Virus - Shutting down antivirus

View previous topic View next topic Go down

Virus - Shutting down antivirus

Post by pfchang on Tue Feb 01, 2011 12:04 am

OTL logfile created on: 1/31/2011 3:34:44 PM - Run 1
OTL by OldTimer - Version 3.2.20.6 Folder = C:\Documents and Settings\sarechig\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1,014.00 Mb Total Physical Memory | 634.00 Mb Available Physical Memory | 63.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 89.00% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 64.52 Gb Total Space | 48.04 Gb Free Space | 74.47% Space Free | Partition Type: NTFS
Drive D: | 10.01 Gb Total Space | 7.22 Gb Free Space | 72.09% Space Free | Partition Type: NTFS

Computer Name: RICHLINE116 | User Name: sarechig | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011/01/31 15:30:59 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\sarechig\Desktop\OTL.com
PRC - [2011/01/31 15:25:09 | 000,036,352 | ---- | M] () -- C:\Documents and Settings\sarechig\Local Settings\temp\w9dde1.exe
PRC - [2011/01/31 15:21:35 | 000,018,090 | ---- | M] () -- C:\Documents and Settings\sarechig\Local Settings\temp\winqnjqub.exe
PRC - [2011/01/31 15:21:20 | 000,019,626 | ---- | M] () -- C:\Documents and Settings\sarechig\Local Settings\temp\winptto.exe
PRC - [2011/01/31 15:20:10 | 000,012,970 | ---- | M] () -- C:\Documents and Settings\sarechig\Local Settings\temp\wincgwqdb.exe
PRC - [2011/01/31 15:20:04 | 000,031,914 | ---- | M] () -- C:\Documents and Settings\sarechig\Local Settings\temp\winpcwuv.exe
PRC - [2010/01/15 04:49:20 | 000,255,536 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe
PRC - [2008/04/13 16:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007/01/04 19:48:52 | 000,112,152 | R--- | M] (InterVideo) -- C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
PRC - [2006/07/10 11:53:08 | 000,872,448 | ---- | M] () -- C:\WINDOWS\SMINST\Scheduler.exe
PRC - [2003/05/15 00:19:50 | 000,295,017 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe


========== Modules (SafeList) ==========

MOD - [2011/01/31 15:30:59 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\sarechig\Desktop\OTL.com
MOD - [2010/08/23 08:12:02 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll


========== Win32 Services (SafeList) ==========

SRV - File not found [Disabled | Stopped] -- -- (HidServ)
SRV - [2010/01/15 04:49:20 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService)
SRV - [2007/01/04 19:48:52 | 000,112,152 | R--- | M] (InterVideo) [Auto | Running] -- C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe -- (IviRegMgr)
SRV - [2000/11/28 04:10:00 | 000,053,248 | ---- | M] (IBM Corporation) [On_Demand | Stopped] -- C:\WINDOWS\cwbrxd.exe -- (Cwbrxd)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Running] -- -- (amsint32)
DRV - [2008/04/13 08:36:05 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2007/01/30 10:57:50 | 004,474,368 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2006/09/25 01:13:00 | 001,109,568 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\igxpmp32.sys -- (ialm)
DRV - [2004/08/03 09:29:50 | 000,019,455 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\wVchNTxx.sys -- (iAimFP4)
DRV - [2004/08/03 09:29:48 | 000,012,063 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\wSiINTxx.sys -- (iAimFP3)
DRV - [2004/08/03 09:29:46 | 000,025,471 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\wATV10nt.sys -- (iAimTV5)
DRV - [2004/08/03 09:29:46 | 000,023,615 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\wCh7xxNT.sys -- (iAimTV4)
DRV - [2004/08/03 09:29:46 | 000,022,271 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\wATV06nt.sys -- (iAimTV6)
DRV - [2004/08/03 09:29:44 | 000,033,599 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\wATV04nt.sys -- (iAimTV3)
DRV - [2004/08/03 09:29:44 | 000,019,551 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\wATV02NT.sys -- (iAimTV1)
DRV - [2004/08/03 09:29:42 | 000,029,311 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\wATV01nt.sys -- (iAimTV0)
DRV - [2004/08/03 09:29:42 | 000,011,871 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\wADV09NT.sys -- (iAimFP7)
DRV - [2004/08/03 09:29:40 | 000,011,807 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\wADV07nt.sys -- (iAimFP5)
DRV - [2004/08/03 09:29:40 | 000,011,295 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\wADV08NT.sys -- (iAimFP6)
DRV - [2004/08/03 09:29:38 | 000,161,020 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\i81xnt5.sys -- (i81x)
DRV - [2004/08/03 09:29:38 | 000,012,415 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\wADV01nt.sys -- (iAimFP0)
DRV - [2004/08/03 09:29:38 | 000,012,127 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\wADV02NT.sys -- (iAimFP1)
DRV - [2004/08/03 09:29:38 | 000,011,775 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\wADV05NT.sys -- (iAimFP2)
DRV - [2002/05/08 10:44:42 | 000,105,472 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\adpu320.sys -- (adpu320)
DRV - [2002/04/03 22:32:06 | 000,028,416 | R--- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\symmpi.sys -- (Symmpi)
DRV - [2001/08/17 08:07:42 | 000,030,688 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\sym_u3.sys -- (sym_u3)
DRV - [2001/08/17 08:07:40 | 000,028,384 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\sym_hi.sys -- (sym_hi)
DRV - [2001/08/17 08:07:36 | 000,032,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\symc8xx.sys -- (symc8xx)
DRV - [2001/08/17 08:07:34 | 000,016,256 | ---- | M] (Symbios Logic Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\symc810.sys -- (symc810)
DRV - [2001/08/16 23:20:04 | 000,096,256 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ac97intc.sys -- (ac97intc) Intel(r) 82801 Audio Driver Install Service (WDM)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========


IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = [You must be registered and logged in to see this link.]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = [You must be registered and logged in to see this link.]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 4A B9 DE F7 38 F8 CA 01 [binary data]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



O1 HOSTS File: ([2009/12/22 16:28:19 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (AcroIEToolbarHelper Class) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll ()
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll (Google Inc.)
O2 - BHO: (Sammsoft Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll ()
O3 - HKLM\..\Toolbar: (Sammsoft Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Sammsoft Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O4 - HKLM..\Run: [Client Access Check Version] C:\Program Files\IBM\Client Access\cwbckver.exe (IBM Corporation)
O4 - HKLM..\Run: [Client Access Express Welcome] C:\Program Files\IBM\Client Access\cwbwlwiz.exe (IBM Corporation)
O4 - HKLM..\Run: [Client Access Help Update] C:\Program Files\IBM\Client Access\cwbinhlp.exe (IBM Corporation)
O4 - HKLM..\Run: [Client Access Service] C:\Program Files\IBM\Client Access\cwbsvstr.exe (IBM Corporation)
O4 - HKLM..\Run: [Recguard] C:\WINDOWS\SMINST\Recguard.exe ()
O4 - HKLM..\Run: [Reminder] C:\WINDOWS\CREATOR\Remind_XP.exe ()
O4 - HKLM..\Run: [Scheduler] C:\WINDOWS\SMINST\Scheduler.exe ()
O4 - HKLM..\Run: [SetRefresh] C:\Program Files\Compaq\SetRefresh\SetRefresh.exe (Hewlett-Packard Company)
O4 - HKCU..\Run: [AROReminder] C:\Program Files\Advanced Registry Optimizer\aro.exe (Sammsoft)
O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe (Adobe Systems Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe (McAfee, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1
O8 - Extra context menu item: Google Sidewiki... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll (Google Inc.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} [You must be registered and logged in to see this link.] (Java Plug-in 1.6.0_23)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} [You must be registered and logged in to see this link.] (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} [You must be registered and logged in to see this link.] (Java Plug-in 1.6.0_01)
O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} [You must be registered and logged in to see this link.] (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} [You must be registered and logged in to see this link.] (Java Plug-in 1.6.0_23)
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} [You must be registered and logged in to see this link.] (GpcContainer Class)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} [You must be registered and logged in to see this link.] (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.6.0.4 10.99.0.32
O18 - Protocol\Filter\application/xhtml+xml {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files\Design Science\MathPlayer\MathMLMimer.dll (Design Science, Inc.)
O18 - Protocol\Filter\application/xhtml+xml; charset=iso-8859-1 {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files\Design Science\MathPlayer\MathMLMimer.dll (Design Science, Inc.)
O18 - Protocol\Filter\application/xhtml+xml; charset=utf-8 {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files\Design Science\MathPlayer\MathMLMimer.dll (Design Science, Inc.)
O18 - Protocol\Filter\text/xml; charset=iso-8859-1 {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files\Design Science\MathPlayer\MathMLMimer.dll (Design Science, Inc.)
O18 - Protocol\Filter\text/xml; charset=utf-8 {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files\Design Science\MathPlayer\MathMLMimer.dll (Design Science, Inc.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011/01/19 16:45:20 | 000,000,304 | ---- | M] () - C:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2011/01/23 09:42:16 | 000,000,236 | ---- | M] () - D:\autorun.inf -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs: 6to4 - File not found
NetSvcs: HidServ - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

MsConfig - State: "system.ini" - 0
MsConfig - State: "win.ini" - 0
MsConfig - State: "bootini" - 0
MsConfig - State: "services" - 0
MsConfig - State: "startup" - 0



ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {10072CEC-8CC1-11D1-986E-00A0C955B42F} - Vector Graphics Rendering (VML)
ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - NetShow
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 6.4
ActiveX: {283807B5-2C60-11D0-A31D-00AA00B92C03} - DirectAnimation
ActiveX: {2A3320D6-C805-4280-B423-B665BDE33D8F} - Microsoft .NET Framework 1.1 Security Update (KB979906)
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {2F6EFCE6-10DF-49F9-9E64-9AE3775B2588} - Microsoft .NET Framework 1.1 Security Update (KB2416447)
ActiveX: {36f8ec70-c29a-11d1-b5c7-0000f8051515} - Dynamic HTML Data Binding for Java
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3bf42070-b3b1-11d1-b5c5-0000f8051515} - Uniscribe
ActiveX: {411EDCF7-755D-414E-A74B-3DCD6583F589} - Microsoft .NET Framework 1.1 Service Pack 1 (KB867460)
ActiveX: {4278c270-a269-11d1-b5bf-0000f8051515} - Advanced Authoring
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install
ActiveX: {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT
ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - DirectShow
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f216970-c90c-11d1-b5c7-0000f8051515} - DirectAnimation Java Classes
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.8
ActiveX: {5056b317-8d4c-43ee-8543-b9d1e234b8f4} - Security Update for Windows XP (KB923789)
ActiveX: {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser
ActiveX: {5A8D6EE0-3E18-11D0-821E-444553540000} - ICW
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7131646D-CD3C-40F4-97B9-CD9E4E6262EF} - .NET Framework
ActiveX: {73fa19d0-2d75-11d2-995d-00c04f98bbc9} - Web Folders
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\WINDOWS\system32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - c:\WINDOWS\system32\Rundll32.exe c:\WINDOWS\system32\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {B508B3F1-A24A-32C0-B310-85786919EF28} - .NET Framework
ActiveX: {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} - .NET Framework
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} - .NET Framework
ActiveX: {CC2A9BA0-3BDD-11D0-821E-444553540000} - Task Scheduler
ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
ActiveX: {D27CDB6E-AE6D-11cf-96B8-444553540000} - Adobe Flash Player
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} - C:\WINDOWS\system32\ieudinit.exe
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\INF\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigIE
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
ActiveX: >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE

Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point (16902109354000384)

