09-53-57-4227953
c:\windows\system32\dt\2012-04-29_09-58-57-4527937
c:\windows\system32\dt\2012-04-29_10-03-57-4827984
c:\windows\system32\dt\2012-04-29_10-08-57-5127953
c:\windows\system32\dt\2012-04-29_10-13-57-5427828
c:\windows\system32\dt\2012-04-29_10-18-57-5727968
c:\windows\system32\dt\2012-04-29_10-23-57-6027765
c:\windows\system32\dt\2012-04-29_10-28-57-6327625
c:\windows\system32\dt\2012-04-29_10-33-57-6627906
c:\windows\system32\dt\2012-04-29_10-38-57-6927828
c:\windows\system32\dt\2012-04-29_10-43-57-7227937
c:\windows\system32\dt\2012-04-29_10-48-57-7528031
c:\windows\system32\dt\2012-04-29_10-53-57-7827734
c:\windows\system32\dt\2012-04-29_10-58-57-8128218
c:\windows\system32\dt\2012-04-29_11-03-57-8428250
c:\windows\system32\dt\2012-04-29_11-08-57-8728171
c:\windows\system32\dt\2012-04-29_11-13-57-9027859
c:\windows\system32\dt\2012-04-29_11-18-57-9327906
c:\windows\system32\dt\2012-04-29_11-23-57-9627984
c:\windows\system32\dt\2012-04-29_11-28-57-9927937
c:\windows\system32\dt\2012-04-29_11-33-57-10227671
c:\windows\system32\dt\2012-04-29_11-38-57-10528046
c:\windows\system32\dt\2012-04-29_12-15-18-328078
c:\windows\system32\dt\2012-04-29_12-20-18-628093
c:\windows\system32\dt\2012-04-29_12-25-18-928218
c:\windows\system32\dt\2012-04-29_12-30-18-1228281
c:\windows\system32\dt\2012-04-29_12-35-18-1528421
c:\windows\system32\dt\2012-04-29_12-40-18-1828296
c:\windows\system32\dt\2012-04-29_12-45-18-2128421
c:\windows\system32\dt\2012-04-29_12-50-18-2428453
c:\windows\system32\dt\2012-04-29_12-55-18-2728390
c:\windows\system32\dt\2012-04-29_13-00-18-3028296
c:\windows\system32\dt\2012-04-29_13-05-18-3328687
c:\windows\system32\dt\2012-04-29_13-10-18-3628062
c:\windows\system32\dt\2012-04-29_13-15-18-3928125
c:\windows\system32\dt\2012-04-29_13-20-18-4228062
c:\windows\system32\dt\2012-04-29_13-25-18-4528359
c:\windows\system32\dt\2012-04-29_13-30-18-4828265
c:\windows\system32\dt\2012-04-29_13-35-18-5128281
c:\windows\system32\dt\2012-04-29_13-40-18-5428718
c:\windows\system32\dt\2012-04-29_13-45-18-5728406
c:\windows\system32\dt\2012-04-29_13-50-18-6028171
c:\windows\system32\dt\2012-04-29_13-55-18-6328328
c:\windows\system32\dt\2012-04-29_14-00-18-6628531
c:\windows\system32\dt\2012-04-29_14-05-18-6928359
c:\windows\system32\dt\2012-04-29_14-10-18-7228531
c:\windows\system32\dt\2012-04-29_14-15-18-7528625
c:\windows\system32\dt\2012-04-29_14-20-18-7828390
c:\windows\system32\dt\2012-04-29_14-25-18-8128281
c:\windows\system32\dt\2012-04-29_14-30-18-8428437
c:\windows\system32\dt\2012-04-29_15-55-42-329953
c:\windows\system32\dt\2012-04-29_16-00-42-629859
c:\windows\system32\dt\2012-04-29_16-05-42-929875
c:\windows\system32\dt\2012-04-29_16-10-41-1229921
c:\windows\system32\dt\2012-04-29_16-15-42-1530250
c:\windows\system32\dt\2012-04-29_16-20-42-1829875
c:\windows\system32\dt\2012-04-29_16-25-42-2129953
c:\windows\system32\dt\2012-04-29_16-30-42-2429906
c:\windows\system32\dt\2012-04-29_16-35-42-2729937
c:\windows\system32\dt\2012-04-29_16-40-42-3029890
c:\windows\system32\dt\2012-04-29_16-45-41-3329859
c:\windows\system32\dt\2012-04-29_16-50-41-3629921
c:\windows\system32\dt\2012-04-29_16-55-41-3929875
c:\windows\system32\dt\2012-04-29_17-00-42-4229843
c:\windows\system32\dt\2012-04-29_17-05-42-4529859
c:\windows\system32\dt\2012-04-29_19-09-14-323000
c:\windows\system32\dt\2012-04-29_19-14-14-622984
c:\windows\system32\dt\2012-04-29_19-54-06-340250
c:\windows\system32\dt\2012-04-29_19-58-57-630609
c:\windows\system32\dt\2012-04-29_20-03-57-931093
c:\windows\system32\dt\2012-04-29_20-08-57-1230937
c:\windows\system32\dt\2012-04-29_20-13-57-1530937
c:\windows\system32\dt\2012-04-29_20-18-57-1831250
c:\windows\system32\dt\2012-04-29_20-23-57-2131031
c:\windows\system32\dt\2012-04-29_20-28-57-2430921
c:\windows\system32\dt\2012-04-29_20-33-57-2730984
c:\windows\system32\dt\2012-04-29_20-38-57-3030937
c:\windows\system32\dt\2012-04-29_20-43-57-3330937
c:\windows\system32\dt\2012-04-29_20-48-57-3630968
c:\windows\system32\dt\2012-04-29_20-53-57-3930937
c:\windows\system32\dt\2012-04-29_20-58-57-4231015
c:\windows\system32\dt\2012-04-29_21-03-57-4530953
c:\windows\system32\dt\2012-04-29_21-08-57-4830953
c:\windows\system32\dt\2012-04-29_21-13-57-5130953
c:\windows\system32\dt\2012-04-29_21-18-57-5431062
c:\windows\system32\dt\2012-04-29_21-23-57-5730953
c:\windows\system32\dt\2012-04-29_21-28-57-6031000
c:\windows\system32\dt\2012-04-29_21-33-57-6331000
c:\windows\system32\dt\2012-04-29_21-38-57-6631265
c:\windows\system32\dt\2012-04-29_21-43-57-6931125
c:\windows\system32\dt\2012-04-29_21-48-57-7231171
c:\windows\system32\dt\2012-04-29_21-53-57-7531203
c:\windows\system32\dt\2012-04-29_21-58-57-7831234
c:\windows\system32\dt\2012-04-29_22-03-57-8131250
c:\windows\system32\dt\2012-04-29_22-08-57-8431171
c:\windows\system32\dt\2012-04-29_22-13-57-8731328
c:\windows\system32\dt\2012-04-29_22-18-57-9031140
c:\windows\system32\dt\2012-04-29_22-23-57-9331375
c:\windows\system32\dt\2012-04-29_22-28-57-9631218
c:\windows\system32\dt\2012-04-29_22-33-57-9931421
c:\windows\system32\dt\2012-04-30_07-47-14-343812
c:\windows\system32\dt\2012-04-30_07-52-14-643859
c:\windows\system32\dt\2012-04-30_07-57-14-944203
c:\windows\system32\dt\2012-04-30_08-02-14-1244015
c:\windows\system32\dt\2012-04-30_08-07-14-1544109
c:\windows\system32\dt\2012-04-30_08-12-14-1843921
c:\windows\system32\dt\2012-04-30_08-17-14-2144171
c:\windows\system32\dt\2012-04-30_08-22-14-2444687
c:\windows\system32\dt\2012-04-30_08-27-15-2744609
c:\windows\system32\dt\2012-04-30_09-30-16-331437
c:\windows\system32\dt\2012-04-30_09-35-16-631296
c:\windows\system32\dt\2012-04-30_09-40-16-931312
c:\windows\system32\dt\2012-04-30_09-45-16-1231328
c:\windows\system32\dt\2012-04-30_09-50-16-1531562
c:\windows\system32\dt\2012-04-30_09-55-16-1831250
c:\windows\system32\dt\2012-04-30_10-00-16-2131406
c:\windows\system32\dt\2012-04-30_10-05-17-2431656
c:\windows\system32\dt\2012-04-30_10-10-16-2731375
c:\windows\system32\dt\2012-04-30_10-15-17-3031734
c:\windows\system32\dt\2012-04-30_10-20-16-3331234
c:\windows\system32\dt\2012-04-30_10-25-16-3631265
c:\windows\system32\dt\2012-04-30_10-30-16-3931296
c:\windows\system32\dt\2012-04-30_10-35-16-4231468
c:\windows\system32\dt\2012-04-30_10-40-16-4531343
c:\windows\system32\dt\2012-04-30_10-45-16-4831281
c:\windows\system32\dt\2012-04-30_10-50-16-5131281
c:\windows\system32\dt\2012-04-30_10-55-16-5431359
c:\windows\system32\dt\2012-04-30_11-00-17-5731718
c:\windows\system32\dt\2012-04-30_11-05-17-6031718
c:\windows\system32\dt\2012-04-30_11-10-16-6331531
c:\windows\system32\dt\2012-04-30_11-15-16-6631296
c:\windows\system32\dt\2012-04-30_11-51-45-331968
c:\windows\system32\dt\2012-04-30_11-56-45-631968
c:\windows\system32\dt\2012-04-30_12-01-45-931968
c:\windows\system32\dt\2012-04-30_12-06-45-1232140
c:\windows\system32\dt\2012-04-30_12-11-45-1532031
c:\windows\system32\dt\2012-04-30_12-16-45-1832234
c:\windows\system32\dt\2012-04-30_12-21-45-2132234
c:\windows\system32\dt\2012-04-30_12-26-45-2432828
c:\windows\system32\dt\2012-04-30_12-31-46-2733000
c:\windows\system32\dt\2012-04-30_12-36-45-3031968
c:\windows\system32\dt\2012-04-30_12-41-45-3332156
c:\windows\system32\dt\2012-04-30_12-46-45-3632390
c:\windows\system32\dt\2012-04-30_12-51-45-3932640
c:\windows\system32\dt\2012-04-30_12-56-45-4232578
c:\windows\system32\dt\2012-04-30_13-01-45-4532718
c:\windows\system32\dt\2012-04-30_13-06-45-4832484
c:\windows\system32\dt\2012-04-30_13-11-45-5132125
c:\windows\system32\dt\2012-04-30_13-16-46-5432859
c:\windows\system32\dt\2012-04-30_13-21-45-5731968
c:\windows\system32\dt\2012-04-30_13-26-45-6032296
c:\windows\system32\dt\2012-04-30_13-31-45-6332468
c:\windows\system32\dt\2012-04-30_13-36-45-6632578
c:\windows\system32\dt\2012-04-30_13-41-45-6932203
c:\windows\system32\dt\2012-04-30_13-46-45-7232640
c:\windows\system32\dt\2012-04-30_13-51-45-7532687
c:\windows\system32\dt\2012-04-30_13-56-45-7832796
c:\windows\system32\dt\2012-04-30_14-01-45-8131968
c:\windows\system32\dt\2012-04-30_14-06-45-8432203
c:\windows\system32\dt\2012-04-30_14-11-45-8732187
c:\windows\system32\dt\2012-04-30_14-16-45-9032187
c:\windows\system32\dt\2012-04-30_14-21-45-9332406
c:\windows\system32\dt\2012-04-30_14-26-45-9632281
c:\windows\system32\dt\2012-04-30_14-31-45-9932296
c:\windows\system32\dt\2012-04-30_14-36-45-10232171
c:\windows\system32\dt\2012-04-30_16-45-24-332828
c:\windows\system32\dt\2012-04-30_16-50-24-632796
c:\windows\system32\dt\2012-04-30_16-55-24-932812
c:\windows\system32\dt\2012-04-30_17-00-24-1232921
c:\windows\system32\dt\2012-04-30_17-05-24-1532796
c:\windows\system32\dt\2012-04-30_17-10-24-1832843
c:\windows\system32\dt\2012-04-30_18-25-15-324953
c:\windows\system32\dt\2012-04-30_18-30-15-625296
c:\windows\system32\dt\2012-04-30_18-35-15-924968
c:\windows\system32\dt\2012-04-30_18-40-15-1224937
c:\windows\system32\dt\2012-04-30_18-45-15-1524921
c:\windows\system32\dt\2012-04-30_18-50-16-1825937
c:\windows\system32\dt\2012-04-30_18-55-15-2125875
c:\windows\system32\dt\2012-04-30_19-00-15-2425234
c:\windows\system32\dt\2012-04-30_19-05-15-2725000
c:\windows\system32\dt\2012-04-30_19-10-15-3025031
c:\windows\system32\dt\2012-04-30_19-15-15-3325078
c:\windows\system32\dt\2012-04-30_19-20-15-3625640
c:\windows\system32\dt\2012-04-30_19-25-15-3925046
c:\windows\system32\dt\2012-04-30_20-52-04-331906
c:\windows\system32\dt\2012-04-30_20-57-04-631593
c:\windows\system32\dt\2012-04-30_21-02-05-931750
c:\windows\system32\dt\2012-04-30_21-07-04-1231656
c:\windows\system32\dt\2012-04-30_21-12-05-1532218
c:\windows\system32\dt\2012-04-30_21-17-04-1831453
c:\windows\system32\dt\2012-04-30_21-22-05-2132171
c:\windows\system32\dt\2012-04-30_21-27-05-2432062
c:\windows\system32\dt\2012-04-30_21-32-05-2732406
c:\windows\system32\dt\2012-04-30_21-37-05-3032468
c:\windows\system32\dt\2012-04-30_21-42-05-3332734
c:\windows\system32\dt\2012-04-30_21-47-05-3632093
c:\windows\system32\dt\2012-04-30_21-52-04-3931421
c:\windows\system32\dt\2012-04-30_21-57-07-4233671
c:\windows\system32\dt\2012-04-30_22-02-04-4531406
c:\windows\system32\dt\2012-04-30_22-07-04-4831578
c:\windows\system32\dt\2012-04-30_22-12-04-5131515
c:\windows\system32\dt\2012-04-30_22-17-04-5431515
c:\windows\system32\dt\2012-04-30_22-49-21-333296
c:\windows\system32\dt\2012-04-30_22-54-21-633125
c:\windows\system32\dt\2012-04-30_22-59-21-933031
c:\windows\system32\dt\2012-04-30_23-04-21-1233031
c:\windows\system32\dt\2012-04-30_23-09-21-1533078
c:\windows\system32\dt\2012-04-30_23-14-21-1833093
c:\windows\system32\dt\2012-04-30_23-19-21-2133031
c:\windows\system32\dt\2012-04-30_23-24-21-2433031
c:\windows\system32\dt\2012-04-30_23-29-21-2733390
c:\windows\system32\dt\2012-04-30_23-34-21-3033312
c:\windows\system32\dt\2012-04-30_23-39-21-3333140
c:\windows\system32\dt\2012-04-30_23-44-21-3633140
c:\windows\system32\dt\2012-04-30_23-49-21-3933312
c:\windows\system32\dt\2012-04-30_23-54-21-4233234
c:\windows\system32\dt\2012-04-30_23-59-21-4532609
c:\windows\system32\dt\2012-05-01_00-04-21-4833296
c:\windows\system32\dt\2012-05-01_00-09-21-5133250
c:\windows\system32\dt\2012-05-01_00-14-21-5433156
c:\windows\system32\dt\2012-05-01_00-19-21-5733328
c:\windows\system32\dt\2012-05-01_00-24-21-6032609
c:\windows\system32\dt\2012-05-01_00-29-21-6333234
c:\windows\system32\dt\2012-05-01_00-34-21-6633125
c:\windows\system32\dt\2012-05-01_00-39-21-6933296
c:\windows\system32\dt\2012-05-01_00-44-21-7233203
c:\windows\system32\dt\2012-05-01_00-49-21-7532609
c:\windows\system32\dt\2012-05-01_00-54-21-7833250
c:\windows\system32\dt\2012-05-01_00-59-21-8132609
c:\windows\system32\dt\2012-05-01_01-04-21-8432609
c:\windows\system32\dt\2012-05-01_01-09-21-8732609
c:\windows\system32\dt\2012-05-01_08-53-38-467250
c:\windows\system32\dt\2012-05-01_08-58-38-767234
c:\windows\system32\dt\2012-05-02_09-00-10-339453
c:\windows\system32\dt\2012-05-02_09-05-11-640578
c:\windows\system32\dt\2012-05-02_09-10-11-940640
c:\windows\system32\dt\2012-05-02_09-15-10-1239453
c:\windows\system32\dt\2012-05-02_09-20-10-1539421
c:\windows\system32\dt\2012-05-02_09-25-10-1839515
c:\windows\system32\dt\2012-05-02_09-30-10-2139437
c:\windows\system32\dt\2012-05-02_09-35-10-2439437
c:\windows\system32\dt\2012-05-02_09-40-10-2739484
c:\windows\system32\dt\2012-05-02_09-48-22-3230953
c:\windows\system32\dt\2012-05-02_09-53-17-3526203
c:\windows\system32\dt\2012-05-02_09-58-16-3825484
c:\windows\system32\dt\2012-05-02_10-08-58-330781
c:\windows\system32\dt\2012-05-02_10-13-58-630828
c:\windows\system32\dt\2012-05-02_10-18-58-930781
c:\windows\system32\dt\2012-05-02_10-23-58-1230812
c:\windows\system32\dt\2012-05-02_10-28-58-1530812
c:\windows\system32\dt\2012-05-02_10-33-58-1830781
c:\windows\system32\dt\2012-05-02_10-38-58-2131421
c:\windows\system32\dt\2012-05-02_10-43-58-2431218
c:\windows\system32\dt\2012-05-02_10-48-58-2730750
c:\windows\system32\dt\2012-05-02_10-53-58-3030843
c:\windows\system32\dt\2012-05-02_10-58-59-3331703
c:\windows\system32\dt\2012-05-02_11-03-58-3630812
c:\windows\system32\dt\2012-05-02_11-08-58-3930812
c:\windows\system32\dt\2012-05-02_11-14-01-4233640
c:\windows\system32\dt\2012-05-02_11-18-59-4532031
c:\windows\system32\dt\2012-05-02_11-23-58-4831531
c:\windows\system32\dt\2012-05-02_11-28-58-5131140
c:\windows\system32\dt\2012-05-02_11-33-58-5431578
c:\windows\system32\dt\2012-05-02_11-38-58-5730843
c:\windows\system32\dt\2012-05-02_11-43-58-6030875
c:\windows\system32\dt\2012-05-02_11-48-58-6330890
c:\windows\system32\dt\2012-05-02_11-53-58-6630890
c:\windows\system32\dt\2012-05-02_11-58-58-6930921
c:\windows\system32\dt\2012-05-02_12-03-58-7230750