========== Files/Folders - Created Within 30 Days ==========

[2011/01/31 15:32:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Sun
[2011/01/31 15:32:23 | 000,472,808 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll
[2011/01/31 15:32:23 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2011/01/31 15:32:22 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2011/01/31 15:32:22 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[2011/01/31 15:30:53 | 000,602,624 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\sarechig\Desktop\OTL.com
[2011/01/31 14:06:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\sarechig\Local Settings\Application Data\AskToolbar
[2011/01/31 14:04:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\sarechig\Application Data\Sammsoft
[2011/01/31 14:03:56 | 000,000,000 | ---D | C] -- C:\Program Files\Ask.com
[2011/01/31 14:03:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Advanced Registry Optimizer
[2011/01/31 14:03:50 | 000,000,000 | ---D | C] -- C:\Program Files\Advanced Registry Optimizer
[2011/01/19 15:36:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\sarechig\Local Settings\Application Data\Identities
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/01/31 15:32:07 | 000,157,472 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2011/01/31 15:32:07 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2011/01/31 15:32:07 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[2011/01/31 15:32:07 | 000,073,728 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl
[2011/01/31 15:32:06 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll
[2011/01/31 15:30:59 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\sarechig\Desktop\OTL.com
[2011/01/31 15:14:56 | 000,000,882 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011/01/31 15:14:29 | 1063,768,064 | -HS- | M] () -- C:\hiberfil.sys
[2011/01/31 15:14:29 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011/01/31 15:11:09 | 000,002,577 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2011/01/31 14:48:52 | 000,001,917 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2011/01/31 14:43:01 | 000,000,886 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011/01/31 14:24:49 | 058,833,152 | ---- | M] () -- C:\Documents and Settings\sarechig\Desktop\setup_av_free.exe
[2011/01/31 14:04:00 | 000,001,718 | ---- | M] () -- C:\Documents and Settings\sarechig\Desktop\Check PC For Errors.lnk
[2011/01/31 14:04:00 | 000,001,696 | ---- | M] () -- C:\Documents and Settings\sarechig\Application Data\Microsoft\Internet Explorer\Quick Launch\Check PC For Errors.lnk
[2011/01/31 14:03:59 | 000,000,240 | ---- | M] () -- C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
[2011/01/31 12:51:28 | 000,009,070 | ---- | M] () -- C:\Documents and Settings\sarechig\Desktop\aur243a_244642530_AFA1B976X9853X45F4XB154XE3740C62B1D4(1).xls
[2011/01/31 09:53:31 | 000,002,513 | ---- | M] () -- C:\Documents and Settings\sarechig\Application Data\Microsoft\Internet Explorer\Quick Launch\Microsoft Office Excel 2003.lnk
[2011/01/31 08:55:51 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011/01/28 08:48:15 | 000,000,000 | ---- | M] () -- C:\WINDOWS\Embojpnm
[2011/01/25 17:14:15 | 000,103,140 | RHS- | M] () -- C:\tllanm.exe
[2011/01/25 17:13:37 | 000,103,140 | RHS- | M] () -- C:\rjfg.exe
[2011/01/25 17:12:59 | 000,103,140 | RHS- | M] () -- C:\igidc.exe
[2011/01/25 17:12:21 | 000,103,140 | RHS- | M] () -- C:\evesfb.pif
[2011/01/25 17:11:43 | 000,103,140 | RHS- | M] () -- C:\todnj.exe
[2011/01/25 17:11:06 | 000,103,140 | RHS- | M] () -- C:\gykr.exe
[2011/01/25 17:10:28 | 000,103,140 | RHS- | M] () -- C:\xkonn.pif
[2011/01/25 17:09:49 | 000,103,140 | RHS- | M] () -- C:\cthqg.exe
[2011/01/25 17:09:12 | 000,103,140 | RHS- | M] () -- C:\knmdrk.pif
[2011/01/25 17:08:35 | 000,103,140 | RHS- | M] () -- C:\csoxl.pif
[2011/01/25 17:07:55 | 000,103,140 | RHS- | M] () -- C:\fnaqy.exe
[2011/01/25 17:07:18 | 000,103,140 | RHS- | M] () -- C:\kjwnwm.pif
[2011/01/25 17:06:40 | 000,103,140 | RHS- | M] () -- C:\tpemts.exe
[2011/01/25 17:06:03 | 000,103,140 | RHS- | M] () -- C:\cfyvvm.exe
[2011/01/25 17:05:25 | 000,103,140 | RHS- | M] () -- C:\behdq.pif
[2011/01/25 17:04:50 | 000,103,140 | RHS- | M] () -- C:\hbwjam.exe
[2011/01/25 17:04:10 | 000,103,140 | RHS- | M] () -- C:\vlbcf.exe
[2011/01/25 17:03:33 | 000,103,140 | RHS- | M] () -- C:\rbwr.exe
[2011/01/25 17:02:56 | 000,103,140 | RHS- | M] () -- C:\nfvd.exe
[2011/01/25 17:02:20 | 000,103,140 | RHS- | M] () -- C:\lsatud.exe
[2011/01/25 17:01:44 | 000,103,140 | RHS- | M] () -- C:\groupu.exe
[2011/01/25 17:01:04 | 000,103,140 | RHS- | M] () -- C:\rrnuk.pif
[2011/01/25 17:00:27 | 000,103,140 | RHS- | M] () -- C:\scbdlo.exe
[2011/01/25 16:59:50 | 000,103,140 | RHS- | M] () -- C:\gdic.pif
[2011/01/25 16:59:13 | 000,103,140 | RHS- | M] () -- C:\rvjxss.exe
[2011/01/25 16:58:35 | 000,103,140 | RHS- | M] () -- C:\qxwfpq.exe
[2011/01/25 16:57:57 | 000,103,140 | RHS- | M] () -- C:\rekfdc.exe
[2011/01/25 16:57:11 | 000,103,140 | RHS- | M] () -- C:\mybmik.pif
[2011/01/25 16:56:32 | 000,103,140 | RHS- | M] () -- C:\nrld.exe
[2011/01/25 16:55:50 | 000,103,140 | RHS- | M] () -- C:\dmrf.exe
[2011/01/25 16:55:13 | 000,103,140 | RHS- | M] () -- C:\oacojf.pif
[2011/01/25 16:54:35 | 000,103,140 | RHS- | M] () -- C:\jluoo.pif
[2011/01/25 16:53:58 | 000,103,140 | RHS- | M] () -- C:\fafccq.pif
[2011/01/25 16:53:21 | 000,103,140 | RHS- | M] () -- C:\ndass.exe
[2011/01/25 16:52:38 | 000,103,140 | RHS- | M] () -- C:\cmquw.pif
[2011/01/25 16:51:59 | 000,103,140 | RHS- | M] () -- C:\gvwwt.pif
[2011/01/25 16:51:23 | 000,103,140 | RHS- | M] () -- C:\aatjs.pif
[2011/01/25 16:50:45 | 000,103,140 | RHS- | M] () -- C:\skogo.pif
[2011/01/25 16:50:05 | 000,103,140 | RHS- | M] () -- C:\cdnrmr.pif
[2011/01/25 16:49:22 | 000,103,140 | RHS- | M] () -- C:\jmxj.exe
[2011/01/25 16:48:42 | 000,103,140 | RHS- | M] () -- C:\rhhh.pif
[2011/01/25 16:48:04 | 000,103,140 | RHS- | M] () -- C:\rywm.exe
[2011/01/25 16:47:26 | 000,103,140 | RHS- | M] () -- C:\eyktj.exe
[2011/01/25 16:46:48 | 000,103,140 | RHS- | M] () -- C:\nnlh.exe
[2011/01/25 16:46:11 | 000,103,140 | RHS- | M] () -- C:\jhlw.exe
[2011/01/25 16:45:34 | 000,103,140 | RHS- | M] () -- C:\saad.exe
[2011/01/25 16:44:58 | 000,103,140 | RHS- | M] () -- C:\givr.exe
[2011/01/25 16:44:18 | 000,103,140 | RHS- | M] () -- C:\ilqbr.pif
[2011/01/25 16:43:40 | 000,103,140 | RHS- | M] () -- C:\pyqrj.exe
[2011/01/25 16:43:02 | 000,103,140 | RHS- | M] () -- C:\yjli.pif
[2011/01/25 16:42:20 | 000,103,140 | RHS- | M] () -- C:\cwdou.exe
[2011/01/25 16:41:42 | 000,103,140 | RHS- | M] () -- C:\oghb.pif
[2011/01/25 16:41:03 | 000,103,140 | RHS- | M] () -- C:\jjveva.exe
[2011/01/25 16:40:28 | 000,103,140 | RHS- | M] () -- C:\ghrpgw.exe
[2011/01/25 16:39:48 | 000,103,140 | RHS- | M] () -- C:\gftr.pif
[2011/01/25 16:39:06 | 000,103,140 | RHS- | M] () -- C:\hwfthi.exe
[2011/01/25 16:38:27 | 000,103,140 | RHS- | M] () -- C:\vbptgl.pif
[2011/01/25 16:37:50 | 000,103,140 | RHS- | M] () -- C:\hvmx.exe
[2011/01/25 16:37:03 | 000,103,140 | RHS- | M] () -- C:\mrkn.exe
[2011/01/25 16:36:24 | 000,103,140 | RHS- | M] () -- C:\glifer.exe
[2011/01/25 16:35:44 | 000,103,140 | RHS- | M] () -- C:\gjhhi.exe
[2011/01/25 16:35:05 | 000,103,140 | RHS- | M] () -- C:\tomi.pif
[2011/01/25 16:34:28 | 000,103,140 | RHS- | M] () -- C:\sfpc.exe
[2011/01/25 16:33:50 | 000,103,140 | RHS- | M] () -- C:\rvxurd.exe
[2011/01/25 16:32:53 | 000,103,140 | RHS- | M] () -- C:\hjxfeq.exe
[2011/01/25 16:32:15 | 000,103,140 | RHS- | M] () -- C:\kxcblb.pif
[2011/01/25 16:31:33 | 000,103,140 | RHS- | M] () -- C:\nwaon.pif
[2011/01/25 16:30:36 | 000,103,140 | RHS- | M] () -- C:\kyee.pif
[2011/01/25 16:29:57 | 000,103,140 | RHS- | M] () -- C:\mgtcnl.exe
[2011/01/25 16:29:19 | 000,103,140 | RHS- | M] () -- C:\dtdng.pif
[2011/01/25 16:28:39 | 000,103,140 | RHS- | M] () -- C:\nvxks.exe
[2011/01/25 16:28:02 | 000,103,140 | RHS- | M] () -- C:\icjb.exe
[2011/01/25 16:27:24 | 000,103,140 | RHS- | M] () -- C:\dmec.exe
[2011/01/25 16:26:46 | 000,103,140 | RHS- | M] () -- C:\mriwh.exe
[2011/01/25 16:26:04 | 000,103,140 | RHS- | M] () -- C:\nifb.exe
[2011/01/25 16:25:28 | 000,103,140 | RHS- | M] () -- C:\lcgwfq.exe
[2011/01/25 16:24:50 | 000,103,140 | RHS- | M] () -- C:\cove.exe
[2011/01/25 16:24:06 | 000,103,140 | RHS- | M] () -- C:\oysguh.exe
[2011/01/25 16:23:17 | 000,103,140 | RHS- | M] () -- C:\cvitth.exe
[2011/01/25 16:22:39 | 000,103,140 | RHS- | M] () -- C:\ehure.pif
[2011/01/25 16:22:00 | 000,103,140 | RHS- | M] () -- C:\uuqs.exe
[2011/01/25 16:21:24 | 000,103,140 | RHS- | M] () -- C:\ghfaov.exe
[2011/01/25 16:20:43 | 000,103,140 | RHS- | M] () -- C:\bprwf.pif
[2011/01/25 16:19:13 | 000,103,140 | RHS- | M] () -- C:\nrmm.exe
[2011/01/25 16:17:27 | 000,103,140 | RHS- | M] () -- C:\leery.exe
[2011/01/25 16:15:32 | 000,103,140 | RHS- | M] () -- C:\garxck.pif
[2011/01/25 16:13:55 | 000,103,140 | RHS- | M] () -- C:\jsxeux.pif
[2011/01/25 16:12:25 | 000,103,140 | RHS- | M] () -- C:\rpjoyk.exe
[2011/01/25 16:11:30 | 000,103,140 | RHS- | M] () -- C:\abjs.exe
[2011/01/25 16:10:48 | 000,103,140 | RHS- | M] () -- C:\plbqs.exe
[2011/01/25 16:10:11 | 000,103,140 | RHS- | M] () -- C:\xqkup.exe
[2011/01/25 16:09:24 | 000,103,140 | RHS- | M] () -- C:\rlvne.pif
[2011/01/25 16:08:45 | 000,103,140 | RHS- | M] () -- C:\oklglj.pif
[2011/01/25 16:08:07 | 000,103,140 | RHS- | M] () -- C:\tiwq.pif
[2011/01/25 16:07:29 | 000,103,140 | RHS- | M] () -- C:\pjhyyt.exe
[2011/01/25 16:06:49 | 000,103,140 | RHS- | M] () -- C:\iqutt.pif
[2011/01/25 16:06:08 | 000,103,140 | RHS- | M] () -- C:\atytr.exe
[2011/01/25 16:05:25 | 000,103,140 | RHS- | M] () -- C:\yimnrb.exe
[2011/01/25 16:04:47 | 000,103,140 | RHS- | M] () -- C:\saxxd.pif
[2011/01/25 16:03:45 | 000,103,140 | RHS- | M] () -- C:\iwbso.exe
[2011/01/25 16:03:04 | 000,103,140 | RHS- | M] () -- C:\odpnmq.exe
[2011/01/25 16:02:11 | 000,103,140 | RHS- | M] () -- C:\btytd.pif
[2011/01/25 16:01:32 | 000,103,140 | RHS- | M] () -- C:\awhgdd.exe
[2011/01/25 16:00:53 | 000,103,140 | RHS- | M] () -- C:\xddco.exe
[2011/01/25 16:00:16 | 000,103,140 | RHS- | M] () -- C:\hqqnu.pif
[2011/01/25 15:59:38 | 000,103,140 | RHS- | M] () -- C:\bngr.pif
[2011/01/25 15:59:01 | 000,103,140 | RHS- | M] () -- C:\qlvabm.pif
[2011/01/25 15:58:22 | 000,103,140 | RHS- | M] () -- C:\holpp.exe
[2011/01/25 15:57:44 | 000,103,140 | RHS- | M] () -- C:\xsisd.exe
[2011/01/25 15:57:06 | 000,103,140 | RHS- | M] () -- C:\fcheo.exe
[2011/01/25 15:56:28 | 000,103,140 | RHS- | M] () -- C:\btxa.exe
[2011/01/25 15:55:48 | 000,103,140 | RHS- | M] () -- C:\tsahy.exe
[2011/01/25 15:55:08 | 000,103,140 | RHS- | M] () -- C:\ichwu.pif
[2011/01/25 15:54:30 | 000,103,140 | RHS- | M] () -- C:\aelaml.exe
[2011/01/25 15:53:49 | 000,103,140 | RHS- | M] () -- C:\qari.pif
[2011/01/25 15:53:11 | 000,103,140 | RHS- | M] () -- C:\dgsgq.pif
[2011/01/25 15:52:32 | 000,103,140 | RHS- | M] () -- C:\yxanv.exe
[2011/01/25 15:51:54 | 000,103,140 | RHS- | M] () -- C:\spfsx.exe
[2011/01/25 15:51:16 | 000,103,140 | RHS- | M] () -- C:\vjsqx.exe
[2011/01/25 15:50:38 | 000,103,140 | RHS- | M] () -- C:\dldvls.pif
[2011/01/25 15:50:02 | 000,103,140 | RHS- | M] () -- C:\gfdl.exe
[2011/01/25 15:49:21 | 000,103,140 | RHS- | M] () -- C:\iwev.exe
[2011/01/25 15:48:43 | 000,103,140 | RHS- | M] () -- C:\jdak.pif
[2011/01/25 15:46:39 | 000,103,140 | RHS- | M] () -- C:\pghlm.pif
[2011/01/25 15:45:54 | 000,103,140 | RHS- | M] () -- C:\dmvjxy.pif
[2011/01/25 15:45:12 | 000,103,140 | RHS- | M] () -- C:\qbfcmf.pif
[2011/01/25 15:44:29 | 000,103,140 | RHS- | M] () -- C:\fshsm.exe
[2011/01/25 15:43:48 | 000,103,140 | RHS- | M] () -- C:\rtak.exe
[2011/01/25 15:43:06 | 000,103,140 | RHS- | M] () -- C:\algb.exe
[2011/01/25 15:42:23 | 000,103,140 | RHS- | M] () -- C:\thsk.pif
[2011/01/25 15:41:44 | 000,103,140 | RHS- | M] () -- C:\coqq.exe
[2011/01/25 15:41:01 | 000,103,140 | RHS- | M] () -- C:\mfjf.exe
[2011/01/25 15:40:19 | 000,103,140 | RHS- | M] () -- C:\ujfp.exe
[2011/01/25 15:39:30 | 000,103,140 | RHS- | M] () -- C:\dqefj.exe
[2011/01/25 15:38:50 | 000,103,140 | RHS- | M] () -- C:\osnkq.pif
[2011/01/25 15:38:09 | 000,103,140 | RHS- | M] () -- C:\xaelxi.pif
[2011/01/25 15:37:30 | 000,103,140 | RHS- | M] () -- C:\atxw.pif
[2011/01/25 15:36:51 | 000,103,140 | RHS- | M] () -- C:\dlap.pif
[2011/01/25 15:35:56 | 000,103,140 | RHS- | M] () -- C:\edojsf.exe
[2011/01/25 15:35:12 | 000,103,140 | RHS- | M] () -- C:\txtvyx.exe
[2011/01/25 15:34:29 | 000,103,140 | RHS- | M] () -- C:\cmae.pif
[2011/01/25 15:33:50 | 000,103,140 | RHS- | M] () -- C:\ocwdq.exe
[2011/01/25 15:33:10 | 000,103,140 | RHS- | M] () -- C:\hmrfi.pif
[2011/01/25 15:32:29 | 000,103,140 | RHS- | M] () -- C:\dsylh.exe
[2011/01/25 15:31:38 | 000,103,140 | RHS- | M] () -- C:\ravlm.pif
[2011/01/25 15:31:00 | 000,103,140 | RHS- | M] () -- C:\gfqjh.exe
[2011/01/25 15:30:14 | 000,103,140 | RHS- | M] () -- C:\megcf.exe
[2011/01/25 15:29:32 | 000,103,140 | RHS- | M] () -- C:\joboc.pif
[2011/01/25 15:28:53 | 000,103,140 | RHS- | M] () -- C:\ohqwuw.pif
[2011/01/25 15:28:11 | 000,103,140 | RHS- | M] () -- C:\rejdtf.pif
[2011/01/25 15:27:31 | 000,103,140 | RHS- | M] () -- C:\uhedki.exe
[2011/01/25 15:26:52 | 000,103,140 | RHS- | M] () -- C:\qwbb.pif
[2011/01/25 15:26:09 | 000,103,140 | RHS- | M] () -- C:\odshhw.pif
[2011/01/25 15:25:28 | 000,103,140 | RHS- | M] () -- C:\bxin.exe
[2011/01/25 15:24:47 | 000,103,140 | RHS- | M] () -- C:\yruu.pif
[2011/01/25 15:24:07 | 000,103,140 | RHS- | M] () -- C:\neog.exe
[2011/01/25 15:23:27 | 000,103,140 | RHS- | M] () -- C:\wyiv.exe
[2011/01/25 15:22:49 | 000,103,140 | RHS- | M] () -- C:\mkfa.exe
[2011/01/25 15:22:09 | 000,103,140 | RHS- | M] () -- C:\xeky.exe
[2011/01/25 15:21:28 | 000,103,140 | RHS- | M] () -- C:\fkoksa.exe
[2011/01/25 15:20:35 | 000,103,140 | RHS- | M] () -- C:\tkwv.exe
[2011/01/25 15:19:53 | 000,103,140 | RHS- | M] () -- C:\gibpcn.pif
[2011/01/25 15:19:12 | 000,103,140 | RHS- | M] () -- C:\nymr.pif
[2011/01/25 15:18:30 | 000,103,140 | RHS- | M] () -- C:\fbru.pif
[2011/01/25 15:17:46 | 000,103,140 | RHS- | M] () -- C:\xieiye.pif
[2011/01/25 15:17:03 | 000,103,140 | RHS- | M] () -- C:\qnml.exe
[2011/01/25 15:16:20 | 000,103,140 | RHS- | M] () -- C:\naxw.pif
[2011/01/25 15:15:40 | 000,103,140 | RHS- | M] () -- C:\jdfy.exe
[2011/01/25 15:15:01 | 000,103,140 | RHS- | M] () -- C:\yqtsn.pif
[2011/01/25 15:14:22 | 000,103,140 | RHS- | M] () -- C:\pxporn.exe
[2011/01/25 15:13:43 | 000,103,140 | RHS- | M] () -- C:\xhfp.exe
[2011/01/25 15:13:03 | 000,103,140 | RHS- | M] () -- C:\vfprws.exe
[2011/01/25 15:12:24 | 000,103,140 | RHS- | M] () -- C:\wtfawk.pif
[2011/01/25 15:11:44 | 000,103,140 | RHS- | M] () -- C:\triobj.exe
[2011/01/25 15:11:04 | 000,103,140 | RHS- | M] () -- C:\bkifl.exe
[2011/01/25 15:10:23 | 000,103,140 | RHS- | M] () -- C:\quict.exe
[2011/01/25 15:09:43 | 000,103,140 | RHS- | M] () -- C:\jdswe.exe
[2011/01/25 15:09:04 | 000,103,140 | RHS- | M] () -- C:\nqypk.exe
[2011/01/25 15:08:26 | 000,103,140 | RHS- | M] () -- C:\ywsks.pif
[2011/01/25 15:07:44 | 000,103,140 | RHS- | M] () -- C:\wtqjyk.pif
[2011/01/25 15:07:02 | 000,103,140 | RHS- | M] () -- C:\kjbl.exe
[2011/01/25 15:06:20 | 000,103,140 | RHS- | M] () -- C:\iptq.exe
[2011/01/25 15:05:38 | 000,103,140 | RHS- | M] () -- C:\hnrdji.pif
[2011/01/25 15:04:58 | 000,103,140 | RHS- | M] () -- C:\fqbvoq.exe
[2011/01/25 15:04:16 | 000,103,140 | RHS- | M] () -- C:\cvkei.exe
[2011/01/25 15:03:33 | 000,103,140 | RHS- | M] () -- C:\sqkad.pif
[2011/01/25 15:02:54 | 000,103,140 | RHS- | M] () -- C:\khtirl.exe
[2011/01/25 15:02:11 | 000,103,140 | RHS- | M] () -- C:\njbje.exe
[2011/01/25 15:01:30 | 000,103,140 | RHS- | M] () -- C:\qbmpot.exe
[2011/01/25 15:00:48 | 000,103,140 | RHS- | M] () -- C:\hvar.exe
[2011/01/25 14:59:51 | 000,103,140 | RHS- | M] () -- C:\gulwt.pif
[2011/01/25 14:59:08 | 000,103,140 | RHS- | M] () -- C:\efgu.exe
[2011/01/25 14:58:27 | 000,103,140 | RHS- | M] () -- C:\nqckf.pif
[2011/01/25 14:57:38 | 000,103,140 | RHS- | M] () -- C:\vqyomj.pif
[2011/01/25 14:56:54 | 000,103,140 | RHS- | M] () -- C:\sjjl.exe
[2011/01/25 14:56:14 | 000,103,140 | RHS- | M] () -- C:\hevff.pif
[2011/01/25 14:55:26 | 000,103,140 | RHS- | M] () -- C:\rsqb.pif
[2011/01/25 14:54:44 | 000,103,140 | RHS- | M] () -- C:\rblyv.pif
[2011/01/25 14:53:54 | 000,103,140 | RHS- | M] () -- C:\wfapvt.exe
[2011/01/25 14:53:04 | 000,103,140 | RHS- | M] () -- C:\qyqs.pif
[2011/01/25 14:52:24 | 000,103,140 | RHS- | M] () -- C:\lmcpmv.exe
[2011/01/25 14:51:42 | 000,103,140 | RHS- | M] () -- C:\eodx.pif
[2011/01/25 14:51:02 | 000,103,140 | RHS- | M] () -- C:\hjie.pif
[2011/01/25 14:50:22 | 000,103,140 | RHS- | M] () -- C:\oqylh.pif
[2011/01/25 14:49:41 | 000,103,140 | RHS- | M] () -- C:\cfsamf.pif
[2011/01/25 14:49:00 | 000,103,140 | RHS- | M] () -- C:\msipcx.exe
[2011/01/25 14:48:20 | 000,103,140 | RHS- | M] () -- C:\ihyu.pif
[2011/01/25 14:47:41 | 000,103,140 | RHS- | M] () -- C:\jera.pif
[2011/01/25 14:47:02 | 000,103,140 | RHS- | M] () -- C:\svtm.pif
[2011/01/25 14:46:22 | 000,103,140 | RHS- | M] () -- C:\qdwdid.pif
[2011/01/25 14:45:42 | 000,103,140 | RHS- | M] () -- C:\clgktb.exe
[2011/01/25 14:45:02 | 000,103,140 | RHS- | M] () -- C:\cgjdoq.exe
[2011/01/25 14:44:17 | 000,103,140 | RHS- | M] () -- C:\bxlyi.pif
[2011/01/25 14:43:28 | 000,103,140 | RHS- | M] () -- C:\mrcy.pif
[2011/01/25 14:42:44 | 000,103,140 | RHS- | M] () -- C:\gltbet.exe
[2011/01/25 14:41:38 | 000,103,140 | RHS- | M] () -- C:\idmiki.pif
[2011/01/25 14:40:58 | 000,103,140 | RHS- | M] () -- C:\rchn.exe
[2011/01/25 14:40:19 | 000,103,140 | RHS- | M] () -- C:\ibyw.pif
[2011/01/25 14:39:40 | 000,103,140 | RHS- | M] () -- C:\etkemn.exe
[2011/01/25 14:38:48 | 000,103,140 | RHS- | M] () -- C:\mnwjq.pif
[2011/01/25 14:38:09 | 000,103,140 | RHS- | M] () -- C:\byvd.pif
[2011/01/25 14:37:27 | 000,103,140 | RHS- | M] () -- C:\wjxuoc.exe
[2011/01/25 14:36:46 | 000,103,140 | RHS- | M] () -- C:\wims.exe
[2011/01/25 14:35:58 | 000,103,140 | RHS- | M] () -- C:\tujwd.pif
[2011/01/25 14:35:17 | 000,103,140 | RHS- | M] () -- C:\mxst.pif
[2011/01/25 14:34:32 | 000,103,140 | RHS- | M] () -- C:\knuff.pif
[2011/01/25 14:33:52 | 000,103,140 | RHS- | M] () -- C:\enfphv.exe
[2011/01/25 14:33:05 | 000,103,140 | RHS- | M] () -- C:\qifds.pif
[2011/01/25 14:32:12 | 000,103,140 | RHS- | M] () -- C:\mofe.pif
[2011/01/25 14:31:16 | 000,103,140 | RHS- | M] () -- C:\ulha.exe
[2011/01/25 14:29:49 | 000,103,140 | RHS- | M] () -- C:\crxl.pif
[2011/01/25 14:28:47 | 000,103,140 | RHS- | M] () -- C:\qmwq.exe
[2011/01/25 14:27:04 | 000,103,140 | RHS- | M] () -- C:\mfkih.exe
[2011/01/25 14:25:56 | 000,103,140 | RHS- | M] () -- C:\biekmt.exe
[2011/01/25 14:23:28 | 000,103,140 | RHS- | M] () -- C:\vuqg.exe
[2011/01/25 14:22:18 | 000,103,140 | RHS- | M] () -- C:\bwspa.exe
[2011/01/25 14:21:17 | 000,103,140 | RHS- | M] () -- C:\ewdvm.pif
[2011/01/25 14:19:44 | 000,103,140 | RHS- | M] () -- C:\esds.exe
[2011/01/25 14:17:57 | 000,103,140 | RHS- | M] () -- C:\bltr.exe
[2011/01/25 14:16:35 | 000,103,140 | RHS- | M] () -- C:\fhobd.pif
[2011/01/25 14:15:45 | 000,103,140 | RHS- | M] () -- C:\eyprc.pif
[2011/01/25 14:14:58 | 000,103,140 | RHS- | M] () -- C:\ogft.exe
[2011/01/25 12:37:02 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2011/01/25 09:00:01 | 000,103,140 | RHS- | M] () -- C:\ehpu.pif
[2011/01/24 15:36:48 | 000,103,140 | RHS- | M] () -- C:\wlfgt.pif
[2011/01/24 15:35:32 | 000,103,140 | RHS- | M] () -- C:\qgrywc.exe
[2011/01/24 15:34:54 | 000,103,140 | RHS- | M] () -- C:\cqgv.exe
[2011/01/24 15:34:06 | 000,103,140 | RHS- | M] () -- C:\brrs.exe
[2011/01/24 15:33:24 | 000,103,140 | RHS- | M] () -- C:\qjyw.exe
[2011/01/24 15:32:36 | 000,103,140 | RHS- | M] () -- C:\wjgtg.exe
[2011/01/24 15:31:51 | 000,103,140 | RHS- | M] () -- C:\tgddcb.exe
[2011/01/24 15:31:10 | 000,103,140 | RHS- | M] () -- C:\fuhe.exe
[2011/01/24 15:30:01 | 000,103,140 | RHS- | M] () -- C:\saouw.pif
[2011/01/24 15:29:18 | 000,103,140 | RHS- | M] () -- C:\gunxx.exe
[2011/01/24 15:28:33 | 000,103,140 | RHS- | M] () -- C:\twqjf.exe
[2011/01/24 15:27:50 | 000,103,140 | RHS- | M] () -- C:\cpwcrd.exe
[2011/01/24 15:27:01 | 000,103,140 | RHS- | M] () -- C:\rfjjql.exe
[2011/01/24 15:25:58 | 000,103,140 | RHS- | M] () -- C:\opgjhb.exe
[2011/01/24 15:25:10 | 000,103,140 | RHS- | M] () -- C:\jacmcv.exe
[2011/01/24 15:24:10 | 000,103,140 | RHS- | M] () -- C:\nntqy.exe
[2011/01/24 15:23:20 | 000,103,140 | RHS- | M] () -- C:\xhew.exe
[2011/01/24 15:22:40 | 000,103,140 | RHS- | M] () -- C:\vktvjv.exe
[2011/01/24 15:21:59 | 000,103,140 | RHS- | M] () -- C:\jnfa.pif
[2011/01/24 13:49:46 | 000,103,140 | RHS- | M] () -- C:\lrqhu.pif
[2011/01/24 13:48:43 | 000,103,140 | RHS- | M] () -- C:\pehqq.pif
[2011/01/24 13:47:50 | 000,103,140 | RHS- | M] () -- C:\qtupp.pif
[2011/01/24 13:46:56 | 000,103,140 | RHS- | M] () -- C:\asuhe.exe
[2011/01/24 13:45:46 | 000,103,140 | RHS- | M] () -- C:\fqcxp.exe
[2011/01/24 13:45:02 | 000,103,140 | RHS- | M] () -- C:\esug.exe
[2011/01/24 13:43:52 | 000,103,140 | RHS- | M] () -- C:\hwnlu.exe
[2011/01/24 13:42:52 | 000,103,140 | RHS- | M] () -- C:\peykaq.exe
[2011/01/24 13:41:59 | 000,103,140 | RHS- | M] () -- C:\eukrbp.pif
[2011/01/24 13:41:10 | 000,103,140 | RHS- | M] () -- C:\fpaku.exe
[2011/01/24 13:40:14 | 000,103,140 | RHS- | M] () -- C:\wkgd.pif
[2011/01/24 13:39:08 | 000,103,140 | RHS- | M] () -- C:\ggphvj.exe
[2011/01/24 13:38:17 | 000,103,140 | RHS- | M] () -- C:\cqorrn.pif
[2011/01/24 13:37:38 | 000,103,140 | RHS- | M] () -- C:\rwgrd.pif
[2011/01/24 13:36:57 | 000,103,140 | RHS- | M] () -- C:\mvtlso.pif
[2011/01/24 13:36:01 | 000,103,140 | RHS- | M] () -- C:\ygmou.exe
[2011/01/24 13:34:49 | 000,103,140 | RHS- | M] () -- C:\dtqipg.pif
[2011/01/24 13:33:33 | 000,103,140 | RHS- | M] () -- C:\wsic.pif
[2011/01/24 13:32:10 | 000,103,140 | RHS- | M] () -- C:\vtsrmi.exe
[2011/01/24 13:31:03 | 000,103,140 | RHS- | M] () -- C:\taccuq.pif
[2011/01/24 13:30:08 | 000,103,140 | RHS- | M] () -- C:\foqo.pif
[2011/01/24 13:29:14 | 000,103,140 | RHS- | M] () -- C:\bitqsu.exe
[2011/01/24 13:27:48 | 000,103,140 | RHS- | M] () -- C:\ivdxq.exe
[2011/01/24 13:26:58 | 000,103,140 | RHS- | M] () -- C:\jgmv.pif
[2011/01/24 13:26:11 | 000,103,140 | RHS- | M] () -- C:\kjgby.pif
[2011/01/24 13:25:29 | 000,103,140 | RHS- | M] () -- C:\spxoo.exe
[2011/01/24 13:24:36 | 000,103,140 | RHS- | M] () -- C:\rpwqhx.exe
[2011/01/24 13:23:50 | 000,103,140 | RHS- | M] () -- C:\iwjejw.pif
[2011/01/24 13:23:10 | 000,103,140 | RHS- | M] () -- C:\pojq.exe
[2011/01/24 13:22:28 | 000,103,140 | RHS- | M] () -- C:\osha.pif
[2011/01/24 13:21:36 | 000,103,140 | RHS- | M] () -- C:\djqlss.exe
[2011/01/24 13:20:51 | 000,103,140 | RHS- | M] () -- C:\bytk.pif
[2011/01/24 13:20:10 | 000,103,140 | RHS- | M] () -- C:\fggyk.exe
[2011/01/24 13:19:24 | 000,103,140 | RHS- | M] () -- C:\insnva.exe
[2011/01/24 13:18:46 | 000,103,140 | RHS- | M] () -- C:\cotb.exe
[2011/01/24 13:18:01 | 000,103,140 | RHS- | M] () -- C:\hhckob.pif
[2011/01/24 13:17:05 | 000,103,140 | RHS- | M] () -- C:\osudyx.pif
[2011/01/24 13:16:02 | 000,103,140 | RHS- | M] () -- C:\tnjk.exe
[2011/01/24 13:15:13 | 000,103,140 | RHS- | M] () -- C:\srdmy.pif
[2011/01/24 13:14:28 | 000,103,140 | RHS- | M] () -- C:\dudrf.exe
[2011/01/24 13:13:47 | 000,103,140 | RHS- | M] () -- C:\kkulmn.pif
[2011/01/24 13:13:08 | 000,103,140 | RHS- | M] () -- C:\fkhjit.exe
[2011/01/24 13:12:09 | 000,103,140 | RHS- | M] () -- C:\kfwg.pif
[2011/01/24 13:11:28 | 000,103,140 | RHS- | M] () -- C:\jyms.exe
[2011/01/24 13:10:47 | 000,103,140 | RHS- | M] () -- C:\ssitl.exe
[2011/01/24 13:10:06 | 000,103,140 | RHS- | M] () -- C:\urepy.exe
[2011/01/24 13:09:24 | 000,103,140 | RHS- | M] () -- C:\wagctq.exe
[2011/01/24 13:08:26 | 000,103,140 | RHS- | M] () -- C:\gopv.exe
[2011/01/24 13:07:36 | 000,103,140 | RHS- | M] () -- C:\rqkhl.pif
[2011/01/24 13:06:56 | 000,103,140 | RHS- | M] () -- C:\koenth.exe
[2011/01/24 13:06:14 | 000,103,140 | RHS- | M] () -- C:\yltffy.exe
[2011/01/24 13:05:34 | 000,103,140 | RHS- | M] () -- C:\ajhoid.exe
[2011/01/24 13:04:36 | 000,103,140 | RHS- | M] () -- C:\nstc.exe
[2011/01/24 13:03:53 | 000,103,140 | RHS- | M] () -- C:\hphipl.exe
[2011/01/24 13:03:12 | 000,103,140 | RHS- | M] () -- C:\euekx.pif
[2011/01/24 13:02:30 | 000,103,140 | RHS- | M] () -- C:\defsr.exe
[2011/01/24 13:01:46 | 000,103,140 | RHS- | M] () -- C:\ykqg.pif
[2011/01/24 13:00:05 | 000,103,140 | RHS- | M] () -- C:\tvgyc.pif
[2011/01/24 12:59:23 | 000,103,140 | RHS- | M] () -- C:\ieepf.pif
[2011/01/24 12:58:42 | 000,103,140 | RHS- | M] () -- C:\yysvtj.pif
[2011/01/24 12:58:00 | 000,103,140 | RHS- | M] () -- C:\qiwir.exe
[2011/01/24 12:57:19 | 000,103,140 | RHS- | M] () -- C:\wbyb.pif
[2011/01/24 12:56:33 | 000,103,140 | RHS- | M] () -- C:\spspi.pif
[2011/01/24 12:55:40 | 000,103,140 | RHS- | M] () -- C:\bkmkq.pif
[2011/01/24 12:55:00 | 000,103,140 | RHS- | M] () -- C:\nolpfg.exe
[2011/01/24 12:54:17 | 000,103,140 | RHS- | M] () -- C:\iqtym.pif
[2011/01/24 12:53:35 | 000,103,140 | RHS- | M] () -- C:\souhc.pif
[2011/01/24 12:52:52 | 000,103,140 | RHS- | M] () -- C:\wudjh.exe
[2011/01/24 12:51:56 | 000,103,140 | RHS- | M] () -- C:\fbaap.exe
[2011/01/24 12:51:09 | 000,103,140 | RHS- | M] () -- C:\dkyi.pif
[2011/01/24 12:50:25 | 000,103,140 | RHS- | M] () -- C:\nrtkr.pif
[2011/01/24 12:49:43 | 000,103,140 | RHS- | M] () -- C:\mwhban.pif
[2011/01/24 12:49:03 | 000,103,140 | RHS- | M] () -- C:\xmcn.pif
[2011/01/24 12:48:07 | 000,103,140 | RHS- | M] () -- C:\gsfyh.pif
[2011/01/24 12:47:23 | 000,103,140 | RHS- | M] () -- C:\vqgdse.pif
[2011/01/24 12:46:38 | 000,103,140 | RHS- | M] () -- C:\wcjhod.exe
[2011/01/24 12:45:58 | 000,103,140 | RHS- | M] () -- C:\iydntg.exe
[2011/01/24 12:45:13 | 000,103,140 | RHS- | M] () -- C:\dkdd.pif
[2011/01/24 12:44:18 | 000,103,140 | RHS- | M] () -- C:\luscip.exe
[2011/01/24 12:43:26 | 000,103,140 | RHS- | M] () -- C:\rjhmmt.pif
[2011/01/24 12:42:44 | 000,103,140 | RHS- | M] () -- C:\xwvft.exe
[2011/01/24 12:42:01 | 000,103,140 | RHS- | M] () -- C:\vhwv.pif
[2011/01/24 12:41:20 | 000,103,140 | RHS- | M] () -- C:\sqfv.exe
[2011/01/24 12:40:38 | 000,103,140 | RHS- | M] () -- C:\dqisub.exe
[2011/01/24 12:39:44 | 000,103,140 | RHS- | M] () -- C:\djlj.pif
[2011/01/24 12:38:57 | 000,103,140 | RHS- | M] () -- C:\nsusuq.pif
[2011/01/24 12:38:12 | 000,103,140 | RHS- | M] () -- C:\duec.pif
[2011/01/24 12:37:02 | 000,103,140 | RHS- | M] () -- C:\csik.pif
[2011/01/24 12:35:44 | 000,103,140 | RHS- | M] () -- C:\oqmoja.exe
[2011/01/24 12:34:20 | 000,103,140 | RHS- | M] () -- C:\cnik.pif
[2011/01/24 12:32:51 | 000,103,140 | RHS- | M] () -- C:\xdiq.exe
[2011/01/24 12:31:06 | 000,103,140 | RHS- | M] () -- C:\ipwcv.pif
[2011/01/24 12:29:28 | 000,103,140 | RHS- | M] () -- C:\evwumi.exe
[2011/01/24 12:28:02 | 000,103,140 | RHS- | M] () -- C:\aedq.exe
[2011/01/24 12:26:42 | 000,103,140 | RHS- | M] () -- C:\ggnpl.exe
[2011/01/24 12:25:18 | 000,103,140 | RHS- | M] () -- C:\swevht.exe
[2011/01/24 12:24:35 | 000,103,140 | RHS- | M] () -- C:\bqdsud.pif
[2011/01/24 12:23:03 | 000,103,140 | RHS- | M] () -- C:\dxgt.pif
[2011/01/24 12:21:50 | 000,103,140 | RHS- | M] () -- C:\yojvsi.exe
[2011/01/24 12:20:43 | 000,103,140 | RHS- | M] () -- C:\svwgxw.exe
[2011/01/24 12:19:02 | 000,103,140 | RHS- | M] () -- C:\lnxi.exe
[2011/01/24 12:17:27 | 000,103,140 | RHS- | M] () -- C:\eiad.pif
[2011/01/24 12:16:13 | 000,103,140 | RHS- | M] () -- C:\dueba.pif
[2011/01/24 12:15:25 | 000,103,140 | RHS- | M] () -- C:\dsvw.exe
[2011/01/24 12:14:32 | 000,103,140 | RHS- | M] () -- C:\etanp.exe
[2011/01/24 12:13:01 | 000,103,140 | RHS- | M] () -- C:\yoxb.exe
[2011/01/24 12:12:19 | 000,103,140 | RHS- | M] () -- C:\lnel.pif
[2011/01/24 12:11:39 | 000,103,140 | RHS- | M] () -- C:\qdkfbh.exe
[2011/01/24 12:10:43 | 000,103,140 | RHS- | M] () -- C:\umaw.exe
[2011/01/24 12:09:52 | 000,103,140 | RHS- | M] () -- C:\jyfmy.pif
[2011/01/24 12:09:02 | 000,103,140 | RHS- | M] () -- C:\tnwm.exe
[2011/01/24 12:08:24 | 000,103,140 | RHS- | M] () -- C:\oruld.exe
[2011/01/24 12:07:21 | 000,103,140 | RHS- | M] () -- C:\irlhh.pif
[2011/01/24 12:06:30 | 000,103,140 | RHS- | M] () -- C:\horinv.exe
[2011/01/24 12:05:04 | 000,103,140 | RHS- | M] () -- C:\dhgrh.pif
[2011/01/24 12:03:40 | 000,103,140 | RHS- | M] () -- C:\dfqa.exe
[2011/01/24 12:02:40 | 000,103,140 | RHS- | M] () -- C:\sivujh.pif
[2011/01/24 12:01:50 | 000,103,140 | RHS- | M] () -- C:\aqkk.exe
[2011/01/24 12:01:00 | 000,103,140 | RHS- | M] () -- C:\huhsnm.exe
[2011/01/24 12:00:02 | 000,103,140 | RHS- | M] () -- C:\ctmbw.pif
[2011/01/24 11:59:12 | 000,103,140 | RHS- | M] () -- C:\hdih.exe
[2011/01/24 11:57:59 | 000,103,140 | RHS- | M] () -- C:\xxurcg.pif
[2011/01/24 11:56:31 | 000,103,140 | RHS- | M] () -- C:\reqt.pif
[2011/01/24 11:55:36 | 000,103,140 | RHS- | M] () -- C:\psjlk.pif
[2011/01/24 11:54:54 | 000,103,140 | RHS- | M] () -- C:\osrniv.pif
[2011/01/24 11:54:14 | 000,103,140 | RHS- | M] () -- C:\fsjqm.exe
[2011/01/24 11:53:29 | 000,103,140 | RHS- | M] () -- C:\clfdi.exe
[2011/01/24 11:52:44 | 000,103,140 | RHS- | M] () -- C:\gndgk.exe
[2011/01/24 11:51:20 | 000,103,140 | RHS- | M] () -- C:\qvunn.exe
[2011/01/24 11:50:36 | 000,103,140 | RHS- | M] () -- C:\jngom.pif
[2011/01/24 11:49:40 | 000,103,140 | RHS- | M] () -- C:\hypjb.pif
[2011/01/24 11:48:46 | 000,103,140 | RHS- | M] () -- C:\htab.exe
[2011/01/24 11:47:52 | 000,103,140 | RHS- | M] () -- C:\mlwcvi.pif
[2011/01/24 11:46:38 | 000,103,140 | RHS- | M] () -- C:\auqp.exe
[2011/01/24 11:45:39 | 000,103,140 | RHS- | M] () -- C:\qwbjt.pif
[2011/01/24 11:44:38 | 000,103,140 | RHS- | M] () -- C:\rnnats.pif
[2011/01/24 11:43:19 | 000,103,140 | RHS- | M] () -- C:\jaekwi.pif
[2011/01/24 11:42:18 | 000,103,140 | RHS- | M] () -- C:\mphjeq.exe
[2011/01/24 11:41:24 | 000,103,140 | RHS- | M] () -- C:\vbfh.pif
[2011/01/24 11:40:30 | 000,103,140 | RHS- | M] () -- C:\arcoo.exe
[2011/01/24 11:39:36 | 000,103,140 | RHS- | M] () -- C:\iyyw.exe
[2011/01/24 11:38:48 | 000,103,140 | RHS- | M] () -- C:\kpvov.pif
[2011/01/24 11:37:42 | 000,103,140 | RHS- | M] () -- C:\dpyy.pif
[2011/01/24 11:35:36 | 000,103,140 | RHS- | M] () -- C:\coxsr.pif
[2011/01/24 11:34:18 | 000,103,140 | RHS- | M] () -- C:\rtwdsg.exe
[2011/01/24 11:32:41 | 000,103,140 | RHS- | M] () -- C:\sxcqs.exe
[2011/01/24 11:31:29 | 000,103,140 | RHS- | M] () -- C:\xxxet.exe
[2011/01/24 11:30:06 | 000,103,140 | RHS- | M] () -- C:\waogpg.pif
[2011/01/24 11:28:52 | 000,103,140 | RHS- | M] () -- C:\mbjqm.exe
[2011/01/24 11:27:46 | 000,103,140 | RHS- | M] () -- C:\lorm.pif
[2011/01/24 11:26:56 | 000,103,140 | RHS- | M] () -- C:\pepsw.exe
[2011/01/24 11:25:57 | 000,103,140 | RHS- | M] () -- C:\lxtcs.pif
[2011/01/24 11:24:58 | 000,103,140 | RHS- | M] () -- C:\ikptoq.exe
[2011/01/24 11:23:50 | 000,103,140 | RHS- | M] () -- C:\ykkvl.exe
[2011/01/24 11:22:59 | 000,103,140 | RHS- | M] () -- C:\wjwwvn.pif
[2011/01/24 11:22:10 | 000,103,140 | RHS- | M] () -- C:\ggtulh.exe
[2011/01/24 11:21:19 | 000,103,140 | RHS- | M] () -- C:\tbfi.pif
[2011/01/24 11:20:33 | 000,103,140 | RHS- | M] () -- C:\cdgw.exe
[2011/01/24 11:19:44 | 000,103,140 | RHS- | M] () -- C:\hbnupe.pif
[2011/01/24 11:18:18 | 000,103,140 | RHS- | M] () -- C:\ahtfo.exe
[2011/01/24 11:17:05 | 000,103,140 | RHS- | M] () -- C:\egcs.pif
[2011/01/24 11:16:12 | 000,103,140 | RHS- | M] () -- C:\unqnje.pif
[2011/01/24 11:15:14 | 000,103,140 | RHS- | M] () -- C:\fcmjp.pif
[2011/01/24 11:14:20 | 000,103,140 | RHS- | M] () -- C:\maqrd.pif
[2011/01/24 11:13:23 | 000,103,140 | RHS- | M] () -- C:\sbdw.pif
[2011/01/24 11:12:05 | 000,103,140 | RHS- | M] () -- C:\vjvcu.exe
[2011/01/24 11:10:40 | 000,103,140 | RHS- | M] () -- C:\ucvcto.exe
[2011/01/24 11:09:39 | 000,103,140 | RHS- | M] () -- C:\hrxkst.pif
[2011/01/24 11:08:30 | 000,103,140 | RHS- | M] () -- C:\khcht.exe
[2011/01/24 11:07:34 | 000,103,140 | RHS- | M] () -- C:\bjbpxx.exe
[2011/01/24 11:06:35 | 000,103,140 | RHS- | M] () -- C:\onfpfj.pif
[2011/01/24 11:05:40 | 000,103,140 | RHS- | M] () -- C:\cherg.exe
[2011/01/24 11:04:51 | 000,103,140 | RHS- | M] () -- C:\ykbdnu.exe
[2011/01/24 11:03:27 | 000,103,140 | RHS- | M] () -- C:\waotnh.pif
[2011/01/24 11:02:22 | 000,103,140 | RHS- | M] () -- C:\wclq.exe
[2011/01/24 11:01:24 | 000,103,140 | RHS- | M] () -- C:\dxdsnb.exe
[2011/01/24 11:00:32 | 000,103,140 | RHS- | M] () -- C:\robkxq.pif
[2011/01/24 10:58:54 | 000,103,140 | RHS- | M] () -- C:\vctdra.pif
[2011/01/24 10:57:10 | 000,103,140 | RHS- | M] () -- C:\rsdc.pif
[2011/01/24 10:55:50 | 000,103,140 | RHS- | M] () -- C:\mwargt.exe
[2011/01/24 10:54:52 | 000,103,140 | RHS- | M] () -- C:\ysyn.pif
[2011/01/24 10:46:58 | 000,103,140 | RHS- | M] () -- C:\adqw.exe
[2011/01/24 10:45:08 | 000,103,140 | RHS- | M] () -- C:\crfpe.exe
[2011/01/24 10:44:21 | 000,103,140 | RHS- | M] () -- C:\iidgaf.exe
[2011/01/24 10:43:34 | 000,103,140 | RHS- | M] () -- C:\dwwah.exe
[2011/01/24 10:42:22 | 000,103,140 | RHS- | M] () -- C:\gkdc.exe
[2011/01/24 10:41:39 | 000,103,140 | RHS- | M] () -- C:\ltsoc.pif
[2011/01/24 10:40:56 | 000,103,140 | RHS- | M] () -- C:\lqutdu.exe
[2011/01/24 10:40:15 | 000,103,140 | RHS- | M] () -- C:\tqgo.exe
[2011/01/24 10:39:25 | 000,103,140 | RHS- | M] () -- C:\jobar.pif
[2011/01/24 10:38:48 | 000,103,140 | RHS- | M] () -- C:\fnii.exe
[2011/01/24 10:37:34 | 000,103,140 | RHS- | M] () -- C:\fpmfsa.pif
[2011/01/24 10:36:56 | 000,103,140 | RHS- | M] () -- C:\efqutx.exe
[2011/01/24 10:36:14 | 000,103,140 | RHS- | M] () -- C:\oofql.exe
[2011/01/24 10:35:34 | 000,103,140 | RHS- | M] () -- C:\mvga.pif
[2011/01/24 10:34:52 | 000,103,140 | RHS- | M] () -- C:\umeir.pif
[2011/01/24 10:34:14 | 000,103,140 | RHS- | M] () -- C:\meagc.exe
[2011/01/24 10:33:32 | 000,103,140 | RHS- | M] () -- C:\cgnwew.pif
[2011/01/24 10:32:49 | 000,103,140 | RHS- | M] () -- C:\jlst.pif
[2011/01/24 10:32:00 | 000,103,140 | RHS- | M] () -- C:\uvpp.pif
[2011/01/24 10:31:16 | 000,103,140 | RHS- | M] () -- C:\mxux.exe
[2011/01/24 10:30:24 | 000,103,140 | RHS- | M] () -- C:\cnaxty.pif
[2011/01/24 10:29:36 | 000,103,140 | RHS- | M] () -- C:\pnwsp.exe
[2011/01/24 10:28:20 | 000,103,140 | RHS- | M] () -- C:\xcds.pif
[2011/01/24 10:26:58 | 000,103,140 | RHS- | M] () -- C:\letn.exe
[2011/01/24 10:25:24 | 000,103,140 | RHS- | M] () -- C:\jkjm.pif
[2011/01/24 10:23:46 | 000,103,140 | RHS- | M] () -- C:\fhbv.exe
[2011/01/24 10:23:00 | 000,103,140 | RHS- | M] () -- C:\odnv.exe
[2011/01/24 10:21:57 | 000,103,140 | RHS- | M] () -- C:\cgpwk.exe
[2011/01/24 10:21:02 | 000,103,140 | RHS- | M] () -- C:\fess.exe
[2011/01/24 10:20:11 | 000,103,140 | RHS- | M] () -- C:\epyacg.pif
[2011/01/24 10:19:23 | 000,103,140 | RHS- | M] () -- C:\hver.pif
[2011/01/24 10:18:39 | 000,103,140 | RHS- | M] () -- C:\ufxqro.pif
[2011/01/24 10:17:56 | 000,103,140 | RHS- | M] () -- C:\lupctr.exe
[2011/01/24 10:17:12 | 000,103,140 | RHS- | M] () -- C:\putr.exe
[2011/01/24 10:16:23 | 000,103,140 | RHS- | M] () -- C:\xpqh.pif
[2011/01/24 10:15:38 | 000,103,140 | RHS- | M] () -- C:\ffjw.exe
[2011/01/24 10:14:50 | 000,103,140 | RHS- | M] () -- C:\vhbil.exe
[2011/01/24 10:04:12 | 000,103,140 | RHS- | M] () -- C:\mcqkp.pif
[2011/01/24 10:02:54 | 000,103,140 | RHS- | M] () -- C:\kcbxsc.exe
[2011/01/24 10:01:55 | 000,103,140 | RHS- | M] () -- C:\wlthmq.pif
[2011/01/24 10:01:10 | 000,103,140 | RHS- | M] () -- C:\kuqona.exe
[2011/01/24 10:00:20 | 000,103,140 | RHS- | M] () -- C:\grrfg.pif
[2011/01/24 09:59:38 | 000,103,140 | RHS- | M] () -- C:\rhmxn.pif
[2011/01/24 09:58:54 | 000,103,140 | RHS- | M] () -- C:\dyfxdb.pif
[2011/01/24 09:58:03 | 000,103,140 | RHS- | M] () -- C:\kblfsr.pif
[2011/01/24 09:57:11 | 000,103,140 | RHS- | M] () -- C:\iwvfj.pif
[2011/01/24 09:56:32 | 000,103,140 | RHS- | M] () -- C:\mvduhy.exe
[2011/01/24 09:55:48 | 000,103,140 | RHS- | M] () -- C:\aelx.exe
[2011/01/24 09:55:00 | 000,103,140 | RHS- | M] () -- C:\qoqb.pif
[2011/01/24 09:53:53 | 000,103,140 | RHS- | M] () -- C:\nelm.pif
[2011/01/24 09:52:53 | 000,103,140 | RHS- | M] () -- C:\kwmtgc.pif
[2011/01/24 09:52:04 | 000,103,140 | RHS- | M] () -- C:\fikup.exe
[2011/01/24 09:51:20 | 000,103,140 | RHS- | M] () -- C:\hxblux.exe
[2011/01/24 09:49:20 | 000,103,140 | RHS- | M] () -- C:\hlvlsv.exe
[2011/01/24 09:48:33 | 000,103,140 | RHS- | M] () -- C:\wdcqp.pif
[2011/01/24 09:47:31 | 000,103,140 | RHS- | M] () -- C:\mkwf.exe
[2011/01/24 09:46:48 | 000,103,140 | RHS- | M] () -- C:\kfyhrp.exe
[2011/01/24 09:46:00 | 000,103,140 | RHS- | M] () -- C:\fcffut.pif
[2011/01/24 09:45:16 | 000,103,140 | RHS- | M] () -- C:\lswg.exe
[2011/01/24 09:44:32 | 000,103,140 | RHS- | M] () -- C:\itxy.pif
[2011/01/24 09:43:35 | 000,103,140 | RHS- | M] () -- C:\qvjfxv.exe
[2011/01/24 09:42:26 | 000,103,140 | RHS- | M] () -- C:\tjtpo.pif
[2011/01/24 09:41:37 | 000,103,140 | RHS- | M] () -- C:\grdf.pif
[2011/01/24 09:40:42 | 000,103,140 | RHS- | M] () -- C:\bpwd.pif
[2011/01/24 09:39:46 | 000,103,140 | RHS- | M] () -- C:\kgbmhp.exe
[2011/01/24 09:38:48 | 000,103,140 | RHS- | M] () -- C:\wuix.pif
[2011/01/24 09:38:00 | 000,103,140 | RHS- | M] () -- C:\bmcvd.exe
[2011/01/24 09:37:07 | 000,103,140 | RHS- | M] () -- C:\lmjkj.pif
[2011/01/24 09:36:17 | 000,103,140 | RHS- | M] () -- C:\ypyitg.exe
[2011/01/24 09:35:28 | 000,103,140 | RHS- | M] () -- C:\aklxcj.exe
[2011/01/24 09:33:53 | 000,103,140 | RHS- | M] () -- C:\cmoiw.pif
[2011/01/24 09:32:10 | 000,103,140 | RHS- | M] () -- C:\pojtxc.exe
[2011/01/24 09:30:23 | 000,103,140 | RHS- | M] () -- C:\pahb.pif
[2011/01/24 09:28:58 | 000,103,140 | RHS- | M] () -- C:\jateu.exe
[2011/01/24 09:27:31 | 000,103,140 | RHS- | M] () -- C:\axqex.pif
[2011/01/24 09:25:45 | 000,103,140 | RHS- | M] () -- C:\qxemb.exe
[2011/01/24 09:23:48 | 000,103,140 | RHS- | M] () -- C:\dodps.exe
[2011/01/24 09:22:25 | 000,103,140 | RHS- | M] () -- C:\cnafjg.pif
[2011/01/24 09:21:26 | 000,103,140 | RHS- | M] () -- C:\yjkuxg.pif
[2011/01/24 09:20:38 | 000,103,140 | RHS- | M] () -- C:\pghxjb.exe
[2011/01/24 09:19:18 | 000,103,140 | RHS- | M] () -- C:\oiod.exe
[2011/01/24 09:18:12 | 000,103,140 | RHS- | M] () -- C:\oivi.exe
[2011/01/24 09:17:20 | 000,103,140 | RHS- | M] () -- C:\smyf.pif
[2011/01/24 09:16:29 | 000,103,140 | RHS- | M] () -- C:\edhw.exe
[2011/01/24 09:15:22 | 000,103,140 | RHS- | M] () -- C:\aexp.pif
[2011/01/24 09:14:24 | 000,103,140 | RHS- | M] () -- C:\vtaabf.exe
[2011/01/24 09:13:30 | 000,103,140 | RHS- | M] () -- C:\wqeksn.exe
[2011/01/24 09:12:30 | 000,103,140 | RHS- | M] () -- C:\ynljvi.exe
[2011/01/24 09:10:34 | 000,103,140 | RHS- | M] () -- C:\flgeo.exe
[2011/01/24 09:08:52 | 000,103,140 | RHS- | M] () -- C:\gifld.exe
[2011/01/24 09:06:52 | 000,103,140 | RHS- | M] () -- C:\qyyib.pif
[2011/01/24 09:05:30 | 000,103,140 | RHS- | M] () -- C:\enggiu.exe
[2011/01/24 09:04:30 | 000,103,140 | RHS- | M] () -- C:\mwladh.exe
[2011/01/24 09:02:58 | 000,103,140 | RHS- | M] () -- C:\qsjuhq.pif
[2011/01/24 09:01:42 | 000,103,140 | RHS- | M] () -- C:\srwmap.pif
[2011/01/24 09:00:01 | 000,103,140 | RHS- | M] () -- C:\hqqsu.pif
[2011/01/24 08:58:42 | 000,103,140 | RHS- | M] () -- C:\kqft.exe
[2011/01/21 17:00:58 | 000,103,140 | RHS- | M] () -- C:\gxxeql.exe
[2011/01/21 16:59:20 | 000,103,140 | RHS- | M] () -- C:\uryhg.exe
[2011/01/21 16:58:42 | 000,103,140 | RHS- | M] () -- C:\bipsi.pif
[2011/01/21 16:58:00 | 000,103,140 | RHS- | M] () -- C:\hinau.exe
[2011/01/21 16:57:19 | 000,103,140 | RHS- | M] () -- C:\peeaim.pif
[2011/01/21 16:56:36 | 000,103,140 | RHS- | M] () -- C:\gastc.exe
[2011/01/21 16:55:56 | 000,103,140 | RHS- | M] () -- C:\ccbymo.exe
[2011/01/21 16:55:13 | 000,103,140 | RHS- | M] () -- C:\aytmno.pif
[2011/01/21 16:54:24 | 000,103,140 | RHS- | M] () -- C:\cjraxd.pif
[2011/01/21 16:53:46 | 000,103,140 | RHS- | M] () -- C:\hwgc.exe
[2011/01/21 16:53:06 | 000,103,140 | RHS- | M] () -- C:\odvdwn.exe
[2011/01/21 16:52:26 | 000,103,140 | RHS- | M] () -- C:\dyaip.exe
[2011/01/21 16:51:44 | 000,103,140 | RHS- | M] () -- C:\jxfk.exe
[2011/01/21 16:51:06 | 000,103,140 | RHS- | M] () -- C:\klike.exe
[2011/01/21 16:50:05 | 000,103,140 | RHS- | M] () -- C:\swpxk.pif
[2011/01/21 16:49:26 | 000,103,140 | RHS- | M] () -- C:\xpxi.pif
[2011/01/21 16:48:42 | 000,103,140 | RHS- | M] () -- C:\vsalp.pif
[2011/01/21 16:47:49 | 000,103,140 | RHS- | M] () -- C:\wlhlk.exe
[2011/01/21 16:47:02 | 000,103,140 | RHS- | M] () -- C:\nwhdnm.exe
[2011/01/21 16:46:15 | 000,103,140 | RHS- | M] () -- C:\pfepa.pif
[2011/01/21 16:45:30 | 000,103,140 | RHS- | M] () -- C:\bttc.pif
[2011/01/21 16:44:39 | 000,103,140 | RHS- | M] () -- C:\ddqpxe.pif
[2011/01/21 16:44:02 | 000,103,140 | RHS- | M] () -- C:\hblkq.exe
[2011/01/21 16:43:20 | 000,103,140 | RHS- | M] () -- C:\lmvyu.pif
[2011/01/21 16:42:33 | 000,103,140 | RHS- | M] () -- C:\mmtscg.pif
[2011/01/21 16:41:46 | 000,103,140 | RHS- | M] () -- C:\okgeet.pif
[2011/01/21 16:41:06 | 000,103,140 | RHS- | M] () -- C:\imrrcf.exe
[2011/01/21 16:40:16 | 000,103,140 | RHS- | M] () -- C:\qnxjp.exe
[2011/01/21 16:39:35 | 000,103,140 | RHS- | M] () -- C:\sixrup.exe
[2011/01/21 16:38:55 | 000,103,140 | RHS- | M] () -- C:\ldhn.pif
[2011/01/21 16:38:11 | 000,103,140 | RHS- | M] () -- C:\gmjkdn.pif
[2011/01/21 16:37:30 | 000,103,140 | RHS- | M] () -- C:\cktiky.exe
[2011/01/21 16:36:47 | 000,103,140 | RHS- | M] () -- C:\xvtvly.exe
[2011/01/21 16:36:06 | 000,103,140 | RHS- | M] () -- C:\mcvl.pif
[2011/01/21 16:35:10 | 000,103,140 | RHS- | M] () -- C:\jdmiap.exe
[2011/01/21 16:34:18 | 000,103,140 | RHS- | M] () -- C:\joph.exe
[2011/01/21 16:33:34 | 000,103,140 | RHS- | M] () -- C:\ygdh.exe
[2011/01/21 16:32:48 | 000,103,140 | RHS- | M] () -- C:\jsjuqu.pif
[2011/01/21 16:32:02 | 000,103,140 | RHS- | M] () -- C:\tugqvk.exe
[2011/01/21 16:31:16 | 000,103,140 | RHS- | M] () -- C:\uynibu.pif
[2011/01/21 16:30:26 | 000,103,140 | RHS- | M] () -- C:\micr.exe
[2011/01/21 16:29:44 | 000,103,140 | RHS- | M] () -- C:\wxymn.exe
[2011/01/21 16:29:02 | 000,103,140 | RHS- | M] () -- C:\llkpwd.exe
[2011/01/21 16:28:17 | 000,103,140 | RHS- | M] () -- C:\vdrfhf.exe
[2011/01/21 16:27:34 | 000,103,140 | RHS- | M] () -- C:\ilhs.exe
[2011/01/21 16:26:46 | 000,103,140 | RHS- | M] () -- C:\wtic.pif
[2011/01/21 16:25:57 | 000,103,140 | RHS- | M] () -- C:\qfsclb.exe
[2011/01/21 16:25:13 | 000,103,140 | RHS- | M] () -- C:\wshl.exe
[2011/01/21 16:24:33 | 000,103,140 | RHS- | M] () -- C:\mytvt.pif
[2011/01/21 16:23:53 | 000,103,140 | RHS- | M] () -- C:\dfsv.pif
[2011/01/21 16:23:11 | 000,103,140 | RHS- | M] () -- C:\aosy.pif
[2011/01/21 16:22:32 | 000,103,140 | RHS- | M] () -- C:\pomdu.pif
[2011/01/21 16:21:49 | 000,103,140 | RHS- | M] () -- C:\xwofb.pif