c:\windows\system32\dt\2012-05-02_12-12-58-328968
c:\windows\system32\dt\2012-05-02_12-17-58-628953
c:\windows\system32\dt\2012-05-02_12-22-58-928906
c:\windows\system32\dt\2012-05-02_12-27-58-1229203
c:\windows\system32\dt\2012-05-02_12-32-57-1528687
c:\windows\system32\dt\2012-05-02_13-05-59-338375
c:\windows\system32\dt\2012-05-02_13-10-59-638359
c:\windows\system32\dt\2012-05-02_13-15-59-938343
c:\windows\system32\dt\2012-05-02_13-20-59-1238343
c:\windows\system32\dt\2012-05-02_13-25-59-1538421
c:\windows\system32\dt\2012-05-02_13-30-59-1838421
c:\windows\system32\dt\2012-05-02_13-35-59-2138531
c:\windows\system32\dt\2012-05-02_13-40-59-2438421
c:\windows\system32\dt\2012-05-02_13-45-59-2738406
c:\windows\system32\dt\2012-05-02_13-50-59-3038484
c:\windows\system32\dt\2012-05-02_13-55-59-3338343
c:\windows\system32\dt\2012-05-02_14-00-59-3638359
c:\windows\system32\dt\2012-05-02_14-05-59-3938406
c:\windows\system32\dt\2012-05-02_14-10-59-4238437
c:\windows\system32\dt\2012-05-02_14-15-59-4538343
c:\windows\system32\dt\2012-05-02_14-20-59-4838406
c:\windows\system32\dt\2012-05-02_14-25-59-5138343
c:\windows\system32\dt\2012-05-02_14-30-59-5437890
c:\windows\system32\dt\2012-05-02_14-35-59-5737890
c:\windows\system32\dt\2012-05-02_14-40-59-6037890
c:\windows\system32\dt\2012-05-02_14-45-59-6337890
c:\windows\system32\dt\2012-05-02_14-50-59-6637890
c:\windows\system32\dt\2012-05-02_14-55-59-6937875
c:\windows\system32\dt\2012-05-02_15-00-59-7237906
c:\windows\system32\dt\2012-05-02_15-19-03-330546
c:\windows\system32\dt\2012-05-02_15-24-04-630875
c:\windows\system32\dt\2012-05-02_15-29-04-930906
c:\windows\system32\dt\2012-05-02_15-34-04-1230703
c:\windows\system32\dt\2012-05-02_15-39-04-1530953
c:\windows\system32\dt\2012-05-02_15-44-04-1830843
c:\windows\system32\dt\2012-05-02_15-49-04-2130984
c:\windows\system32\dt\2012-05-02_15-54-04-2430765
c:\windows\system32\dt\2012-05-02_15-59-03-2730468
c:\windows\system32\dt\2012-05-02_16-04-04-3030875
c:\windows\system32\dt\2012-05-02_16-09-04-3330796
c:\windows\system32\dt\2012-05-02_16-14-04-3631031
c:\windows\system32\dt\2012-05-02_16-19-04-3930656
c:\windows\system32\dt\2012-05-02_16-24-04-4230687
c:\windows\system32\dt\2012-05-02_16-29-04-4530921
c:\windows\system32\dt\2012-05-02_16-34-04-4831125
c:\windows\system32\dt\2012-05-02_16-39-04-5130593
c:\windows\system32\dt\2012-05-02_16-44-03-5430453
c:\windows\system32\dt\2012-05-02_17-46-36-328796
c:\windows\system32\dt\2012-05-02_17-51-36-628828
c:\windows\system32\dt\2012-05-02_17-56-36-928781
c:\windows\system32\dt\2012-05-02_18-01-36-1228875
c:\windows\system32\dt\2012-05-02_18-06-36-1528968
c:\windows\system32\dt\th_2012-04-25_08-54-37-7474984
c:\windows\system32\dt\th_2012-04-25_08-59-37-7769875
c:\windows\system32\dt\th_2012-04-25_09-04-37-8069875
c:\windows\system32\dt\th_2012-04-25_09-09-33-8366203
c:\windows\system32\dt\th_2012-04-25_09-14-37-8669890
c:\windows\system32\dt\th_2012-04-25_09-19-31-8964437
c:\windows\system32\dt\th_2012-04-25_09-24-31-9264421
c:\windows\system32\dt\th_2012-04-25_09-29-31-9564421
c:\windows\system32\dt\th_2012-04-25_09-34-31-9864468
c:\windows\system32\dt\th_2012-04-25_09-39-31-10164453
c:\windows\system32\dt\th_2012-04-25_09-44-31-10464468
c:\windows\system32\dt\th_2012-04-25_09-49-32-10764593
c:\windows\system32\dt\th_2012-04-25_09-54-31-11064546
c:\windows\system32\dt\th_2012-04-25_09-59-31-11364437
c:\windows\system32\dt\th_2012-04-25_10-04-32-11665046
c:\windows\system32\dt\th_2012-04-25_10-09-31-11964437
c:\windows\system32\dt\th_2012-04-25_10-14-31-12264562
c:\windows\system32\dt\th_2012-04-25_10-19-31-12564468
c:\windows\system32\dt\th_2012-04-25_10-24-32-12864656
c:\windows\system32\dt\th_2012-04-25_10-29-32-13164828
c:\windows\system32\dt\th_2012-04-25_10-34-31-13464859
c:\windows\system32\dt\th_2012-04-25_10-39-31-13764562
c:\windows\system32\dt\th_2012-04-25_10-44-37-14070031
c:\windows\system32\dt\th_2012-04-25_10-49-36-14369031
c:\windows\system32\dt\th_2012-04-25_10-54-40-14673046
c:\windows\system32\dt\th_2012-04-25_10-59-36-14969031
c:\windows\system32\dt\th_2012-04-25_11-04-31-15264625
c:\windows\system32\dt\th_2012-04-25_11-09-31-15564625
c:\windows\system32\dt\th_2012-04-25_11-14-31-15864578
c:\windows\system32\dt\th_2012-04-25_14-40-52-333812
c:\windows\system32\dt\th_2012-04-25_14-45-52-633796
c:\windows\system32\dt\th_2012-04-25_14-50-52-933796
c:\windows\system32\dt\th_2012-04-25_14-55-52-1233812
c:\windows\system32\dt\th_2012-04-25_15-00-52-1533828
c:\windows\system32\dt\th_2012-04-25_15-05-52-1833796
c:\windows\system32\dt\th_2012-04-25_15-10-52-2134156
c:\windows\system32\dt\th_2012-04-25_15-15-52-2434328
c:\windows\system32\dt\th_2012-04-25_15-20-52-2734109
c:\windows\system32\dt\th_2012-04-25_15-25-52-3033953
c:\windows\system32\dt\th_2012-04-25_15-30-52-3334265
c:\windows\system32\dt\th_2012-04-25_15-35-52-3634093
c:\windows\system32\dt\th_2012-04-25_15-40-52-3934015
c:\windows\system32\dt\th_2012-04-25_15-45-52-4234156
c:\windows\system32\dt\th_2012-04-25_15-50-52-4533968
c:\windows\system32\dt\th_2012-04-25_15-55-52-4833953
c:\windows\system32\dt\th_2012-04-25_16-00-52-5133812
c:\windows\system32\dt\th_2012-04-25_16-05-52-5434031
c:\windows\system32\dt\th_2012-04-25_16-10-52-5733984
c:\windows\system32\dt\th_2012-04-25_16-15-52-6033875
c:\windows\system32\dt\th_2012-04-25_16-20-52-6334093
c:\windows\system32\dt\th_2012-04-25_16-25-52-6633953
c:\windows\system32\dt\th_2012-04-25_16-30-52-6934218
c:\windows\system32\dt\th_2012-04-25_16-35-52-7234265
c:\windows\system32\dt\th_2012-04-25_16-40-52-7533984
c:\windows\system32\dt\th_2012-04-25_16-45-52-7833812
c:\windows\system32\dt\th_2012-04-25_16-50-52-8133953
c:\windows\system32\dt\th_2012-04-25_16-55-52-8433875
c:\windows\system32\dt\th_2012-04-25_17-23-29-333109
c:\windows\system32\dt\th_2012-04-25_17-28-29-633125
c:\windows\system32\dt\th_2012-04-25_17-33-29-933140
c:\windows\system32\dt\th_2012-04-25_17-38-29-1233140
c:\windows\system32\dt\th_2012-04-25_17-43-29-1533125
c:\windows\system32\dt\th_2012-04-25_17-48-29-1833140
c:\windows\system32\dt\th_2012-04-25_17-53-29-2133171
c:\windows\system32\dt\th_2012-04-25_17-58-29-2433140
c:\windows\system32\dt\th_2012-04-25_18-03-29-2733125
c:\windows\system32\dt\th_2012-04-25_18-08-29-3033171
c:\windows\system32\dt\th_2012-04-25_18-13-29-3333140
c:\windows\system32\dt\th_2012-04-25_18-18-29-3633140
c:\windows\system32\dt\th_2012-04-25_18-23-29-3933140
c:\windows\system32\dt\th_2012-04-26_08-36-24-333640
c:\windows\system32\dt\th_2012-04-26_08-41-24-633562
c:\windows\system32\dt\th_2012-04-26_08-46-23-933546
c:\windows\system32\dt\th_2012-04-26_08-51-24-1233593
c:\windows\system32\dt\th_2012-04-26_08-56-27-1537390
c:\windows\system32\dt\th_2012-04-26_09-01-28-1837671
c:\windows\system32\dt\th_2012-04-26_09-06-27-2137265
c:\windows\system32\dt\th_2012-04-26_09-11-27-2437593
c:\windows\system32\dt\th_2012-04-26_09-16-27-2737531
c:\windows\system32\dt\th_2012-04-26_09-21-28-3038453
c:\windows\system32\dt\th_2012-04-26_09-26-28-3337640
c:\windows\system32\dt\th_2012-04-26_09-31-27-3637343
c:\windows\system32\dt\th_2012-04-26_09-36-28-3938562
c:\windows\system32\dt\th_2012-04-26_09-41-27-4237343
c:\windows\system32\dt\th_2012-04-26_10-41-08-331562
c:\windows\system32\dt\th_2012-04-26_10-46-09-631640
c:\windows\system32\dt\th_2012-04-26_10-51-09-931562
c:\windows\system32\dt\th_2012-04-26_10-56-08-1231515
c:\windows\system32\dt\th_2012-04-26_11-01-09-1531843
c:\windows\system32\dt\th_2012-04-26_11-06-08-1831546
c:\windows\system32\dt\th_2012-04-26_11-11-08-2131515
c:\windows\system32\dt\th_2012-04-26_11-16-08-2431515
c:\windows\system32\dt\th_2012-04-26_11-21-08-2731531
c:\windows\system32\dt\th_2012-04-26_11-26-08-3031546
c:\windows\system32\dt\th_2012-04-26_11-31-08-3331531
c:\windows\system32\dt\th_2012-04-26_11-36-09-3631781
c:\windows\system32\dt\th_2012-04-26_13-03-14-336578
c:\windows\system32\dt\th_2012-04-26_13-08-14-636140
c:\windows\system32\dt\th_2012-04-26_13-13-14-936328
c:\windows\system32\dt\th_2012-04-26_13-18-14-1236296
c:\windows\system32\dt\th_2012-04-26_13-23-14-1536265
c:\windows\system32\dt\th_2012-04-26_13-28-14-1836218
c:\windows\system32\dt\th_2012-04-26_13-33-14-2136421
c:\windows\system32\dt\th_2012-04-26_13-38-14-2436265
c:\windows\system32\dt\th_2012-04-26_13-43-14-2736312
c:\windows\system32\dt\th_2012-04-26_13-48-14-3036359
c:\windows\system32\dt\th_2012-04-26_13-53-14-3336187
c:\windows\system32\dt\th_2012-04-26_13-58-14-3636343
c:\windows\system32\dt\th_2012-04-26_14-03-14-3936328
c:\windows\system32\dt\th_2012-04-26_14-08-14-4236343
c:\windows\system32\dt\th_2012-04-26_14-13-14-4536375
c:\windows\system32\dt\th_2012-04-26_14-18-14-4836531
c:\windows\system32\dt\th_2012-04-26_14-23-14-5136437
c:\windows\system32\dt\th_2012-04-26_14-28-14-5436000
c:\windows\system32\dt\th_2012-04-26_14-33-14-5736000
c:\windows\system32\dt\th_2012-04-26_14-38-14-6036328
c:\windows\system32\dt\th_2012-04-26_14-43-14-6336546
c:\windows\system32\dt\th_2012-04-26_14-48-14-6636000
c:\windows\system32\dt\th_2012-04-26_14-53-14-6936390
c:\windows\system32\dt\th_2012-04-26_14-58-14-7236578
c:\windows\system32\dt\th_2012-04-26_15-03-14-7536640
c:\windows\system32\dt\th_2012-04-26_15-08-14-7836312
c:\windows\system32\dt\th_2012-04-26_15-13-14-8136000
c:\windows\system32\dt\th_2012-04-26_15-18-14-8436390
c:\windows\system32\dt\th_2012-04-26_15-23-14-8736281
c:\windows\system32\dt\th_2012-04-26_15-28-14-9036000
c:\windows\system32\dt\th_2012-04-26_15-33-14-9336328
c:\windows\system32\dt\th_2012-04-26_15-38-14-9636578
c:\windows\system32\dt\th_2012-04-26_15-43-14-9936265
c:\windows\system32\dt\th_2012-04-26_15-48-14-10236000
c:\windows\system32\dt\th_2012-04-26_15-53-14-10536203
c:\windows\system32\dt\th_2012-04-26_15-58-15-10836906
c:\windows\system32\dt\th_2012-04-26_16-03-14-11136234
c:\windows\system32\dt\th_2012-04-26_16-08-14-11436265
c:\windows\system32\dt\th_2012-04-26_16-13-14-11736250
c:\windows\system32\dt\th_2012-04-26_16-18-14-12036296
c:\windows\system32\dt\th_2012-04-26_16-23-14-12336234
c:\windows\system32\dt\th_2012-04-26_16-28-14-12636250
c:\windows\system32\dt\th_2012-04-26_16-33-14-12936234
c:\windows\system32\dt\th_2012-04-26_16-38-14-13236031
c:\windows\system32\dt\th_2012-04-26_16-43-14-13536234
c:\windows\system32\dt\th_2012-04-26_16-48-14-13836015
c:\windows\system32\dt\th_2012-04-26_16-53-14-14136031
c:\windows\system32\dt\th_2012-04-26_21-41-09-495859
c:\windows\system32\dt\th_2012-04-26_21-46-09-795859
c:\windows\system32\dt\th_2012-04-26_21-51-09-1095875
c:\windows\system32\dt\th_2012-04-26_21-56-09-1395843
c:\windows\system32\dt\th_2012-04-26_22-01-09-1696312
c:\windows\system32\dt\th_2012-04-26_22-06-09-1995953
c:\windows\system32\dt\th_2012-04-26_22-21-09-2895906
c:\windows\system32\dt\th_2012-04-26_22-26-09-3195937
c:\windows\system32\dt\th_2012-04-26_22-31-09-3496265
c:\windows\system32\dt\th_2012-04-26_22-41-09-4096109
c:\windows\system32\dt\th_2012-04-26_22-46-09-4395906
c:\windows\system32\dt\th_2012-04-26_22-51-10-4698437
c:\windows\system32\dt\th_2012-04-26_22-56-09-4995968
c:\windows\system32\dt\th_2012-04-26_23-01-09-5296250
c:\windows\system32\dt\th_2012-04-27_10-19-18-547890
c:\windows\system32\dt\th_2012-04-27_10-24-08-833515
c:\windows\system32\dt\th_2012-04-27_10-29-13-1137906
c:\windows\system32\dt\th_2012-04-27_10-34-13-1437968
c:\windows\system32\dt\th_2012-04-27_10-39-13-1737921
c:\windows\system32\dt\th_2012-04-27_10-44-13-2037921
c:\windows\system32\dt\th_2012-04-27_10-49-14-2338937
c:\windows\system32\dt\th_2012-04-27_10-54-08-2633234
c:\windows\system32\dt\th_2012-04-27_10-59-08-2933218
c:\windows\system32\dt\th_2012-04-27_11-04-08-3233218
c:\windows\system32\dt\th_2012-04-27_11-09-08-3533218
c:\windows\system32\dt\th_2012-04-27_11-14-08-3833218
c:\windows\system32\dt\th_2012-04-27_11-19-08-4133234
c:\windows\system32\dt\th_2012-04-27_11-24-08-4433218
c:\windows\system32\dt\th_2012-04-27_11-29-08-4733234
c:\windows\system32\dt\th_2012-04-27_12-32-44-330718
c:\windows\system32\dt\th_2012-04-27_12-37-44-630734
c:\windows\system32\dt\th_2012-04-27_12-47-44-1230765
c:\windows\system32\dt\th_2012-04-27_12-52-44-1531046
c:\windows\system32\dt\th_2012-04-27_12-57-44-1830687
c:\windows\system32\dt\th_2012-04-27_13-02-44-2130750
c:\windows\system32\dt\th_2012-04-27_13-07-44-2430687
c:\windows\system32\dt\th_2012-04-27_13-12-44-2730703
c:\windows\system32\dt\th_2012-04-27_13-17-44-3030828
c:\windows\system32\dt\th_2012-04-27_13-22-44-3330750
c:\windows\system32\dt\th_2012-04-27_13-27-44-3630687
c:\windows\system32\dt\th_2012-04-27_13-32-44-3930687
c:\windows\system32\dt\th_2012-04-27_13-37-44-4230703
c:\windows\system32\dt\th_2012-04-27_13-42-44-4530671
c:\windows\system32\dt\th_2012-04-27_13-47-44-4830687
c:\windows\system32\dt\th_2012-04-27_13-52-44-5130750
c:\windows\system32\dt\th_2012-04-27_13-57-44-5431218
c:\windows\system32\dt\th_2012-04-27_14-02-44-5730921
c:\windows\system32\dt\th_2012-04-27_14-07-44-6030703
c:\windows\system32\dt\th_2012-04-27_14-12-44-6330890
c:\windows\system32\dt\th_2012-04-27_14-17-44-6631156
c:\windows\system32\dt\th_2012-04-27_14-22-44-6930703
c:\windows\system32\dt\th_2012-04-27_16-12-30-328609
c:\windows\system32\dt\th_2012-04-27_16-17-30-628640
c:\windows\system32\dt\th_2012-04-27_16-22-30-928718
c:\windows\system32\dt\th_2012-04-27_16-27-30-1228812
c:\windows\system32\dt\th_2012-04-27_16-32-30-1528609
c:\windows\system32\dt\th_2012-04-27_16-37-30-1828734
c:\windows\system32\dt\th_2012-04-27_16-42-30-2128671
c:\windows\system32\dt\th_2012-04-27_16-47-30-2429718
c:\windows\system32\dt\th_2012-04-27_16-52-30-2728671