pfchang
Intermediate
Intermediate

Posts Posts : 66
Joined Joined : 2009-03-05
OS OS : Windows XP Professional
Points Points : 28695
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Virus - Shutting down antivirus

Post by pfchang on Tue Feb 01, 2011 12:06 am

[2011/01/21 16:21:05 | 000,103,140 | RHS- | M] () -- C:\qfsooa.exe
[2011/01/21 16:20:16 | 000,103,140 | RHS- | M] () -- C:\godtx.exe
[2011/01/21 16:19:33 | 000,103,140 | RHS- | M] () -- C:\neiytb.pif
[2011/01/21 16:18:55 | 000,103,140 | RHS- | M] () -- C:\gvrx.pif
[2011/01/21 16:18:17 | 000,103,140 | RHS- | M] () -- C:\kligce.pif
[2011/01/21 16:17:40 | 000,103,140 | RHS- | M] () -- C:\imrmts.exe
[2011/01/21 16:16:59 | 000,103,140 | RHS- | M] () -- C:\vyuioc.pif
[2011/01/21 16:16:09 | 000,103,140 | RHS- | M] () -- C:\lswisa.pif
[2011/01/21 16:15:29 | 000,103,140 | RHS- | M] () -- C:\yyys.exe
[2011/01/21 16:14:45 | 000,103,140 | RHS- | M] () -- C:\xovaec.exe
[2011/01/21 16:13:58 | 000,103,140 | RHS- | M] () -- C:\klhe.exe
[2011/01/21 16:13:16 | 000,103,140 | RHS- | M] () -- C:\mbkb.exe
[2011/01/21 16:12:33 | 000,103,140 | RHS- | M] () -- C:\txau.pif
[2011/01/21 16:11:54 | 000,103,140 | RHS- | M] () -- C:\kepkaw.pif
[2011/01/21 16:11:13 | 000,103,140 | RHS- | M] () -- C:\niwe.pif
[2011/01/21 16:10:35 | 000,103,140 | RHS- | M] () -- C:\xnrnth.pif
[2011/01/21 16:09:55 | 000,103,140 | RHS- | M] () -- C:\nipbfc.pif
[2011/01/21 16:09:18 | 000,103,140 | RHS- | M] () -- C:\kmwo.exe
[2011/01/21 16:08:34 | 000,103,140 | RHS- | M] () -- C:\gaeee.pif
[2011/01/21 16:07:37 | 000,103,140 | RHS- | M] () -- C:\wnvvka.exe
[2011/01/21 16:06:57 | 000,103,140 | RHS- | M] () -- C:\fnkw.pif
[2011/01/21 16:06:16 | 000,103,140 | RHS- | M] () -- C:\bfwim.exe
[2011/01/21 16:05:36 | 000,103,140 | RHS- | M] () -- C:\ulex.exe
[2011/01/21 16:04:55 | 000,103,140 | RHS- | M] () -- C:\jbnqok.pif
[2011/01/21 16:03:56 | 000,103,140 | RHS- | M] () -- C:\heifhc.pif
[2011/01/21 16:02:59 | 000,103,140 | RHS- | M] () -- C:\ylqhc.pif
[2011/01/21 16:02:14 | 000,103,140 | RHS- | M] () -- C:\nnwpan.exe
[2011/01/21 16:01:33 | 000,103,140 | RHS- | M] () -- C:\clgklx.pif
[2011/01/21 16:00:54 | 000,103,140 | RHS- | M] () -- C:\boed.pif
[2011/01/21 16:00:16 | 000,103,140 | RHS- | M] () -- C:\ilsko.pif
[2011/01/21 15:59:37 | 000,103,140 | RHS- | M] () -- C:\yknmgs.exe
[2011/01/21 15:58:50 | 000,103,140 | RHS- | M] () -- C:\ebkj.exe
[2011/01/21 15:58:12 | 000,103,140 | RHS- | M] () -- C:\oqpvvr.exe
[2011/01/21 15:57:33 | 000,103,140 | RHS- | M] () -- C:\rghwp.pif
[2011/01/21 15:56:54 | 000,103,140 | RHS- | M] () -- C:\eywtfn.pif
[2011/01/21 15:56:14 | 000,103,140 | RHS- | M] () -- C:\njclxo.exe
[2011/01/21 15:55:32 | 000,103,140 | RHS- | M] () -- C:\mefco.pif
[2011/01/21 15:54:50 | 000,103,140 | RHS- | M] () -- C:\gjgbri.pif
[2011/01/21 15:54:00 | 000,103,140 | RHS- | M] () -- C:\fjxre.exe
[2011/01/21 15:53:09 | 000,103,140 | RHS- | M] () -- C:\vjpdt.pif
[2011/01/21 15:52:28 | 000,103,140 | RHS- | M] () -- C:\xweaxb.exe
[2011/01/21 15:51:50 | 000,103,140 | RHS- | M] () -- C:\figbv.exe
[2011/01/21 15:51:08 | 000,103,140 | RHS- | M] () -- C:\kjyv.exe
[2011/01/21 15:50:17 | 000,103,140 | RHS- | M] () -- C:\afse.pif
[2011/01/21 15:49:36 | 000,103,140 | RHS- | M] () -- C:\tfrri.pif
[2011/01/21 15:48:58 | 000,103,140 | RHS- | M] () -- C:\ducqxd.exe
[2011/01/21 15:48:12 | 000,103,140 | RHS- | M] () -- C:\dgwp.exe
[2011/01/21 15:47:15 | 000,103,140 | RHS- | M] () -- C:\almqkb.pif
[2011/01/21 15:46:33 | 000,103,140 | RHS- | M] () -- C:\renj.pif
[2011/01/21 15:45:48 | 000,103,140 | RHS- | M] () -- C:\bgjvyd.pif
[2011/01/21 15:45:08 | 000,103,140 | RHS- | M] () -- C:\goqegk.exe
[2011/01/21 15:44:20 | 000,103,140 | RHS- | M] () -- C:\qyhhgc.pif
[2011/01/21 15:43:40 | 000,103,140 | RHS- | M] () -- C:\oqgejg.pif
[2011/01/21 15:42:56 | 000,103,140 | RHS- | M] () -- C:\opggt.exe
[2011/01/21 15:42:17 | 000,103,140 | RHS- | M] () -- C:\lyklt.pif
[2011/01/21 15:41:36 | 000,103,140 | RHS- | M] () -- C:\nrwmq.pif
[2011/01/21 15:40:53 | 000,103,140 | RHS- | M] () -- C:\upnwn.exe
[2011/01/21 15:40:13 | 000,103,140 | RHS- | M] () -- C:\mkewd.pif
[2011/01/21 15:39:34 | 000,103,140 | RHS- | M] () -- C:\xwan.pif
[2011/01/21 15:38:49 | 000,103,140 | RHS- | M] () -- C:\phmq.pif
[2011/01/21 15:38:10 | 000,103,140 | RHS- | M] () -- C:\nmnspx.exe
[2011/01/21 15:37:30 | 000,103,140 | RHS- | M] () -- C:\rsxch.exe
[2011/01/21 15:36:52 | 000,103,140 | RHS- | M] () -- C:\awayt.pif
[2011/01/21 15:36:13 | 000,103,140 | RHS- | M] () -- C:\jior.pif
[2011/01/21 15:35:32 | 000,103,140 | RHS- | M] () -- C:\oyym.exe
[2011/01/21 15:34:51 | 000,103,140 | RHS- | M] () -- C:\fprpta.pif
[2011/01/21 15:34:12 | 000,103,140 | RHS- | M] () -- C:\nsnwra.exe
[2011/01/21 15:33:27 | 000,103,140 | RHS- | M] () -- C:\vcysy.exe
[2011/01/21 15:32:47 | 000,103,140 | RHS- | M] () -- C:\spjfo.pif
[2011/01/21 15:32:05 | 000,103,140 | RHS- | M] () -- C:\smmd.exe
[2011/01/21 15:31:18 | 000,103,140 | RHS- | M] () -- C:\ddcw.pif
[2011/01/21 15:30:18 | 000,103,140 | RHS- | M] () -- C:\rifdw.exe
[2011/01/21 15:29:40 | 000,103,140 | RHS- | M] () -- C:\fnhxfb.exe
[2011/01/21 15:28:58 | 000,103,140 | RHS- | M] () -- C:\mtwg.pif
[2011/01/21 15:28:18 | 000,103,140 | RHS- | M] () -- C:\wqhh.exe
[2011/01/21 15:27:39 | 000,103,140 | RHS- | M] () -- C:\rrvmsg.pif
[2011/01/21 15:26:56 | 000,103,140 | RHS- | M] () -- C:\kgdip.exe
[2011/01/21 15:26:13 | 000,103,140 | RHS- | M] () -- C:\ywlmn.pif
[2011/01/21 15:25:33 | 000,103,140 | RHS- | M] () -- C:\svadbs.pif
[2011/01/21 15:24:53 | 000,103,140 | RHS- | M] () -- C:\wcfgwe.pif
[2011/01/21 15:24:12 | 000,103,140 | RHS- | M] () -- C:\agwv.exe
[2011/01/21 15:23:32 | 000,103,140 | RHS- | M] () -- C:\sbjdwk.pif
[2011/01/21 15:22:53 | 000,103,140 | RHS- | M] () -- C:\exumb.pif
[2011/01/21 15:21:41 | 000,103,140 | RHS- | M] () -- C:\wnndc.pif
[2011/01/21 15:20:56 | 000,103,140 | RHS- | M] () -- C:\xdfjd.pif
[2011/01/21 15:19:30 | 000,103,140 | RHS- | M] () -- C:\qpxwlw.pif
[2011/01/21 15:18:24 | 000,103,140 | RHS- | M] () -- C:\tlwdf.pif
[2011/01/21 15:17:25 | 000,103,140 | RHS- | M] () -- C:\qexrq.exe
[2011/01/21 15:16:40 | 000,103,140 | RHS- | M] () -- C:\wrslob.exe
[2011/01/21 15:15:58 | 000,103,140 | RHS- | M] () -- C:\ellub.pif
[2011/01/21 15:15:00 | 000,103,140 | RHS- | M] () -- C:\kxkrrk.pif
[2011/01/21 15:14:16 | 000,103,140 | RHS- | M] () -- C:\twbxqc.pif
[2011/01/21 15:13:27 | 000,103,140 | RHS- | M] () -- C:\xghqdm.pif
[2011/01/21 15:12:44 | 000,103,140 | RHS- | M] () -- C:\eylyt.pif
[2011/01/21 15:11:56 | 000,103,140 | RHS- | M] () -- C:\cjkp.exe
[2011/01/21 15:11:13 | 000,103,140 | RHS- | M] () -- C:\utibr.pif
[2011/01/21 15:10:20 | 000,103,140 | RHS- | M] () -- C:\dietv.pif
[2011/01/21 15:09:37 | 000,103,140 | RHS- | M] () -- C:\ptal.pif
[2011/01/21 15:08:56 | 000,103,140 | RHS- | M] () -- C:\aehsr.exe
[2011/01/21 15:07:54 | 000,103,140 | RHS- | M] () -- C:\umys.exe
[2011/01/21 15:07:13 | 000,103,140 | RHS- | M] () -- C:\qeme.pif
[2011/01/21 15:06:32 | 000,103,140 | RHS- | M] () -- C:\cdwfp.exe
[2011/01/21 15:05:50 | 000,103,140 | RHS- | M] () -- C:\ayglc.exe
[2011/01/21 15:04:59 | 000,103,140 | RHS- | M] () -- C:\jwyve.pif
[2011/01/21 15:04:08 | 000,103,140 | RHS- | M] () -- C:\suil.exe
[2011/01/21 15:03:11 | 000,103,140 | RHS- | M] () -- C:\tish.pif
[2011/01/21 15:02:30 | 000,103,140 | RHS- | M] () -- C:\fluu.exe
[2011/01/21 15:01:32 | 000,103,140 | RHS- | M] () -- C:\uijpqx.exe
[2011/01/21 15:00:50 | 000,103,140 | RHS- | M] () -- C:\rvgd.exe
[2011/01/21 15:00:08 | 000,103,140 | RHS- | M] () -- C:\iwoslc.exe
[2011/01/21 14:59:22 | 000,103,140 | RHS- | M] () -- C:\qhbdgi.exe
[2011/01/21 14:58:40 | 000,103,140 | RHS- | M] () -- C:\kaewl.pif
[2011/01/21 14:58:01 | 000,103,140 | RHS- | M] () -- C:\eibc.pif
[2011/01/21 14:57:22 | 000,103,140 | RHS- | M] () -- C:\wlmf.pif
[2011/01/21 14:56:42 | 000,103,140 | RHS- | M] () -- C:\brlp.exe
[2011/01/21 14:55:58 | 000,103,140 | RHS- | M] () -- C:\hexes.exe
[2011/01/21 14:55:06 | 000,103,140 | RHS- | M] () -- C:\ruix.exe
[2011/01/21 14:54:26 | 000,103,140 | RHS- | M] () -- C:\kaslf.exe
[2011/01/21 14:53:33 | 000,103,140 | RHS- | M] () -- C:\anfsv.pif
[2011/01/21 14:52:54 | 000,103,140 | RHS- | M] () -- C:\riwxy.exe
[2011/01/21 14:52:15 | 000,103,140 | RHS- | M] () -- C:\xxjv.pif
[2011/01/21 14:51:37 | 000,103,140 | RHS- | M] () -- C:\pxfoj.exe
[2011/01/21 14:51:02 | 000,103,140 | RHS- | M] () -- C:\ikcvya.exe
[2011/01/21 14:50:23 | 000,103,140 | RHS- | M] () -- C:\xqhhy.exe
[2011/01/21 14:49:42 | 000,103,140 | RHS- | M] () -- C:\uyxb.exe
[2011/01/21 14:48:59 | 000,103,140 | RHS- | M] () -- C:\eente.pif
[2011/01/21 14:48:20 | 000,103,140 | RHS- | M] () -- C:\mpwcf.pif
[2011/01/21 14:46:56 | 000,103,140 | RHS- | M] () -- C:\okldhm.exe
[2011/01/21 14:46:03 | 000,103,140 | RHS- | M] () -- C:\qrfwl.exe
[2011/01/21 14:45:11 | 000,103,140 | RHS- | M] () -- C:\yqnqfv.exe
[2011/01/21 14:44:11 | 000,103,140 | RHS- | M] () -- C:\ohwsyf.pif
[2011/01/21 14:43:30 | 000,103,140 | RHS- | M] () -- C:\upaabr.pif
[2011/01/21 14:42:27 | 000,103,140 | RHS- | M] () -- C:\uhbjym.exe
[2011/01/21 14:41:48 | 000,103,140 | RHS- | M] () -- C:\fparrg.exe
[2011/01/21 14:41:04 | 000,103,140 | RHS- | M] () -- C:\cvosl.exe
[2011/01/21 14:40:15 | 000,103,140 | RHS- | M] () -- C:\jfibt.pif
[2011/01/21 14:39:20 | 000,103,140 | RHS- | M] () -- C:\ljojyg.pif
[2011/01/21 14:38:40 | 000,103,140 | RHS- | M] () -- C:\cxty.exe
[2011/01/21 14:38:00 | 000,103,140 | RHS- | M] () -- C:\gutks.exe
[2011/01/21 14:36:48 | 000,103,140 | RHS- | M] () -- C:\fatu.pif
[2011/01/21 14:35:55 | 000,103,140 | RHS- | M] () -- C:\gpeww.pif
[2011/01/21 14:35:13 | 000,103,140 | RHS- | M] () -- C:\jsedu.pif
[2011/01/21 14:34:34 | 000,103,140 | RHS- | M] () -- C:\fgmx.pif
[2011/01/21 14:33:55 | 000,103,140 | RHS- | M] () -- C:\yhkbu.exe
[2011/01/21 14:33:18 | 000,103,140 | RHS- | M] () -- C:\cgdx.exe
[2011/01/21 14:32:40 | 000,103,140 | RHS- | M] () -- C:\hlnv.exe
[2011/01/21 14:31:52 | 000,103,140 | RHS- | M] () -- C:\mpua.exe
[2011/01/21 14:31:14 | 000,103,140 | RHS- | M] () -- C:\kpnad.exe
[2011/01/21 14:30:34 | 000,103,140 | RHS- | M] () -- C:\oswr.exe
[2011/01/21 14:29:50 | 000,103,140 | RHS- | M] () -- C:\ifde.pif
[2011/01/21 14:29:00 | 000,103,140 | RHS- | M] () -- C:\pdwra.exe
[2011/01/21 14:28:22 | 000,103,140 | RHS- | M] () -- C:\ftggt.exe
[2011/01/21 14:27:42 | 000,103,140 | RHS- | M] () -- C:\udnv.exe
[2011/01/21 14:26:56 | 000,103,140 | RHS- | M] () -- C:\tbmgdv.pif
[2011/01/21 14:26:15 | 000,103,140 | RHS- | M] () -- C:\cshfpc.pif
[2011/01/21 14:25:36 | 000,103,140 | RHS- | M] () -- C:\bkekr.pif
[2011/01/21 14:24:54 | 000,103,140 | RHS- | M] () -- C:\gjoyh.pif
[2011/01/21 14:23:14 | 000,103,140 | RHS- | M] () -- C:\tlaay.pif
[2011/01/21 14:22:31 | 000,103,140 | RHS- | M] () -- C:\ffjs.pif
[2011/01/21 14:21:50 | 000,103,140 | RHS- | M] () -- C:\oefu.pif
[2011/01/21 14:21:09 | 000,103,140 | RHS- | M] () -- C:\ywinu.exe
[2011/01/21 14:20:30 | 000,103,140 | RHS- | M] () -- C:\uuup.pif
[2011/01/21 14:19:40 | 000,103,140 | RHS- | M] () -- C:\eyspl.exe
[2011/01/21 14:19:00 | 000,103,140 | RHS- | M] () -- C:\cygx.exe
[2011/01/21 14:18:19 | 000,103,140 | RHS- | M] () -- C:\bohis.pif
[2011/01/21 14:17:42 | 000,103,140 | RHS- | M] () -- C:\lgcc.exe
[2011/01/21 14:17:00 | 000,103,140 | RHS- | M] () -- C:\rhyw.exe
[2011/01/21 14:16:20 | 000,103,140 | RHS- | M] () -- C:\fchf.exe
[2011/01/21 14:15:28 | 000,103,140 | RHS- | M] () -- C:\ydqbf.pif
[2011/01/21 14:14:46 | 000,103,140 | RHS- | M] () -- C:\wlhfw.pif
[2011/01/21 14:14:03 | 000,103,140 | RHS- | M] () -- C:\sdwl.exe
[2011/01/21 14:13:20 | 000,103,140 | RHS- | M] () -- C:\ohwyn.pif
[2011/01/21 14:12:40 | 000,103,140 | RHS- | M] () -- C:\ujjw.exe
[2011/01/21 14:11:58 | 000,103,140 | RHS- | M] () -- C:\hievtk.exe
[2011/01/21 14:11:09 | 000,103,140 | RHS- | M] () -- C:\wxfa.pif
[2011/01/21 14:10:32 | 000,103,140 | RHS- | M] () -- C:\gemej.exe
[2011/01/21 14:09:51 | 000,103,140 | RHS- | M] () -- C:\neyqam.pif
[2011/01/21 14:09:10 | 000,103,140 | RHS- | M] () -- C:\mikpu.exe
[2011/01/21 14:08:25 | 000,103,140 | RHS- | M] () -- C:\nisd.pif
[2011/01/21 14:07:45 | 000,103,140 | RHS- | M] () -- C:\rwwgv.pif
[2011/01/21 14:07:01 | 000,103,140 | RHS- | M] () -- C:\ugri.exe
[2011/01/21 14:06:08 | 000,103,140 | RHS- | M] () -- C:\ggubxl.exe
[2011/01/21 14:05:24 | 000,103,140 | RHS- | M] () -- C:\kmyev.exe
[2011/01/21 14:04:29 | 000,103,140 | RHS- | M] () -- C:\kgubw.pif
[2011/01/21 14:03:47 | 000,103,140 | RHS- | M] () -- C:\aafxu.pif
[2011/01/21 14:03:05 | 000,103,140 | RHS- | M] () -- C:\qkdr.exe
[2011/01/21 14:02:27 | 000,103,140 | RHS- | M] () -- C:\wgnweg.exe
[2011/01/21 14:01:48 | 000,103,140 | RHS- | M] () -- C:\aopcjh.exe
[2011/01/21 14:01:06 | 000,103,140 | RHS- | M] () -- C:\rffb.pif
[2011/01/21 14:00:04 | 000,103,140 | RHS- | M] () -- C:\wfhfbo.exe
[2011/01/21 13:59:24 | 000,103,140 | RHS- | M] () -- C:\eciu.exe
[2011/01/21 13:58:44 | 000,103,140 | RHS- | M] () -- C:\lxyfl.exe
[2011/01/21 13:58:01 | 000,103,140 | RHS- | M] () -- C:\fepp.pif
[2011/01/21 13:57:23 | 000,103,140 | RHS- | M] () -- C:\fdhko.pif
[2011/01/21 13:56:46 | 000,103,140 | RHS- | M] () -- C:\owxh.pif
[2011/01/21 13:56:07 | 000,103,140 | RHS- | M] () -- C:\sgno.pif
[2011/01/21 13:55:28 | 000,103,140 | RHS- | M] () -- C:\yciyjg.pif
[2011/01/21 13:54:48 | 000,103,140 | RHS- | M] () -- C:\kbfh.exe
[2011/01/21 13:54:05 | 000,103,140 | RHS- | M] () -- C:\rtgi.exe
[2011/01/21 13:52:48 | 000,103,140 | RHS- | M] () -- C:\vlleu.exe
[2011/01/21 13:51:42 | 000,103,140 | RHS- | M] () -- C:\diwguv.exe
[2011/01/21 13:50:57 | 000,103,140 | RHS- | M] () -- C:\ymujuj.exe
[2011/01/21 13:49:42 | 000,103,140 | RHS- | M] () -- C:\mlmfc.exe
[2011/01/21 13:48:28 | 000,103,140 | RHS- | M] () -- C:\fhur.exe
[2011/01/21 13:47:44 | 000,103,140 | RHS- | M] () -- C:\qqtto.pif
[2011/01/21 13:47:00 | 000,103,140 | RHS- | M] () -- C:\xmpt.exe
[2011/01/21 13:46:19 | 000,103,140 | RHS- | M] () -- C:\fgnpfb.pif
[2011/01/21 13:45:39 | 000,103,140 | RHS- | M] () -- C:\dxkn.pif
[2011/01/21 13:45:01 | 000,103,140 | RHS- | M] () -- C:\utnaj.pif
[2011/01/21 13:44:20 | 000,103,140 | RHS- | M] () -- C:\ffywf.exe
[2011/01/21 13:43:37 | 000,103,140 | RHS- | M] () -- C:\ekwsf.pif
[2011/01/21 13:42:59 | 000,103,140 | RHS- | M] () -- C:\qbao.pif
[2011/01/21 13:42:21 | 000,103,140 | RHS- | M] () -- C:\ydodn.pif
[2011/01/21 13:41:43 | 000,103,140 | RHS- | M] () -- C:\vtgs.pif
[2011/01/21 13:41:05 | 000,103,140 | RHS- | M] () -- C:\uxfec.pif
[2011/01/21 13:40:24 | 000,103,140 | RHS- | M] () -- C:\fpjehb.exe
[2011/01/21 13:39:37 | 000,103,140 | RHS- | M] () -- C:\dyfire.pif
[2011/01/21 13:39:00 | 000,103,140 | RHS- | M] () -- C:\bcwhq.pif
[2011/01/21 13:38:22 | 000,103,140 | RHS- | M] () -- C:\kefnva.pif
[2011/01/21 13:37:45 | 000,103,140 | RHS- | M] () -- C:\sqrr.exe
[2011/01/21 13:37:08 | 000,103,140 | RHS- | M] () -- C:\iydjqs.exe
[2011/01/21 13:36:30 | 000,103,140 | RHS- | M] () -- C:\gghq.exe
[2011/01/21 13:35:50 | 000,103,140 | RHS- | M] () -- C:\jhtx.exe
[2011/01/21 13:35:07 | 000,103,140 | RHS- | M] () -- C:\bgdkl.pif
[2011/01/21 13:34:27 | 000,103,140 | RHS- | M] () -- C:\eumha.pif
[2011/01/21 13:33:48 | 000,103,140 | RHS- | M] () -- C:\bsokkc.exe
[2011/01/21 13:33:08 | 000,103,140 | RHS- | M] () -- C:\cptnd.exe
[2011/01/21 13:32:28 | 000,103,140 | RHS- | M] () -- C:\bsqk.exe
[2011/01/21 13:31:45 | 000,103,140 | RHS- | M] () -- C:\pyyorn.exe
[2011/01/21 13:31:04 | 000,103,140 | RHS- | M] () -- C:\uxaemj.exe
[2011/01/21 13:30:20 | 000,103,140 | RHS- | M] () -- C:\eugs.exe
[2011/01/21 13:29:08 | 000,103,140 | RHS- | M] () -- C:\wcrv.pif
[2011/01/21 13:28:18 | 000,103,140 | RHS- | M] () -- C:\udnva.exe
[2011/01/21 13:27:33 | 000,103,140 | RHS- | M] () -- C:\esku.pif
[2011/01/21 13:26:50 | 000,103,140 | RHS- | M] () -- C:\htoh.pif
[2011/01/21 13:26:08 | 000,103,140 | RHS- | M] () -- C:\jefwr.pif
[2011/01/21 13:25:26 | 000,103,140 | RHS- | M] () -- C:\mbtuhm.pif
[2011/01/21 13:24:39 | 000,103,140 | RHS- | M] () -- C:\bjigmb.pif
[2011/01/21 13:23:31 | 000,103,140 | RHS- | M] () -- C:\yfnlji.exe
[2011/01/21 13:21:56 | 000,103,140 | RHS- | M] () -- C:\kggpju.exe
[2011/01/21 13:18:36 | 000,103,140 | RHS- | M] () -- C:\xbsk.pif
[2011/01/21 13:14:52 | 000,103,140 | RHS- | M] () -- C:\yodimw.pif
[2011/01/21 13:12:42 | 000,103,140 | RHS- | M] () -- C:\jjwanp.exe
[2011/01/21 13:11:20 | 000,103,140 | RHS- | M] () -- C:\ogxq.exe
[2011/01/21 13:07:46 | 000,103,140 | RHS- | M] () -- C:\hqjf.pif
[2011/01/21 13:06:39 | 000,103,140 | RHS- | M] () -- C:\rkbs.exe
[2011/01/21 13:05:22 | 000,103,140 | RHS- | M] () -- C:\epbawp.exe
[2011/01/21 13:02:30 | 000,103,140 | RHS- | M] () -- C:\prsfd.exe
[2011/01/21 12:58:28 | 000,103,140 | RHS- | M] () -- C:\osjte.exe
[2011/01/21 12:55:23 | 000,103,140 | RHS- | M] () -- C:\qlffb.exe
[2011/01/21 12:54:38 | 000,103,140 | RHS- | M] () -- C:\vavi.pif
[2011/01/21 12:54:02 | 000,103,140 | RHS- | M] () -- C:\okme.exe
[2011/01/21 12:51:00 | 000,103,140 | RHS- | M] () -- C:\otpdmi.exe
[2011/01/21 12:50:01 | 000,103,140 | RHS- | M] () -- C:\ossp.pif
[2011/01/21 12:46:42 | 000,103,140 | RHS- | M] () -- C:\mrrd.exe
[2011/01/21 12:45:32 | 000,103,140 | RHS- | M] () -- C:\jpedlv.pif
[2011/01/21 12:43:24 | 000,103,140 | RHS- | M] () -- C:\lwki.pif
[2011/01/21 12:42:44 | 000,103,140 | RHS- | M] () -- C:\keird.exe
[2011/01/21 12:41:25 | 000,103,140 | RHS- | M] () -- C:\ycqv.pif
[2011/01/21 12:40:45 | 000,103,140 | RHS- | M] () -- C:\stuhxq.exe
[2011/01/21 12:40:03 | 000,103,140 | RHS- | M] () -- C:\yhuxi.pif
[2011/01/21 12:39:06 | 000,103,140 | RHS- | M] () -- C:\fwtd.exe
[2011/01/21 12:38:25 | 000,103,140 | RHS- | M] () -- C:\xhyqkw.pif
[2011/01/21 12:35:36 | 000,103,140 | RHS- | M] () -- C:\mhkpyl.exe
[2011/01/21 12:34:50 | 000,103,140 | RHS- | M] () -- C:\ldmp.exe
[2011/01/21 12:34:07 | 000,103,140 | RHS- | M] () -- C:\gmckwa.pif
[2011/01/21 12:31:06 | 000,103,140 | RHS- | M] () -- C:\ehbqb.exe
[2011/01/21 12:30:23 | 000,103,140 | RHS- | M] () -- C:\ejjb.pif
[2011/01/21 12:29:31 | 000,103,140 | RHS- | M] () -- C:\xudrhm.exe
[2011/01/21 12:26:42 | 000,103,140 | RHS- | M] () -- C:\lgoqu.exe
[2011/01/21 12:23:46 | 000,103,140 | RHS- | M] () -- C:\iktfdl.pif
[2011/01/21 12:23:07 | 000,103,140 | RHS- | M] () -- C:\uemv.pif
[2011/01/21 12:22:03 | 000,103,140 | RHS- | M] () -- C:\apgufk.pif
[2011/01/21 12:21:12 | 000,103,140 | RHS- | M] () -- C:\yjvv.exe
[2011/01/21 12:20:12 | 000,103,140 | RHS- | M] () -- C:\tnhyp.exe
[2011/01/21 12:19:14 | 000,103,140 | RHS- | M] () -- C:\kwvigw.pif
[2011/01/21 12:18:17 | 000,103,140 | RHS- | M] () -- C:\uuhsk.exe
[2011/01/21 12:14:46 | 000,103,140 | RHS- | M] () -- C:\myhk.exe
[2011/01/21 12:11:46 | 000,103,140 | RHS- | M] () -- C:\irrh.exe
[2011/01/21 12:10:50 | 000,103,140 | RHS- | M] () -- C:\dtyh.exe
[2011/01/21 12:09:59 | 000,103,140 | RHS- | M] () -- C:\wwkpkp.exe
[2011/01/21 12:09:19 | 000,103,140 | RHS- | M] () -- C:\cbgxqx.pif
[2011/01/21 12:08:24 | 000,103,140 | RHS- | M] () -- C:\kmys.exe
[2011/01/21 12:07:33 | 000,103,140 | RHS- | M] () -- C:\xqorpl.exe
[2011/01/21 12:06:10 | 000,103,140 | RHS- | M] () -- C:\yrkgr.exe
[2011/01/21 12:03:12 | 000,103,140 | RHS- | M] () -- C:\hswj.pif
[2011/01/21 12:02:12 | 000,103,140 | RHS- | M] () -- C:\jsbxn.exe
[2011/01/21 11:59:04 | 000,103,140 | RHS- | M] () -- C:\lbesos.exe
[2011/01/21 11:58:24 | 000,103,140 | RHS- | M] () -- C:\kfug.exe
[2011/01/21 11:55:27 | 000,103,140 | RHS- | M] () -- C:\viasqy.pif
[2011/01/21 11:53:10 | 000,103,140 | RHS- | M] () -- C:\akihbh.pif
[2011/01/21 11:49:59 | 000,103,140 | RHS- | M] () -- C:\lcaw.pif
[2011/01/21 11:46:42 | 000,103,140 | RHS- | M] () -- C:\gfwg.exe
[2011/01/21 11:45:08 | 000,103,140 | RHS- | M] () -- C:\slxtss.pif
[2011/01/21 11:42:04 | 000,103,140 | RHS- | M] () -- C:\lyehaf.exe
[2011/01/21 11:41:23 | 000,103,140 | RHS- | M] () -- C:\xmnhjq.pif
[2011/01/21 11:38:58 | 000,103,140 | RHS- | M] () -- C:\attto.pif
[2011/01/21 11:38:22 | 000,103,140 | RHS- | M] () -- C:\kkpnv.exe
[2011/01/21 11:37:30 | 000,103,140 | RHS- | M] () -- C:\nltiy.pif
[2011/01/21 11:36:50 | 000,103,140 | RHS- | M] () -- C:\pqcucl.exe
[2011/01/21 11:34:28 | 000,103,140 | RHS- | M] () -- C:\rlhe.exe
[2011/01/21 11:33:48 | 000,103,140 | RHS- | M] () -- C:\dlsx.exe
[2011/01/21 11:30:39 | 000,103,140 | RHS- | M] () -- C:\uspfqg.exe
[2011/01/21 11:29:50 | 000,103,140 | RHS- | M] () -- C:\hlfchj.exe
[2011/01/21 11:27:03 | 000,103,140 | RHS- | M] () -- C:\yijgm.pif
[2011/01/21 11:26:22 | 000,103,140 | RHS- | M] () -- C:\hfrgji.exe
[2011/01/21 11:25:40 | 000,103,140 | RHS- | M] () -- C:\udicat.pif
[2011/01/21 11:24:58 | 000,103,140 | RHS- | M] () -- C:\xypy.exe
[2011/01/21 11:24:00 | 000,103,140 | RHS- | M] () -- C:\nxvdp.exe
[2011/01/21 11:22:38 | 000,103,140 | RHS- | M] () -- C:\jwlw.exe
[2011/01/21 11:19:04 | 000,103,140 | RHS- | M] () -- C:\crso.exe
[2011/01/21 11:15:15 | 000,103,140 | RHS- | M] () -- C:\trcmsp.exe
[2011/01/21 11:14:28 | 000,103,140 | RHS- | M] () -- C:\orfd.exe
[2011/01/21 11:11:38 | 000,103,140 | RHS- | M] () -- C:\ghyly.exe
[2011/01/21 11:10:47 | 000,103,140 | RHS- | M] () -- C:\slxpve.exe
[2011/01/21 11:09:58 | 000,103,140 | RHS- | M] () -- C:\yiny.pif
[2011/01/21 11:07:51 | 000,103,140 | RHS- | M] () -- C:\cacmvu.pif
[2011/01/21 11:07:01 | 000,103,140 | RHS- | M] () -- C:\qbjj.pif
[2011/01/21 11:06:16 | 000,103,140 | RHS- | M] () -- C:\idel.pif
[2011/01/21 11:03:24 | 000,103,140 | RHS- | M] () -- C:\ipcy.exe
[2011/01/21 11:02:29 | 000,103,140 | RHS- | M] () -- C:\qngfb.exe
[2011/01/21 10:59:14 | 000,103,140 | RHS- | M] () -- C:\meiik.exe
[2011/01/21 10:58:32 | 000,103,140 | RHS- | M] () -- C:\tudjyc.exe
[2011/01/21 10:54:48 | 000,103,140 | RHS- | M] () -- C:\cejw.exe
[2011/01/21 10:51:12 | 000,103,140 | RHS- | M] () -- C:\ccmaw.exe
[2011/01/21 10:50:33 | 000,103,140 | RHS- | M] () -- C:\mthg.pif
[2011/01/21 10:47:18 | 000,103,140 | RHS- | M] () -- C:\aprd.pif
[2011/01/21 10:46:33 | 000,103,140 | RHS- | M] () -- C:\wdqd.pif
[2011/01/21 10:43:08 | 000,103,140 | RHS- | M] () -- C:\apjdf.exe
[2011/01/21 10:40:00 | 000,103,140 | RHS- | M] () -- C:\oxwxi.exe
[2011/01/21 10:39:18 | 000,103,140 | RHS- | M] () -- C:\nrentt.pif
[2011/01/21 10:38:37 | 000,103,140 | RHS- | M] () -- C:\apekn.pif
[2011/01/21 10:37:22 | 000,103,140 | RHS- | M] () -- C:\vxos.exe
[2011/01/21 10:36:04 | 000,103,140 | RHS- | M] () -- C:\pval.pif
[2011/01/21 10:35:24 | 000,103,140 | RHS- | M] () -- C:\hcht.exe
[2011/01/21 10:32:54 | 000,103,140 | RHS- | M] () -- C:\qplbdr.exe
[2011/01/21 10:30:04 | 000,103,140 | RHS- | M] () -- C:\ewgafw.exe
[2011/01/21 10:29:20 | 000,103,140 | RHS- | M] () -- C:\iwxyv.exe
[2011/01/21 10:28:42 | 000,103,140 | RHS- | M] () -- C:\cnxdo.exe
[2011/01/21 10:27:09 | 000,103,140 | RHS- | M] () -- C:\uisr.exe
[2011/01/21 10:24:44 | 000,103,140 | RHS- | M] () -- C:\mdosf.pif
[2011/01/21 10:24:08 | 000,103,140 | RHS- | M] () -- C:\enkep.exe
[2011/01/21 10:15:05 | 000,103,140 | RHS- | M] () -- C:\phknn.pif
[2011/01/21 10:13:42 | 000,103,140 | RHS- | M] () -- C:\xpck.pif
[2011/01/21 10:07:01 | 000,103,140 | RHS- | M] () -- C:\yaae.exe
[2011/01/21 10:06:20 | 000,103,140 | RHS- | M] () -- C:\yighco.exe
[2011/01/21 10:05:24 | 000,103,140 | RHS- | M] () -- C:\ucngpu.pif
[2011/01/21 10:04:32 | 000,103,140 | RHS- | M] () -- C:\rnorr.pif
[2011/01/21 10:02:28 | 000,103,140 | RHS- | M] () -- C:\gdwmn.exe
[2011/01/21 10:01:08 | 000,103,140 | RHS- | M] () -- C:\lbijp.exe
[2011/01/21 09:58:12 | 000,103,140 | RHS- | M] () -- C:\faspp.exe
[2011/01/21 09:57:12 | 000,103,140 | RHS- | M] () -- C:\fjwno.pif
[2011/01/21 09:54:00 | 000,103,140 | RHS- | M] () -- C:\eifg.exe
[2011/01/21 09:53:12 | 000,103,140 | RHS- | M] () -- C:\kyno.exe
[2011/01/21 09:52:06 | 000,103,140 | RHS- | M] () -- C:\bepo.exe
[2011/01/21 09:50:14 | 000,103,140 | RHS- | M] () -- C:\bhgmx.exe
[2011/01/21 09:49:16 | 000,103,140 | RHS- | M] () -- C:\nwfleg.exe
[2011/01/21 09:48:33 | 000,103,140 | RHS- | M] () -- C:\txpr.exe
[2011/01/21 09:47:53 | 000,103,140 | RHS- | M] () -- C:\cdot.pif
[2011/01/21 09:47:14 | 000,103,140 | RHS- | M] () -- C:\mleetg.exe
[2011/01/21 09:42:15 | 000,103,140 | RHS- | M] () -- C:\jmcqs.pif
[2011/01/21 09:39:02 | 000,103,140 | RHS- | M] () -- C:\kiln.pif
[2011/01/21 09:38:18 | 000,103,140 | RHS- | M] () -- C:\xhma.pif
[2011/01/21 09:36:34 | 000,103,140 | RHS- | M] () -- C:\hcpd.pif
[2011/01/21 09:34:25 | 000,103,140 | RHS- | M] () -- C:\rctqpk.exe
[2011/01/21 09:33:27 | 000,103,140 | RHS- | M] () -- C:\cliba.exe
[2011/01/21 09:26:30 | 001,221,348 | ---- | M] () -- C:\atfvaa.exe
[2011/01/21 09:26:16 | 000,103,140 | RHS- | M] () -- C:\guvxgv.pif
[2011/01/21 09:25:26 | 000,103,140 | RHS- | M] () -- C:\owqdmv.exe
[2011/01/20 17:03:39 | 000,103,140 | RHS- | M] () -- C:\uotakg.pif
[2011/01/20 17:03:02 | 000,103,140 | RHS- | M] () -- C:\ihabaf.exe
[2011/01/20 17:02:25 | 000,103,140 | RHS- | M] () -- C:\tecdq.pif
[2011/01/20 17:01:47 | 000,103,140 | RHS- | M] () -- C:\ksfmle.pif
[2011/01/20 17:01:11 | 000,103,140 | RHS- | M] () -- C:\ukwb.exe
[2011/01/20 17:00:34 | 000,103,140 | RHS- | M] () -- C:\hcse.exe
[2011/01/20 16:59:56 | 000,103,140 | RHS- | M] () -- C:\eqeuvt.pif
[2011/01/20 16:59:19 | 000,103,140 | RHS- | M] () -- C:\olkgg.pif
[2011/01/20 16:58:39 | 000,103,140 | RHS- | M] () -- C:\royro.pif
[2011/01/20 16:57:50 | 000,103,140 | RHS- | M] () -- C:\apbew.pif
[2011/01/20 16:57:11 | 000,103,140 | RHS- | M] () -- C:\xbdlfr.exe
[2011/01/20 16:56:33 | 000,103,140 | RHS- | M] () -- C:\rrhpbk.exe
[2011/01/20 16:55:55 | 000,103,140 | RHS- | M] () -- C:\srgjcr.pif
[2011/01/20 16:55:14 | 000,103,140 | RHS- | M] () -- C:\ifkoee.exe
[2011/01/20 16:54:33 | 000,103,140 | RHS- | M] () -- C:\uarxi.exe
[2011/01/20 16:53:52 | 000,103,140 | RHS- | M] () -- C:\ghpa.exe
[2011/01/20 16:53:15 | 000,103,140 | RHS- | M] () -- C:\myljbf.pif
[2011/01/20 16:52:38 | 000,103,140 | RHS- | M] () -- C:\sunjb.exe
[2011/01/20 16:52:03 | 000,103,140 | RHS- | M] () -- C:\ninje.pif
[2011/01/20 16:51:27 | 000,103,140 | RHS- | M] () -- C:\wionis.exe
[2011/01/20 16:50:50 | 000,103,140 | RHS- | M] () -- C:\ktea.pif
[2011/01/20 16:50:10 | 000,103,140 | RHS- | M] () -- C:\fvieh.pif
[2011/01/20 16:49:34 | 000,103,140 | RHS- | M] () -- C:\fdim.pif
[2011/01/20 16:49:00 | 000,103,140 | RHS- | M] () -- C:\jcntvv.exe
[2011/01/20 16:47:47 | 000,103,140 | RHS- | M] () -- C:\qtjbjk.pif
[2011/01/20 16:47:09 | 000,103,140 | RHS- | M] () -- C:\csofyc.exe
[2011/01/20 16:46:31 | 000,103,140 | RHS- | M] () -- C:\xrnvs.pif
[2011/01/20 16:45:47 | 000,103,140 | RHS- | M] () -- C:\utyvj.exe
[2011/01/20 16:45:09 | 000,103,140 | RHS- | M] () -- C:\onae.pif
[2011/01/20 16:44:27 | 000,103,140 | RHS- | M] () -- C:\dkviq.pif
[2011/01/20 16:43:50 | 000,103,140 | RHS- | M] () -- C:\ntlgs.exe
[2011/01/20 16:43:12 | 000,103,140 | RHS- | M] () -- C:\wgugg.pif
[2011/01/20 16:42:35 | 000,103,140 | RHS- | M] () -- C:\cngref.pif
[2011/01/20 16:41:57 | 000,103,140 | RHS- | M] () -- C:\pkiccg.pif
[2011/01/20 16:41:18 | 000,103,140 | RHS- | M] () -- C:\ffjegw.exe
[2011/01/20 16:40:36 | 000,103,140 | RHS- | M] () -- C:\syeqhs.pif
[2011/01/20 16:39:59 | 000,103,140 | RHS- | M] () -- C:\isbfoh.pif
[2011/01/20 16:39:21 | 000,103,140 | RHS- | M] () -- C:\krog.pif
[2011/01/20 16:38:28 | 000,103,140 | RHS- | M] () -- C:\gsybpe.exe
[2011/01/20 16:37:47 | 000,103,140 | RHS- | M] () -- C:\ogxb.pif
[2011/01/20 16:37:10 | 000,103,140 | RHS- | M] () -- C:\tepne.pif
[2011/01/20 16:36:34 | 000,103,140 | RHS- | M] () -- C:\fxeek.exe
[2011/01/20 16:35:54 | 000,103,140 | RHS- | M] () -- C:\tmkgcq.exe
[2011/01/20 16:35:17 | 000,103,140 | RHS- | M] () -- C:\oawmtr.pif
[2011/01/20 16:34:40 | 000,103,140 | RHS- | M] () -- C:\wjjpwj.pif
[2011/01/20 16:34:00 | 000,103,140 | RHS- | M] () -- C:\wdkmc.exe
[2011/01/20 16:33:23 | 000,103,140 | RHS- | M] () -- C:\ihuv.exe
[2011/01/20 16:32:48 | 000,103,140 | RHS- | M] () -- C:\ylhb.exe
[2011/01/20 16:32:12 | 000,103,140 | RHS- | M] () -- C:\orgb.exe
[2011/01/20 16:31:38 | 000,103,140 | RHS- | M] () -- C:\accht.exe
[2011/01/20 16:31:02 | 000,103,140 | RHS- | M] () -- C:\aesvk.exe
[2011/01/20 16:30:24 | 000,103,140 | RHS- | M] () -- C:\xadqov.exe
[2011/01/20 16:29:49 | 000,103,140 | RHS- | M] () -- C:\yfce.pif
[2011/01/20 16:29:13 | 000,103,140 | RHS- | M] () -- C:\jhas.pif
[2011/01/20 16:28:35 | 000,103,140 | RHS- | M] () -- C:\kmrvl.pif
[2011/01/20 16:27:59 | 000,103,140 | RHS- | M] () -- C:\epjq.pif
[2011/01/20 16:27:22 | 000,103,140 | RHS- | M] () -- C:\peeg.pif
[2011/01/20 16:26:45 | 000,103,140 | RHS- | M] () -- C:\wojqnf.pif
[2011/01/20 16:26:07 | 000,103,140 | RHS- | M] () -- C:\sitw.pif
[2011/01/20 16:25:31 | 000,103,140 | RHS- | M] () -- C:\bpqoq.pif
[2011/01/20 16:24:54 | 000,103,140 | RHS- | M] () -- C:\bcqtea.pif
[2011/01/20 16:24:16 | 000,103,140 | RHS- | M] () -- C:\mhio.exe
[2011/01/20 16:23:40 | 000,103,140 | RHS- | M] () -- C:\ciwba.exe
[2011/01/20 16:23:00 | 000,103,140 | RHS- | M] () -- C:\sevqp.exe
[2011/01/20 16:22:26 | 000,103,140 | RHS- | M] () -- C:\pokos.exe
[2011/01/20 16:21:48 | 000,103,140 | RHS- | M] () -- C:\picxdn.pif
[2011/01/20 16:21:10 | 000,103,140 | RHS- | M] () -- C:\nati.pif
[2011/01/20 16:20:33 | 000,103,140 | RHS- | M] () -- C:\gqjpj.pif
[2011/01/20 16:19:55 | 000,103,140 | RHS- | M] () -- C:\wopn.pif
[2011/01/20 16:19:17 | 000,103,140 | RHS- | M] () -- C:\aamvjb.pif
[2011/01/20 16:18:40 | 000,103,140 | RHS- | M] () -- C:\aasnr.pif
[2011/01/20 16:18:04 | 000,103,140 | RHS- | M] () -- C:\tujrj.exe
[2011/01/20 16:17:30 | 000,103,140 | RHS- | M] () -- C:\kymw.exe
[2011/01/20 16:16:51 | 000,103,140 | RHS- | M] () -- C:\vvymo.pif
[2011/01/20 16:16:12 | 000,103,140 | RHS- | M] () -- C:\qywolq.exe
[2011/01/20 16:15:34 | 000,103,140 | RHS- | M] () -- C:\ptbr.exe
[2011/01/20 16:14:58 | 000,103,140 | RHS- | M] () -- C:\ftrl.pif
[2011/01/20 16:14:21 | 000,103,140 | RHS- | M] () -- C:\iddt.exe
[2011/01/20 16:13:46 | 000,103,140 | RHS- | M] () -- C:\vjdl.exe
[2011/01/20 16:13:10 | 000,103,140 | RHS- | M] () -- C:\iukjmt.pif
[2011/01/20 16:12:36 | 000,103,140 | RHS- | M] () -- C:\doigm.exe
[2011/01/20 16:12:00 | 000,103,140 | RHS- | M] () -- C:\fxrhtw.exe
[2011/01/20 16:11:24 | 000,103,140 | RHS- | M] () -- C:\hkppac.exe
[2011/01/20 16:10:46 | 000,103,140 | RHS- | M] () -- C:\jwjhr.pif
[2011/01/20 16:10:08 | 000,103,140 | RHS- | M] () -- C:\gjssu.pif
[2011/01/20 16:09:32 | 000,103,140 | RHS- | M] () -- C:\dyhsk.exe
[2011/01/20 16:08:52 | 000,103,140 | RHS- | M] () -- C:\uvhpi.pif
[2011/01/20 16:08:11 | 000,103,140 | RHS- | M] () -- C:\shmte.pif
[2011/01/20 16:07:33 | 000,103,140 | RHS- | M] () -- C:\vqmna.pif
[2011/01/20 16:06:55 | 000,103,140 | RHS- | M] () -- C:\drsoi.pif
[2011/01/20 16:06:17 | 000,103,140 | RHS- | M] () -- C:\juys.pif
[2011/01/20 16:05:42 | 000,103,140 | RHS- | M] () -- C:\jvxi.exe
[2011/01/20 16:05:06 | 000,103,140 | RHS- | M] () -- C:\dcqaq.exe
[2011/01/20 16:04:27 | 000,103,140 | RHS- | M] () -- C:\luovmo.pif
[2011/01/20 16:03:44 | 000,103,140 | RHS- | M] () -- C:\fuwdyg.exe
[2011/01/20 16:03:07 | 000,103,140 | RHS- | M] () -- C:\mlyo.pif
[2011/01/20 16:02:29 | 000,103,140 | RHS- | M] () -- C:\wllori.exe
[2011/01/20 16:01:54 | 000,103,140 | RHS- | M] () -- C:\gysdn.exe
[2011/01/20 16:01:16 | 000,103,140 | RHS- | M] () -- C:\foviyx.exe
[2011/01/20 16:00:28 | 000,103,140 | RHS- | M] () -- C:\coxl.exe
[2011/01/20 15:59:49 | 000,103,140 | RHS- | M] () -- C:\fpal.pif
[2011/01/20 15:58:58 | 000,103,140 | RHS- | M] () -- C:\iludn.pif
[2011/01/20 15:58:21 | 000,103,140 | RHS- | M] () -- C:\qldpu.exe
[2011/01/20 15:57:44 | 000,103,140 | RHS- | M] () -- C:\qouc.pif
[2011/01/20 15:57:08 | 000,103,140 | RHS- | M] () -- C:\cvkct.exe
[2011/01/20 15:56:27 | 000,103,140 | RHS- | M] () -- C:\xqspk.exe
[2011/01/20 15:55:49 | 000,103,140 | RHS- | M] () -- C:\yrylxf.exe
[2011/01/20 15:55:12 | 000,103,140 | RHS- | M] () -- C:\rjftxd.pif
[2011/01/20 15:54:34 | 000,103,140 | RHS- | M] () -- C:\gkcvk.pif
[2011/01/20 15:53:57 | 000,103,140 | RHS- | M] () -- C:\eynqg.pif
[2011/01/20 15:53:21 | 000,103,140 | RHS- | M] () -- C:\tjyc.exe
[2011/01/20 15:52:43 | 000,103,140 | RHS- | M] () -- C:\oqxj.pif
[2011/01/20 15:52:01 | 000,103,140 | RHS- | M] () -- C:\oofi.pif
[2011/01/20 15:51:23 | 000,103,140 | RHS- | M] () -- C:\xujl.pif
[2011/01/20 15:50:46 | 000,103,140 | RHS- | M] () -- C:\pxvnmw.pif
[2011/01/20 15:50:12 | 000,103,140 | RHS- | M] () -- C:\alfp.exe
[2011/01/20 15:49:34 | 000,103,140 | RHS- | M] () -- C:\dclllc.exe
[2011/01/20 15:48:46 | 000,103,140 | RHS- | M] () -- C:\yyleku.exe
[2011/01/20 15:48:08 | 000,103,140 | RHS- | M] () -- C:\dnlxkx.pif
[2011/01/20 15:47:32 | 000,103,140 | RHS- | M] () -- C:\jyyqp.pif
[2011/01/20 15:46:55 | 000,103,140 | RHS- | M] () -- C:\ujsrq.exe
[2011/01/20 15:46:20 | 000,103,140 | RHS- | M] () -- C:\ahfs.exe
[2011/01/20 15:45:42 | 000,103,140 | RHS- | M] () -- C:\gwyqrj.exe
[2011/01/20 15:45:04 | 000,103,140 | RHS- | M] () -- C:\preyec.pif
[2011/01/20 15:44:28 | 000,103,140 | RHS- | M] () -- C:\mhhgj.exe
[2011/01/20 15:43:50 | 000,103,140 | RHS- | M] () -- C:\puqg.pif
[2011/01/20 15:43:14 | 000,103,140 | RHS- | M] () -- C:\xouwo.exe
[2011/01/20 15:42:38 | 000,103,140 | RHS- | M] () -- C:\ldpp.pif
[2011/01/20 15:42:01 | 000,103,140 | RHS- | M] () -- C:\womp.exe
[2011/01/20 15:41:24 | 000,103,140 | RHS- | M] () -- C:\micrk.pif
[2011/01/20 15:40:48 | 000,103,140 | RHS- | M] () -- C:\mewlgc.exe
[2011/01/20 15:40:09 | 000,103,140 | RHS- | M] () -- C:\gxkolf.pif
[2011/01/20 15:39:32 | 000,103,140 | RHS- | M] () -- C:\cnlkjx.exe
[2011/01/20 15:38:54 | 000,103,140 | RHS- | M] () -- C:\neqypm.pif
[2011/01/20 15:38:15 | 000,103,140 | RHS- | M] () -- C:\skkopj.exe
[2011/01/20 15:37:29 | 000,103,140 | RHS- | M] () -- C:\tqabsv.exe
[2011/01/20 15:36:52 | 000,103,140 | RHS- | M] () -- C:\fqxi.pif
[2011/01/20 15:36:18 | 000,103,140 | RHS- | M] () -- C:\midgvd.exe
[2011/01/20 15:35:40 | 000,103,140 | RHS- | M] () -- C:\fiixd.exe
[2011/01/20 15:35:01 | 000,103,140 | RHS- | M] () -- C:\lcwv.pif
[2011/01/20 15:34:24 | 000,103,140 | RHS- | M] () -- C:\flhh.pif
[2011/01/20 15:33:42 | 000,103,140 | RHS- | M] () -- C:\wske.pif
[2011/01/20 15:33:05 | 000,103,140 | RHS- | M] () -- C:\fiqu.pif
[2011/01/20 15:32:28 | 000,103,140 | RHS- | M] () -- C:\kqpbjs.pif
[2011/01/20 15:31:51 | 000,103,140 | RHS- | M] () -- C:\qjkxc.exe
[2011/01/20 15:31:14 | 000,103,140 | RHS- | M] () -- C:\dyllun.exe
[2011/01/20 15:30:36 | 000,103,140 | RHS- | M] () -- C:\cwfd.pif
[2011/01/20 15:29:58 | 000,103,140 | RHS- | M] () -- C:\avcibq.exe
[2011/01/20 15:28:58 | 000,103,140 | RHS- | M] () -- C:\duxyvu.pif
[2011/01/20 15:27:53 | 000,103,140 | RHS- | M] () -- C:\hqsrg.pif
[2011/01/20 15:27:16 | 000,103,140 | RHS- | M] () -- C:\xjoco.pif
[2011/01/20 15:26:40 | 000,103,140 | RHS- | M] () -- C:\ldlgf.pif
[2011/01/20 15:26:02 | 000,103,140 | RHS- | M] () -- C:\vyovgm.pif
[2011/01/20 15:25:22 | 000,103,140 | RHS- | M] () -- C:\jgbv.pif
[2011/01/20 15:24:42 | 000,103,140 | RHS- | M] () -- C:\rbqw.pif
[2011/01/20 15:24:03 | 000,103,140 | RHS- | M] () -- C:\nxmiyk.pif
[2011/01/20 15:23:25 | 000,103,140 | RHS- | M] () -- C:\gxpjay.pif
[2011/01/20 15:22:44 | 000,103,140 | RHS- | M] () -- C:\hwbr.pif
[2011/01/20 15:22:10 | 000,103,140 | RHS- | M] () -- C:\acyu.exe
[2011/01/20 15:21:19 | 000,103,140 | RHS- | M] () -- C:\akpcsf.pif
[2011/01/20 15:20:40 | 000,103,140 | RHS- | M] () -- C:\lkgje.exe
[2011/01/20 15:20:04 | 000,103,140 | RHS- | M] () -- C:\enbm.exe
[2011/01/20 15:19:26 | 000,103,140 | RHS- | M] () -- C:\fyaf.exe
[2011/01/20 15:18:45 | 000,103,140 | RHS- | M] () -- C:\qlwxuf.pif
[2011/01/20 15:17:57 | 000,103,140 | RHS- | M] () -- C:\fadb.pif
[2011/01/20 15:17:15 | 000,103,140 | RHS- | M] () -- C:\wbprl.exe
[2011/01/20 15:16:37 | 000,103,140 | RHS- | M] () -- C:\jdnvr.pif
[2011/01/20 15:15:56 | 000,103,140 | RHS- | M] () -- C:\pscw.pif
[2011/01/20 15:15:20 | 000,103,140 | RHS- | M] () -- C:\nfjqa.exe
[2011/01/20 15:14:20 | 000,103,140 | RHS- | M] () -- C:\ffkerk.pif
[2011/01/20 15:13:44 | 000,103,140 | RHS- | M] () -- C:\bnmj.exe
[2011/01/20 15:13:08 | 000,103,140 | RHS- | M] () -- C:\krktmb.exe
[2011/01/20 15:12:30 | 000,103,140 | RHS- | M] () -- C:\wxgoy.exe
[2011/01/20 15:11:53 | 000,103,140 | RHS- | M] () -- C:\spujj.exe
[2011/01/20 15:11:17 | 000,103,140 | RHS- | M] () -- C:\vlew.pif
[2011/01/20 15:10:41 | 000,103,140 | RHS- | M] () -- C:\galpn.pif
[2011/01/20 15:10:05 | 000,103,140 | RHS- | M] () -- C:\ktlx.pif
[2011/01/20 15:09:30 | 000,103,140 | RHS- | M] () -- C:\metqs.exe
[2011/01/20 15:08:52 | 000,103,140 | RHS- | M] () -- C:\ynesu.exe
[2011/01/20 15:08:16 | 000,103,140 | RHS- | M] () -- C:\ahcmxf.pif
[2011/01/20 15:07:40 | 000,103,140 | RHS- | M] () -- C:\isoitm.exe
[2011/01/20 15:07:04 | 000,103,140 | RHS- | M] () -- C:\ktet.exe
[2011/01/20 15:06:26 | 000,103,140 | RHS- | M] () -- C:\omtq.exe
[2011/01/20 15:05:48 | 000,103,140 | RHS- | M] () -- C:\gotvi.exe
[2011/01/20 15:05:08 | 000,103,140 | RHS- | M] () -- C:\ijhje.pif
[2011/01/20 15:04:14 | 000,103,140 | RHS- | M] () -- C:\vyjfj.pif
[2011/01/20 15:03:34 | 000,103,140 | RHS- | M] () -- C:\qttlbx.exe
[2011/01/20 15:02:55 | 000,103,140 | RHS- | M] () -- C:\wrgyfi.exe
[2011/01/20 15:02:16 | 000,103,140 | RHS- | M] () -- C:\gqul.pif
[2011/01/20 15:01:37 | 000,103,140 | RHS- | M] () -- C:\cvow.pif
[2011/01/20 15:00:58 | 000,103,140 | RHS- | M] () -- C:\arffmc.exe
[2011/01/20 15:00:18 | 000,103,140 | RHS- | M] () -- C:\sheoyj.exe
[2011/01/20 14:59:39 | 000,103,140 | RHS- | M] () -- C:\umkc.exe
[2011/01/20 14:59:00 | 000,103,140 | RHS- | M] () -- C:\kgbac.exe
[2011/01/20 14:58:20 | 000,103,140 | RHS- | M] () -- C:\gcyn.pif
[2011/01/20 14:57:37 | 000,103,140 | RHS- | M] () -- C:\eeuwo.exe
[2011/01/20 14:57:00 | 000,103,140 | RHS- | M] () -- C:\bedqc.exe
[2011/01/20 14:56:18 | 000,103,140 | RHS- | M] () -- C:\xgvyb.exe
[2011/01/20 14:55:39 | 000,103,140 | RHS- | M] () -- C:\vlytd.exe
[2011/01/20 14:55:04 | 000,103,140 | RHS- | M] () -- C:\gmmc.exe
[2011/01/20 14:54:23 | 000,103,140 | RHS- | M] () -- C:\eoxruj.pif
[2011/01/20 14:53:45 | 000,103,140 | RHS- | M] () -- C:\muhsb.pif
[2011/01/20 14:53:08 | 000,103,140 | RHS- | M] () -- C:\cohefc.exe
[2011/01/20 14:52:27 | 000,103,140 | RHS- | M] () -- C:\tdjo.exe
[2011/01/20 14:51:50 | 000,103,140 | RHS- | M] () -- C:\ekje.exe
[2011/01/20 14:51:07 | 000,103,140 | RHS- | M] () -- C:\llec.pif
[2011/01/20 14:50:27 | 000,103,140 | RHS- | M] () -- C:\mkaq.pif
[2011/01/20 14:49:49 | 000,103,140 | RHS- | M] () -- C:\qgevl.exe
[2011/01/20 14:49:10 | 000,103,140 | RHS- | M] () -- C:\kiiw.exe
[2011/01/20 14:48:32 | 000,103,140 | RHS- | M] () -- C:\funkw.exe
[2011/01/20 14:47:50 | 000,103,140 | RHS- | M] () -- C:\yfcm.exe
[2011/01/20 14:47:12 | 000,103,140 | RHS- | M] () -- C:\gonusy.exe
[2011/01/20 14:46:16 | 000,103,140 | RHS- | M] () -- C:\dvqgk.pif
[2011/01/20 14:45:40 | 000,103,140 | RHS- | M] () -- C:\eednav.exe
[2011/01/20 14:45:00 | 000,103,140 | RHS- | M] () -- C:\cmbk.exe
[2011/01/20 14:44:17 | 000,103,140 | RHS- | M] () -- C:\lpyf.pif
[2011/01/20 14:43:38 | 000,103,140 | RHS- | M] () -- C:\jowbc.pif
[2011/01/20 14:42:56 | 000,103,140 | RHS- | M] () -- C:\rgxtu.pif
[2011/01/20 14:42:18 | 000,103,140 | RHS- | M] () -- C:\yywvq.pif
[2011/01/20 14:41:40 | 000,103,140 | RHS- | M] () -- C:\fjxndf.pif
[2011/01/20 14:40:59 | 000,103,140 | RHS- | M] () -- C:\iroeie.pif
[2011/01/20 14:40:18 | 000,103,140 | RHS- | M] () -- C:\tutocd.exe
[2011/01/20 14:39:38 | 000,103,140 | RHS- | M] () -- C:\tnsti.pif
[2011/01/20 14:39:00 | 000,103,140 | RHS- | M] () -- C:\miexvp.exe
[2011/01/20 14:38:22 | 000,103,140 | RHS- | M] () -- C:\fbhkrc.exe
[2011/01/20 14:37:39 | 000,103,140 | RHS- | M] () -- C:\wwmxkk.pif
[2011/01/20 14:37:04 | 000,103,140 | RHS- | M] () -- C:\auravf.exe
[2011/01/20 14:36:23 | 000,103,140 | RHS- | M] () -- C:\svpr.pif
[2011/01/20 14:35:42 | 000,103,140 | RHS- | M] () -- C:\sltt.pif
[2011/01/20 14:34:50 | 000,103,140 | RHS- | M] () -- C:\srpvn.pif
[2011/01/20 14:34:04 | 000,103,140 | RHS- | M] () -- C:\efoby.pif
[2011/01/20 14:33:18 | 000,103,140 | RHS- | M] () -- C:\bcpli.exe
[2011/01/20 14:32:35 | 000,103,140 | RHS- | M] () -- C:\xmliq.exe
[2011/01/20 14:31:38 | 000,103,140 | RHS- | M] () -- C:\hkshs.pif
[2011/01/20 14:30:29 | 000,103,140 | RHS- | M] () -- C:\nvfjd.pif
[2011/01/20 14:29:48 | 000,103,140 | RHS- | M] () -- C:\agcedn.pif
[2011/01/20 14:29:03 | 000,103,140 | RHS- | M] () -- C:\qvown.pif
[2011/01/20 14:28:08 | 000,103,140 | RHS- | M] () -- C:\pddq.exe
[2011/01/20 14:25:30 | 000,103,140 | RHS- | M] () -- C:\nmmt.exe
[2011/01/20 14:24:50 | 000,103,140 | RHS- | M] () -- C:\dgena.exe
[2011/01/20 14:24:09 | 000,103,140 | RHS- | M] () -- C:\xpoo.exe
[2011/01/20 14:23:18 | 000,103,140 | RHS- | M] () -- C:\jyrgt.exe
[2011/01/20 14:22:35 | 000,103,140 | RHS- | M] () -- C:\ioing.pif
[2011/01/20 14:21:56 | 000,103,140 | RHS- | M] () -- C:\pegiyn.pif
[2011/01/20 14:21:15 | 000,103,140 | RHS- | M] () -- C:\vwors.pif
[2011/01/20 14:20:09 | 000,103,140 | RHS- | M] () -- C:\vcna.pif
[2011/01/20 14:19:21 | 000,103,140 | RHS- | M] () -- C:\ibqluo.pif
[2011/01/20 14:18:44 | 000,103,140 | RHS- | M] () -- C:\gwkefj.exe
[2011/01/20 14:18:02 | 000,103,140 | RHS- | M] () -- C:\lmwjo.exe
[2011/01/20 14:17:16 | 000,103,140 | RHS- | M] () -- C:\mree.exe
[2011/01/20 14:16:30 | 000,103,140 | RHS- | M] () -- C:\rdfemw.pif
[2011/01/20 14:15:30 | 000,103,140 | RHS- | M] () -- C:\pnxutq.pif
[2011/01/20 14:14:50 | 000,103,140 | RHS- | M] () -- C:\rmmi.exe
[2011/01/20 14:14:12 | 000,103,140 | RHS- | M] () -- C:\dbgglw.exe
[2011/01/20 14:13:31 | 000,103,140 | RHS- | M] () -- C:\nuec.pif
[2011/01/20 14:12:54 | 000,103,140 | RHS- | M] () -- C:\obsma.exe
[2011/01/20 14:12:11 | 000,103,140 | RHS- | M] () -- C:\nmbv.pif
[2011/01/20 14:11:21 | 000,103,140 | RHS- | M] () -- C:\lmwslg.pif
[2011/01/20 14:10:40 | 000,103,140 | RHS- | M] () -- C:\etqtfb.pif
[2011/01/20 14:09:57 | 000,103,140 | RHS- | M] () -- C:\ijhwq.pif
[2011/01/20 14:09:06 | 000,103,140 | RHS- | M] () -- C:\cudl.exe