c:\windows\system32\dt\th_2012-04-27_16-57-30-3028781
c:\windows\system32\dt\th_2012-04-27_17-51-03-609390
c:\windows\system32\dt\th_2012-04-27_17-56-03-909312
c:\windows\system32\dt\th_2012-04-27_18-01-03-1209250
c:\windows\system32\dt\th_2012-04-27_18-06-03-1509296
c:\windows\system32\dt\th_2012-04-27_19-29-00-330000
c:\windows\system32\dt\th_2012-04-28_04-45-23-351890
c:\windows\system32\dt\th_2012-04-28_04-50-23-651906
c:\windows\system32\dt\th_2012-04-28_04-55-23-951953
c:\windows\system32\dt\th_2012-04-28_05-00-23-1251906
c:\windows\system32\dt\th_2012-04-28_05-05-23-1551906
c:\windows\system32\dt\th_2012-04-28_05-10-23-1851890
c:\windows\system32\dt\th_2012-04-28_05-15-23-2151906
c:\windows\system32\dt\th_2012-04-28_05-20-23-2451890
c:\windows\system32\dt\th_2012-04-28_08-31-00-334234
c:\windows\system32\dt\th_2012-04-28_08-36-00-634390
c:\windows\system32\dt\th_2012-04-28_08-41-00-934359
c:\windows\system32\dt\th_2012-04-28_08-46-01-1234796
c:\windows\system32\dt\th_2012-04-28_08-51-00-1534343
c:\windows\system32\dt\th_2012-04-28_08-56-00-1834343
c:\windows\system32\dt\th_2012-04-28_09-01-00-2134375
c:\windows\system32\dt\th_2012-04-28_09-06-01-2434593
c:\windows\system32\dt\th_2012-04-28_09-11-00-2734421
c:\windows\system32\dt\th_2012-04-28_09-16-00-3034437
c:\windows\system32\dt\th_2012-04-28_09-21-00-3334343
c:\windows\system32\dt\th_2012-04-28_09-26-00-3634359
c:\windows\system32\dt\th_2012-04-28_09-31-00-3934375
c:\windows\system32\dt\th_2012-04-28_09-36-01-4235218
c:\windows\system32\dt\th_2012-04-28_09-41-00-4534406
c:\windows\system32\dt\th_2012-04-28_09-46-00-4834375
c:\windows\system32\dt\th_2012-04-28_09-51-00-5134343
c:\windows\system32\dt\th_2012-04-28_09-56-00-5434390
c:\windows\system32\dt\th_2012-04-28_10-01-01-5734984
c:\windows\system32\dt\th_2012-04-28_10-06-00-6034343
c:\windows\system32\dt\th_2012-04-28_11-15-57-327078
c:\windows\system32\dt\th_2012-04-28_11-25-57-927031
c:\windows\system32\dt\th_2012-04-28_11-30-57-1227031
c:\windows\system32\dt\th_2012-04-28_16-46-48-321765
c:\windows\system32\dt\th_2012-04-28_16-51-48-621750
c:\windows\system32\dt\th_2012-04-28_16-56-48-921750
c:\windows\system32\dt\th_2012-04-28_17-01-48-1221734
c:\windows\system32\dt\th_2012-04-28_18-58-06-328218
c:\windows\system32\dt\th_2012-04-28_19-03-05-627140
c:\windows\system32\dt\th_2012-04-28_19-08-05-926812
c:\windows\system32\dt\th_2012-04-28_19-13-05-1226828
c:\windows\system32\dt\th_2012-04-28_19-23-49-472468
c:\windows\system32\dt\th_2012-04-28_19-28-50-782968
c:\windows\system32\dt\th_2012-04-28_19-33-52-1075484
c:\windows\system32\dt\th_2012-04-28_19-53-49-2272437
c:\windows\system32\dt\th_2012-04-28_19-58-49-2572437
c:\windows\system32\dt\th_2012-04-28_20-03-49-2872562
c:\windows\system32\dt\th_2012-04-28_20-08-50-3172593
c:\windows\system32\dt\th_2012-04-28_20-13-50-3472640
c:\windows\system32\dt\th_2012-04-28_20-18-51-3786312
c:\windows\system32\dt\th_2012-04-28_20-23-59-4085218
c:\windows\system32\dt\th_2012-04-28_20-28-59-4384812
c:\windows\system32\dt\th_2012-04-28_20-33-49-4672640
c:\windows\system32\dt\th_2012-04-28_20-38-49-4972484
c:\windows\system32\dt\th_2012-04-28_20-43-51-5280859
c:\windows\system32\dt\th_2012-04-28_20-48-50-5572843
c:\windows\system32\dt\th_2012-04-28_20-53-59-5885671
c:\windows\system32\dt\th_2012-04-28_20-58-59-6187296
c:\windows\system32\dt\th_2012-04-28_21-03-59-6482312
c:\windows\system32\dt\th_2012-04-28_21-08-59-6782312
c:\windows\system32\dt\th_2012-04-28_21-13-54-7082312
c:\windows\system32\dt\th_2012-04-28_21-18-59-7382343
c:\windows\system32\dt\th_2012-04-28_21-36-39-324046
c:\windows\system32\dt\th_2012-04-28_21-41-39-624031
c:\windows\system32\dt\th_2012-04-28_21-46-39-924031
c:\windows\system32\dt\th_2012-04-28_21-51-39-1224031
c:\windows\system32\dt\th_2012-04-28_21-56-39-1524250
c:\windows\system32\dt\th_2012-04-28_22-01-39-1824062
c:\windows\system32\dt\th_2012-04-28_22-06-39-2124109
c:\windows\system32\dt\th_2012-04-28_22-11-39-2424078
c:\windows\system32\dt\th_2012-04-28_22-16-39-2724109
c:\windows\system32\dt\th_2012-04-28_22-21-39-3024078
c:\windows\system32\dt\th_2012-04-28_22-26-39-3323890
c:\windows\system32\dt\th_2012-04-28_22-37-43-324578
c:\windows\system32\dt\th_2012-04-28_22-42-43-624203
c:\windows\system32\dt\th_2012-04-28_22-47-43-924375
c:\windows\system32\dt\th_2012-04-28_22-52-43-1224250
c:\windows\system32\dt\th_2012-04-28_22-57-43-1524218
c:\windows\system32\dt\th_2012-04-28_23-02-43-1824328
c:\windows\system32\dt\th_2012-04-28_23-07-43-2124437
c:\windows\system32\dt\th_2012-04-28_23-12-43-2424468
c:\windows\system32\dt\th_2012-04-28_23-17-43-2724484
c:\windows\system32\dt\th_2012-04-28_23-22-43-3024515
c:\windows\system32\dt\th_2012-04-28_23-27-43-3324187
c:\windows\system32\dt\th_2012-04-29_08-48-57-327593
c:\windows\system32\dt\th_2012-04-29_08-53-57-628046
c:\windows\system32\dt\th_2012-04-29_08-58-57-927671
c:\windows\system32\dt\th_2012-04-29_09-03-57-1227812
c:\windows\system32\dt\th_2012-04-29_09-08-57-1527687
c:\windows\system32\dt\th_2012-04-29_09-13-57-1828281
c:\windows\system32\dt\th_2012-04-29_09-18-57-2128375
c:\windows\system32\dt\th_2012-04-29_09-23-57-2428171
c:\windows\system32\dt\th_2012-04-29_09-28-57-2728171
c:\windows\system32\dt\th_2012-04-29_09-33-57-3028031
c:\windows\system32\dt\th_2012-04-29_09-38-57-3327671
c:\windows\system32\dt\th_2012-04-29_09-43-57-3628000
c:\windows\system32\dt\th_2012-04-29_09-48-57-3927781
c:\windows\system32\dt\th_2012-04-29_09-53-57-4227953
c:\windows\system32\dt\th_2012-04-29_09-58-57-4527937
c:\windows\system32\dt\th_2012-04-29_10-03-57-4827984
c:\windows\system32\dt\th_2012-04-29_10-08-57-5127953
c:\windows\system32\dt\th_2012-04-29_10-13-57-5427828
c:\windows\system32\dt\th_2012-04-29_10-18-57-5727968
c:\windows\system32\dt\th_2012-04-29_10-23-57-6027765
c:\windows\system32\dt\th_2012-04-29_10-28-57-6327625
c:\windows\system32\dt\th_2012-04-29_10-33-57-6627906
c:\windows\system32\dt\th_2012-04-29_10-38-57-6927828
c:\windows\system32\dt\th_2012-04-29_10-43-57-7227937
c:\windows\system32\dt\th_2012-04-29_10-48-57-7528031
c:\windows\system32\dt\th_2012-04-29_10-53-57-7827734
c:\windows\system32\dt\th_2012-04-29_10-58-57-8128218
c:\windows\system32\dt\th_2012-04-29_11-03-57-8428250
c:\windows\system32\dt\th_2012-04-29_11-08-57-8728171
c:\windows\system32\dt\th_2012-04-29_11-13-57-9027859
c:\windows\system32\dt\th_2012-04-29_11-18-57-9327906
c:\windows\system32\dt\th_2012-04-29_11-23-57-9627984
c:\windows\system32\dt\th_2012-04-29_11-28-57-9927937
c:\windows\system32\dt\th_2012-04-29_11-33-57-10227671
c:\windows\system32\dt\th_2012-04-29_11-38-57-10528046
c:\windows\system32\dt\th_2012-04-29_12-15-18-328078
c:\windows\system32\dt\th_2012-04-29_12-20-18-628093
c:\windows\system32\dt\th_2012-04-29_12-25-18-928218
c:\windows\system32\dt\th_2012-04-29_12-30-18-1228281
c:\windows\system32\dt\th_2012-04-29_12-35-18-1528421
c:\windows\system32\dt\th_2012-04-29_12-40-18-1828296
c:\windows\system32\dt\th_2012-04-29_12-45-18-2128421
c:\windows\system32\dt\th_2012-04-29_12-50-18-2428453
c:\windows\system32\dt\th_2012-04-29_12-55-18-2728390
c:\windows\system32\dt\th_2012-04-29_13-00-18-3028296
c:\windows\system32\dt\th_2012-04-29_13-05-18-3328687
c:\windows\system32\dt\th_2012-04-29_13-10-18-3628062
c:\windows\system32\dt\th_2012-04-29_13-15-18-3928125
c:\windows\system32\dt\th_2012-04-29_13-20-18-4228062
c:\windows\system32\dt\th_2012-04-29_13-25-18-4528359
c:\windows\system32\dt\th_2012-04-29_13-30-18-4828265
c:\windows\system32\dt\th_2012-04-29_13-35-18-5128281
c:\windows\system32\dt\th_2012-04-29_13-40-18-5428718
c:\windows\system32\dt\th_2012-04-29_13-45-18-5728406
c:\windows\system32\dt\th_2012-04-29_13-50-18-6028171
c:\windows\system32\dt\th_2012-04-29_13-55-18-6328328
c:\windows\system32\dt\th_2012-04-29_14-00-18-6628531
c:\windows\system32\dt\th_2012-04-29_14-05-18-6928359
c:\windows\system32\dt\th_2012-04-29_14-10-18-7228531
c:\windows\system32\dt\th_2012-04-29_14-15-18-7528625
c:\windows\system32\dt\th_2012-04-29_14-20-18-7828390
c:\windows\system32\dt\th_2012-04-29_14-25-18-8128281
c:\windows\system32\dt\th_2012-04-29_14-30-18-8428437
c:\windows\system32\dt\th_2012-04-29_15-55-42-329953
c:\windows\system32\dt\th_2012-04-29_16-00-42-629859
c:\windows\system32\dt\th_2012-04-29_16-05-42-929875
c:\windows\system32\dt\th_2012-04-29_16-10-41-1229921
c:\windows\system32\dt\th_2012-04-29_16-15-42-1530250
c:\windows\system32\dt\th_2012-04-29_16-20-42-1829875
c:\windows\system32\dt\th_2012-04-29_16-25-42-2129953
c:\windows\system32\dt\th_2012-04-29_16-30-42-2429906
c:\windows\system32\dt\th_2012-04-29_16-35-42-2729937
c:\windows\system32\dt\th_2012-04-29_16-40-42-3029890
c:\windows\system32\dt\th_2012-04-29_16-45-41-3329859
c:\windows\system32\dt\th_2012-04-29_16-50-41-3629921
c:\windows\system32\dt\th_2012-04-29_16-55-41-3929875
c:\windows\system32\dt\th_2012-04-29_17-00-42-4229843
c:\windows\system32\dt\th_2012-04-29_17-05-42-4529859
c:\windows\system32\dt\th_2012-04-29_19-09-14-323000
c:\windows\system32\dt\th_2012-04-29_19-14-14-622984
c:\windows\system32\dt\th_2012-04-29_19-54-06-340250
c:\windows\system32\dt\th_2012-04-29_19-58-57-630609
c:\windows\system32\dt\th_2012-04-29_20-03-57-931093
c:\windows\system32\dt\th_2012-04-29_20-08-57-1230937
c:\windows\system32\dt\th_2012-04-29_20-13-57-1530937
c:\windows\system32\dt\th_2012-04-29_20-18-57-1831250
c:\windows\system32\dt\th_2012-04-29_20-23-57-2131031
c:\windows\system32\dt\th_2012-04-29_20-28-57-2430921
c:\windows\system32\dt\th_2012-04-29_20-33-57-2730984
c:\windows\system32\dt\th_2012-04-29_20-38-57-3030937
c:\windows\system32\dt\th_2012-04-29_20-43-57-3330937
c:\windows\system32\dt\th_2012-04-29_20-48-57-3630968
c:\windows\system32\dt\th_2012-04-29_20-53-57-3930937
c:\windows\system32\dt\th_2012-04-29_20-58-57-4231015
c:\windows\system32\dt\th_2012-04-29_21-03-57-4530953
c:\windows\system32\dt\th_2012-04-29_21-08-57-4830953
c:\windows\system32\dt\th_2012-04-29_21-13-57-5130953
c:\windows\system32\dt\th_2012-04-29_21-18-57-5431062
c:\windows\system32\dt\th_2012-04-29_21-23-57-5730953
c:\windows\system32\dt\th_2012-04-29_21-28-57-6031000
c:\windows\system32\dt\th_2012-04-29_21-33-57-6331000
c:\windows\system32\dt\th_2012-04-29_21-38-57-6631265
c:\windows\system32\dt\th_2012-04-29_21-43-57-6931125
c:\windows\system32\dt\th_2012-04-29_21-48-57-7231171
c:\windows\system32\dt\th_2012-04-29_21-53-57-7531203
c:\windows\system32\dt\th_2012-04-29_21-58-57-7831234
c:\windows\system32\dt\th_2012-04-29_22-03-57-8131250
c:\windows\system32\dt\th_2012-04-29_22-08-57-8431171
c:\windows\system32\dt\th_2012-04-29_22-13-57-8731328
c:\windows\system32\dt\th_2012-04-29_22-18-57-9031140
c:\windows\system32\dt\th_2012-04-29_22-23-57-9331375
c:\windows\system32\dt\th_2012-04-29_22-28-57-9631218
c:\windows\system32\dt\th_2012-04-29_22-33-57-9931421
c:\windows\system32\dt\th_2012-04-30_07-47-14-343812
c:\windows\system32\dt\th_2012-04-30_07-52-14-643859
c:\windows\system32\dt\th_2012-04-30_07-57-14-944203
c:\windows\system32\dt\th_2012-04-30_08-02-14-1244015
c:\windows\system32\dt\th_2012-04-30_08-07-14-1544109
c:\windows\system32\dt\th_2012-04-30_08-12-14-1843921
c:\windows\system32\dt\th_2012-04-30_08-17-14-2144171
c:\windows\system32\dt\th_2012-04-30_08-22-14-2444687
c:\windows\system32\dt\th_2012-04-30_08-27-15-2744609
c:\windows\system32\dt\th_2012-04-30_09-30-16-331437
c:\windows\system32\dt\th_2012-04-30_09-35-16-631296
c:\windows\system32\dt\th_2012-04-30_09-40-16-931312
c:\windows\system32\dt\th_2012-04-30_09-45-16-1231328
c:\windows\system32\dt\th_2012-04-30_09-50-16-1531562
c:\windows\system32\dt\th_2012-04-30_09-55-16-1831250
c:\windows\system32\dt\th_2012-04-30_10-00-16-2131406
c:\windows\system32\dt\th_2012-04-30_10-05-17-2431656
c:\windows\system32\dt\th_2012-04-30_10-10-16-2731375
c:\windows\system32\dt\th_2012-04-30_10-15-17-3031734
c:\windows\system32\dt\th_2012-04-30_10-20-16-3331234
c:\windows\system32\dt\th_2012-04-30_10-25-16-3631265
c:\windows\system32\dt\th_2012-04-30_10-30-16-3931296
c:\windows\system32\dt\th_2012-04-30_10-35-16-4231468
c:\windows\system32\dt\th_2012-04-30_10-40-16-4531343
c:\windows\system32\dt\th_2012-04-30_10-45-16-4831281
c:\windows\system32\dt\th_2012-04-30_10-50-16-5131281
c:\windows\system32\dt\th_2012-04-30_10-55-16-5431359
c:\windows\system32\dt\th_2012-04-30_11-00-17-5731718
c:\windows\system32\dt\th_2012-04-30_11-05-17-6031718
c:\windows\system32\dt\th_2012-04-30_11-10-16-6331531
c:\windows\system32\dt\th_2012-04-30_11-15-16-6631296
c:\windows\system32\dt\th_2012-04-30_11-51-45-331968
c:\windows\system32\dt\th_2012-04-30_11-56-45-631968
c:\windows\system32\dt\th_2012-04-30_12-01-45-931968
c:\windows\system32\dt\th_2012-04-30_12-06-45-1232140
c:\windows\system32\dt\th_2012-04-30_12-11-45-1532031
c:\windows\system32\dt\th_2012-04-30_12-16-45-1832234
c:\windows\system32\dt\th_2012-04-30_12-21-45-2132234
c:\windows\system32\dt\th_2012-04-30_12-26-45-2432828
c:\windows\system32\dt\th_2012-04-30_12-31-46-2733000
c:\windows\system32\dt\th_2012-04-30_12-36-45-3031968
c:\windows\system32\dt\th_2012-04-30_12-41-45-3332156
c:\windows\system32\dt\th_2012-04-30_12-46-45-3632390
c:\windows\system32\dt\th_2012-04-30_12-51-45-3932640
c:\windows\system32\dt\th_2012-04-30_12-56-45-4232578
c:\windows\system32\dt\th_2012-04-30_13-01-45-4532718
c:\windows\system32\dt\th_2012-04-30_13-06-45-4832484
c:\windows\system32\dt\th_2012-04-30_13-11-45-5132125
c:\windows\system32\dt\th_2012-04-30_13-16-46-5432859
c:\windows\system32\dt\th_2012-04-30_13-21-45-5731968
c:\windows\system32\dt\th_2012-04-30_13-26-45-6032296
c:\windows\system32\dt\th_2012-04-30_13-31-45-6332468