[2011/01/20 14:08:08 | 000,103,140 | RHS- | M] () -- C:\srft.pif
[2011/01/20 14:07:23 | 000,103,140 | RHS- | M] () -- C:\yhlra.exe
[2011/01/20 14:06:46 | 000,103,140 | RHS- | M] () -- C:\dhynec.exe
[2011/01/20 14:06:04 | 000,103,140 | RHS- | M] () -- C:\dbgua.exe
[2011/01/20 14:05:16 | 000,103,140 | RHS- | M] () -- C:\vmpgmn.pif
[2011/01/20 14:04:33 | 000,103,140 | RHS- | M] () -- C:\ilghq.pif
[2011/01/20 14:03:12 | 000,103,140 | RHS- | M] () -- C:\pbeul.exe
[2011/01/20 14:01:28 | 000,103,140 | RHS- | M] () -- C:\cakees.pif
[2011/01/20 14:00:00 | 000,103,140 | RHS- | M] () -- C:\dmrinq.pif
[2011/01/20 13:58:56 | 000,103,140 | RHS- | M] () -- C:\kwplhd.exe
[2011/01/20 13:58:13 | 000,103,140 | RHS- | M] () -- C:\vbpdp.pif
[2011/01/20 13:57:34 | 000,103,140 | ---- | M] () -- C:\acgxoo.exe
[2011/01/20 13:56:48 | 000,103,140 | RHS- | M] () -- C:\gfnr.exe
[2011/01/20 13:56:06 | 000,103,140 | RHS- | M] () -- C:\oqic.pif
[2011/01/20 13:55:25 | 000,103,140 | RHS- | M] () -- C:\qqocl.exe
[2011/01/20 13:54:44 | 000,103,140 | RHS- | M] () -- C:\ncjiqr.exe
[2011/01/20 13:53:58 | 000,103,140 | RHS- | M] () -- C:\patsiq.pif
[2011/01/20 13:53:15 | 000,103,140 | RHS- | M] () -- C:\qinmju.exe
[2011/01/20 13:52:12 | 000,103,140 | RHS- | M] () -- C:\ljwwnp.pif
[2011/01/20 13:51:23 | 000,103,140 | RHS- | M] () -- C:\rkajd.pif
[2011/01/20 13:50:44 | 000,103,140 | RHS- | M] () -- C:\angr.exe
[2011/01/20 13:49:41 | 000,103,140 | RHS- | M] () -- C:\inrwqc.pif
[2011/01/20 13:48:59 | 000,103,140 | RHS- | M] () -- C:\neauoh.pif
[2011/01/20 13:48:20 | 000,103,140 | RHS- | M] () -- C:\etvr.pif
[2011/01/20 13:47:40 | 000,103,140 | RHS- | M] () -- C:\djwmjt.pif
[2011/01/20 13:47:00 | 000,103,140 | RHS- | M] () -- C:\japif.pif
[2011/01/20 13:46:22 | 000,103,140 | RHS- | M] () -- C:\nekqq.pif
[2011/01/20 13:45:26 | 000,103,140 | RHS- | M] () -- C:\yekera.exe
[2011/01/20 13:44:11 | 000,103,140 | RHS- | M] () -- C:\eycid.pif
[2011/01/20 13:43:32 | 000,103,140 | RHS- | M] () -- C:\afxhv.exe
[2011/01/20 13:42:38 | 000,103,140 | RHS- | M] () -- C:\axat.exe
[2011/01/20 13:41:21 | 000,103,140 | RHS- | M] () -- C:\nubckd.pif
[2011/01/20 13:40:16 | 000,103,140 | RHS- | M] () -- C:\ecffgk.exe
[2011/01/20 13:39:03 | 000,103,140 | RHS- | M] () -- C:\lipfxg.pif
[2011/01/20 13:38:18 | 000,103,140 | RHS- | M] () -- C:\kjiinw.exe
[2011/01/20 13:37:37 | 000,103,140 | RHS- | M] () -- C:\xpvvk.exe
[2011/01/20 13:36:49 | 000,103,140 | RHS- | M] () -- C:\ldsu.pif
[2011/01/20 13:35:40 | 000,103,140 | RHS- | M] () -- C:\kkgdxy.exe
[2011/01/20 13:34:19 | 000,103,140 | RHS- | M] () -- C:\ikgso.pif
[2011/01/20 13:33:03 | 000,103,140 | RHS- | M] () -- C:\nwqtp.pif
[2011/01/20 13:32:16 | 000,103,140 | RHS- | M] () -- C:\eeqqg.exe
[2011/01/20 13:31:36 | 000,103,140 | RHS- | M] () -- C:\awqd.pif
[2011/01/20 13:30:56 | 000,103,140 | RHS- | M] () -- C:\iudmg.pif
[2011/01/20 13:30:14 | 000,103,140 | RHS- | M] () -- C:\hpfst.exe
[2011/01/20 13:29:32 | 000,103,140 | RHS- | M] () -- C:\vvgkhx.exe
[2011/01/20 13:28:51 | 000,103,140 | RHS- | M] () -- C:\yuik.exe
[2011/01/20 13:28:00 | 000,103,140 | RHS- | M] () -- C:\mqdasd.pif
[2011/01/20 13:27:21 | 000,103,140 | RHS- | M] () -- C:\wlbxyr.pif
[2011/01/20 13:26:42 | 000,103,140 | RHS- | M] () -- C:\iulla.exe
[2011/01/20 13:26:02 | 000,103,140 | RHS- | M] () -- C:\ecxet.exe
[2011/01/20 13:24:44 | 000,103,140 | RHS- | M] () -- C:\bvqlje.exe
[2011/01/20 13:24:03 | 000,103,140 | RHS- | M] () -- C:\ryjo.pif
[2011/01/20 13:23:21 | 000,103,140 | RHS- | M] () -- C:\qfvh.exe
[2011/01/20 13:22:42 | 000,103,140 | RHS- | M] () -- C:\knhn.pif
[2011/01/20 13:22:02 | 000,103,140 | RHS- | M] () -- C:\ouefb.pif
[2011/01/20 13:21:20 | 000,103,140 | RHS- | M] () -- C:\ixdl.exe
[2011/01/20 13:20:31 | 000,103,140 | RHS- | M] () -- C:\xsdg.pif
[2011/01/20 13:19:53 | 000,103,140 | RHS- | M] () -- C:\eyio.pif
[2011/01/20 13:19:13 | 000,103,140 | RHS- | M] () -- C:\aebma.pif
[2011/01/20 13:18:34 | 000,103,140 | RHS- | M] () -- C:\yttnw.exe
[2011/01/20 13:17:55 | 000,103,140 | RHS- | M] () -- C:\qyiyng.pif
[2011/01/20 13:17:15 | 000,103,140 | RHS- | M] () -- C:\wbdd.pif
[2011/01/20 13:16:36 | 000,103,140 | RHS- | M] () -- C:\sdpgjp.pif
[2011/01/20 13:15:56 | 000,103,140 | RHS- | M] () -- C:\lvbnn.exe
[2011/01/20 13:14:56 | 000,103,140 | RHS- | M] () -- C:\nube.exe
[2011/01/20 13:13:50 | 000,103,140 | RHS- | M] () -- C:\nlhr.exe
[2011/01/20 13:13:10 | 000,103,140 | RHS- | M] () -- C:\mmxxgq.exe
[2011/01/20 13:12:04 | 000,103,140 | RHS- | M] () -- C:\mypokx.exe
[2011/01/20 13:11:22 | 000,103,140 | RHS- | M] () -- C:\lkcbse.exe
[2011/01/20 13:10:42 | 000,103,140 | RHS- | M] () -- C:\nuktno.exe
[2011/01/20 13:09:22 | 000,103,140 | RHS- | M] () -- C:\knofx.exe
[2011/01/20 13:08:29 | 000,103,140 | RHS- | M] () -- C:\tnsj.pif
[2011/01/20 13:07:49 | 000,103,140 | RHS- | M] () -- C:\sujti.pif
[2011/01/20 13:07:04 | 000,103,140 | RHS- | M] () -- C:\msrq.exe
[2011/01/20 13:06:22 | 000,103,140 | RHS- | M] () -- C:\nimo.pif
[2011/01/20 13:05:44 | 000,103,140 | RHS- | M] () -- C:\goltmu.exe
[2011/01/20 13:05:02 | 000,103,140 | RHS- | M] () -- C:\fbfs.exe
[2011/01/20 13:04:11 | 000,103,140 | RHS- | M] () -- C:\rgaga.exe
[2011/01/20 13:03:16 | 000,103,140 | RHS- | M] () -- C:\bljo.exe
[2011/01/20 13:02:20 | 000,103,140 | RHS- | M] () -- C:\opht.pif
[2011/01/20 13:01:24 | 000,103,140 | RHS- | M] () -- C:\couun.pif
[2011/01/20 13:00:45 | 000,103,140 | RHS- | M] () -- C:\cahopg.pif
[2011/01/20 13:00:04 | 000,103,140 | RHS- | M] () -- C:\esirk.pif
[2011/01/20 12:59:14 | 000,103,140 | RHS- | M] () -- C:\khkdvk.exe
[2011/01/20 12:58:20 | 000,103,140 | RHS- | M] () -- C:\luwo.pif
[2011/01/20 12:57:40 | 000,103,140 | RHS- | M] () -- C:\lkgaqu.exe
[2011/01/20 12:56:55 | 000,103,140 | RHS- | M] () -- C:\yckb.pif
[2011/01/20 12:56:06 | 000,103,140 | RHS- | M] () -- C:\yiymx.exe
[2011/01/20 12:55:06 | 000,103,140 | RHS- | M] () -- C:\oskpa.exe
[2011/01/20 12:54:02 | 000,103,140 | RHS- | M] () -- C:\bdkgje.exe
[2011/01/20 12:53:18 | 000,103,140 | RHS- | M] () -- C:\adqm.pif
[2011/01/20 12:52:19 | 000,103,140 | RHS- | M] () -- C:\wcradr.exe
[2011/01/20 12:51:15 | 000,103,140 | RHS- | M] () -- C:\whgk.exe
[2011/01/20 12:50:16 | 000,103,140 | RHS- | M] () -- C:\bufdq.exe
[2011/01/20 12:49:03 | 000,103,140 | RHS- | M] () -- C:\hqbyrj.pif
[2011/01/20 12:48:19 | 000,103,140 | RHS- | M] () -- C:\cqerxe.pif
[2011/01/20 12:47:23 | 000,103,140 | RHS- | M] () -- C:\gagoa.pif
[2011/01/20 12:46:44 | 000,103,140 | RHS- | M] () -- C:\bcwxk.exe
[2011/01/20 12:46:04 | 000,103,140 | RHS- | M] () -- C:\kgdbr.exe
[2011/01/20 12:45:24 | 000,103,140 | RHS- | M] () -- C:\vnjgsn.pif
[2011/01/20 12:44:46 | 000,103,140 | RHS- | M] () -- C:\rhty.exe
[2011/01/20 12:44:10 | 000,103,140 | RHS- | M] () -- C:\momc.exe
[2011/01/20 12:43:16 | 000,103,140 | RHS- | M] () -- C:\jdhi.exe
[2011/01/20 12:42:35 | 000,103,140 | RHS- | M] () -- C:\uqwii.pif
[2011/01/20 12:41:57 | 000,103,140 | RHS- | M] () -- C:\qlbhu.exe
[2011/01/20 12:41:20 | 000,103,140 | RHS- | M] () -- C:\hvvmq.exe
[2011/01/20 12:40:39 | 000,103,140 | RHS- | M] () -- C:\iupt.pif
[2011/01/20 12:39:58 | 000,103,140 | RHS- | M] () -- C:\ioax.pif
[2011/01/20 12:39:20 | 000,103,140 | RHS- | M] () -- C:\eabfks.exe
[2011/01/20 12:38:37 | 000,103,140 | RHS- | M] () -- C:\mysqak.pif
[2011/01/20 12:37:58 | 000,103,140 | RHS- | M] () -- C:\fnrxak.exe
[2011/01/20 12:37:15 | 000,103,140 | RHS- | M] () -- C:\tqqw.pif
[2011/01/20 12:36:36 | 000,103,140 | RHS- | M] () -- C:\lmturo.exe
[2011/01/20 12:35:54 | 000,103,140 | RHS- | M] () -- C:\ywdnfs.exe
[2011/01/20 12:35:14 | 000,103,140 | RHS- | M] () -- C:\mhdy.exe
[2011/01/20 12:34:29 | 000,103,140 | RHS- | M] () -- C:\wvdugs.pif
[2011/01/20 12:33:49 | 000,103,140 | RHS- | M] () -- C:\gmbyu.pif
[2011/01/20 12:33:06 | 000,103,140 | RHS- | M] () -- C:\ymqpdw.exe
[2011/01/20 12:32:23 | 000,103,140 | RHS- | M] () -- C:\ijmbgw.pif
[2011/01/20 12:31:40 | 000,103,140 | RHS- | M] () -- C:\rfqk.pif
[2011/01/20 12:30:50 | 000,103,140 | RHS- | M] () -- C:\npcvjr.pif
[2011/01/20 12:30:08 | 000,103,140 | RHS- | M] () -- C:\cajbs.pif
[2011/01/20 12:29:28 | 000,103,140 | RHS- | M] () -- C:\baukpu.exe
[2011/01/20 12:28:43 | 000,103,140 | RHS- | M] () -- C:\pjsfms.pif
[2011/01/20 12:27:54 | 000,103,140 | RHS- | M] () -- C:\xbsacj.exe
[2011/01/20 12:27:01 | 000,103,140 | RHS- | M] () -- C:\uarkbx.pif
[2011/01/20 12:26:06 | 000,103,140 | RHS- | M] () -- C:\robvq.pif
[2011/01/20 12:25:22 | 000,103,140 | RHS- | M] () -- C:\bcnv.exe
[2011/01/20 12:24:34 | 000,103,140 | RHS- | M] () -- C:\ujjtu.exe
[2011/01/20 12:23:41 | 000,103,140 | RHS- | M] () -- C:\skffu.pif
[2011/01/20 12:22:54 | 000,103,140 | RHS- | M] () -- C:\yxhxd.exe
[2011/01/20 12:22:04 | 000,103,140 | RHS- | M] () -- C:\oypt.exe
[2011/01/20 12:21:16 | 000,103,140 | RHS- | M] () -- C:\txxemg.exe
[2011/01/20 12:20:30 | 000,103,140 | RHS- | M] () -- C:\fcyp.exe
[2011/01/20 12:19:43 | 000,103,140 | RHS- | M] () -- C:\mdobi.pif
[2011/01/20 12:18:26 | 000,103,140 | RHS- | M] () -- C:\olsd.pif
[2011/01/20 12:17:39 | 000,103,140 | RHS- | M] () -- C:\ufbcyy.exe
[2011/01/20 12:16:54 | 000,103,140 | RHS- | M] () -- C:\uqnh.pif
[2011/01/20 12:16:04 | 000,103,140 | RHS- | M] () -- C:\skekbd.pif
[2011/01/20 12:15:26 | 000,103,140 | RHS- | M] () -- C:\jtwdyh.exe
[2011/01/20 12:14:42 | 000,103,140 | RHS- | M] () -- C:\eryo.exe
[2011/01/20 12:13:52 | 000,103,140 | RHS- | M] () -- C:\begrh.pif
[2011/01/20 12:12:50 | 000,103,140 | RHS- | M] () -- C:\cskn.pif
[2011/01/20 12:11:57 | 000,103,140 | RHS- | M] () -- C:\isoep.pif
[2011/01/20 12:11:05 | 000,103,140 | RHS- | M] () -- C:\pvmk.exe
[2011/01/20 12:10:15 | 000,103,140 | RHS- | M] () -- C:\xwff.exe
[2011/01/20 12:09:28 | 000,103,140 | RHS- | M] () -- C:\rjta.exe
[2011/01/20 12:08:43 | 000,103,140 | RHS- | M] () -- C:\smjw.pif
[2011/01/20 12:07:56 | 000,103,140 | RHS- | M] () -- C:\odaw.pif
[2011/01/20 12:07:08 | 000,103,140 | RHS- | M] () -- C:\rqcncb.exe
[2011/01/20 12:06:27 | 000,103,140 | RHS- | M] () -- C:\ipso.pif
[2011/01/20 12:05:39 | 000,103,140 | RHS- | M] () -- C:\vahja.exe
[2011/01/20 12:04:58 | 000,103,140 | RHS- | M] () -- C:\rsjva.pif
[2011/01/20 12:04:04 | 000,103,140 | RHS- | M] () -- C:\imddo.exe
[2011/01/20 12:03:16 | 000,103,140 | RHS- | M] () -- C:\nemup.pif
[2011/01/20 12:02:31 | 000,103,140 | RHS- | M] () -- C:\iiqvg.exe
[2011/01/20 12:01:47 | 000,103,140 | RHS- | M] () -- C:\qgpy.exe
[2011/01/20 12:00:55 | 000,103,140 | RHS- | M] () -- C:\krjur.pif
[2011/01/20 12:00:16 | 000,103,140 | RHS- | M] () -- C:\ecnlp.exe
[2011/01/20 11:59:33 | 000,103,140 | RHS- | M] () -- C:\tggin.pif
[2011/01/20 11:58:43 | 000,103,140 | RHS- | M] () -- C:\xbba.exe
[2011/01/20 11:57:58 | 000,103,140 | RHS- | M] () -- C:\liudo.exe
[2011/01/20 11:57:20 | 000,103,140 | RHS- | M] () -- C:\ccnt.exe
[2011/01/20 11:56:36 | 000,103,140 | RHS- | M] () -- C:\atol.pif
[2011/01/20 11:55:55 | 000,103,140 | RHS- | M] () -- C:\vubd.exe
[2011/01/20 11:55:09 | 000,103,140 | RHS- | M] () -- C:\rkxitp.pif
[2011/01/20 11:54:32 | 000,103,140 | RHS- | M] () -- C:\gmkdk.exe
[2011/01/20 11:53:52 | 000,103,140 | RHS- | M] () -- C:\bianc.exe
[2011/01/20 11:53:13 | 000,103,140 | RHS- | M] () -- C:\ykbc.pif
[2011/01/20 11:52:34 | 000,103,140 | RHS- | M] () -- C:\ijmxqh.exe
[2011/01/20 11:51:41 | 000,103,140 | RHS- | M] () -- C:\tfppv.exe
[2011/01/20 11:51:01 | 000,103,140 | RHS- | M] () -- C:\sqtw.exe
[2011/01/20 11:50:17 | 000,103,140 | RHS- | M] () -- C:\smsovn.exe
[2011/01/20 11:49:26 | 000,103,140 | RHS- | M] () -- C:\aunfk.pif
[2011/01/20 11:48:46 | 000,103,140 | RHS- | M] () -- C:\xngof.exe
[2011/01/20 11:48:03 | 000,103,140 | RHS- | M] () -- C:\elybjl.pif
[2011/01/20 11:47:09 | 000,103,140 | RHS- | M] () -- C:\xunvws.pif
[2011/01/20 11:46:26 | 000,103,140 | RHS- | M] () -- C:\itncdc.exe
[2011/01/20 11:45:44 | 000,103,140 | RHS- | M] () -- C:\owqkv.pif
[2011/01/20 11:44:36 | 000,103,140 | RHS- | M] () -- C:\vxuah.pif
[2011/01/20 11:43:46 | 000,103,140 | RHS- | M] () -- C:\laqb.exe
[2011/01/20 11:43:00 | 000,103,140 | RHS- | M] () -- C:\ofvgw.exe
[2011/01/20 11:42:14 | 000,103,140 | RHS- | M] () -- C:\ibcon.pif
[2011/01/20 11:41:16 | 000,103,140 | RHS- | M] () -- C:\smpnj.pif
[2011/01/20 11:40:12 | 000,103,140 | RHS- | M] () -- C:\lmvgn.exe
[2011/01/20 11:39:23 | 000,103,140 | RHS- | M] () -- C:\rjvw.exe
[2011/01/20 11:38:30 | 000,103,140 | RHS- | M] () -- C:\urpb.exe
[2011/01/20 11:37:38 | 000,103,140 | RHS- | M] () -- C:\bentmu.exe
[2011/01/20 11:36:20 | 000,103,140 | RHS- | M] () -- C:\ldbyb.pif
[2011/01/20 11:35:40 | 000,103,140 | RHS- | M] () -- C:\ajgsuw.pif
[2011/01/20 11:34:57 | 000,103,140 | RHS- | M] () -- C:\ajgye.pif
[2011/01/20 11:34:07 | 000,103,140 | RHS- | M] () -- C:\qbmm.exe
[2011/01/20 11:33:20 | 000,103,140 | RHS- | M] () -- C:\kwynje.exe
[2011/01/20 11:32:31 | 000,103,140 | RHS- | M] () -- C:\yubrt.exe
[2011/01/20 11:31:46 | 000,103,140 | RHS- | M] () -- C:\ekwgu.pif
[2011/01/20 11:30:51 | 000,103,140 | RHS- | M] () -- C:\qafpn.pif
[2011/01/20 11:29:48 | 000,103,140 | RHS- | M] () -- C:\lghewk.exe
[2011/01/20 11:28:35 | 000,103,140 | RHS- | M] () -- C:\sgkgk.pif
[2011/01/20 11:27:53 | 000,103,140 | RHS- | M] () -- C:\cssaqk.exe
[2011/01/20 11:27:10 | 000,103,140 | RHS- | M] () -- C:\fnpri.exe
[2011/01/20 11:26:14 | 000,103,140 | RHS- | M] () -- C:\hbrvol.exe
[2011/01/20 11:25:27 | 000,103,140 | RHS- | M] () -- C:\xynmb.exe
[2011/01/20 11:24:44 | 000,103,140 | RHS- | M] () -- C:\ltnl.exe
[2011/01/20 11:23:56 | 000,103,140 | RHS- | M] () -- C:\bsno.pif
[2011/01/20 11:23:06 | 000,103,140 | RHS- | M] () -- C:\tqppwg.pif
[2011/01/20 11:22:12 | 000,103,140 | RHS- | M] () -- C:\gtvgos.pif
[2011/01/20 11:21:34 | 000,103,140 | RHS- | M] () -- C:\mtsnu.exe
[2011/01/20 11:20:45 | 000,103,140 | RHS- | M] () -- C:\igdhr.pif
[2011/01/20 11:19:58 | 000,103,140 | RHS- | M] () -- C:\palup.exe
[2011/01/20 11:19:19 | 000,103,140 | RHS- | M] () -- C:\nsby.pif
[2011/01/20 11:18:40 | 000,103,140 | RHS- | M] () -- C:\ntnwp.pif
[2011/01/20 11:18:00 | 000,103,140 | RHS- | M] () -- C:\msrkv.exe
[2011/01/20 11:17:19 | 000,103,140 | RHS- | M] () -- C:\wuna.exe
[2011/01/20 11:16:36 | 000,103,140 | RHS- | M] () -- C:\dciaqf.exe
[2011/01/20 11:15:50 | 000,103,140 | RHS- | M] () -- C:\kvulod.exe
[2011/01/20 11:15:05 | 000,103,140 | RHS- | M] () -- C:\tara.pif
[2011/01/20 11:14:04 | 000,103,140 | RHS- | M] () -- C:\dpenho.exe
[2011/01/20 11:13:16 | 000,103,140 | RHS- | M] () -- C:\btdre.pif
[2011/01/20 11:12:20 | 000,103,140 | RHS- | M] () -- C:\obydn.exe
[2011/01/20 11:10:58 | 000,103,140 | RHS- | M] () -- C:\pokykt.exe
[2011/01/20 11:10:04 | 000,103,140 | RHS- | M] () -- C:\jhxglc.pif
[2011/01/20 11:09:09 | 000,103,140 | RHS- | M] () -- C:\wmif.pif
[2011/01/20 11:08:12 | 000,103,140 | RHS- | M] () -- C:\iinam.exe
[2011/01/20 11:07:26 | 000,103,140 | RHS- | M] () -- C:\etmy.exe
[2011/01/20 11:06:38 | 000,103,140 | RHS- | M] () -- C:\uxpx.pif
[2011/01/20 11:05:50 | 000,103,140 | RHS- | M] () -- C:\rumk.exe
[2011/01/20 11:04:59 | 000,103,140 | RHS- | M] () -- C:\afvxd.pif
[2011/01/20 11:04:14 | 000,103,140 | RHS- | M] () -- C:\pjvm.pif
[2011/01/20 11:03:32 | 000,103,140 | RHS- | M] () -- C:\ejpygu.exe
[2011/01/20 11:02:49 | 000,103,140 | RHS- | M] () -- C:\yiyvm.exe
[2011/01/20 11:02:00 | 000,103,140 | RHS- | M] () -- C:\ysvqf.pif
[2011/01/20 11:01:16 | 000,103,140 | RHS- | M] () -- C:\kifnv.exe
[2011/01/20 10:59:54 | 000,103,140 | RHS- | M] () -- C:\mikw.exe
[2011/01/20 10:59:14 | 000,103,140 | RHS- | M] () -- C:\ofuhf.pif
[2011/01/20 10:58:33 | 000,103,140 | RHS- | M] () -- C:\ruseww.pif
[2011/01/20 10:57:53 | 000,103,140 | RHS- | M] () -- C:\pstkj.pif
[2011/01/20 10:57:07 | 000,103,140 | RHS- | M] () -- C:\viaf.pif
[2011/01/20 10:56:23 | 000,103,140 | RHS- | M] () -- C:\yvjfkr.pif
[2011/01/20 10:55:42 | 000,103,140 | RHS- | M] () -- C:\mltaja.pif
[2011/01/20 10:54:59 | 000,103,140 | RHS- | M] () -- C:\edvb.pif
[2011/01/20 10:54:20 | 000,103,140 | RHS- | M] () -- C:\ekvc.exe
[2011/01/20 10:53:09 | 000,103,140 | RHS- | M] () -- C:\xlli.exe
[2011/01/20 10:52:30 | 000,103,140 | RHS- | M] () -- C:\agwcl.exe
[2011/01/20 10:51:50 | 000,103,140 | RHS- | M] () -- C:\jxtnek.exe
[2011/01/20 10:50:57 | 000,103,140 | RHS- | M] () -- C:\hjbvx.pif
[2011/01/20 10:49:59 | 000,103,140 | RHS- | M] () -- C:\ttapmw.pif
[2011/01/20 10:49:19 | 000,103,140 | RHS- | M] () -- C:\sfhn.exe
[2011/01/20 10:48:34 | 000,103,140 | RHS- | M] () -- C:\vxqq.pif
[2011/01/20 10:47:00 | 000,103,140 | RHS- | M] () -- C:\jyvya.exe
[2011/01/20 10:46:11 | 000,103,140 | RHS- | M] () -- C:\xlcxgf.exe
[2011/01/20 10:45:25 | 000,103,140 | RHS- | M] () -- C:\ufpat.exe
[2011/01/20 10:44:38 | 000,103,140 | RHS- | M] () -- C:\adcb.pif
[2011/01/20 10:43:24 | 000,103,140 | RHS- | M] () -- C:\xbhhx.exe
[2011/01/20 10:42:14 | 000,103,140 | RHS- | M] () -- C:\ljrdkq.exe
[2011/01/20 10:41:14 | 000,103,140 | RHS- | M] () -- C:\pbimu.exe
[2011/01/20 10:40:32 | 000,103,140 | RHS- | M] () -- C:\ilqetb.pif
[2011/01/20 10:39:37 | 000,103,140 | RHS- | M] () -- C:\hpcws.pif
[2011/01/20 10:38:56 | 000,103,140 | RHS- | M] () -- C:\dedqok.exe
[2011/01/20 10:38:10 | 000,103,140 | RHS- | M] () -- C:\gyib.pif
[2011/01/20 10:37:26 | 000,103,140 | RHS- | M] () -- C:\lmpqoj.pif
[2011/01/20 10:36:32 | 000,103,140 | RHS- | M] () -- C:\gbvp.exe
[2011/01/20 10:35:48 | 000,103,140 | RHS- | M] () -- C:\lhwsw.exe
[2011/01/20 10:35:02 | 000,103,140 | RHS- | M] () -- C:\evpuw.exe
[2011/01/20 10:34:16 | 000,103,140 | RHS- | M] () -- C:\kejt.exe
[2011/01/20 10:33:24 | 000,103,140 | RHS- | M] () -- C:\vyxici.exe
[2011/01/20 10:32:15 | 000,103,140 | RHS- | M] () -- C:\uedcrs.pif
[2011/01/20 10:31:06 | 000,103,140 | RHS- | M] () -- C:\cffy.exe
[2011/01/20 10:30:09 | 000,103,140 | RHS- | M] () -- C:\ngljaf.pif
[2011/01/20 10:29:28 | 000,103,140 | RHS- | M] () -- C:\uhup.exe
[2011/01/20 10:28:33 | 000,103,140 | RHS- | M] () -- C:\idvth.exe
[2011/01/20 10:27:31 | 000,103,140 | RHS- | M] () -- C:\cycjhp.pif
[2011/01/20 10:26:48 | 000,103,140 | RHS- | M] () -- C:\glqu.exe
[2011/01/20 10:26:00 | 000,103,140 | RHS- | M] () -- C:\olph.pif
[2011/01/20 10:25:05 | 000,103,140 | RHS- | M] () -- C:\sqcuwb.exe
[2011/01/20 10:24:05 | 000,103,140 | RHS- | M] () -- C:\pkgj.pif
[2011/01/20 10:23:09 | 000,103,140 | RHS- | M] () -- C:\uvci.pif
[2011/01/20 10:22:11 | 000,103,140 | RHS- | M] () -- C:\bodcva.pif
[2011/01/20 10:21:24 | 000,103,140 | RHS- | M] () -- C:\yfxspw.pif
[2011/01/20 10:20:32 | 000,103,140 | RHS- | M] () -- C:\apjj.pif
[2011/01/20 10:19:24 | 000,103,140 | RHS- | M] () -- C:\xwxfl.pif
[2011/01/20 10:18:25 | 000,103,140 | RHS- | M] () -- C:\ullx.pif
[2011/01/20 10:17:36 | 000,103,140 | RHS- | M] () -- C:\adyyne.exe
[2011/01/20 10:16:56 | 000,103,140 | RHS- | M] () -- C:\nxvac.exe
[2011/01/20 10:16:13 | 000,103,140 | RHS- | M] () -- C:\ujflxe.exe
[2011/01/20 10:15:31 | 000,103,140 | RHS- | M] () -- C:\nygrt.pif
[2011/01/20 10:14:45 | 000,103,140 | RHS- | M] () -- C:\wbuyqx.exe
[2011/01/20 10:13:26 | 000,103,140 | RHS- | M] () -- C:\jfmtu.exe
[2011/01/20 10:12:30 | 000,103,140 | RHS- | M] () -- C:\dlqga.pif
[2011/01/20 10:11:34 | 000,103,140 | RHS- | M] () -- C:\ugov.exe
[2011/01/20 10:10:32 | 000,103,140 | RHS- | M] () -- C:\bllow.pif
[2011/01/20 10:09:40 | 000,103,140 | RHS- | M] () -- C:\rdbikp.exe
[2011/01/20 10:08:48 | 000,103,140 | RHS- | M] () -- C:\lepk.exe
[2011/01/20 10:07:37 | 000,103,140 | RHS- | M] () -- C:\drofg.pif
[2011/01/20 10:06:55 | 000,103,140 | RHS- | M] () -- C:\vkywny.pif
[2011/01/20 10:06:14 | 000,103,140 | RHS- | M] () -- C:\sbfk.pif
[2011/01/20 10:05:24 | 000,103,140 | RHS- | M] () -- C:\lbti.exe
[2011/01/20 10:04:43 | 000,103,140 | RHS- | M] () -- C:\ehqd.pif
[2011/01/20 10:04:04 | 000,103,140 | RHS- | M] () -- C:\epgrbi.exe
[2011/01/20 10:03:21 | 000,103,140 | RHS- | M] () -- C:\vexnjb.exe
[2011/01/20 10:02:40 | 000,103,140 | RHS- | M] () -- C:\uqbw.exe
[2011/01/20 10:02:01 | 000,103,140 | RHS- | M] () -- C:\dqsja.pif
[2011/01/20 10:01:20 | 000,103,140 | RHS- | M] () -- C:\wxxan.pif
[2011/01/20 10:00:40 | 000,103,140 | RHS- | M] () -- C:\hostu.exe
[2011/01/20 09:59:48 | 000,103,140 | RHS- | M] () -- C:\lasry.exe
[2011/01/20 09:59:06 | 000,103,140 | RHS- | M] () -- C:\nwgf.exe
[2011/01/20 09:58:24 | 000,103,140 | RHS- | M] () -- C:\ijslwt.pif
[2011/01/20 09:57:46 | 000,103,140 | RHS- | M] () -- C:\vybgc.exe
[2011/01/20 09:57:03 | 000,103,140 | RHS- | M] () -- C:\yytsek.exe
[2011/01/20 09:56:22 | 000,103,140 | RHS- | M] () -- C:\ifepr.exe
[2011/01/20 09:55:39 | 000,103,140 | RHS- | M] () -- C:\bwbrls.pif
[2011/01/20 09:54:58 | 000,103,140 | RHS- | M] () -- C:\oiure.exe
[2011/01/20 09:54:16 | 000,103,140 | RHS- | M] () -- C:\xvutv.pif
[2011/01/20 09:52:46 | 000,103,140 | RHS- | M] () -- C:\jbbhh.pif
[2011/01/20 09:51:46 | 000,103,140 | RHS- | M] () -- C:\yfxo.exe
[2011/01/20 09:51:01 | 000,103,140 | RHS- | M] () -- C:\fyqxmc.pif
[2011/01/20 09:50:20 | 000,103,140 | RHS- | M] () -- C:\gmwd.pif
[2011/01/20 09:49:40 | 000,103,140 | RHS- | M] () -- C:\swud.exe