c:\windows\system32\dt\2012-04-30_13-36-45-6632578
c:\windows\system32\dt\2012-04-30_13-41-45-6932203
c:\windows\system32\dt\2012-04-30_13-46-45-7232640
c:\windows\system32\dt\2012-04-30_13-51-45-7532687
c:\windows\system32\dt\2012-04-30_13-56-45-7832796
c:\windows\system32\dt\2012-04-30_14-01-45-8131968
c:\windows\system32\dt\2012-04-30_14-06-45-8432203
c:\windows\system32\dt\2012-04-30_14-11-45-8732187
c:\windows\system32\dt\2012-04-30_14-16-45-9032187
c:\windows\system32\dt\2012-04-30_14-21-45-9332406
c:\windows\system32\dt\2012-04-30_14-26-45-9632281
c:\windows\system32\dt\2012-04-30_14-31-45-9932296
c:\windows\system32\dt\2012-04-30_14-36-45-10232171
c:\windows\system32\dt\2012-04-30_16-45-24-332828
c:\windows\system32\dt\2012-04-30_16-50-24-632796
c:\windows\system32\dt\2012-04-30_16-55-24-932812
c:\windows\system32\dt\2012-04-30_17-00-24-1232921
c:\windows\system32\dt\2012-04-30_17-05-24-1532796
c:\windows\system32\dt\2012-04-30_17-10-24-1832843
c:\windows\system32\dt\2012-04-30_18-25-15-324953
c:\windows\system32\dt\2012-04-30_18-30-15-625296
c:\windows\system32\dt\2012-04-30_18-35-15-924968
c:\windows\system32\dt\2012-04-30_18-40-15-1224937
c:\windows\system32\dt\2012-04-30_18-45-15-1524921
c:\windows\system32\dt\2012-04-30_18-50-16-1825937
c:\windows\system32\dt\2012-04-30_18-55-15-2125875
c:\windows\system32\dt\2012-04-30_19-00-15-2425234
c:\windows\system32\dt\2012-04-30_19-05-15-2725000
c:\windows\system32\dt\2012-04-30_19-10-15-3025031
c:\windows\system32\dt\2012-04-30_19-15-15-3325078
c:\windows\system32\dt\2012-04-30_19-20-15-3625640
c:\windows\system32\dt\2012-04-30_19-25-15-3925046
c:\windows\system32\dt\2012-04-30_20-52-04-331906
c:\windows\system32\dt\2012-04-30_20-57-04-631593
c:\windows\system32\dt\2012-04-30_21-02-05-931750
c:\windows\system32\dt\2012-04-30_21-07-04-1231656
c:\windows\system32\dt\2012-04-30_21-12-05-1532218
c:\windows\system32\dt\2012-04-30_21-17-04-1831453
c:\windows\system32\dt\2012-04-30_21-22-05-2132171
c:\windows\system32\dt\2012-04-30_21-27-05-2432062
c:\windows\system32\dt\2012-04-30_21-32-05-2732406
c:\windows\system32\dt\2012-04-30_21-37-05-3032468
c:\windows\system32\dt\2012-04-30_21-42-05-3332734
c:\windows\system32\dt\2012-04-30_21-47-05-3632093
c:\windows\system32\dt\2012-04-30_21-52-04-3931421
c:\windows\system32\dt\2012-04-30_21-57-07-4233671
c:\windows\system32\dt\2012-04-30_22-02-04-4531406
c:\windows\system32\dt\2012-04-30_22-07-04-4831578
c:\windows\system32\dt\2012-04-30_22-12-04-5131515
c:\windows\system32\dt\2012-04-30_22-17-04-5431515
c:\windows\system32\dt\2012-04-30_22-49-21-333296
c:\windows\system32\dt\2012-04-30_22-54-21-633125
c:\windows\system32\dt\2012-04-30_22-59-21-933031
c:\windows\system32\dt\2012-04-30_23-04-21-1233031
c:\windows\system32\dt\2012-04-30_23-09-21-1533078
c:\windows\system32\dt\2012-04-30_23-14-21-1833093
c:\windows\system32\dt\2012-04-30_23-19-21-2133031
c:\windows\system32\dt\2012-04-30_23-24-21-2433031
c:\windows\system32\dt\2012-04-30_23-29-21-2733390
c:\windows\system32\dt\2012-04-30_23-34-21-3033312
c:\windows\system32\dt\2012-04-30_23-39-21-3333140
c:\windows\system32\dt\2012-04-30_23-44-21-3633140
c:\windows\system32\dt\2012-04-30_23-49-21-3933312
c:\windows\system32\dt\2012-04-30_23-54-21-4233234
c:\windows\system32\dt\2012-04-30_23-59-21-4532609
c:\windows\system32\dt\2012-05-01_00-04-21-4833296
c:\windows\system32\dt\2012-05-01_00-09-21-5133250
c:\windows\system32\dt\2012-05-01_00-14-21-5433156
c:\windows\system32\dt\2012-05-01_00-19-21-5733328
c:\windows\system32\dt\2012-05-01_00-24-21-6032609
c:\windows\system32\dt\2012-05-01_00-29-21-6333234
c:\windows\system32\dt\2012-05-01_00-34-21-6633125
c:\windows\system32\dt\2012-05-01_00-39-21-6933296
c:\windows\system32\dt\2012-05-01_00-44-21-7233203
c:\windows\system32\dt\2012-05-01_00-49-21-7532609
c:\windows\system32\dt\2012-05-01_00-54-21-7833250
c:\windows\system32\dt\2012-05-01_00-59-21-8132609
c:\windows\system32\dt\2012-05-01_01-04-21-8432609
c:\windows\system32\dt\2012-05-01_01-09-21-8732609
c:\windows\system32\dt\2012-05-01_08-53-38-467250
c:\windows\system32\dt\2012-05-01_08-58-38-767234
c:\windows\system32\dt\2012-05-02_09-00-10-339453
c:\windows\system32\dt\2012-05-02_09-05-11-640578
c:\windows\system32\dt\2012-05-02_09-10-11-940640
c:\windows\system32\dt\2012-05-02_09-15-10-1239453
c:\windows\system32\dt\2012-05-02_09-20-10-1539421
c:\windows\system32\dt\2012-05-02_09-25-10-1839515
c:\windows\system32\dt\2012-05-02_09-30-10-2139437
c:\windows\system32\dt\2012-05-02_09-35-10-2439437
c:\windows\system32\dt\2012-05-02_09-40-10-2739484
c:\windows\system32\dt\2012-05-02_09-48-22-3230953
c:\windows\system32\dt\2012-05-02_09-53-17-3526203
c:\windows\system32\dt\2012-05-02_09-58-16-3825484
c:\windows\system32\dt\2012-05-02_10-08-58-330781
c:\windows\system32\dt\2012-05-02_10-13-58-630828
c:\windows\system32\dt\2012-05-02_10-18-58-930781
c:\windows\system32\dt\2012-05-02_10-23-58-1230812
c:\windows\system32\dt\2012-05-02_10-28-58-1530812
c:\windows\system32\dt\2012-05-02_10-33-58-1830781
c:\windows\system32\dt\2012-05-02_10-38-58-2131421
c:\windows\system32\dt\2012-05-02_10-43-58-2431218
c:\windows\system32\dt\2012-05-02_10-48-58-2730750
c:\windows\system32\dt\2012-05-02_10-53-58-3030843
c:\windows\system32\dt\2012-05-02_10-58-59-3331703
c:\windows\system32\dt\2012-05-02_11-03-58-3630812
c:\windows\system32\dt\2012-05-02_11-08-58-3930812
c:\windows\system32\dt\2012-05-02_11-14-01-4233640
c:\windows\system32\dt\2012-05-02_11-18-59-4532031
c:\windows\system32\dt\2012-05-02_11-23-58-4831531
c:\windows\system32\dt\2012-05-02_11-28-58-5131140
c:\windows\system32\dt\2012-05-02_11-33-58-5431578
c:\windows\system32\dt\2012-05-02_11-38-58-5730843
c:\windows\system32\dt\2012-05-02_11-43-58-6030875
c:\windows\system32\dt\2012-05-02_11-48-58-6330890
c:\windows\system32\dt\2012-05-02_11-53-58-6630890
c:\windows\system32\dt\2012-05-02_11-58-58-6930921
c:\windows\system32\dt\2012-05-02_12-03-58-7230750
c:\windows\system32\dt\2012-05-02_12-12-58-328968
c:\windows\system32\dt\2012-05-02_12-17-58-628953
c:\windows\system32\dt\2012-05-02_12-22-58-928906
c:\windows\system32\dt\2012-05-02_12-27-58-1229203
c:\windows\system32\dt\2012-05-02_12-32-57-1528687
c:\windows\system32\dt\2012-05-02_13-05-59-338375
c:\windows\system32\dt\2012-05-02_13-10-59-638359
c:\windows\system32\dt\2012-05-02_13-15-59-938343
c:\windows\system32\dt\2012-05-02_13-20-59-1238343
c:\windows\system32\dt\2012-05-02_13-25-59-1538421
c:\windows\system32\dt\2012-05-02_13-30-59-1838421
c:\windows\system32\dt\2012-05-02_13-35-59-2138531
c:\windows\system32\dt\2012-05-02_13-40-59-2438421
c:\windows\system32\dt\2012-05-02_13-45-59-2738406
c:\windows\system32\dt\2012-05-02_13-50-59-3038484
c:\windows\system32\dt\2012-05-02_13-55-59-3338343
c:\windows\system32\dt\2012-05-02_14-00-59-3638359
c:\windows\system32\dt\2012-05-02_14-05-59-3938406
c:\windows\system32\dt\2012-05-02_14-10-59-4238437
c:\windows\system32\dt\2012-05-02_14-15-59-4538343
c:\windows\system32\dt\2012-05-02_14-20-59-4838406
c:\windows\system32\dt\2012-05-02_14-25-59-5138343
c:\windows\system32\dt\2012-05-02_14-30-59-5437890
c:\windows\system32\dt\2012-05-02_14-35-59-5737890
c:\windows\system32\dt\2012-05-02_14-40-59-6037890
c:\windows\system32\dt\2012-05-02_14-45-59-6337890
c:\windows\system32\dt\2012-05-02_14-50-59-6637890
c:\windows\system32\dt\2012-05-02_14-55-59-6937875
c:\windows\system32\dt\2012-05-02_15-00-59-7237906
c:\windows\system32\dt\2012-05-02_15-19-03-330546
c:\windows\system32\dt\2012-05-02_15-24-04-630875
c:\windows\system32\dt\2012-05-02_15-29-04-930906
c:\windows\system32\dt\2012-05-02_15-34-04-1230703
c:\windows\system32\dt\2012-05-02_15-39-04-1530953
c:\windows\system32\dt\2012-05-02_15-44-04-1830843
c:\windows\system32\dt\2012-05-02_15-49-04-2130984
c:\windows\system32\dt\2012-05-02_15-54-04-2430765
c:\windows\system32\dt\2012-05-02_15-59-03-2730468
c:\windows\system32\dt\2012-05-02_16-04-04-3030875
c:\windows\system32\dt\2012-05-02_16-09-04-3330796
c:\windows\system32\dt\2012-05-02_16-14-04-3631031
c:\windows\system32\dt\2012-05-02_16-19-04-3930656
c:\windows\system32\dt\2012-05-02_16-24-04-4230687
c:\windows\system32\dt\2012-05-02_16-29-04-4530921
c:\windows\system32\dt\2012-05-02_16-34-04-4831125
c:\windows\system32\dt\2012-05-02_16-39-04-5130593
c:\windows\system32\dt\2012-05-02_16-44-03-5430453
c:\windows\system32\dt\2012-05-02_17-46-36-328796
c:\windows\system32\dt\2012-05-02_17-51-36-628828
c:\windows\system32\dt\2012-05-02_17-56-36-928781
c:\windows\system32\dt\2012-05-02_18-01-36-1228875
c:\windows\system32\dt\2012-05-02_18-06-36-1528968
c:\windows\system32\dt\th_2012-04-25_08-54-37-7474984
c:\windows\system32\dt\th_2012-04-25_08-59-37-7769875
c:\windows\system32\dt\th_2012-04-25_09-04-37-8069875
c:\windows\system32\dt\th_2012-04-25_09-09-33-8366203
c:\windows\system32\dt\th_2012-04-25_09-14-37-8669890
c:\windows\system32\dt\th_2012-04-25_09-19-31-8964437
c:\windows\system32\dt\th_2012-04-25_09-24-31-9264421
c:\windows\system32\dt\th_2012-04-25_09-29-31-9564421
c:\windows\system32\dt\th_2012-04-25_09-34-31-9864468
c:\windows\system32\dt\th_2012-04-25_09-39-31-10164453
c:\windows\system32\dt\th_2012-04-25_09-44-31-10464468
c:\windows\system32\dt\th_2012-04-25_09-49-32-10764593
c:\windows\system32\dt\th_2012-04-25_09-54-31-11064546
c:\windows\system32\dt\th_2012-04-25_09-59-31-11364437
c:\windows\system32\dt\th_2012-04-25_10-04-32-11665046
c:\windows\system32\dt\th_2012-04-25_10-09-31-11964437
c:\windows\system32\dt\th_2012-04-25_10-14-31-12264562
c:\windows\system32\dt\th_2012-04-25_10-19-31-12564468
c:\windows\system32\dt\th_2012-04-25_10-24-32-12864656
c:\windows\system32\dt\th_2012-04-25_10-29-32-13164828
c:\windows\system32\dt\th_2012-04-25_10-34-31-13464859
c:\windows\system32\dt\th_2012-04-25_10-39-31-13764562
c:\windows\system32\dt\th_2012-04-25_10-44-37-14070031
c:\windows\system32\dt\th_2012-04-25_10-49-36-14369031
c:\windows\system32\dt\th_2012-04-25_10-54-40-14673046
c:\windows\system32\dt\th_2012-04-25_10-59-36-14969031
c:\windows\system32\dt\th_2012-04-25_11-04-31-15264625
c:\windows\system32\dt\th_2012-04-25_11-09-31-15564625
c:\windows\system32\dt\th_2012-04-25_11-14-31-15864578
c:\windows\system32\dt\th_2012-04-25_14-40-52-333812
c:\windows\system32\dt\th_2012-04-25_14-45-52-633796
c:\windows\system32\dt\th_2012-04-25_14-50-52-933796
c:\windows\system32\dt\th_2012-04-25_14-55-52-1233812
c:\windows\system32\dt\th_2012-04-25_15-00-52-1533828
c:\windows\system32\dt\th_2012-04-25_15-05-52-1833796
c:\windows\system32\dt\th_2012-04-25_15-10-52-2134156
c:\windows\system32\dt\th_2012-04-25_15-15-52-2434328
c:\windows\system32\dt\th_2012-04-25_15-20-52-2734109
c:\windows\system32\dt\th_2012-04-25_15-25-52-3033953
c:\windows\system32\dt\th_2012-04-25_15-30-52-3334265
c:\windows\system32\dt\th_2012-04-25_15-35-52-3634093
c:\windows\system32\dt\th_2012-04-25_15-40-52-3934015
c:\windows\system32\dt\th_2012-04-25_15-45-52-4234156
c:\windows\system32\dt\th_2012-04-25_15-50-52-4533968
c:\windows\system32\dt\th_2012-04-25_15-55-52-4833953
c:\windows\system32\dt\th_2012-04-25_16-00-52-5133812
c:\windows\system32\dt\th_2012-04-25_16-05-52-5434031
c:\windows\system32\dt\th_2012-04-25_16-10-52-5733984
c:\windows\system32\dt\th_2012-04-25_16-15-52-6033875
c:\windows\system32\dt\th_2012-04-25_16-20-52-6334093
c:\windows\system32\dt\th_2012-04-25_16-25-52-6633953
c:\windows\system32\dt\th_2012-04-25_16-30-52-6934218
c:\windows\system32\dt\th_2012-04-25_16-35-52-7234265
c:\windows\system32\dt\th_2012-04-25_16-40-52-7533984
c:\windows\system32\dt\th_2012-04-25_16-45-52-7833812
c:\windows\system32\dt\th_2012-04-25_16-50-52-8133953
c:\windows\system32\dt\th_2012-04-25_16-55-52-8433875
c:\windows\system32\dt\th_2012-04-25_17-23-29-333109
c:\windows\system32\dt\th_2012-04-25_17-28-29-633125
c:\windows\system32\dt\th_2012-04-25_17-33-29-933140
c:\windows\system32\dt\th_2012-04-25_17-38-29-1233140
c:\windows\system32\dt\th_2012-04-25_17-43-29-1533125
c:\windows\system32\dt\th_2012-04-25_17-48-29-1833140
c:\windows\system32\dt\th_2012-04-25_17-53-29-2133171
c:\windows\system32\dt\th_2012-04-25_17-58-29-2433140
c:\windows\system32\dt\th_2012-04-25_18-03-29-2733125
c:\windows\system32\dt\th_2012-04-25_18-08-29-3033171
c:\windows\system32\dt\th_2012-04-25_18-13-29-3333140
c:\windows\system32\dt\th_2012-04-25_18-18-29-3633140
c:\windows\system32\dt\th_2012-04-25_18-23-29-3933140
c:\windows\system32\dt\th_2012-04-26_08-36-24-333640
c:\windows\system32\dt\th_2012-04-26_08-41-24-633562
c:\windows\system32\dt\th_2012-04-26_08-46-23-933546
c:\windows\system32\dt\th_2012-04-26_08-51-24-1233593
c:\windows\system32\dt\th_2012-04-26_08-56-27-1537390
c:\windows\system32\dt\th_2012-04-26_09-01-28-1837671
c:\windows\system32\dt\th_2012-04-26_09-06-27-2137265
c:\windows\system32\dt\th_2012-04-26_09-11-27-2437593
c:\windows\system32\dt\th_2012-04-26_09-16-27-2737531
c:\windows\system32\dt\th_2012-04-26_09-21-28-3038453
c:\windows\system32\dt\th_2012-04-26_09-26-28-3337640
c:\windows\system32\dt\th_2012-04-26_09-31-27-3637343
c:\windows\system32\dt\th_2012-04-26_09-36-28-3938562
c:\windows\system32\dt\th_2012-04-26_09-41-27-4237343
c:\windows\system32\dt\th_2012-04-26_10-41-08-331562
c:\windows\system32\dt\th_2012-04-26_10-46-09-631640
c:\windows\system32\dt\th_2012-04-26_10-51-09-931562
c:\windows\system32\dt\th_2012-04-26_10-56-08-1231515
c:\windows\system32\dt\th_2012-04-26_11-01-09-1531843
c:\windows\system32\dt\th_2012-04-26_11-06-08-1831546
c:\windows\system32\dt\th_2012-04-26_11-11-08-2131515
c:\windows\system32\dt\th_2012-04-26_11-16-08-2431515
c:\windows\system32\dt\th_2012-04-26_11-21-08-2731531
c:\windows\system32\dt\th_2012-04-26_11-26-08-3031546
c:\windows\system32\dt\th_2012-04-26_11-31-08-3331531
c:\windows\system32\dt\th_2012-04-26_11-36-09-3631781
c:\windows\system32\dt\th_2012-04-26_13-03-14-336578
c:\windows\system32\dt\th_2012-04-26_13-08-14-636140
c:\windows\system32\dt\th_2012-04-26_13-13-14-936328
c:\windows\system32\dt\th_2012-04-26_13-18-14-1236296
c:\windows\system32\dt\th_2012-04-26_13-23-14-1536265
c:\windows\system32\dt\th_2012-04-26_13-28-14-1836218
c:\windows\system32\dt\th_2012-04-26_13-33-14-2136421
c:\windows\system32\dt\th_2012-04-26_13-38-14-2436265
c:\windows\system32\dt\th_2012-04-26_13-43-14-2736312
c:\windows\system32\dt\th_2012-04-26_13-48-14-3036359
c:\windows\system32\dt\th_2012-04-26_13-53-14-3336187
c:\windows\system32\dt\th_2012-04-26_13-58-14-3636343
c:\windows\system32\dt\th_2012-04-26_14-03-14-3936328
c:\windows\system32\dt\th_2012-04-26_14-08-14-4236343
c:\windows\system32\dt\th_2012-04-26_14-13-14-4536375
c:\windows\system32\dt\th_2012-04-26_14-18-14-4836531
c:\windows\system32\dt\th_2012-04-26_14-23-14-5136437
c:\windows\system32\dt\th_2012-04-26_14-28-14-5436000
c:\windows\system32\dt\th_2012-04-26_14-33-14-5736000
c:\windows\system32\dt\th_2012-04-26_14-38-14-6036328
c:\windows\system32\dt\th_2012-04-26_14-43-14-6336546
c:\windows\system32\dt\th_2012-04-26_14-48-14-6636000
c:\windows\system32\dt\th_2012-04-26_14-53-14-6936390
c:\windows\system32\dt\th_2012-04-26_14-58-14-7236578
c:\windows\system32\dt\th_2012-04-26_15-03-14-7536640
c:\windows\system32\dt\th_2012-04-26_15-08-14-7836312
c:\windows\system32\dt\th_2012-04-26_15-13-14-8136000
c:\windows\system32\dt\th_2012-04-26_15-18-14-8436390
c:\windows\system32\dt\th_2012-04-26_15-23-14-8736281
c:\windows\system32\dt\th_2012-04-26_15-28-14-9036000
c:\windows\system32\dt\th_2012-04-26_15-33-14-9336328
c:\windows\system32\dt\th_2012-04-26_15-38-14-9636578
c:\windows\system32\dt\th_2012-04-26_15-43-14-9936265
c:\windows\system32\dt\th_2012-04-26_15-48-14-10236000
c:\windows\system32\dt\th_2012-04-26_15-53-14-10536203
c:\windows\system32\dt\th_2012-04-26_15-58-15-10836906
c:\windows\system32\dt\th_2012-04-26_16-03-14-11136234
c:\windows\system32\dt\th_2012-04-26_16-08-14-11436265
c:\windows\system32\dt\th_2012-04-26_16-13-14-11736250
c:\windows\system32\dt\th_2012-04-26_16-18-14-12036296
c:\windows\system32\dt\th_2012-04-26_16-23-14-12336234
c:\windows\system32\dt\th_2012-04-26_16-28-14-12636250
c:\windows\system32\dt\th_2012-04-26_16-33-14-12936234
c:\windows\system32\dt\th_2012-04-26_16-38-14-13236031
c:\windows\system32\dt\th_2012-04-26_16-43-14-13536234
c:\windows\system32\dt\th_2012-04-26_16-48-14-13836015
c:\windows\system32\dt\th_2012-04-26_16-53-14-14136031
c:\windows\system32\dt\th_2012-04-26_21-41-09-495859
c:\windows\system32\dt\th_2012-04-26_21-46-09-795859
c:\windows\system32\dt\th_2012-04-26_21-51-09-1095875
c:\windows\system32\dt\th_2012-04-26_21-56-09-1395843
c:\windows\system32\dt\th_2012-04-26_22-01-09-1696312
c:\windows\system32\dt\th_2012-04-26_22-06-09-1995953
c:\windows\system32\dt\th_2012-04-26_22-21-09-2895906
c:\windows\system32\dt\th_2012-04-26_22-26-09-3195937
c:\windows\system32\dt\th_2012-04-26_22-31-09-3496265
c:\windows\system32\dt\th_2012-04-26_22-41-09-4096109
c:\windows\system32\dt\th_2012-04-26_22-46-09-4395906
c:\windows\system32\dt\th_2012-04-26_22-51-10-4698437
c:\windows\system32\dt\th_2012-04-26_22-56-09-4995968
c:\windows\system32\dt\th_2012-04-26_23-01-09-5296250
c:\windows\system32\dt\th_2012-04-27_10-19-18-547890
c:\windows\system32\dt\th_2012-04-27_10-24-08-833515
c:\windows\system32\dt\th_2012-04-27_10-29-13-1137906
c:\windows\system32\dt\th_2012-04-27_10-34-13-1437968
c:\windows\system32\dt\th_2012-04-27_10-39-13-1737921
c:\windows\system32\dt\th_2012-04-27_10-44-13-2037921
c:\windows\system32\dt\th_2012-04-27_10-49-14-2338937
c:\windows\system32\dt\th_2012-04-27_10-54-08-2633234
c:\windows\system32\dt\th_2012-04-27_10-59-08-2933218
c:\windows\system32\dt\th_2012-04-27_11-04-08-3233218
c:\windows\system32\dt\th_2012-04-27_11-09-08-3533218
c:\windows\system32\dt\th_2012-04-27_11-14-08-3833218
c:\windows\system32\dt\th_2012-04-27_11-19-08-4133234
c:\windows\system32\dt\th_2012-04-27_11-24-08-4433218
c:\windows\system32\dt\th_2012-04-27_11-29-08-4733234
c:\windows\system32\dt\th_2012-04-27_12-32-44-330718
c:\windows\system32\dt\th_2012-04-27_12-37-44-630734
c:\windows\system32\dt\th_2012-04-27_12-47-44-1230765
c:\windows\system32\dt\th_2012-04-27_12-52-44-1531046
c:\windows\system32\dt\th_2012-04-27_12-57-44-1830687
c:\windows\system32\dt\th_2012-04-27_13-02-44-2130750
c:\windows\system32\dt\th_2012-04-27_13-07-44-2430687
c:\windows\system32\dt\th_2012-04-27_13-12-44-2730703
c:\windows\system32\dt\th_2012-04-27_13-17-44-3030828
c:\windows\system32\dt\th_2012-04-27_13-22-44-3330750
c:\windows\system32\dt\th_2012-04-27_13-27-44-3630687
c:\windows\system32\dt\th_2012-04-27_13-32-44-3930687
c:\windows\system32\dt\th_2012-04-27_13-37-44-4230703
c:\windows\system32\dt\th_2012-04-27_13-42-44-4530671
c:\windows\system32\dt\th_2012-04-27_13-47-44-4830687
c:\windows\system32\dt\th_2012-04-27_13-52-44-5130750
c:\windows\system32\dt\th_2012-04-27_13-57-44-5431218
c:\windows\system32\dt\th_2012-04-27_14-02-44-5730921
c:\windows\system32\dt\th_2012-04-27_14-07-44-6030703
c:\windows\system32\dt\th_2012-04-27_14-12-44-6330890
c:\windows\system32\dt\th_2012-04-27_14-17-44-6631156
c:\windows\system32\dt\th_2012-04-27_14-22-44-6930703
c:\windows\system32\dt\th_2012-04-27_16-12-30-328609
c:\windows\system32\dt\th_2012-04-27_16-17-30-628640
c:\windows\system32\dt\th_2012-04-27_16-22-30-928718
c:\windows\system32\dt\th_2012-04-27_16-27-30-1228812
c:\windows\system32\dt\th_2012-04-27_16-32-30-1528609
c:\windows\system32\dt\th_2012-04-27_16-37-30-1828734
c:\windows\system32\dt\th_2012-04-27_16-42-30-2128671
c:\windows\system32\dt\th_2012-04-27_16-47-30-2429718
c:\windows\system32\dt\th_2012-04-27_16-52-30-2728671
c:\windows\system32\dt\th_2012-04-27_16-57-30-3028781
c:\windows\system32\dt\th_2012-04-27_17-51-03-609390
c:\windows\system32\dt\th_2012-04-27_17-56-03-909312
c:\windows\system32\dt\th_2012-04-27_18-01-03-1209250
c:\windows\system32\dt\th_2012-04-27_18-06-03-1509296
c:\windows\system32\dt\th_2012-04-27_19-29-00-330000
c:\windows\system32\dt\th_2012-04-28_04-45-23-351890
c:\windows\system32\dt\th_2012-04-28_04-50-23-651906
c:\windows\system32\dt\th_2012-04-28_04-55-23-951953
c:\windows\system32\dt\th_2012-04-28_05-00-23-1251906
c:\windows\system32\dt\th_2012-04-28_05-05-23-1551906
c:\windows\system32\dt\th_2012-04-28_05-10-23-1851890
c:\windows\system32\dt\th_2012-04-28_05-15-23-2151906
c:\windows\system32\dt\th_2012-04-28_05-20-23-2451890
c:\windows\system32\dt\th_2012-04-28_08-31-00-334234
c:\windows\system32\dt\th_2012-04-28_08-36-00-634390
c:\windows\system32\dt\th_2012-04-28_08-41-00-934359
c:\windows\system32\dt\th_2012-04-28_08-46-01-1234796
c:\windows\system32\dt\th_2012-04-28_08-51-00-1534343
c:\windows\system32\dt\th_2012-04-28_08-56-00-1834343
c:\windows\system32\dt\th_2012-04-28_09-01-00-2134375
c:\windows\system32\dt\th_2012-04-28_09-06-01-2434593
c:\windows\system32\dt\th_2012-04-28_09-11-00-2734421
c:\windows\system32\dt\th_2012-04-28_09-16-00-3034437
c:\windows\system32\dt\th_2012-04-28_09-21-00-3334343
c:\windows\system32\dt\th_2012-04-28_09-26-00-3634359
c:\windows\system32\dt\th_2012-04-28_09-31-00-3934375
c:\windows\system32\dt\th_2012-04-28_09-36-01-4235218
c:\windows\system32\dt\th_2012-04-28_09-41-00-4534406
c:\windows\system32\dt\th_2012-04-28_09-46-00-4834375
c:\windows\system32\dt\th_2012-04-28_09-51-00-5134343
c:\windows\system32\dt\th_2012-04-28_09-56-00-5434390
c:\windows\system32\dt\th_2012-04-28_10-01-01-5734984
c:\windows\system32\dt\th_2012-04-28_10-06-00-6034343
c:\windows\system32\dt\th_2012-04-28_11-15-57-327078
c:\windows\system32\dt\th_2012-04-28_11-25-57-927031
c:\windows\system32\dt\th_2012-04-28_11-30-57-1227031
c:\windows\system32\dt\th_2012-04-28_16-46-48-321765
c:\windows\system32\dt\th_2012-04-28_16-51-48-621750
c:\windows\system32\dt\th_2012-04-28_16-56-48-921750
c:\windows\system32\dt\th_2012-04-28_17-01-48-1221734
c:\windows\system32\dt\th_2012-04-28_18-58-06-328218
c:\windows\system32\dt\th_2012-04-28_19-03-05-627140
c:\windows\system32\dt\th_2012-04-28_19-08-05-926812
c:\windows\system32\dt\th_2012-04-28_19-13-05-1226828
c:\windows\system32\dt\th_2012-04-28_19-23-49-472468
c:\windows\system32\dt\th_2012-04-28_19-28-50-782968
c:\windows\system32\dt\th_2012-04-28_19-33-52-1075484
c:\windows\system32\dt\th_2012-04-28_19-53-49-2272437
c:\windows\system32\dt\th_2012-04-28_19-58-49-2572437
c:\windows\system32\dt\th_2012-04-28_20-03-49-2872562
c:\windows\system32\dt\th_2012-04-28_20-08-50-3172593
c:\windows\system32\dt\th_2012-04-28_20-13-50-3472640
c:\windows\system32\dt\th_2012-04-28_20-18-51-3786312
c:\windows\system32\dt\th_2012-04-28_20-23-59-4085218
c:\windows\system32\dt\th_2012-04-28_20-28-59-4384812
c:\windows\system32\dt\th_2012-04-28_20-33-49-4672640
c:\windows\system32\dt\th_2012-04-28_20-38-49-4972484
c:\windows\system32\dt\th_2012-04-28_20-43-51-5280859
c:\windows\system32\dt\th_2012-04-28_20-48-50-5572843
c:\windows\system32\dt\th_2012-04-28_20-53-59-5885671
c:\windows\system32\dt\th_2012-04-28_20-58-59-6187296
c:\windows\system32\dt\th_2012-04-28_21-03-59-6482312
c:\windows\system32\dt\th_2012-04-28_21-08-59-6782312
c:\windows\system32\dt\th_2012-04-28_21-13-54-7082312
c:\windows\system32\dt\th_2012-04-28_21-18-59-7382343
c:\windows\system32\dt\th_2012-04-28_21-36-39-324046
c:\windows\system32\dt\th_2012-04-28_21-41-39-624031
c:\windows\system32\dt\th_2012-04-28_21-46-39-924031
c:\windows\system32\dt\th_2012-04-28_21-51-39-1224031
c:\windows\system32\dt\th_2012-04-28_21-56-39-1524250
c:\windows\system32\dt\th_2012-04-28_22-01-39-1824062
c:\windows\system32\dt\th_2012-04-28_22-06-39-2124109
c:\windows\system32\dt\th_2012-04-28_22-11-39-2424078
c:\windows\system32\dt\th_2012-04-28_22-16-39-2724109
c:\windows\system32\dt\th_2012-04-28_22-21-39-3024078
c:\windows\system32\dt\th_2012-04-28_22-26-39-3323890
c:\windows\system32\dt\th_2012-04-28_22-37-43-324578
c:\windows\system32\dt\th_2012-04-28_22-42-43-624203
c:\windows\system32\dt\th_2012-04-28_22-47-43-924375
c:\windows\system32\dt\th_2012-04-28_22-52-43-1224250
c:\windows\system32\dt\th_2012-04-28_22-57-43-1524218
c:\windows\system32\dt\th_2012-04-28_23-02-43-1824328
c:\windows\system32\dt\th_2012-04-28_23-07-43-2124437
c:\windows\system32\dt\th_2012-04-28_23-12-43-2424468
c:\windows\system32\dt\th_2012-04-28_23-17-43-2724484
c:\windows\system32\dt\th_2012-04-28_23-22-43-3024515
c:\windows\system32\dt\th_2012-04-28_23-27-43-3324187
c:\windows\system32\dt\th_2012-04-29_08-48-57-327593
c:\windows\system32\dt\th_2012-04-29_08-53-57-628046
c:\windows\system32\dt\th_2012-04-29_08-58-57-927671
c:\windows\system32\dt\th_2012-04-29_09-03-57-1227812
c:\windows\system32\dt\th_2012-04-29_09-08-57-1527687
c:\windows\system32\dt\th_2012-04-29_09-13-57-1828281
c:\windows\system32\dt\th_2012-04-29_09-18-57-2128375
c:\windows\system32\dt\th_2012-04-29_09-23-57-2428171
c:\windows\system32\dt\th_2012-04-29_09-28-57-2728171
c:\windows\system32\dt\th_2012-04-29_09-33-57-3028031
c:\windows\system32\dt\th_2012-04-29_09-38-57-3327671
c:\windows\system32\dt\th_2012-04-29_09-43-57-3628000
c:\windows\system32\dt\th_2012-04-29_09-48-57-3927781
c:\windows\system32\dt\th_2012-04-29_09-53-57-4227953
c:\windows\system32\dt\th_2012-04-29_09-58-57-4527937
c:\windows\system32\dt\th_2012-04-29_10-03-57-4827984
c:\windows\system32\dt\th_2012-04-29_10-08-57-5127953
c:\windows\system32\dt\th_2012-04-29_10-13-57-5427828
c:\windows\system32\dt\th_2012-04-29_10-18-57-5727968
c:\windows\system32\dt\th_2012-04-29_10-23-57-6027765
c:\windows\system32\dt\th_2012-04-29_10-28-57-6327625
c:\windows\system32\dt\th_2012-04-29_10-33-57-6627906
c:\windows\system32\dt\th_2012-04-29_10-38-57-6927828
c:\windows\system32\dt\th_2012-04-29_10-43-57-7227937