pfchang
Intermediate
Intermediate

Posts Posts : 66
Joined Joined : 2009-03-05
OS OS : Windows XP Professional
Points Points : 28695
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Virus - Shutting down antivirus

Post by pfchang on Tue Feb 01, 2011 12:06 am

[2011/01/20 09:49:00 | 000,103,140 | RHS- | M] () -- C:\ettp.exe
[2011/01/20 09:48:16 | 000,103,140 | RHS- | M] () -- C:\mana.pif
[2011/01/20 09:47:36 | 000,103,140 | RHS- | M] () -- C:\pxmr.pif
[2011/01/20 09:46:26 | 000,103,140 | RHS- | M] () -- C:\jnyxri.exe
[2011/01/20 09:44:54 | 000,103,140 | RHS- | M] () -- C:\qxnwst.pif
[2011/01/20 09:44:16 | 000,103,140 | RHS- | M] () -- C:\clvxi.exe
[2011/01/20 09:43:35 | 000,103,140 | RHS- | M] () -- C:\vmxxno.pif
[2011/01/20 09:42:54 | 000,103,140 | RHS- | M] () -- C:\ryou.exe
[2011/01/20 09:41:57 | 000,103,140 | RHS- | M] () -- C:\pwyxoj.pif
[2011/01/20 09:40:26 | 000,103,140 | RHS- | M] () -- C:\nnnw.pif
[2011/01/20 09:39:06 | 000,103,140 | RHS- | M] () -- C:\knvoof.pif
[2011/01/20 09:38:00 | 000,103,140 | RHS- | M] () -- C:\seyr.pif
[2011/01/20 09:35:48 | 000,103,140 | RHS- | M] () -- C:\rcswp.pif
[2011/01/20 09:33:30 | 000,103,140 | RHS- | M] () -- C:\eela.exe
[2011/01/20 09:31:18 | 000,103,140 | RHS- | M] () -- C:\efyjyt.pif
[2011/01/20 09:29:51 | 000,103,140 | RHS- | M] () -- C:\pwhxpp.exe
[2011/01/20 09:28:55 | 000,103,140 | RHS- | M] () -- C:\txxm.exe
[2011/01/20 09:28:11 | 000,103,140 | RHS- | M] () -- C:\ulfbid.exe
[2011/01/20 09:27:27 | 000,103,140 | RHS- | M] () -- C:\tksx.pif
[2011/01/20 09:26:47 | 000,103,140 | RHS- | M] () -- C:\lxki.pif
[2011/01/20 09:25:56 | 000,103,140 | RHS- | M] () -- C:\food.exe
[2011/01/20 09:25:05 | 000,103,140 | RHS- | M] () -- C:\mguo.pif
[2011/01/20 09:24:09 | 000,103,140 | RHS- | M] () -- C:\epwuo.pif
[2011/01/20 09:23:24 | 000,103,140 | RHS- | M] () -- C:\yawjmo.exe
[2011/01/20 09:22:42 | 000,103,140 | RHS- | M] () -- C:\igtwp.pif
[2011/01/20 09:21:58 | 000,103,140 | RHS- | M] () -- C:\vpmem.exe
[2011/01/20 09:21:11 | 000,103,140 | RHS- | M] () -- C:\sbuj.pif
[2011/01/20 09:20:18 | 000,103,140 | RHS- | M] () -- C:\irbg.exe
[2011/01/20 09:19:03 | 000,103,140 | RHS- | M] () -- C:\wnaus.pif
[2011/01/20 09:18:14 | 000,103,140 | RHS- | M] () -- C:\dgjbjj.exe
[2011/01/20 09:17:17 | 000,103,140 | RHS- | M] () -- C:\wjbtij.exe
[2011/01/20 09:16:38 | 000,103,140 | RHS- | M] () -- C:\ipgcxn.exe
[2011/01/20 09:15:50 | 000,103,140 | RHS- | M] () -- C:\yltrs.exe
[2011/01/20 09:15:04 | 000,103,140 | RHS- | M] () -- C:\eabj.exe
[2011/01/20 09:14:04 | 000,103,140 | RHS- | M] () -- C:\wcdv.exe
[2011/01/20 09:13:18 | 000,103,140 | RHS- | M] () -- C:\wxehfg.exe
[2011/01/20 09:12:35 | 000,103,140 | RHS- | M] () -- C:\pugoh.exe
[2011/01/20 09:10:58 | 000,103,140 | RHS- | M] () -- C:\nvji.exe
[2011/01/20 09:08:56 | 000,103,140 | RHS- | M] () -- C:\taon.exe
[2011/01/20 09:06:32 | 000,103,140 | RHS- | M] () -- C:\ldjq.pif
[2011/01/20 09:04:37 | 000,103,140 | RHS- | M] () -- C:\yudrkj.exe
[2011/01/20 09:02:40 | 000,103,140 | RHS- | M] () -- C:\pnqsd.pif
[2011/01/20 09:01:35 | 000,103,140 | RHS- | M] () -- C:\vpufl.exe
[2011/01/19 17:21:29 | 000,103,140 | RHS- | M] () -- C:\qcyrj.exe
[2011/01/19 17:20:50 | 000,103,140 | RHS- | M] () -- C:\aitj.pif
[2011/01/19 17:20:11 | 000,103,140 | RHS- | M] () -- C:\ycqte.exe
[2011/01/19 17:19:31 | 000,103,140 | RHS- | M] () -- C:\pkjgo.pif
[2011/01/19 17:18:56 | 000,103,140 | RHS- | M] () -- C:\atken.exe
[2011/01/19 17:18:18 | 000,103,140 | RHS- | M] () -- C:\qnbo.exe
[2011/01/19 17:17:33 | 000,103,140 | RHS- | M] () -- C:\seahqf.exe
[2011/01/19 17:16:56 | 000,103,140 | RHS- | M] () -- C:\bnogt.pif
[2011/01/19 17:16:19 | 000,103,140 | RHS- | M] () -- C:\hrkd.pif
[2011/01/19 17:15:11 | 000,103,140 | RHS- | M] () -- C:\jrti.pif
[2011/01/19 17:14:33 | 000,103,140 | RHS- | M] () -- C:\ocoe.pif
[2011/01/19 17:13:46 | 000,103,140 | RHS- | M] () -- C:\rjuvg.exe
[2011/01/19 17:13:09 | 000,103,140 | RHS- | M] () -- C:\grhycw.pif
[2011/01/19 17:12:32 | 000,103,140 | RHS- | M] () -- C:\tvfc.pif
[2011/01/19 17:11:51 | 000,103,140 | RHS- | M] () -- C:\uboet.pif
[2011/01/19 17:11:12 | 000,103,140 | RHS- | M] () -- C:\vsho.exe
[2011/01/19 17:10:17 | 000,103,140 | RHS- | M] () -- C:\ranoqc.pif
[2011/01/19 17:09:38 | 000,103,140 | RHS- | M] () -- C:\ebnuok.pif
[2011/01/19 17:08:54 | 000,103,140 | RHS- | M] () -- C:\cofnlq.pif
[2011/01/19 17:08:16 | 000,103,140 | RHS- | M] () -- C:\rihn.exe
[2011/01/19 17:07:39 | 000,103,140 | RHS- | M] () -- C:\oxxeon.pif
[2011/01/19 17:07:04 | 000,103,140 | RHS- | M] () -- C:\cflln.exe
[2011/01/19 17:06:22 | 000,103,140 | RHS- | M] () -- C:\feguyx.pif
[2011/01/19 17:05:44 | 000,103,140 | RHS- | M] () -- C:\nufo.exe
[2011/01/19 17:05:04 | 000,103,140 | RHS- | M] () -- C:\bwbeaf.pif
[2011/01/19 17:03:05 | 000,103,140 | RHS- | M] () -- C:\atkxlt.pif
[2011/01/19 17:02:12 | 000,103,140 | RHS- | M] () -- C:\ewgtj.exe
[2011/01/19 17:00:42 | 000,103,140 | RHS- | M] () -- C:\ntcy.exe
[2011/01/19 16:59:55 | 000,103,140 | RHS- | M] () -- C:\ykcr.exe
[2011/01/19 16:58:02 | 000,103,140 | RHS- | M] () -- C:\owpf.exe
[2011/01/19 16:57:03 | 000,103,140 | RHS- | M] () -- C:\ytlngj.pif
[2011/01/19 16:56:08 | 000,103,140 | RHS- | M] () -- C:\ivwiby.pif
[2011/01/19 16:55:18 | 000,103,140 | RHS- | M] () -- C:\kvlsa.exe
[2011/01/19 16:54:25 | 000,103,140 | RHS- | M] () -- C:\nyxqc.pif
[2011/01/19 16:53:41 | 000,103,140 | RHS- | M] () -- C:\yipj.exe
[2011/01/19 16:53:00 | 000,103,140 | RHS- | M] () -- C:\evsw.pif
[2011/01/19 16:52:20 | 000,103,140 | RHS- | M] () -- C:\pkcjnq.pif
[2011/01/19 16:45:20 | 000,000,304 | ---- | M] () -- C:\autorun.inf
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/01/31 14:24:47 | 058,833,152 | ---- | C] () -- C:\Documents and Settings\sarechig\Desktop\setup_av_free.exe
[2011/01/31 14:04:00 | 000,001,718 | ---- | C] () -- C:\Documents and Settings\sarechig\Desktop\Check PC For Errors.lnk
[2011/01/31 14:04:00 | 000,001,696 | ---- | C] () -- C:\Documents and Settings\sarechig\Application Data\Microsoft\Internet Explorer\Quick Launch\Check PC For Errors.lnk
[2011/01/31 14:03:59 | 000,000,240 | ---- | C] () -- C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
[2011/01/31 12:51:27 | 000,009,070 | ---- | C] () -- C:\Documents and Settings\sarechig\Desktop\aur243a_244642530_AFA1B976X9853X45F4XB154XE3740C62B1D4(1).xls
[2011/01/28 08:48:15 | 000,000,000 | ---- | C] () -- C:\WINDOWS\Embojpnm
[2011/01/25 17:14:14 | 000,103,140 | RHS- | C] () -- C:\tllanm.exe
[2011/01/25 17:13:36 | 000,103,140 | RHS- | C] () -- C:\rjfg.exe
[2011/01/25 17:12:58 | 000,103,140 | RHS- | C] () -- C:\igidc.exe
[2011/01/25 17:12:20 | 000,103,140 | RHS- | C] () -- C:\evesfb.pif
[2011/01/25 17:11:42 | 000,103,140 | RHS- | C] () -- C:\todnj.exe
[2011/01/25 17:11:04 | 000,103,140 | RHS- | C] () -- C:\gykr.exe
[2011/01/25 17:10:27 | 000,103,140 | RHS- | C] () -- C:\xkonn.pif
[2011/01/25 17:09:49 | 000,103,140 | RHS- | C] () -- C:\cthqg.exe
[2011/01/25 17:09:11 | 000,103,140 | RHS- | C] () -- C:\knmdrk.pif
[2011/01/25 17:08:34 | 000,103,140 | RHS- | C] () -- C:\csoxl.pif
[2011/01/25 17:07:54 | 000,103,140 | RHS- | C] () -- C:\fnaqy.exe
[2011/01/25 17:07:17 | 000,103,140 | RHS- | C] () -- C:\kjwnwm.pif
[2011/01/25 17:06:39 | 000,103,140 | RHS- | C] () -- C:\tpemts.exe
[2011/01/25 17:06:02 | 000,103,140 | RHS- | C] () -- C:\cfyvvm.exe
[2011/01/25 17:05:24 | 000,103,140 | RHS- | C] () -- C:\behdq.pif
[2011/01/25 17:04:47 | 000,103,140 | RHS- | C] () -- C:\hbwjam.exe
[2011/01/25 17:04:10 | 000,103,140 | RHS- | C] () -- C:\vlbcf.exe
[2011/01/25 17:03:32 | 000,103,140 | RHS- | C] () -- C:\rbwr.exe
[2011/01/25 17:02:55 | 000,103,140 | RHS- | C] () -- C:\nfvd.exe
[2011/01/25 17:02:18 | 000,103,140 | RHS- | C] () -- C:\lsatud.exe
[2011/01/25 17:01:40 | 000,103,140 | RHS- | C] () -- C:\groupu.exe
[2011/01/25 17:01:03 | 000,103,140 | RHS- | C] () -- C:\rrnuk.pif
[2011/01/25 17:00:26 | 000,103,140 | RHS- | C] () -- C:\scbdlo.exe
[2011/01/25 16:59:49 | 000,103,140 | RHS- | C] () -- C:\gdic.pif
[2011/01/25 16:59:12 | 000,103,140 | RHS- | C] () -- C:\rvjxss.exe
[2011/01/25 16:58:34 | 000,103,140 | RHS- | C] () -- C:\qxwfpq.exe
[2011/01/25 16:57:56 | 000,103,140 | RHS- | C] () -- C:\rekfdc.exe
[2011/01/25 16:57:10 | 000,103,140 | RHS- | C] () -- C:\mybmik.pif
[2011/01/25 16:56:31 | 000,103,140 | RHS- | C] () -- C:\nrld.exe
[2011/01/25 16:55:49 | 000,103,140 | RHS- | C] () -- C:\dmrf.exe
[2011/01/25 16:55:12 | 000,103,140 | RHS- | C] () -- C:\oacojf.pif
[2011/01/25 16:54:34 | 000,103,140 | RHS- | C] () -- C:\jluoo.pif
[2011/01/25 16:53:57 | 000,103,140 | RHS- | C] () -- C:\fafccq.pif
[2011/01/25 16:53:20 | 000,103,140 | RHS- | C] () -- C:\ndass.exe
[2011/01/25 16:52:36 | 000,103,140 | RHS- | C] () -- C:\cmquw.pif
[2011/01/25 16:51:58 | 000,103,140 | RHS- | C] () -- C:\gvwwt.pif
[2011/01/25 16:51:21 | 000,103,140 | RHS- | C] () -- C:\aatjs.pif
[2011/01/25 16:50:44 | 000,103,140 | RHS- | C] () -- C:\skogo.pif
[2011/01/25 16:49:59 | 000,103,140 | RHS- | C] () -- C:\cdnrmr.pif
[2011/01/25 16:49:20 | 000,103,140 | RHS- | C] () -- C:\jmxj.exe
[2011/01/25 16:48:41 | 000,103,140 | RHS- | C] () -- C:\rhhh.pif
[2011/01/25 16:48:02 | 000,103,140 | RHS- | C] () -- C:\rywm.exe
[2011/01/25 16:47:24 | 000,103,140 | RHS- | C] () -- C:\eyktj.exe
[2011/01/25 16:46:47 | 000,103,140 | RHS- | C] () -- C:\nnlh.exe
[2011/01/25 16:46:10 | 000,103,140 | RHS- | C] () -- C:\jhlw.exe
[2011/01/25 16:45:32 | 000,103,140 | RHS- | C] () -- C:\saad.exe
[2011/01/25 16:44:55 | 000,103,140 | RHS- | C] () -- C:\givr.exe
[2011/01/25 16:44:17 | 000,103,140 | RHS- | C] () -- C:\ilqbr.pif
[2011/01/25 16:43:39 | 000,103,140 | RHS- | C] () -- C:\pyqrj.exe
[2011/01/25 16:43:01 | 000,103,140 | RHS- | C] () -- C:\yjli.pif
[2011/01/25 16:42:19 | 000,103,140 | RHS- | C] () -- C:\cwdou.exe
[2011/01/25 16:41:41 | 000,103,140 | RHS- | C] () -- C:\oghb.pif
[2011/01/25 16:41:02 | 000,103,140 | RHS- | C] () -- C:\jjveva.exe
[2011/01/25 16:40:25 | 000,103,140 | RHS- | C] () -- C:\ghrpgw.exe
[2011/01/25 16:39:47 | 000,103,140 | RHS- | C] () -- C:\gftr.pif
[2011/01/25 16:39:03 | 000,103,140 | RHS- | C] () -- C:\hwfthi.exe
[2011/01/25 16:38:26 | 000,103,140 | RHS- | C] () -- C:\vbptgl.pif
[2011/01/25 16:37:44 | 000,103,140 | RHS- | C] () -- C:\hvmx.exe
[2011/01/25 16:37:01 | 000,103,140 | RHS- | C] () -- C:\mrkn.exe
[2011/01/25 16:36:22 | 000,103,140 | RHS- | C] () -- C:\glifer.exe
[2011/01/25 16:35:42 | 000,103,140 | RHS- | C] () -- C:\gjhhi.exe
[2011/01/25 16:35:04 | 000,103,140 | RHS- | C] () -- C:\tomi.pif
[2011/01/25 16:34:26 | 000,103,140 | RHS- | C] () -- C:\sfpc.exe
[2011/01/25 16:33:48 | 000,103,140 | RHS- | C] () -- C:\rvxurd.exe
[2011/01/25 16:32:52 | 000,103,140 | RHS- | C] () -- C:\hjxfeq.exe
[2011/01/25 16:32:14 | 000,103,140 | RHS- | C] () -- C:\kxcblb.pif
[2011/01/25 16:31:32 | 000,103,140 | RHS- | C] () -- C:\nwaon.pif
[2011/01/25 16:30:35 | 000,103,140 | RHS- | C] () -- C:\kyee.pif
[2011/01/25 16:29:56 | 000,103,140 | RHS- | C] () -- C:\mgtcnl.exe
[2011/01/25 16:29:18 | 000,103,140 | RHS- | C] () -- C:\dtdng.pif
[2011/01/25 16:28:38 | 000,103,140 | RHS- | C] () -- C:\nvxks.exe
[2011/01/25 16:28:01 | 000,103,140 | RHS- | C] () -- C:\icjb.exe
[2011/01/25 16:27:23 | 000,103,140 | RHS- | C] () -- C:\dmec.exe
[2011/01/25 16:26:45 | 000,103,140 | RHS- | C] () -- C:\mriwh.exe
[2011/01/25 16:26:03 | 000,103,140 | RHS- | C] () -- C:\nifb.exe
[2011/01/25 16:25:25 | 000,103,140 | RHS- | C] () -- C:\lcgwfq.exe
[2011/01/25 16:24:47 | 000,103,140 | RHS- | C] () -- C:\cove.exe
[2011/01/25 16:24:04 | 000,103,140 | RHS- | C] () -- C:\oysguh.exe
[2011/01/25 16:23:16 | 000,103,140 | RHS- | C] () -- C:\cvitth.exe
[2011/01/25 16:22:38 | 000,103,140 | RHS- | C] () -- C:\ehure.pif
[2011/01/25 16:21:59 | 000,103,140 | RHS- | C] () -- C:\uuqs.exe
[2011/01/25 16:21:21 | 000,103,140 | RHS- | C] () -- C:\ghfaov.exe
[2011/01/25 16:20:42 | 000,103,140 | RHS- | C] () -- C:\bprwf.pif
[2011/01/25 16:19:04 | 000,103,140 | RHS- | C] () -- C:\nrmm.exe
[2011/01/25 16:17:23 | 000,103,140 | RHS- | C] () -- C:\leery.exe
[2011/01/25 16:15:25 | 000,103,140 | RHS- | C] () -- C:\garxck.pif
[2011/01/25 16:13:47 | 000,103,140 | RHS- | C] () -- C:\jsxeux.pif
[2011/01/25 16:12:22 | 000,103,140 | RHS- | C] () -- C:\rpjoyk.exe
[2011/01/25 16:11:26 | 000,103,140 | RHS- | C] () -- C:\abjs.exe
[2011/01/25 16:10:48 | 000,103,140 | RHS- | C] () -- C:\plbqs.exe
[2011/01/25 16:10:09 | 000,103,140 | RHS- | C] () -- C:\xqkup.exe
[2011/01/25 16:09:23 | 000,103,140 | RHS- | C] () -- C:\rlvne.pif
[2011/01/25 16:08:44 | 000,103,140 | RHS- | C] () -- C:\oklglj.pif
[2011/01/25 16:08:06 | 000,103,140 | RHS- | C] () -- C:\tiwq.pif
[2011/01/25 16:07:28 | 000,103,140 | RHS- | C] () -- C:\pjhyyt.exe
[2011/01/25 16:06:44 | 000,103,140 | RHS- | C] () -- C:\iqutt.pif
[2011/01/25 16:06:04 | 000,103,140 | RHS- | C] () -- C:\atytr.exe
[2011/01/25 16:05:24 | 000,103,140 | RHS- | C] () -- C:\yimnrb.exe
[2011/01/25 16:04:45 | 000,103,140 | RHS- | C] () -- C:\saxxd.pif
[2011/01/25 16:03:44 | 000,103,140 | RHS- | C] () -- C:\iwbso.exe
[2011/01/25 16:03:01 | 000,103,140 | RHS- | C] () -- C:\odpnmq.exe
[2011/01/25 16:02:09 | 000,103,140 | RHS- | C] () -- C:\btytd.pif
[2011/01/25 16:01:30 | 000,103,140 | RHS- | C] () -- C:\awhgdd.exe
[2011/01/25 16:00:52 | 000,103,140 | RHS- | C] () -- C:\xddco.exe
[2011/01/25 16:00:14 | 000,103,140 | RHS- | C] () -- C:\hqqnu.pif
[2011/01/25 15:59:37 | 000,103,140 | RHS- | C] () -- C:\bngr.pif
[2011/01/25 15:59:00 | 000,103,140 | RHS- | C] () -- C:\qlvabm.pif
[2011/01/25 15:58:21 | 000,103,140 | RHS- | C] () -- C:\holpp.exe
[2011/01/25 15:57:43 | 000,103,140 | RHS- | C] () -- C:\xsisd.exe
[2011/01/25 15:57:05 | 000,103,140 | RHS- | C] () -- C:\fcheo.exe
[2011/01/25 15:56:27 | 000,103,140 | RHS- | C] () -- C:\btxa.exe
[2011/01/25 15:55:47 | 000,103,140 | RHS- | C] () -- C:\tsahy.exe
[2011/01/25 15:55:07 | 000,103,140 | RHS- | C] () -- C:\ichwu.pif
[2011/01/25 15:54:27 | 000,103,140 | RHS- | C] () -- C:\aelaml.exe
[2011/01/25 15:53:48 | 000,103,140 | RHS- | C] () -- C:\qari.pif
[2011/01/25 15:53:09 | 000,103,140 | RHS- | C] () -- C:\dgsgq.pif
[2011/01/25 15:52:31 | 000,103,140 | RHS- | C] () -- C:\yxanv.exe
[2011/01/25 15:51:53 | 000,103,140 | RHS- | C] () -- C:\spfsx.exe
[2011/01/25 15:51:15 | 000,103,140 | RHS- | C] () -- C:\vjsqx.exe
[2011/01/25 15:50:37 | 000,103,140 | RHS- | C] () -- C:\dldvls.pif
[2011/01/25 15:49:59 | 000,103,140 | RHS- | C] () -- C:\gfdl.exe
[2011/01/25 15:49:19 | 000,103,140 | RHS- | C] () -- C:\iwev.exe
[2011/01/25 15:48:41 | 000,103,140 | RHS- | C] () -- C:\jdak.pif
[2011/01/25 15:46:36 | 000,103,140 | RHS- | C] () -- C:\pghlm.pif
[2011/01/25 15:45:52 | 000,103,140 | RHS- | C] () -- C:\dmvjxy.pif
[2011/01/25 15:45:10 | 000,103,140 | RHS- | C] () -- C:\qbfcmf.pif
[2011/01/25 15:44:27 | 000,103,140 | RHS- | C] () -- C:\fshsm.exe
[2011/01/25 15:43:47 | 000,103,140 | RHS- | C] () -- C:\rtak.exe
[2011/01/25 15:43:03 | 000,103,140 | RHS- | C] () -- C:\algb.exe
[2011/01/25 15:42:21 | 000,103,140 | RHS- | C] () -- C:\thsk.pif
[2011/01/25 15:41:41 | 000,103,140 | RHS- | C] () -- C:\coqq.exe
[2011/01/25 15:41:00 | 000,103,140 | RHS- | C] () -- C:\mfjf.exe
[2011/01/25 15:40:18 | 000,103,140 | RHS- | C] () -- C:\ujfp.exe
[2011/01/25 15:39:28 | 000,103,140 | RHS- | C] () -- C:\dqefj.exe
[2011/01/25 15:38:49 | 000,103,140 | RHS- | C] () -- C:\osnkq.pif
[2011/01/25 15:38:08 | 000,103,140 | RHS- | C] () -- C:\xaelxi.pif
[2011/01/25 15:37:29 | 000,103,140 | RHS- | C] () -- C:\atxw.pif
[2011/01/25 15:36:50 | 000,103,140 | RHS- | C] () -- C:\dlap.pif
[2011/01/25 15:35:55 | 000,103,140 | RHS- | C] () -- C:\edojsf.exe
[2011/01/25 15:35:10 | 000,103,140 | RHS- | C] () -- C:\txtvyx.exe
[2011/01/25 15:34:28 | 000,103,140 | RHS- | C] () -- C:\cmae.pif
[2011/01/25 15:33:49 | 000,103,140 | RHS- | C] () -- C:\ocwdq.exe
[2011/01/25 15:33:09 | 000,103,140 | RHS- | C] () -- C:\hmrfi.pif
[2011/01/25 15:32:22 | 000,103,140 | RHS- | C] () -- C:\dsylh.exe
[2011/01/25 15:31:37 | 000,103,140 | RHS- | C] () -- C:\ravlm.pif
[2011/01/25 15:30:57 | 000,103,140 | RHS- | C] () -- C:\gfqjh.exe
[2011/01/25 15:30:11 | 000,103,140 | RHS- | C] () -- C:\megcf.exe
[2011/01/25 15:29:31 | 000,103,140 | RHS- | C] () -- C:\joboc.pif
[2011/01/25 15:28:51 | 000,103,140 | RHS- | C] () -- C:\ohqwuw.pif
[2011/01/25 15:28:09 | 000,103,140 | RHS- | C] () -- C:\rejdtf.pif
[2011/01/25 15:27:30 | 000,103,140 | RHS- | C] () -- C:\uhedki.exe
[2011/01/25 15:26:49 | 000,103,140 | RHS- | C] () -- C:\qwbb.pif
[2011/01/25 15:26:08 | 000,103,140 | RHS- | C] () -- C:\odshhw.pif
[2011/01/25 15:25:26 | 000,103,140 | RHS- | C] () -- C:\bxin.exe
[2011/01/25 15:24:46 | 000,103,140 | RHS- | C] () -- C:\yruu.pif
[2011/01/25 15:24:06 | 000,103,140 | RHS- | C] () -- C:\neog.exe
[2011/01/25 15:23:26 | 000,103,140 | RHS- | C] () -- C:\wyiv.exe
[2011/01/25 15:22:47 | 000,103,140 | RHS- | C] () -- C:\mkfa.exe
[2011/01/25 15:22:08 | 000,103,140 | RHS- | C] () -- C:\xeky.exe
[2011/01/25 15:21:27 | 000,103,140 | RHS- | C] () -- C:\fkoksa.exe
[2011/01/25 15:20:34 | 000,103,140 | RHS- | C] () -- C:\tkwv.exe
[2011/01/25 15:19:52 | 000,103,140 | RHS- | C] () -- C:\gibpcn.pif
[2011/01/25 15:19:11 | 000,103,140 | RHS- | C] () -- C:\nymr.pif
[2011/01/25 15:18:29 | 000,103,140 | RHS- | C] () -- C:\fbru.pif
[2011/01/25 15:17:43 | 000,103,140 | RHS- | C] () -- C:\xieiye.pif
[2011/01/25 15:17:02 | 000,103,140 | RHS- | C] () -- C:\qnml.exe
[2011/01/25 15:16:19 | 000,103,140 | RHS- | C] () -- C:\naxw.pif
[2011/01/25 15:15:39 | 000,103,140 | RHS- | C] () -- C:\jdfy.exe
[2011/01/25 15:15:00 | 000,103,140 | RHS- | C] () -- C:\yqtsn.pif
[2011/01/25 15:14:21 | 000,103,140 | RHS- | C] () -- C:\pxporn.exe
[2011/01/25 15:13:41 | 000,103,140 | RHS- | C] () -- C:\xhfp.exe
[2011/01/25 15:13:01 | 000,103,140 | RHS- | C] () -- C:\vfprws.exe
[2011/01/25 15:12:22 | 000,103,140 | RHS- | C] () -- C:\wtfawk.pif
[2011/01/25 15:11:42 | 000,103,140 | RHS- | C] () -- C:\triobj.exe
[2011/01/25 15:11:02 | 000,103,140 | RHS- | C] () -- C:\bkifl.exe
[2011/01/25 15:10:22 | 000,103,140 | RHS- | C] () -- C:\quict.exe
[2011/01/25 15:09:42 | 000,103,140 | RHS- | C] () -- C:\jdswe.exe
[2011/01/25 15:09:03 | 000,103,140 | RHS- | C] () -- C:\nqypk.exe
[2011/01/25 15:08:24 | 000,103,140 | RHS- | C] () -- C:\ywsks.pif
[2011/01/25 15:07:43 | 000,103,140 | RHS- | C] () -- C:\wtqjyk.pif
[2011/01/25 15:06:58 | 000,103,140 | RHS- | C] () -- C:\kjbl.exe
[2011/01/25 15:06:18 | 000,103,140 | RHS- | C] () -- C:\iptq.exe
[2011/01/25 15:05:37 | 000,103,140 | RHS- | C] () -- C:\hnrdji.pif
[2011/01/25 15:04:57 | 000,103,140 | RHS- | C] () -- C:\fqbvoq.exe
[2011/01/25 15:04:14 | 000,103,140 | RHS- | C] () -- C:\cvkei.exe
[2011/01/25 15:03:31 | 000,103,140 | RHS- | C] () -- C:\sqkad.pif
[2011/01/25 15:02:50 | 000,103,140 | RHS- | C] () -- C:\khtirl.exe
[2011/01/25 15:02:09 | 000,103,140 | RHS- | C] () -- C:\njbje.exe
[2011/01/25 15:01:28 | 000,103,140 | RHS- | C] () -- C:\qbmpot.exe
[2011/01/25 15:00:45 | 000,103,140 | RHS- | C] () -- C:\hvar.exe
[2011/01/25 14:59:49 | 000,103,140 | RHS- | C] () -- C:\gulwt.pif
[2011/01/25 14:59:07 | 000,103,140 | RHS- | C] () -- C:\efgu.exe
[2011/01/25 14:58:23 | 000,103,140 | RHS- | C] () -- C:\nqckf.pif
[2011/01/25 14:57:36 | 000,103,140 | RHS- | C] () -- C:\vqyomj.pif
[2011/01/25 14:56:53 | 000,103,140 | RHS- | C] () -- C:\sjjl.exe
[2011/01/25 14:56:13 | 000,103,140 | RHS- | C] () -- C:\hevff.pif