c:\windows\system32\dt\th_2012-04-29_10-48-57-7528031
c:\windows\system32\dt\th_2012-04-29_10-53-57-7827734
c:\windows\system32\dt\th_2012-04-29_10-58-57-8128218
c:\windows\system32\dt\th_2012-04-29_11-03-57-8428250
c:\windows\system32\dt\th_2012-04-29_11-08-57-8728171
c:\windows\system32\dt\th_2012-04-29_11-13-57-9027859
c:\windows\system32\dt\th_2012-04-29_11-18-57-9327906
c:\windows\system32\dt\th_2012-04-29_11-23-57-9627984
c:\windows\system32\dt\th_2012-04-29_11-28-57-9927937
c:\windows\system32\dt\th_2012-04-29_11-33-57-10227671
c:\windows\system32\dt\th_2012-04-29_11-38-57-10528046
c:\windows\system32\dt\th_2012-04-29_12-15-18-328078
c:\windows\system32\dt\th_2012-04-29_12-20-18-628093
c:\windows\system32\dt\th_2012-04-29_12-25-18-928218
c:\windows\system32\dt\th_2012-04-29_12-30-18-1228281
c:\windows\system32\dt\th_2012-04-29_12-35-18-1528421
c:\windows\system32\dt\th_2012-04-29_12-40-18-1828296
c:\windows\system32\dt\th_2012-04-29_12-45-18-2128421
c:\windows\system32\dt\th_2012-04-29_12-50-18-2428453
c:\windows\system32\dt\th_2012-04-29_12-55-18-2728390
c:\windows\system32\dt\th_2012-04-29_13-00-18-3028296
c:\windows\system32\dt\th_2012-04-29_13-05-18-3328687
c:\windows\system32\dt\th_2012-04-29_13-10-18-3628062
c:\windows\system32\dt\th_2012-04-29_13-15-18-3928125
c:\windows\system32\dt\th_2012-04-29_13-20-18-4228062
c:\windows\system32\dt\th_2012-04-29_13-25-18-4528359
c:\windows\system32\dt\th_2012-04-29_13-30-18-4828265
c:\windows\system32\dt\th_2012-04-29_13-35-18-5128281
c:\windows\system32\dt\th_2012-04-29_13-40-18-5428718
c:\windows\system32\dt\th_2012-04-29_13-45-18-5728406
c:\windows\system32\dt\th_2012-04-29_13-50-18-6028171
c:\windows\system32\dt\th_2012-04-29_13-55-18-6328328
c:\windows\system32\dt\th_2012-04-29_14-00-18-6628531
c:\windows\system32\dt\th_2012-04-29_14-05-18-6928359
c:\windows\system32\dt\th_2012-04-29_14-10-18-7228531
c:\windows\system32\dt\th_2012-04-29_14-15-18-7528625
c:\windows\system32\dt\th_2012-04-29_14-20-18-7828390
c:\windows\system32\dt\th_2012-04-29_14-25-18-8128281
c:\windows\system32\dt\th_2012-04-29_14-30-18-8428437
c:\windows\system32\dt\th_2012-04-29_15-55-42-329953
c:\windows\system32\dt\th_2012-04-29_16-00-42-629859
c:\windows\system32\dt\th_2012-04-29_16-05-42-929875
c:\windows\system32\dt\th_2012-04-29_16-10-41-1229921
c:\windows\system32\dt\th_2012-04-29_16-15-42-1530250
c:\windows\system32\dt\th_2012-04-29_16-20-42-1829875
c:\windows\system32\dt\th_2012-04-29_16-25-42-2129953
c:\windows\system32\dt\th_2012-04-29_16-30-42-2429906
c:\windows\system32\dt\th_2012-04-29_16-35-42-2729937
c:\windows\system32\dt\th_2012-04-29_16-40-42-3029890
c:\windows\system32\dt\th_2012-04-29_16-45-41-3329859
c:\windows\system32\dt\th_2012-04-29_16-50-41-3629921
c:\windows\system32\dt\th_2012-04-29_16-55-41-3929875
c:\windows\system32\dt\th_2012-04-29_17-00-42-4229843
c:\windows\system32\dt\th_2012-04-29_17-05-42-4529859
c:\windows\system32\dt\th_2012-04-29_19-09-14-323000
c:\windows\system32\dt\th_2012-04-29_19-14-14-622984
c:\windows\system32\dt\th_2012-04-29_19-54-06-340250
c:\windows\system32\dt\th_2012-04-29_19-58-57-630609
c:\windows\system32\dt\th_2012-04-29_20-03-57-931093
c:\windows\system32\dt\th_2012-04-29_20-08-57-1230937
c:\windows\system32\dt\th_2012-04-29_20-13-57-1530937
c:\windows\system32\dt\th_2012-04-29_20-18-57-1831250
c:\windows\system32\dt\th_2012-04-29_20-23-57-2131031
c:\windows\system32\dt\th_2012-04-29_20-28-57-2430921
c:\windows\system32\dt\th_2012-04-29_20-33-57-2730984
c:\windows\system32\dt\th_2012-04-29_20-38-57-3030937
c:\windows\system32\dt\th_2012-04-29_20-43-57-3330937
c:\windows\system32\dt\th_2012-04-29_20-48-57-3630968
c:\windows\system32\dt\th_2012-04-29_20-53-57-3930937
c:\windows\system32\dt\th_2012-04-29_20-58-57-4231015
c:\windows\system32\dt\th_2012-04-29_21-03-57-4530953
c:\windows\system32\dt\th_2012-04-29_21-08-57-4830953
c:\windows\system32\dt\th_2012-04-29_21-13-57-5130953
c:\windows\system32\dt\th_2012-04-29_21-18-57-5431062
c:\windows\system32\dt\th_2012-04-29_21-23-57-5730953
c:\windows\system32\dt\th_2012-04-29_21-28-57-6031000
c:\windows\system32\dt\th_2012-04-29_21-33-57-6331000
c:\windows\system32\dt\th_2012-04-29_21-38-57-6631265
c:\windows\system32\dt\th_2012-04-29_21-43-57-6931125
c:\windows\system32\dt\th_2012-04-29_21-48-57-7231171
c:\windows\system32\dt\th_2012-04-29_21-53-57-7531203
c:\windows\system32\dt\th_2012-04-29_21-58-57-7831234
c:\windows\system32\dt\th_2012-04-29_22-03-57-8131250
c:\windows\system32\dt\th_2012-04-29_22-08-57-8431171
c:\windows\system32\dt\th_2012-04-29_22-13-57-8731328
c:\windows\system32\dt\th_2012-04-29_22-18-57-9031140
c:\windows\system32\dt\th_2012-04-29_22-23-57-9331375
c:\windows\system32\dt\th_2012-04-29_22-28-57-9631218
c:\windows\system32\dt\th_2012-04-29_22-33-57-9931421
c:\windows\system32\dt\th_2012-04-30_07-47-14-343812
c:\windows\system32\dt\th_2012-04-30_07-52-14-643859
c:\windows\system32\dt\th_2012-04-30_07-57-14-944203
c:\windows\system32\dt\th_2012-04-30_08-02-14-1244015
c:\windows\system32\dt\th_2012-04-30_08-07-14-1544109
c:\windows\system32\dt\th_2012-04-30_08-12-14-1843921
c:\windows\system32\dt\th_2012-04-30_08-17-14-2144171
c:\windows\system32\dt\th_2012-04-30_08-22-14-2444687
c:\windows\system32\dt\th_2012-04-30_08-27-15-2744609
c:\windows\system32\dt\th_2012-04-30_09-30-16-331437
c:\windows\system32\dt\th_2012-04-30_09-35-16-631296
c:\windows\system32\dt\th_2012-04-30_09-40-16-931312
c:\windows\system32\dt\th_2012-04-30_09-45-16-1231328
c:\windows\system32\dt\th_2012-04-30_09-50-16-1531562
c:\windows\system32\dt\th_2012-04-30_09-55-16-1831250
c:\windows\system32\dt\th_2012-04-30_10-00-16-2131406
c:\windows\system32\dt\th_2012-04-30_10-05-17-2431656
c:\windows\system32\dt\th_2012-04-30_10-10-16-2731375
c:\windows\system32\dt\th_2012-04-30_10-15-17-3031734
c:\windows\system32\dt\th_2012-04-30_10-20-16-3331234
c:\windows\system32\dt\th_2012-04-30_10-25-16-3631265
c:\windows\system32\dt\th_2012-04-30_10-30-16-3931296
c:\windows\system32\dt\th_2012-04-30_10-35-16-4231468
c:\windows\system32\dt\th_2012-04-30_10-40-16-4531343
c:\windows\system32\dt\th_2012-04-30_10-45-16-4831281
c:\windows\system32\dt\th_2012-04-30_10-50-16-5131281
c:\windows\system32\dt\th_2012-04-30_10-55-16-5431359
c:\windows\system32\dt\th_2012-04-30_11-00-17-5731718
c:\windows\system32\dt\th_2012-04-30_11-05-17-6031718
c:\windows\system32\dt\th_2012-04-30_11-10-16-6331531
c:\windows\system32\dt\th_2012-04-30_11-15-16-6631296
c:\windows\system32\dt\th_2012-04-30_11-51-45-331968
c:\windows\system32\dt\th_2012-04-30_11-56-45-631968
c:\windows\system32\dt\th_2012-04-30_12-01-45-931968
c:\windows\system32\dt\th_2012-04-30_12-06-45-1232140
c:\windows\system32\dt\th_2012-04-30_12-11-45-1532031
c:\windows\system32\dt\th_2012-04-30_12-16-45-1832234
c:\windows\system32\dt\th_2012-04-30_12-21-45-2132234
c:\windows\system32\dt\th_2012-04-30_12-26-45-2432828
c:\windows\system32\dt\th_2012-04-30_12-31-46-2733000
c:\windows\system32\dt\th_2012-04-30_12-36-45-3031968
c:\windows\system32\dt\th_2012-04-30_12-41-45-3332156
c:\windows\system32\dt\th_2012-04-30_12-46-45-3632390
c:\windows\system32\dt\th_2012-04-30_12-51-45-3932640
c:\windows\system32\dt\th_2012-04-30_12-56-45-4232578
c:\windows\system32\dt\th_2012-04-30_13-01-45-4532718
c:\windows\system32\dt\th_2012-04-30_13-06-45-4832484
c:\windows\system32\dt\th_2012-04-30_13-11-45-5132125
c:\windows\system32\dt\th_2012-04-30_13-16-46-5432859
c:\windows\system32\dt\th_2012-04-30_13-21-45-5731968
c:\windows\system32\dt\th_2012-04-30_13-26-45-6032296
c:\windows\system32\dt\th_2012-04-30_13-31-45-6332468
c:\windows\system32\dt\th_2012-04-30_13-36-45-6632578
c:\windows\system32\dt\th_2012-04-30_13-41-45-6932203
c:\windows\system32\dt\th_2012-04-30_13-46-45-7232640
c:\windows\system32\dt\th_2012-04-30_13-51-45-7532687
c:\windows\system32\dt\th_2012-04-30_13-56-45-7832796
c:\windows\system32\dt\th_2012-04-30_14-01-45-8131968
c:\windows\system32\dt\th_2012-04-30_14-06-45-8432203
c:\windows\system32\dt\th_2012-04-30_14-11-45-8732187
c:\windows\system32\dt\th_2012-04-30_14-16-45-9032187
c:\windows\system32\dt\th_2012-04-30_14-21-45-9332406
c:\windows\system32\dt\th_2012-04-30_14-26-45-9632281
c:\windows\system32\dt\th_2012-04-30_14-31-45-9932296
c:\windows\system32\dt\th_2012-04-30_14-36-45-10232171
c:\windows\system32\dt\th_2012-04-30_16-45-24-332828
c:\windows\system32\dt\th_2012-04-30_16-50-24-632796
c:\windows\system32\dt\th_2012-04-30_16-55-24-932812
c:\windows\system32\dt\th_2012-04-30_17-00-24-1232921
c:\windows\system32\dt\th_2012-04-30_17-05-24-1532796
c:\windows\system32\dt\th_2012-04-30_17-10-24-1832843
c:\windows\system32\dt\th_2012-04-30_18-25-15-324953
c:\windows\system32\dt\th_2012-04-30_18-30-15-625296
c:\windows\system32\dt\th_2012-04-30_18-35-15-924968
c:\windows\system32\dt\th_2012-04-30_18-40-15-1224937
c:\windows\system32\dt\th_2012-04-30_18-45-15-1524921
c:\windows\system32\dt\th_2012-04-30_18-50-16-1825937
c:\windows\system32\dt\th_2012-04-30_18-55-15-2125875
c:\windows\system32\dt\th_2012-04-30_19-00-15-2425234
c:\windows\system32\dt\th_2012-04-30_19-05-15-2725000
c:\windows\system32\dt\th_2012-04-30_19-10-15-3025031
c:\windows\system32\dt\th_2012-04-30_19-15-15-3325078
c:\windows\system32\dt\th_2012-04-30_19-20-15-3625640
c:\windows\system32\dt\th_2012-04-30_19-25-15-3925046
c:\windows\system32\dt\th_2012-04-30_20-52-04-331906
c:\windows\system32\dt\th_2012-04-30_20-57-04-631593
c:\windows\system32\dt\th_2012-04-30_21-02-05-931750
c:\windows\system32\dt\th_2012-04-30_21-07-04-1231656
c:\windows\system32\dt\th_2012-04-30_21-12-05-1532218
c:\windows\system32\dt\th_2012-04-30_21-17-04-1831453
c:\windows\system32\dt\th_2012-04-30_21-22-05-2132171
c:\windows\system32\dt\th_2012-04-30_21-27-05-2432062
c:\windows\system32\dt\th_2012-04-30_21-32-05-2732406
c:\windows\system32\dt\th_2012-04-30_21-37-05-3032468
c:\windows\system32\dt\th_2012-04-30_21-42-05-3332734
c:\windows\system32\dt\th_2012-04-30_21-47-05-3632093
c:\windows\system32\dt\th_2012-04-30_21-52-04-3931421
c:\windows\system32\dt\th_2012-04-30_21-57-07-4233671
c:\windows\system32\dt\th_2012-04-30_22-02-04-4531406
c:\windows\system32\dt\th_2012-04-30_22-07-04-4831578
c:\windows\system32\dt\th_2012-04-30_22-12-04-5131515
c:\windows\system32\dt\th_2012-04-30_22-17-04-5431515
c:\windows\system32\dt\th_2012-04-30_22-49-21-333296
c:\windows\system32\dt\th_2012-04-30_22-54-21-633125
c:\windows\system32\dt\th_2012-04-30_22-59-21-933031
c:\windows\system32\dt\th_2012-04-30_23-04-21-1233031
c:\windows\system32\dt\th_2012-04-30_23-09-21-1533078
c:\windows\system32\dt\th_2012-04-30_23-14-21-1833093
c:\windows\system32\dt\th_2012-04-30_23-19-21-2133031
c:\windows\system32\dt\th_2012-04-30_23-24-21-2433031
c:\windows\system32\dt\th_2012-04-30_23-29-21-2733390
c:\windows\system32\dt\th_2012-04-30_23-34-21-3033312
c:\windows\system32\dt\th_2012-04-30_23-39-21-3333140
c:\windows\system32\dt\th_2012-04-30_23-44-21-3633140
c:\windows\system32\dt\th_2012-04-30_23-49-21-3933312
c:\windows\system32\dt\th_2012-04-30_23-54-21-4233234
c:\windows\system32\dt\th_2012-04-30_23-59-21-4532609
c:\windows\system32\dt\th_2012-05-01_00-04-21-4833296
c:\windows\system32\dt\th_2012-05-01_00-09-21-5133250
c:\windows\system32\dt\th_2012-05-01_00-14-21-5433156
c:\windows\system32\dt\th_2012-05-01_00-19-21-5733328
c:\windows\system32\dt\th_2012-05-01_00-24-21-6032609
c:\windows\system32\dt\th_2012-05-01_00-29-21-6333234
c:\windows\system32\dt\th_2012-05-01_00-34-21-6633125
c:\windows\system32\dt\th_2012-05-01_00-39-21-6933296
c:\windows\system32\dt\th_2012-05-01_00-44-21-7233203
c:\windows\system32\dt\th_2012-05-01_00-49-21-7532609
c:\windows\system32\dt\th_2012-05-01_00-54-21-7833250
c:\windows\system32\dt\th_2012-05-01_00-59-21-8132609
c:\windows\system32\dt\th_2012-05-01_01-04-21-8432609
c:\windows\system32\dt\th_2012-05-01_01-09-21-8732609
c:\windows\system32\dt\th_2012-05-01_08-53-38-467250
c:\windows\system32\dt\th_2012-05-01_08-58-38-767234
c:\windows\system32\dt\th_2012-05-02_09-00-10-339453
c:\windows\system32\dt\th_2012-05-02_09-05-11-640578
c:\windows\system32\dt\th_2012-05-02_09-10-11-940640
c:\windows\system32\dt\th_2012-05-02_09-15-10-1239453
c:\windows\system32\dt\th_2012-05-02_09-20-10-1539421
c:\windows\system32\dt\th_2012-05-02_09-25-10-1839515
c:\windows\system32\dt\th_2012-05-02_09-30-10-2139437
c:\windows\system32\dt\th_2012-05-02_09-35-10-2439437
c:\windows\system32\dt\th_2012-05-02_09-40-10-2739484
c:\windows\system32\dt\th_2012-05-02_09-48-22-3230953
c:\windows\system32\dt\th_2012-05-02_09-53-17-3526203
c:\windows\system32\dt\th_2012-05-02_09-58-16-3825484
c:\windows\system32\dt\th_2012-05-02_10-08-58-330781
c:\windows\system32\dt\th_2012-05-02_10-13-58-630828
c:\windows\system32\dt\th_2012-05-02_10-18-58-930781
c:\windows\system32\dt\th_2012-05-02_10-23-58-1230812
c:\windows\system32\dt\th_2012-05-02_10-28-58-1530812
c:\windows\system32\dt\th_2012-05-02_10-33-58-1830781
c:\windows\system32\dt\th_2012-05-02_10-38-58-2131421
c:\windows\system32\dt\th_2012-05-02_10-43-58-2431218
c:\windows\system32\dt\th_2012-05-02_10-48-58-2730750
c:\windows\system32\dt\th_2012-05-02_10-53-58-3030843
c:\windows\system32\dt\th_2012-05-02_10-58-59-3331703
c:\windows\system32\dt\th_2012-05-02_11-03-58-3630812
c:\windows\system32\dt\th_2012-05-02_11-08-58-3930812
c:\windows\system32\dt\th_2012-05-02_11-14-01-4233640
c:\windows\system32\dt\th_2012-05-02_11-18-59-4532031
c:\windows\system32\dt\th_2012-05-02_11-23-58-4831531
c:\windows\system32\dt\th_2012-05-02_11-28-58-5131140
c:\windows\system32\dt\th_2012-05-02_11-33-58-5431578
c:\windows\system32\dt\th_2012-05-02_11-38-58-5730843
c:\windows\system32\dt\th_2012-05-02_11-43-58-6030875
c:\windows\system32\dt\th_2012-05-02_11-48-58-6330890
c:\windows\system32\dt\th_2012-05-02_11-53-58-6630890
c:\windows\system32\dt\th_2012-05-02_11-58-58-6930921
c:\windows\system32\dt\th_2012-05-02_12-03-58-7230750
c:\windows\system32\dt\th_2012-05-02_12-12-58-328968
c:\windows\system32\dt\th_2012-05-02_12-17-58-628953
c:\windows\system32\dt\th_2012-05-02_12-22-58-928906
c:\windows\system32\dt\th_2012-05-02_12-27-58-1229203
c:\windows\system32\dt\th_2012-05-02_12-32-57-1528687
c:\windows\system32\dt\th_2012-05-02_13-05-59-338375
c:\windows\system32\dt\th_2012-05-02_13-10-59-638359
c:\windows\system32\dt\th_2012-05-02_13-15-59-938343
c:\windows\system32\dt\th_2012-05-02_13-20-59-1238343
c:\windows\system32\dt\th_2012-05-02_13-25-59-1538421
c:\windows\system32\dt\th_2012-05-02_13-30-59-1838421
c:\windows\system32\dt\th_2012-05-02_13-35-59-2138531
c:\windows\system32\dt\th_2012-05-02_13-40-59-2438421
c:\windows\system32\dt\th_2012-05-02_13-45-59-2738406
c:\windows\system32\dt\th_2012-05-02_13-50-59-3038484
c:\windows\system32\dt\th_2012-05-02_13-55-59-3338343
c:\windows\system32\dt\th_2012-05-02_14-00-59-3638359
c:\windows\system32\dt\th_2012-05-02_14-05-59-3938406
c:\windows\system32\dt\th_2012-05-02_14-10-59-4238437
c:\windows\system32\dt\th_2012-05-02_14-15-59-4538343
c:\windows\system32\dt\th_2012-05-02_14-20-59-4838406
c:\windows\system32\dt\th_2012-05-02_14-25-59-5138343
c:\windows\system32\dt\th_2012-05-02_14-30-59-5437890
c:\windows\system32\dt\th_2012-05-02_14-35-59-5737890
c:\windows\system32\dt\th_2012-05-02_14-40-59-6037890
c:\windows\system32\dt\th_2012-05-02_14-45-59-6337890
c:\windows\system32\dt\th_2012-05-02_14-50-59-6637890
c:\windows\system32\dt\th_2012-05-02_14-55-59-6937875
c:\windows\system32\dt\th_2012-05-02_15-00-59-7237906
c:\windows\system32\dt\th_2012-05-02_15-19-03-330546
c:\windows\system32\dt\th_2012-05-02_15-24-04-630875
c:\windows\system32\dt\th_2012-05-02_15-29-04-930906
c:\windows\system32\dt\th_2012-05-02_15-34-04-1230703
c:\windows\system32\dt\th_2012-05-02_15-39-04-1530953
c:\windows\system32\dt\th_2012-05-02_15-44-04-1830843
c:\windows\system32\dt\th_2012-05-02_15-49-04-2130984
c:\windows\system32\dt\th_2012-05-02_15-54-04-2430765
c:\windows\system32\dt\th_2012-05-02_15-59-03-2730468
c:\windows\system32\dt\th_2012-05-02_16-04-04-3030875
c:\windows\system32\dt\th_2012-05-02_16-09-04-3330796
c:\windows\system32\dt\th_2012-05-02_16-14-04-3631031
c:\windows\system32\dt\th_2012-05-02_16-19-04-3930656
c:\windows\system32\dt\th_2012-05-02_16-24-04-4230687
c:\windows\system32\dt\th_2012-05-02_16-29-04-4530921
c:\windows\system32\dt\th_2012-05-02_16-34-04-4831125
c:\windows\system32\dt\th_2012-05-02_16-39-04-5130593
c:\windows\system32\dt\th_2012-05-02_16-44-03-5430453
c:\windows\system32\dt\th_2012-05-02_17-46-36-328796
c:\windows\system32\dt\th_2012-05-02_17-51-36-628828
c:\windows\system32\dt\th_2012-05-02_17-56-36-928781
c:\windows\system32\dt\th_2012-05-02_18-01-36-1228875
c:\windows\system32\dt\th_2012-05-02_18-06-36-1528968
c:\windows\system32\kw.dat
c:\windows\system32\web.dat
c:\windows\system32\websites.html
c:\windows\vknt.cfg
c:\windows\vknt.tmp
c:\windows\WindowsUpdate.log
D:\Autorun.inf
D:\SysAnti.exe
E:\Autorun.inf
E:\SysAnti.exe
.
.
((((((((((((((((((((((((( Files Created from 2012-04-02 to 2012-05-02 )))))))))))))))))))))))))))))))
.
.
2012-05-02 03:04 . 2012-05-02 03:04 -------- d-----w- c:\documents and settings\Admin\Application Data\Malwarebytes
2012-05-01 02:06 . 2012-05-01 02:06 -------- d-----w- c:\documents and settings\Administrator\Application Data\Malwarebytes
2012-05-01 02:06 . 2012-05-01 02:06 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2012-05-01 02:06 . 2012-05-01 02:06 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2012-05-01 02:06 . 2012-04-04 08:56 22344 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-05-01 02:01 . 2012-05-01 02:01 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Application Data\Mozilla
2012-05-01 01:58 . 2012-05-01 01:58 -------- d-----w- c:\program files\Trend Micro
2012-05-01 01:48 . 2012-05-01 01:48 -------- d-----w- C:\FOUND.091
2012-04-28 12:18 . 2012-04-28 12:18 -------- d-----w- C:\FOUND.090
2012-04-27 07:18 . 2011-07-24 17:52 696320 ----a-w- c:\program files\Mozilla Firefox\MuKhungLongFull\Checkmain.dll
2012-04-27 07:18 . 2011-04-24 14:44 74752 ----a-w- c:\program files\Mozilla Firefox\MuKhungLongFull\Antihack.dll
2012-04-26 14:35 . 2012-04-26 14:35 -------- d-----w- C:\FOUND.089
2012-04-23 10:48 . 2012-04-23 10:48 -------- d-----w- C:\FOUND.088
2012-04-19 17:25 . 2012-04-19 17:25 -------- d-----w- C:\FOUND.087
2012-04-18 00:46 . 2012-04-18 00:46 -------- d-----w- c:\program files\MU HA TAY
2012-04-13 15:25 . 2012-04-13 15:25 -------- d-----w- C:\FOUND.086
2012-04-12 16:57 . 2012-04-12 16:57 -------- d-----w- C:\FOUND.085
2012-04-08 15:42 . 2012-04-08 15:42 -------- d-----w- C:\FOUND.084
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-03-27 12:16 . 2012-03-27 12:16 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-03-17 13:29 . 2011-04-24 13:51 97208 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[-] 2009-11-13 . 32272BF10467C8ACF1F83138C61D541E . 1580544 . . [5.1.2600.2180] . . c:\windows\system32\sfcfiles.dll
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\IDM Shell Extension]
@="{CDC95B92-E27C-4745-A8C5-64A52A78855D}"
[HKEY_CLASSES_ROOT\CLSID\{CDC95B92-E27C-4745-A8C5-64A52A78855D}]
2011-03-02 15:23 68216 ----a-w- c:\program files\Internet Download Manager\IDMShellExt.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Messenger (Yahoo!)"="c:\progra~1\Yahoo!\MESSEN~1\YahooMessenger.exe" [2012-02-22 6591800]
"IDMan"="c:\program files\Internet Download Manager\IDMan.exe" [2011-06-26 3278232]
"Search Protection"="c:\program files\Yahoo!\Search Protection\SearchProtection.exe" [2009-02-23 111856]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"YSearchProtection"="c:\program files\Yahoo!\Search Protection\SearchProtection.exe" [2009-02-23 111856]
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
2008-06-19 08:20 57344 ----a-w- c:\windows\ALCMTR.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcWzrd]
2008-06-19 08:42 2808832 ----a-w- c:\windows\ALCWZRD.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
2008-03-17 00:05 159744 ----a-w- c:\windows\system32\hkcmd.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
2008-03-17 00:05 135168 ----a-w- c:\windows\system32\igfxtray.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Persistence]
2008-03-17 00:05 131072 ----a-w- c:\windows\system32\igfxpers.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
2008-07-16 11:14 16806400 ----a-w- c:\windows\RTHDCPL.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyTel]
2007-11-20 10:15 1826816 ----a-w- c:\windows\SkyTel.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
2008-06-18 10:01 77824 ----a-w- c:\windows\SOUNDMAN.EXE
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Vinagame\\ZingPlay\\ZingPlay.exe"=
"c:\\Program Files\\Vinagame\\ZingPlay\\ZingPlayD.exe"=
"c:\\Program Files\\Vinagame\\ZingPlay\\Update\\Update.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5082:TCP"= 5082:TCP:qwrtqhx
.
S2 eowsugl;Shell Driver;c:\windows\system32\svchost.exe -k netsvcs [8/4/2004 12:07 AM 14336]
S3 GGSAFERDriver;GGSAFER Driver;\??\c:\program files\Garena Classic\safedrv.sys --> c:\program files\Garena Classic\safedrv.sys [?]
S3 gkw;gkw;\??\c:\docume~1\Admin\LOCALS~1\Temp~gkw.tmp --> c:\docume~1\Admin\LOCALS~1\Temp~gkw.tmp [?]
S3 IDMTDI;IDMTDI;c:\windows\system32\drivers\idmtdi.sys [3/29/2011 12:51 AM 98160]
S3 knhzwuwsl;knhzwuwsl;\??\c:\windows\system32\06.tmp --> c:\windows\system32\06.tmp [?]
S3 mxrzbiykt;mxrzbiykt;\??\c:\windows\system32\06.tmp --> c:\windows\system32\06.tmp [?]
S3 XDva385;XDva385;\??\c:\windows\system32\XDva385.sys --> c:\windows\system32\XDva385.sys [?]
S3 XDva387;XDva387;\??\c:\windows\system32\XDva387.sys --> c:\windows\system32\XDva387.sys [?]
S3 XDva388;XDva388;\??\c:\windows\system32\XDva388.sys --> c:\windows\system32\XDva388.sys [?]
S3 XDva389;XDva389;\??\c:\windows\system32\XDva389.sys --> c:\windows\system32\XDva389.sys [?]
S3 XDva390;XDva390;\??\c:\windows\system32\XDva390.sys --> c:\windows\system32\XDva390.sys [?]
S3 XDva391;XDva391;\??\c:\windows\system32\XDva391.sys --> c:\windows\system32\XDva391.sys [?]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
eowsugl
.
Contents of the 'Scheduled Tasks' folder
.
2012-05-02 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1454471165-343818398-839522115-1003Core1cd06605a280854.job
- c:\documents and settings\Admin\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2011-04-24 13:46]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://vn.yahoo.com/?fr=mkg029
mStart Page = hxxp://vn.yahoo.com/?fr=mkg029
uInternet Settings,ProxyOverride = local
uSearchURL,(Default) = hxxp://vn.rd.yahoo.com/customize/ycomp/ ... .yahoo.com
IE: Download all links with IDM - c:\program files\Internet Download Manager\IEGetAll.htm
IE: Download with IDM - c:\program files\Internet Download Manager\IEExt.htm
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
TCP: DhcpNameServer = 76.73.126.98 168.95.1.1
TCP: Interfaces\{D7E9CCB9-4B0E-4C5B-991C-A92A66ADF4F5}: NameServer = 8.8.8.8,8.8.4.4
FF - ProfilePath - c:\documents and settings\Admin\Application Data\Mozilla\Firefox\Profiles\9y89jh6j.default\
FF - prefs.js: browser.search.defaulturl - hxxp://vn.search.yahoo.com/search?fr=mkg030&p=
FF - prefs.js: browser.search.selectedEngine - Yahoo
FF - prefs.js: browser.startup.homepage - hxxp://vn.yahoo.com/?fr=mkg031
FF - prefs.js: keyword.URL - hxxp://vn.search.yahoo.com/search?fr=mkg030&p=
FF - prefs.js: network.proxy.type - 0
FF - user.js: yahoo.ytff.general.dontshowhpoffer - true
.
- - - - ORPHANS REMOVED - - - -
.
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
AddRemove-Mu Ha Noi Season 5 Version 7 - D:\Uninstall.exe
AddRemove-{5HD57EA3-CF81-442B-85HD-86K83EF68D1D}_is1 - c:\program files\VTCGame\Audition\unins000.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-05-02 22:05
Windows 5.1.2600 Service Pack 2 FAT NTAPI
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\gkw]
"ImagePath"="\??\c:\docume~1\Admin\LOCALS~1\Temp~gkw.tmp"
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\knhzwuwsl]
"ImagePath"="\??\c:\windows\system32\06.tmp"
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\mxrzbiykt]
"ImagePath"="\??\c:\windows\system32\06.tmp"
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\eowsugl]
"ServiceDll"="c:\windows\system32\kiqzter.dll"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{0c876ee1-1d39-48f8-9159-c82bfecb9118}]
@Denied: (Full) (Everyone)
"Model"=dword:00000071
"Therad"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{5ED60779-4DE2-4E07-B862-974CA4FF2E9C}]
@Denied: (Full) (Everyone)
"scansk"=hex(0):33,38,5d,99,5f,76,9c,52,b8,c1,5b,f4,a5,de,c9,c8,b1,2a,6f,30,dc,
7a,37,e9,24,be,05,83,87,f6,07,82,a4,a8,67,ba,4c,26,73,e4,00,00,00,00,00,00,\
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{7B8E9164-324D-4A2E-A46D-0165FB2000EC}]
@Denied: (Full) (Everyone)
"scansk"=hex(0):71,11,c8,09,67,47,d5,0b,a2,e3,52,85,4b,93,16,ea,c1,ff,56,75,c0,
97,d1,ab,32,da,2f,47,07,70,0e,64,22,2f,02,5e,64,66,83,f0,00,00,00,00,00,00,\
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{c7d4c639-45cd-4c3f-b650-8f73e180af20}]
@Denied: (Full) (Everyone)
"Model"=dword:000000b0
"Therad"=dword:00000015
"MData"=hex(0):73,d5,cf,b8,a4,07,89,80,31,e4,35,6b,2a,ca,fe,43,b6,1f,81,1f,5a,
1b,4d,36,46,8f,3c,f2,5c,68,ee,21,46,8f,3c,f2,5c,68,ee,21,46,8f,3c,f2,5c,68,\
.
Completion time: 2012-05-02 22:08:44
ComboFix-quarantined-files.txt 2012-05-02 15:08
.
Pre-Run: 1,832,796,160 bytes free
Post-Run: 8,813,494,272 bytes free
.
WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
C:\ = "Microsoft Windows"
.
- - End Of File - - 0DD8E3689395ECC445BE829C437B9202

AHoj,
tuhle složku znáš?
c:\windows\system32\dt


Máš k dispozici ještě jiný pc? Tento by bylo nejlepší odpojit od netu a řádně vyčistit, máš tam červíky. A když ho necháš připojený k netu, bude se to pořád obnovovat.

Stáhni http://www.slunecnice.cz/sw/crystaldiskinfo/

- spusť ho a v nabídce zvol Kopírovat.
- Data ze schránky sem pak vlož pomocí Ctrl+V

Připoj do pc všechny usb klíče, flashky, paměťové karty, externí disky, co používáš.
Stáhni na plochu UsbFix
- Před stažením vypni rezidentní štít antiviru, má na Usbfix falešnou detekci
-spusť
-klikni na volbu deletion , potvrď enter
- po skenu sem vlož log , pokud na Vás nevyskočí, najdi ho C:\UsbFix.txt

----------------------------------------------------------------------------
CrystalDiskInfo 4.1.3 (C) 2008-2011 hiyohiyo
Crystal Dew World : http://crystalmark.info/
----------------------------------------------------------------------------

OS : Windows XP Professional SP2 [5.1 Build 2600] (x86)
Date : 2012/05/04 19:48:08

-- Controller Map ----------------------------------------------------------
+ Intel(R) 82801G (ICH7 Family) Ultra ATA Storage Controllers - 27DF [ATA]
+ Primary IDE Channel (0)
- HL-DT-ST CD-RW GCE-8481B
+ Intel(R) 82801GB/GR/GH (ICH7 Family) Serial ATA Storage Controller - 27C0 [ATA]
+ Primary IDE Channel (0)
- ST3160215AS
- Secondary IDE Channel (1)

-- Disk List ---------------------------------------------------------------
(1) ST3160215AS : 160.0 GB [0-1-0, pd1]

----------------------------------------------------------------------------
(1) ST3160215AS
----------------------------------------------------------------------------
Model : ST3160215AS
Firmware : 3.AAD
Serial Number : 6RX6TNF3
Disk Size : 160.0 GB (8.4/137.4/160.0)
Buffer Size : 2048 KB
Queue Depth : 32
# of Sectors : 312581808
Rotation Rate : Unknown
Interface : Serial ATA
Major Version : ATA/ATAPI-7
Minor Version : ----
Transfer Mode : SATA/300
Power On Hours : 9998 hours
Power On Count : 4364 count
Temparature : 41 C (105 F)
Health Status : Good
Features : S.M.A.R.T., 48bit LBA, NCQ
APM Level : ----
AAM Level : ----

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 114 _99 __6 00000388507E Read Error Rate
03 _97 _97 __0 000000000000 Spin-Up Time
04 _96 _96 _20 00000000110D Start/Stop Count
05 100 100 _36 000000000000 Reallocated Sectors Count
07 _82 _60 _30 00000AC9B820 Seek Error Rate
09 _89 _89 __0 00000000270E Power-On Hours
0A 100 100 _97 000000000000 Spin Retry Count
0C _96 _96 _20 00000000110C Power Cycle Count
BB _95 _95 __0 000000000005 Reported Uncorrectable Errors
BD 100 100 __0 000000000000 High Fly Writes
BE _59 _48 _45 000029210029 Airflow Temperature
C2 _41 _52 __0 000F00000029 Temperature
C3 _87 _66 __0 000007BC901C Hardware ECC recovered
C5 100 100 __0 000000000000 Current Pending Sector Count
C6 100 100 __0 000000000000 Uncorrectable Sector Count
C7 200 200 __0 000000000000 UltraDMA CRC Error Count
C8 100 253 __0 000000000000 Write Error Rate
CA 100 253 __0 000000000000 Data Address Mark Error

-- IDENTIFY_DEVICE ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 0C 5A 3F FF C8 37 00 10 00 00 00 00 00 3F 00 00
010: 00 00 00 00 20 20 20 20 20 20 20 20 20 20 20 20
020: 36 52 58 36 54 4E 46 33 00 00 10 00 00 04 33 2E
030: 41 41 44 20 20 20 53 54 33 31 36 30 32 31 35 41
040: 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
050: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 80 10
060: 00 00 2F 00 40 00 02 00 02 00 00 07 3F FF 00 10
070: 00 3F FC 10 00 FB 01 10 FF FF 0F FF 00 00 00 07
080: 00 03 00 78 00 78 00 78 00 78 00 00 00 00 00 00
090: 00 00 00 00 00 00 00 1F 05 06 00 00 00 48 00 00
0A0: 00 FE 00 00 34 6B 7D 01 40 23 34 69 3C 01 40 23
0B0: 20 7F 00 00 00 00 FE FE FF FE 00 00 D0 00 00 00
0C0: 00 00 00 00 00 00 00 00 9E B0 12 A1 00 00 00 00
0D0: 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 02
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 09 9E B0 12 A1 9E B0 12 A1 20 20 00 02 02 B6
110: 00 02 00 8A 3C 06 3C 0A 00 00 07 C6 01 00 08 00
120: 13 12 05 00 00 02 00 80 00 00 00 00 00 A0 02 02
130: 00 00 04 04 00 00 00 00 00 00 00 00 1B 00 00 0B
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 F5 A5

############################## | UsbFix 7.059 | [Deletion]

User: Admin (Administrator) # MOBI-83083F0738 [ ]
Updated 16/09/2011 by El Desaparecido
Started at 19:49:19 | 04/05/2012
Website: http://eldesaparecido.com
Submit your sample: http://eldesaparecido.com/support.php
Contact: contact@eldesaparecido.com

CPU: Intel(R) Pentium(R) Dual CPU E2180 @ 2.00GHz
Microsoft Windows XP Professional (5.1.2600 32-Bit) # Service Pack 2
Internet Explorer 6.0.2900.2180

Windows Firewall: Disabled /!\
Antivirus: Kaspersky Anti-Virus 12.0.0.374 [(!) Disabled | (!) Outdated]
Firewall: Kaspersky Anti-Virus 12.0.0.374 [(!) Disabled]
RAM -> 1012 Mb
C:\ (%systemdrive%) -> Fixed drive # 20 Gb (7 Mb free - 37%) [] # FAT32
D:\ -> Fixed drive # 63 Gb (62 Mb free - 98%) [] # FAT32
E:\ -> Fixed drive # 66 Gb (66 Mb free - 100%) [] # FAT32
F:\ -> CD-ROM

################## | Files # Infected Folders |


(!) Temporary files deleted.


################## | Registry |

Deleted ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|DisableRegistryTools
Deleted ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives
Deleted ! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives

################## | Mountpoints2 |


################## | Listing |

[01/11/2008 - 10:11:50 | N | 122896] C:\IO.SYS
[01/11/2008 - 10:11:50 | N | 9] C:\MSDOS.SYS
[23/04/1999 - 21:22:00 | N | 93890] C:\COMMAND.COM
[12/12/2010 - 19:00:50 | D ] C:\WINDOWS
[04/08/2004 - 00:07:00 | N | 250032] C:\ntldr
[04/08/2004 - 00:07:00 | N | 47564] C:\NTDETECT.COM
[12/12/2010 - 19:03:50 | N | 512] C:\bootsect.dos
[28/03/2011 - 00:37:52 | N | 0] C:\BOOTLOG.PRV
[12/12/2010 - 19:04:38 | D ] C:\Documents and Settings
[12/12/2010 - 19:13:12 | D ] C:\Program Files
[12/12/2010 - 19:14:00 | N | 0] C:\CONFIG.SYS
[12/12/2010 - 19:14:00 | N | 0] C:\AUTOEXEC.BAT
[12/12/2010 - 19:18:18 | SHD ] C:\System Volume Information
[02/05/2012 - 22:08:46 | N | 80324] C:\ComboFix.txt
[29/03/2011 - 04:41:42 | D ] C:\FOUND.000
[06/04/2011 - 00:36:50 | D ] C:\FOUND.001
[06/04/2011 - 02:18:04 | D ] C:\FOUND.002
[07/04/2011 - 00:46:38 | D ] C:\FOUND.003
[10/04/2011 - 01:06:38 | D ] C:\FOUND.004
[10/04/2011 - 02:19:32 | D ] C:\FOUND.005
[02/05/2012 - 22:00:46 | N | 354] C:\boot.ini
[04/05/2012 - 19:39:50 | ASH | 1585446912] C:\pagefile.sys
[13/04/2011 - 22:25:50 | D ] C:\FOUND.006
[14/04/2011 - 20:24:56 | D ] C:\FOUND.007
[21/04/2011 - 02:17:00 | D ] C:\FOUND.008
[25/04/2011 - 17:37:32 | D ] C:\FOUND.009
[26/04/2011 - 18:51:50 | D ] C:\FOUND.010
[30/04/2011 - 11:03:26 | D ] C:\FOUND.011
[30/04/2011 - 20:23:14 | D ] C:\FOUND.012
[06/05/2011 - 05:55:50 | D ] C:\FOUND.013
[25/05/2011 - 09:50:22 | D ] C:\FOUND.014
[26/05/2011 - 19:46:30 | D ] C:\FOUND.015
[29/05/2011 - 19:01:50 | D ] C:\FOUND.016
[30/05/2011 - 10:23:08 | D ] C:\FOUND.017
[02/06/2011 - 08:05:10 | D ] C:\FOUND.018
[05/06/2011 - 12:29:10 | D ] C:\FOUND.019
[12/06/2011 - 08:39:00 | D ] C:\FOUND.020
[27/04/2007 - 20:08:06 | N | 1918788] C:\GHOST.EXE
[22/06/2011 - 22:00:12 | D ] C:\FOUND.021
[01/07/2011 - 08:26:10 | D ] C:\FOUND.022
[03/07/2011 - 10:59:42 | D ] C:\FOUND.023
[03/07/2011 - 11:07:42 | D ] C:\FOUND.024
[03/07/2011 - 12:56:46 | D ] C:\FOUND.025
[04/07/2011 - 13:42:42 | D ] C:\FOUND.026
[09/07/2011 - 07:26:16 | D ] C:\FOUND.027
[09/07/2011 - 12:17:16 | D ] C:\FOUND.028
[17/07/2011 - 18:29:06 | D ] C:\FOUND.029
[31/07/2011 - 20:28:50 | D ] C:\FOUND.030
[08/08/2011 - 06:51:22 | D ] C:\FOUND.031
[25/08/2011 - 09:49:50 | D ] C:\FOUND.032
[28/08/2011 - 21:32:18 | D ] C:\FOUND.033
[30/08/2011 - 19:49:34 | D ] C:\FOUND.034
[30/08/2011 - 20:02:26 | D ] C:\FOUND.035
[02/09/2011 - 22:30:22 | D ] C:\FOUND.036
[01/10/2011 - 16:43:50 | N | 0] C:\BOOTLOG.TXT
[02/10/2011 - 21:18:40 | D ] C:\FOUND.037
[03/10/2011 - 19:17:34 | D ] C:\FOUND.038
[05/10/2011 - 09:50:20 | D ] C:\FOUND.039
[05/10/2011 - 18:57:54 | D ] C:\FOUND.040
[07/10/2011 - 16:14:02 | D ] C:\FOUND.041
[08/10/2011 - 17:48:18 | D ] C:\FOUND.042
[10/10/2011 - 19:19:26 | D ] C:\FOUND.043
[10/10/2011 - 19:25:52 | D ] C:\FOUND.044
[13/10/2011 - 21:24:32 | D ] C:\FOUND.045
[17/10/2011 - 10:09:04 | D ] C:\FOUND.046
[17/10/2011 - 12:43:56 | D ] C:\FOUND.047
[18/10/2011 - 11:50:10 | D ] C:\FOUND.048
[19/10/2011 - 17:53:52 | D ] C:\FOUND.049
[22/10/2011 - 19:56:06 | D ] C:\FOUND.050
[26/10/2011 - 08:34:22 | D ] C:\FOUND.051
[04/11/2011 - 11:38:30 | D ] C:\FOUND.052
[16/11/2011 - 12:13:24 | D ] C:\FOUND.053
[17/11/2011 - 10:27:14 | D ] C:\FOUND.054
[20/11/2011 - 08:01:06 | D ] C:\FOUND.055
[03/12/2011 - 20:56:30 | D ] C:\FOUND.056
[06/12/2011 - 22:28:10 | D ] C:\FOUND.057
[10/12/2011 - 16:48:18 | D ] C:\FOUND.058
[15/12/2011 - 19:32:46 | D ] C:\FOUND.059
[16/12/2011 - 10:44:22 | D ] C:\FOUND.060
[17/12/2011 - 12:02:08 | D ] C:\FOUND.061
[18/12/2011 - 12:09:24 | D ] C:\FOUND.062
[19/12/2011 - 12:19:36 | D ] C:\FOUND.063
[19/12/2011 - 14:53:00 | D ] C:\FOUND.064
[28/12/2011 - 10:55:56 | D ] C:\FOUND.065
[30/12/2011 - 19:27:40 | D ] C:\FOUND.066
[31/12/2011 - 10:25:26 | D ] C:\FOUND.067
[31/12/2011 - 13:40:46 | D ] C:\FOUND.068
[03/01/2012 - 06:47:02 | D ] C:\FOUND.069
[04/01/2012 - 10:37:26 | D ] C:\FOUND.070
[05/01/2012 - 21:35:56 | D ] C:\FOUND.071
[07/01/2012 - 21:27:48 | D ] C:\FOUND.072
[08/01/2012 - 20:40:36 | D ] C:\FOUND.073
[11/01/2012 - 19:50:18 | D ] C:\FOUND.074
[15/01/2012 - 15:59:58 | D ] C:\FOUND.075
[17/01/2012 - 10:34:44 | D ] C:\FOUND.076
[26/01/2012 - 17:32:48 | D ] C:\FOUND.077
[06/02/2012 - 16:20:58 | D ] C:\FOUND.078
[27/02/2012 - 12:02:12 | D ] C:\FOUND.079
[01/03/2012 - 17:22:20 | D ] C:\FOUND.080
[07/03/2012 - 20:03:58 | D ] C:\FOUND.081
[27/04/2012 - 14:19:46 | N | 1319] C:\GHOSTERR.TXT
[22/03/2012 - 09:47:18 | D ] C:\FOUND.082
[04/05/2012 - 19:49:06 | D ] C:\UsbFix
[02/05/2012 - 22:00:44 | D ] C:\cmdcons
[03/08/2004 - 23:00:00 | N | 260272] C:\cmldr
[27/03/2012 - 19:17:12 | N | 262144] C:\ntuser.dat
[27/03/2012 - 19:17:12 | N | 1024] C:\ntuser.dat.LOG
[02/04/2012 - 17:08:30 | D ] C:\FOUND.083
[08/04/2012 - 22:42:38 | D ] C:\FOUND.084
[12/04/2012 - 23:57:20 | D ] C:\FOUND.085
[13/04/2012 - 22:25:20 | D ] C:\FOUND.086
[17/04/2012 - 16:44:44 | D ] C:\Config.Msi
[20/04/2012 - 00:25:14 | D ] C:\FOUND.087
[23/04/2012 - 17:48:34 | D ] C:\FOUND.088
[26/04/2012 - 21:35:04 | D ] C:\FOUND.089
[28/04/2012 - 19:18:10 | D ] C:\FOUND.090
[01/05/2012 - 08:48:08 | D ] C:\FOUND.091
[02/05/2012 - 22:05:36 | D ] C:\Qoobox
[04/05/2012 - 19:49:08 | N | 986] C:\UsbFix.txt
[01/01/2011 - 00:17:52 | N | 237] C:\Boot.bak
[04/05/2012 - 19:50:06 | SHD ] C:\Recycled
[25/01/2012 - 14:35:50 | N | 51926] C:\_tbarlog.txt
[03/05/2012 - 12:30:34 | N | 4613] C:\aoesync.txt
[28/03/2011 - 00:23:42 | SHD ] D:\System Volume Information
[30/03/2011 - 01:31:52 | SHD ] D:\Recycled
[30/03/2011 - 16:21:54 | D ] D:\CounterStrike1.1(HalfLife)
[30/03/2011 - 16:26:34 | D ] D:\SAVE
[08/06/2011 - 17:24:42 | N | 728278] D:\AUDITION_FULL_6093.exe
[18/10/2011 - 16:10:40 | D ] D:\aoe
[24/12/2011 - 19:49:16 | N | 4] D:\CounterStrike1.dat
[31/12/2011 - 12:01:42 | D ] D:\New Folder (2)
[27/03/2012 - 20:08:14 | D ] D:\línhau
[28/03/2011 - 00:23:42 | SHD ] E:\System Volume Information
[28/03/2011 - 00:32:20 | D ] E:\Setup
[30/03/2011 - 01:31:52 | SHD ] E:\Recycled
[02/04/2011 - 21:21:30 | N | 32331] E:\A?nh007.jpg
[02/04/2012 - 08:59:44 | ASH | 4608] E:\Thumbs.db

################## | Vaccin |

C:\Autorun.inf -> Vaccine created by UsbFix (TeamXscript)
D:\Autorun.inf -> Vaccine created by UsbFix (TeamXscript)
E:\Autorun.inf -> Vaccine created by UsbFix (TeamXscript)

################## | E.O.F |

c:\windows\system32\dt
nemam tuseni