[2011/01/25 14:55:25 | 000,103,140 | RHS- | C] () -- C:\rsqb.pif
[2011/01/25 14:54:42 | 000,103,140 | RHS- | C] () -- C:\rblyv.pif
[2011/01/25 14:53:51 | 000,103,140 | RHS- | C] () -- C:\wfapvt.exe
[2011/01/25 14:53:02 | 000,103,140 | RHS- | C] () -- C:\qyqs.pif
[2011/01/25 14:52:21 | 000,103,140 | RHS- | C] () -- C:\lmcpmv.exe
[2011/01/25 14:51:40 | 000,103,140 | RHS- | C] () -- C:\eodx.pif
[2011/01/25 14:51:01 | 000,103,140 | RHS- | C] () -- C:\hjie.pif
[2011/01/25 14:50:20 | 000,103,140 | RHS- | C] () -- C:\oqylh.pif
[2011/01/25 14:49:40 | 000,103,140 | RHS- | C] () -- C:\cfsamf.pif
[2011/01/25 14:48:59 | 000,103,140 | RHS- | C] () -- C:\msipcx.exe
[2011/01/25 14:48:19 | 000,103,140 | RHS- | C] () -- C:\ihyu.pif
[2011/01/25 14:47:40 | 000,103,140 | RHS- | C] () -- C:\jera.pif
[2011/01/25 14:47:01 | 000,103,140 | RHS- | C] () -- C:\svtm.pif
[2011/01/25 14:46:20 | 000,103,140 | RHS- | C] () -- C:\qdwdid.pif
[2011/01/25 14:45:41 | 000,103,140 | RHS- | C] () -- C:\clgktb.exe
[2011/01/25 14:45:01 | 000,103,140 | RHS- | C] () -- C:\cgjdoq.exe
[2011/01/25 14:44:15 | 000,103,140 | RHS- | C] () -- C:\bxlyi.pif
[2011/01/25 14:43:26 | 000,103,140 | RHS- | C] () -- C:\mrcy.pif
[2011/01/25 14:42:41 | 000,103,140 | RHS- | C] () -- C:\gltbet.exe
[2011/01/25 14:41:37 | 000,103,140 | RHS- | C] () -- C:\idmiki.pif
[2011/01/25 14:40:56 | 000,103,140 | RHS- | C] () -- C:\rchn.exe
[2011/01/25 14:40:18 | 000,103,140 | RHS- | C] () -- C:\ibyw.pif
[2011/01/25 14:39:36 | 000,103,140 | RHS- | C] () -- C:\etkemn.exe
[2011/01/25 14:38:47 | 000,103,140 | RHS- | C] () -- C:\mnwjq.pif
[2011/01/25 14:38:08 | 000,103,140 | RHS- | C] () -- C:\byvd.pif
[2011/01/25 14:37:25 | 000,103,140 | RHS- | C] () -- C:\wjxuoc.exe
[2011/01/25 14:36:44 | 000,103,140 | RHS- | C] () -- C:\wims.exe
[2011/01/25 14:35:56 | 000,103,140 | RHS- | C] () -- C:\tujwd.pif
[2011/01/25 14:35:16 | 000,103,140 | RHS- | C] () -- C:\mxst.pif
[2011/01/25 14:34:30 | 000,103,140 | RHS- | C] () -- C:\knuff.pif
[2011/01/25 14:33:49 | 000,103,140 | RHS- | C] () -- C:\enfphv.exe
[2011/01/25 14:33:03 | 000,103,140 | RHS- | C] () -- C:\qifds.pif
[2011/01/25 14:32:10 | 000,103,140 | RHS- | C] () -- C:\mofe.pif
[2011/01/25 14:31:13 | 000,103,140 | RHS- | C] () -- C:\ulha.exe
[2011/01/25 14:29:45 | 000,103,140 | RHS- | C] () -- C:\crxl.pif
[2011/01/25 14:28:41 | 000,103,140 | RHS- | C] () -- C:\qmwq.exe
[2011/01/25 14:27:01 | 000,103,140 | RHS- | C] () -- C:\mfkih.exe
[2011/01/25 14:25:48 | 000,103,140 | RHS- | C] () -- C:\biekmt.exe
[2011/01/25 14:23:26 | 000,103,140 | RHS- | C] () -- C:\vuqg.exe
[2011/01/25 14:22:14 | 000,103,140 | RHS- | C] () -- C:\bwspa.exe
[2011/01/25 14:21:09 | 000,103,140 | RHS- | C] () -- C:\ewdvm.pif
[2011/01/25 14:19:35 | 000,103,140 | RHS- | C] () -- C:\esds.exe
[2011/01/25 14:17:50 | 000,103,140 | RHS- | C] () -- C:\bltr.exe
[2011/01/25 14:16:32 | 000,103,140 | RHS- | C] () -- C:\fhobd.pif
[2011/01/25 14:15:43 | 000,103,140 | RHS- | C] () -- C:\eyprc.pif
[2011/01/25 14:14:54 | 000,103,140 | RHS- | C] () -- C:\ogft.exe
[2011/01/25 09:00:24 | 000,000,304 | ---- | C] () -- C:\autorun.inf
[2011/01/25 09:00:01 | 000,103,140 | RHS- | C] () -- C:\ehpu.pif
[2011/01/24 15:36:46 | 000,103,140 | RHS- | C] () -- C:\wlfgt.pif
[2011/01/24 15:35:31 | 000,103,140 | RHS- | C] () -- C:\qgrywc.exe
[2011/01/24 15:34:49 | 000,103,140 | RHS- | C] () -- C:\cqgv.exe
[2011/01/24 15:34:05 | 000,103,140 | RHS- | C] () -- C:\brrs.exe
[2011/01/24 15:33:23 | 000,103,140 | RHS- | C] () -- C:\qjyw.exe
[2011/01/24 15:32:34 | 000,103,140 | RHS- | C] () -- C:\wjgtg.exe
[2011/01/24 15:31:49 | 000,103,140 | RHS- | C] () -- C:\tgddcb.exe
[2011/01/24 15:31:05 | 000,103,140 | RHS- | C] () -- C:\fuhe.exe
[2011/01/24 15:30:00 | 000,103,140 | RHS- | C] () -- C:\saouw.pif
[2011/01/24 15:29:15 | 000,103,140 | RHS- | C] () -- C:\gunxx.exe
[2011/01/24 15:28:31 | 000,103,140 | RHS- | C] () -- C:\twqjf.exe
[2011/01/24 15:27:46 | 000,103,140 | RHS- | C] () -- C:\cpwcrd.exe
[2011/01/24 15:27:00 | 000,103,140 | RHS- | C] () -- C:\rfjjql.exe
[2011/01/24 15:25:55 | 000,103,140 | RHS- | C] () -- C:\opgjhb.exe
[2011/01/24 15:25:08 | 000,103,140 | RHS- | C] () -- C:\jacmcv.exe
[2011/01/24 15:24:07 | 000,103,140 | RHS- | C] () -- C:\nntqy.exe
[2011/01/24 15:23:19 | 000,103,140 | RHS- | C] () -- C:\xhew.exe
[2011/01/24 15:22:39 | 000,103,140 | RHS- | C] () -- C:\vktvjv.exe
[2011/01/24 15:21:55 | 000,103,140 | RHS- | C] () -- C:\jnfa.pif
[2011/01/24 13:49:43 | 000,103,140 | RHS- | C] () -- C:\lrqhu.pif
[2011/01/24 13:48:41 | 000,103,140 | RHS- | C] () -- C:\pehqq.pif
[2011/01/24 13:47:48 | 000,103,140 | RHS- | C] () -- C:\qtupp.pif
[2011/01/24 13:46:52 | 000,103,140 | RHS- | C] () -- C:\asuhe.exe
[2011/01/24 13:45:42 | 000,103,140 | RHS- | C] () -- C:\fqcxp.exe
[2011/01/24 13:44:58 | 000,103,140 | RHS- | C] () -- C:\esug.exe
[2011/01/24 13:43:47 | 000,103,140 | RHS- | C] () -- C:\hwnlu.exe
[2011/01/24 13:42:49 | 000,103,140 | RHS- | C] () -- C:\peykaq.exe
[2011/01/24 13:41:57 | 000,103,140 | RHS- | C] () -- C:\eukrbp.pif
[2011/01/24 13:41:04 | 000,103,140 | RHS- | C] () -- C:\fpaku.exe
[2011/01/24 13:40:10 | 000,103,140 | RHS- | C] () -- C:\wkgd.pif
[2011/01/24 13:39:04 | 000,103,140 | RHS- | C] () -- C:\ggphvj.exe
[2011/01/24 13:38:16 | 000,103,140 | RHS- | C] () -- C:\cqorrn.pif
[2011/01/24 13:37:37 | 000,103,140 | RHS- | C] () -- C:\rwgrd.pif
[2011/01/24 13:36:55 | 000,103,140 | RHS- | C] () -- C:\mvtlso.pif
[2011/01/24 13:35:56 | 000,103,140 | RHS- | C] () -- C:\ygmou.exe
[2011/01/24 13:34:44 | 000,103,140 | RHS- | C] () -- C:\dtqipg.pif
[2011/01/24 13:33:30 | 000,103,140 | RHS- | C] () -- C:\wsic.pif
[2011/01/24 13:32:04 | 000,103,140 | RHS- | C] () -- C:\vtsrmi.exe
[2011/01/24 13:31:01 | 000,103,140 | RHS- | C] () -- C:\taccuq.pif
[2011/01/24 13:30:05 | 000,103,140 | RHS- | C] () -- C:\foqo.pif
[2011/01/24 13:29:06 | 000,103,140 | RHS- | C] () -- C:\bitqsu.exe
[2011/01/24 13:27:47 | 000,103,140 | RHS- | C] () -- C:\ivdxq.exe
[2011/01/24 13:26:57 | 000,103,140 | RHS- | C] () -- C:\jgmv.pif
[2011/01/24 13:26:10 | 000,103,140 | RHS- | C] () -- C:\kjgby.pif
[2011/01/24 13:25:26 | 000,103,140 | RHS- | C] () -- C:\spxoo.exe
[2011/01/24 13:24:35 | 000,103,140 | RHS- | C] () -- C:\rpwqhx.exe
[2011/01/24 13:23:49 | 000,103,140 | RHS- | C] () -- C:\iwjejw.pif
[2011/01/24 13:23:07 | 000,103,140 | RHS- | C] () -- C:\pojq.exe
[2011/01/24 13:22:27 | 000,103,140 | RHS- | C] () -- C:\osha.pif
[2011/01/24 13:21:34 | 000,103,140 | RHS- | C] () -- C:\djqlss.exe
[2011/01/24 13:20:50 | 000,103,140 | RHS- | C] () -- C:\bytk.pif
[2011/01/24 13:20:06 | 000,103,140 | RHS- | C] () -- C:\fggyk.exe
[2011/01/24 13:19:23 | 000,103,140 | RHS- | C] () -- C:\insnva.exe
[2011/01/24 13:18:42 | 000,103,140 | RHS- | C] () -- C:\cotb.exe
[2011/01/24 13:17:58 | 000,103,140 | RHS- | C] () -- C:\hhckob.pif
[2011/01/24 13:17:04 | 000,103,140 | RHS- | C] () -- C:\osudyx.pif
[2011/01/24 13:16:01 | 000,103,140 | RHS- | C] () -- C:\tnjk.exe
[2011/01/24 13:15:11 | 000,103,140 | RHS- | C] () -- C:\srdmy.pif
[2011/01/24 13:14:27 | 000,103,140 | RHS- | C] () -- C:\dudrf.exe
[2011/01/24 13:13:46 | 000,103,140 | RHS- | C] () -- C:\kkulmn.pif
[2011/01/24 13:13:03 | 000,103,140 | RHS- | C] () -- C:\fkhjit.exe
[2011/01/24 13:12:08 | 000,103,140 | RHS- | C] () -- C:\kfwg.pif
[2011/01/24 13:11:26 | 000,103,140 | RHS- | C] () -- C:\jyms.exe
[2011/01/24 13:10:46 | 000,103,140 | RHS- | C] () -- C:\ssitl.exe
[2011/01/24 13:10:05 | 000,103,140 | RHS- | C] () -- C:\urepy.exe
[2011/01/24 13:09:21 | 000,103,140 | RHS- | C] () -- C:\wagctq.exe
[2011/01/24 13:08:23 | 000,103,140 | RHS- | C] () -- C:\gopv.exe
[2011/01/24 13:07:35 | 000,103,140 | RHS- | C] () -- C:\rqkhl.pif
[2011/01/24 13:06:53 | 000,103,140 | RHS- | C] () -- C:\koenth.exe
[2011/01/24 13:06:13 | 000,103,140 | RHS- | C] () -- C:\yltffy.exe
[2011/01/24 13:05:31 | 000,103,140 | RHS- | C] () -- C:\ajhoid.exe
[2011/01/24 13:04:34 | 000,103,140 | RHS- | C] () -- C:\nstc.exe
[2011/01/24 13:03:51 | 000,103,140 | RHS- | C] () -- C:\hphipl.exe
[2011/01/24 13:03:10 | 000,103,140 | RHS- | C] () -- C:\euekx.pif
[2011/01/24 13:02:27 | 000,103,140 | RHS- | C] () -- C:\defsr.exe
[2011/01/24 13:01:45 | 000,103,140 | RHS- | C] () -- C:\ykqg.pif
[2011/01/24 13:00:04 | 000,103,140 | RHS- | C] () -- C:\tvgyc.pif
[2011/01/24 12:59:22 | 000,103,140 | RHS- | C] () -- C:\ieepf.pif
[2011/01/24 12:58:40 | 000,103,140 | RHS- | C] () -- C:\yysvtj.pif
[2011/01/24 12:57:59 | 000,103,140 | RHS- | C] () -- C:\qiwir.exe
[2011/01/24 12:57:17 | 000,103,140 | RHS- | C] () -- C:\wbyb.pif
[2011/01/24 12:56:30 | 000,103,140 | RHS- | C] () -- C:\spspi.pif
[2011/01/24 12:55:39 | 000,103,140 | RHS- | C] () -- C:\bkmkq.pif
[2011/01/24 12:54:57 | 000,103,140 | RHS- | C] () -- C:\nolpfg.exe
[2011/01/24 12:54:16 | 000,103,140 | RHS- | C] () -- C:\iqtym.pif
[2011/01/24 12:53:34 | 000,103,140 | RHS- | C] () -- C:\souhc.pif
[2011/01/24 12:52:49 | 000,103,140 | RHS- | C] () -- C:\wudjh.exe
[2011/01/24 12:51:53 | 000,103,140 | RHS- | C] () -- C:\fbaap.exe
[2011/01/24 12:51:08 | 000,103,140 | RHS- | C] () -- C:\dkyi.pif
[2011/01/24 12:50:24 | 000,103,140 | RHS- | C] () -- C:\nrtkr.pif
[2011/01/24 12:49:42 | 000,103,140 | RHS- | C] () -- C:\mwhban.pif
[2011/01/24 12:49:00 | 000,103,140 | RHS- | C] () -- C:\xmcn.pif
[2011/01/24 12:48:06 | 000,103,140 | RHS- | C] () -- C:\gsfyh.pif
[2011/01/24 12:47:21 | 000,103,140 | RHS- | C] () -- C:\vqgdse.pif
[2011/01/24 12:46:37 | 000,103,140 | RHS- | C] () -- C:\wcjhod.exe
[2011/01/24 12:45:54 | 000,103,140 | RHS- | C] () -- C:\iydntg.exe
[2011/01/24 12:45:11 | 000,103,140 | RHS- | C] () -- C:\dkdd.pif
[2011/01/24 12:44:15 | 000,103,140 | RHS- | C] () -- C:\luscip.exe
[2011/01/24 12:43:25 | 000,103,140 | RHS- | C] () -- C:\rjhmmt.pif
[2011/01/24 12:42:42 | 000,103,140 | RHS- | C] () -- C:\xwvft.exe
[2011/01/24 12:42:00 | 000,103,140 | RHS- | C] () -- C:\vhwv.pif
[2011/01/24 12:41:19 | 000,103,140 | RHS- | C] () -- C:\sqfv.exe
[2011/01/24 12:40:35 | 000,103,140 | RHS- | C] () -- C:\dqisub.exe
[2011/01/24 12:39:43 | 000,103,140 | RHS- | C] () -- C:\djlj.pif
[2011/01/24 12:38:54 | 000,103,140 | RHS- | C] () -- C:\nsusuq.pif
[2011/01/24 12:38:11 | 000,103,140 | RHS- | C] () -- C:\duec.pif
[2011/01/24 12:36:58 | 000,103,140 | RHS- | C] () -- C:\csik.pif
[2011/01/24 12:35:38 | 000,103,140 | RHS- | C] () -- C:\oqmoja.exe
[2011/01/24 12:34:16 | 000,103,140 | RHS- | C] () -- C:\cnik.pif
[2011/01/24 12:32:46 | 000,103,140 | RHS- | C] () -- C:\xdiq.exe
[2011/01/24 12:31:01 | 000,103,140 | RHS- | C] () -- C:\ipwcv.pif
[2011/01/24 12:29:22 | 000,103,140 | RHS- | C] () -- C:\evwumi.exe
[2011/01/24 12:27:55 | 000,103,140 | RHS- | C] () -- C:\aedq.exe
[2011/01/24 12:26:35 | 000,103,140 | RHS- | C] () -- C:\ggnpl.exe
[2011/01/24 12:25:17 | 000,103,140 | RHS- | C] () -- C:\swevht.exe
[2011/01/24 12:24:33 | 000,103,140 | RHS- | C] () -- C:\bqdsud.pif
[2011/01/24 12:23:01 | 000,103,140 | RHS- | C] () -- C:\dxgt.pif
[2011/01/24 12:21:47 | 000,103,140 | RHS- | C] () -- C:\yojvsi.exe
[2011/01/24 12:20:36 | 000,103,140 | RHS- | C] () -- C:\svwgxw.exe
[2011/01/24 12:18:57 | 000,103,140 | RHS- | C] () -- C:\lnxi.exe
[2011/01/24 12:17:22 | 000,103,140 | RHS- | C] () -- C:\eiad.pif
[2011/01/24 12:16:13 | 000,103,140 | RHS- | C] () -- C:\dueba.pif
[2011/01/24 12:15:23 | 000,103,140 | RHS- | C] () -- C:\dsvw.exe
[2011/01/24 12:14:25 | 000,103,140 | RHS- | C] () -- C:\etanp.exe
[2011/01/24 12:13:00 | 000,103,140 | RHS- | C] () -- C:\yoxb.exe
[2011/01/24 12:12:18 | 000,103,140 | RHS- | C] () -- C:\lnel.pif
[2011/01/24 12:11:36 | 000,103,140 | RHS- | C] () -- C:\qdkfbh.exe
[2011/01/24 12:10:42 | 000,103,140 | RHS- | C] () -- C:\umaw.exe
[2011/01/24 12:09:51 | 000,103,140 | RHS- | C] () -- C:\jyfmy.pif
[2011/01/24 12:09:01 | 000,103,140 | RHS- | C] () -- C:\tnwm.exe
[2011/01/24 12:08:21 | 000,103,140 | RHS- | C] () -- C:\oruld.exe
[2011/01/24 12:07:21 | 000,103,140 | RHS- | C] () -- C:\irlhh.pif
[2011/01/24 12:06:25 | 000,103,140 | RHS- | C] () -- C:\horinv.exe
[2011/01/24 12:04:55 | 000,103,140 | RHS- | C] () -- C:\dhgrh.pif
[2011/01/24 12:03:34 | 000,103,140 | RHS- | C] () -- C:\dfqa.exe
[2011/01/24 12:02:38 | 000,103,140 | RHS- | C] () -- C:\sivujh.pif
[2011/01/24 12:01:46 | 000,103,140 | RHS- | C] () -- C:\aqkk.exe
[2011/01/24 12:00:57 | 000,103,140 | RHS- | C] () -- C:\huhsnm.exe
[2011/01/24 12:00:01 | 000,103,140 | RHS- | C] () -- C:\ctmbw.pif
[2011/01/24 11:59:07 | 000,103,140 | RHS- | C] () -- C:\hdih.exe
[2011/01/24 11:57:42 | 000,103,140 | RHS- | C] () -- C:\xxurcg.pif
[2011/01/24 11:56:30 | 000,103,140 | RHS- | C] () -- C:\reqt.pif
[2011/01/24 11:55:35 | 000,103,140 | RHS- | C] () -- C:\psjlk.pif
[2011/01/24 11:54:52 | 000,103,140 | RHS- | C] () -- C:\osrniv.pif
[2011/01/24 11:54:11 | 000,103,140 | RHS- | C] () -- C:\fsjqm.exe
[2011/01/24 11:53:28 | 000,103,140 | RHS- | C] () -- C:\clfdi.exe
[2011/01/24 11:52:36 | 000,103,140 | RHS- | C] () -- C:\gndgk.exe
[2011/01/24 11:51:19 | 000,103,140 | RHS- | C] () -- C:\qvunn.exe
[2011/01/24 11:50:34 | 000,103,140 | RHS- | C] () -- C:\jngom.pif
[[2011/01/24 11:49:37 | 000,103,140 | RHS- | C] () -- C:\hypjb.pif
[2011/01/24 11:48:43 | 000,103,140 | RHS- | C] () -- C:\htab.exe
[2011/01/24 11:47:49 | 000,103,140 | RHS- | C] () -- C:\mlwcvi.pif
[2011/01/24 11:46:33 | 000,103,140 | RHS- | C] () -- C:\auqp.exe
[2011/01/24 11:45:37 | 000,103,140 | RHS- | C] () -- C:\qwbjt.pif
[2011/01/24 11:44:35 | 000,103,140 | RHS- | C] () -- C:\rnnats.pif
[2011/01/24 11:43:15 | 000,103,140 | RHS- | C] () -- C:\jaekwi.pif
[2011/01/24 11:42:16 | 000,103,140 | RHS- | C] () -- C:\mphjeq.exe
[2011/01/24 11:41:21 | 000,103,140 | RHS- | C] () -- C:\vbfh.pif
[2011/01/24 11:40:26 | 000,103,140 | RHS- | C] () -- C:\arcoo.exe
[2011/01/24 11:39:35 | 000,103,140 | RHS- | C] () -- C:\iyyw.exe
[2011/01/24 11:38:46 | 000,103,140 | RHS- | C] () -- C:\kpvov.pif
[2011/01/24 11:37:37 | 000,103,140 | RHS- | C] () -- C:\dpyy.pif
[2011/01/24 11:35:33 | 000,103,140 | RHS- | C] () -- C:\coxsr.pif
[2011/01/24 11:34:14 | 000,103,140 | RHS- | C] () -- C:\rtwdsg.exe
[2011/01/24 11:32:38 | 000,103,140 | RHS- | C] () -- C:\sxcqs.exe
[2011/01/24 11:31:25 | 000,103,140 | RHS- | C] () -- C:\xxxet.exe
[2011/01/24 11:29:59 | 000,103,140 | RHS- | C] () -- C:\waogpg.pif
[2011/01/24 11:28:48 | 000,103,140 | RHS- | C] () -- C:\mbjqm.exe
[2011/01/24 11:27:43 | 000,103,140 | RHS- | C] () -- C:\lorm.pif
[2011/01/24 11:26:52 | 000,103,140 | RHS- | C] () -- C:\pepsw.exe
[2011/01/24 11:25:54 | 000,103,140 | RHS- | C] () -- C:\lxtcs.pif
[2011/01/24 11:24:53 | 000,103,140 | RHS- | C] () -- C:\ikptoq.exe
[2011/01/24 11:23:47 | 000,103,140 | RHS- | C] () -- C:\ykkvl.exe
[2011/01/24 11:22:56 | 000,103,140 | RHS- | C] () -- C:\wjwwvn.pif
[2011/01/24 11:22:06 | 000,103,140 | RHS- | C] () -- C:\ggtulh.exe
[2011/01/24 11:21:17 | 000,103,140 | RHS- | C] () -- C:\tbfi.pif
[2011/01/24 11:20:31 | 000,103,140 | RHS- | C] () -- C:\cdgw.exe
[2011/01/24 11:19:39 | 000,103,140 | RHS- | C] () -- C:\hbnupe.pif
[2011/01/24 11:18:14 | 000,103,140 | RHS- | C] () -- C:\ahtfo.exe
[2011/01/24 11:17:01 | 000,103,140 | RHS- | C] () -- C:\egcs.pif
[2011/01/24 11:16:10 | 000,103,140 | RHS- | C] () -- C:\unqnje.pif
[2011/01/24 11:15:12 | 000,103,140 | RHS- | C] () -- C:\fcmjp.pif
[2011/01/24 11:14:18 | 000,103,140 | RHS- | C] () -- C:\maqrd.pif
[2011/01/24 11:13:20 | 000,103,140 | RHS- | C] () -- C:\sbdw.pif
[2011/01/24 11:12:00 | 000,103,140 | RHS- | C] () -- C:\vjvcu.exe
[2011/01/24 11:10:38 | 000,103,140 | RHS- | C] () -- C:\ucvcto.exe
[2011/01/24 11:09:36 | 000,103,140 | RHS- | C] () -- C:\hrxkst.pif
[2011/01/24 11:08:25 | 000,103,140 | RHS- | C] () -- C:\khcht.exe
[2011/01/24 11:07:28 | 000,103,140 | RHS- | C] () -- C:\bjbpxx.exe
[2011/01/24 11:06:32 | 000,103,140 | RHS- | C] () -- C:\onfpfj.pif
[2011/01/24 11:05:38 | 000,103,140 | RHS- | C] () -- C:\cherg.exe
[2011/01/24 11:04:47 | 000,103,140 | RHS- | C] () -- C:\ykbdnu.exe
[2011/01/24 11:03:23 | 000,103,140 | RHS- | C] () -- C:\waotnh.pif
[2011/01/24 11:02:20 | 000,103,140 | RHS- | C] () -- C:\wclq.exe
[2011/01/24 11:01:20 | 000,103,140 | RHS- | C] () -- C:\dxdsnb.exe
[2011/01/24 11:00:29 | 000,103,140 | RHS- | C] () -- C:\robkxq.pif
[2011/01/24 10:58:43 | 000,103,140 | RHS- | C] () -- C:\vctdra.pif
[2011/01/24 10:57:06 | 000,103,140 | RHS- | C] () -- C:\rsdc.pif
[2011/01/24 10:55:47 | 000,103,140 | RHS- | C] () -- C:\mwargt.exe
[2011/01/24 10:54:48 | 000,103,140 | RHS- | C] () -- C:\ysyn.pif
[2011/01/24 10:46:53 | 000,103,140 | RHS- | C] () -- C:\adqw.exe
[2011/01/24 10:45:06 | 000,103,140 | RHS- | C] () -- C:\crfpe.exe
[2011/01/24 10:44:19 | 000,103,140 | RHS- | C] () -- C:\iidgaf.exe
[2011/01/24 10:43:29 | 000,103,140 | RHS- | C] () -- C:\dwwah.exe
[2011/01/24 10:42:19 | 000,103,140 | RHS- | C] () -- C:\gkdc.exe
[2011/01/24 10:41:38 | 000,103,140 | RHS- | C] () -- C:\ltsoc.pif
[2011/01/24 10:40:52 | 000,103,140 | RHS- | C] () -- C:\lqutdu.exe
[2011/01/24 10:40:10 | 000,103,140 | RHS- | C] () -- C:\tqgo.exe
[2011/01/24 10:39:23 | 000,103,140 | RHS- | C] () -- C:\jobar.pif
[2011/01/24 10:38:44 | 000,103,140 | RHS- | C] () -- C:\fnii.exe
[2011/01/24 10:37:33 | 000,103,140 | RHS- | C] () -- C:\fpmfsa.pif
[2011/01/24 10:36:53 | 000,103,140 | RHS- | C] () -- C:\efqutx.exe
[2011/01/24 10:36:12 | 000,103,140 | RHS- | C] () -- C:\oofql.exe
[2011/01/24 10:35:33 | 000,103,140 | RHS- | C] () -- C:\mvga.pif
[2011/01/24 10:34:51 | 000,103,140 | RHS- | C] () -- C:\umeir.pif
[2011/01/24 10:34:10 | 000,103,140 | RHS- | C] () -- C:\meagc.exe
[2011/01/24 10:33:30 | 000,103,140 | RHS- | C] () -- C:\cgnwew.pif
[2011/01/24 10:32:47 | 000,103,140 | RHS- | C] () -- C:\jlst.pif
[2011/01/24 10:31:59 | 000,103,140 | RHS- | C] () -- C:\uvpp.pif
[2011/01/24 10:31:12 | 000,103,140 | RHS- | C] () -- C:\mxux.exe
[2011/01/24 10:30:22 | 000,103,140 | RHS- | C] () -- C:\cnaxty.pif
[2011/01/24 10:29:33 | 000,103,140 | RHS- | C] () -- C:\pnwsp.exe
[2011/01/24 10:28:11 | 000,103,140 | RHS- | C] () -- C:\xcds.pif
[2011/01/24 10:26:49 | 000,103,140 | RHS- | C] () -- C:\letn.exe
[2011/01/24 10:25:20 | 000,103,140 | RHS- | C] () -- C:\jkjm.pif
[2011/01/24 10:23:44 | 000,103,140 | RHS- | C] () -- C:\fhbv.exe
[2011/01/24 10:22:56 | 000,103,140 | RHS- | C] () -- C:\odnv.exe
[2011/01/24 10:21:56 | 000,103,140 | RHS- | C] () -- C:\cgpwk.exe
[2011/01/24 10:20:59 | 000,103,140 | RHS- | C] () -- C:\fess.exe
[2011/01/24 10:20:09 | 000,103,140 | RHS- | C] () -- C:\epyacg.pif
[2011/01/24 10:19:22 | 000,103,140 | RHS- | C] () -- C:\hver.pif
[2011/01/24 10:18:37 | 000,103,140 | RHS- | C] () -- C:\ufxqro.pif
[2011/01/24 10:17:54 | 000,103,140 | RHS- | C] () -- C:\lupctr.exe
[2011/01/24 10:17:10 | 000,103,140 | RHS- | C] () -- C:\putr.exe
[2011/01/24 10:16:21 | 000,103,140 | RHS- | C] () -- C:\xpqh.pif
[2011/01/24 10:15:35 | 000,103,140 | RHS- | C] () -- C:\ffjw.exe
[2011/01/24 10:14:48 | 000,103,140 | RHS- | C] () -- C:\vhbil.exe
[2011/01/24 10:04:09 | 000,103,140 | RHS- | C] () -- C:\mcqkp.pif
[2011/01/24 10:02:48 | 000,103,140 | RHS- | C] () -- C:\kcbxsc.exe
[2011/01/24 10:01:53 | 000,103,140 | RHS- | C] () -- C:\wlthmq.pif
[2011/01/24 10:01:07 | 000,103,140 | RHS- | C] () -- C:\kuqona.exe
[2011/01/24 10:00:19 | 000,103,140 | RHS- | C] () -- C:\grrfg.pif
[2011/01/24 09:59:36 | 000,103,140 | RHS- | C] () -- C:\rhmxn.pif
[2011/01/24 09:58:53 | 000,103,140 | RHS- | C] () -- C:\dyfxdb.pif
[2011/01/24 09:58:01 | 000,103,140 | RHS- | C] () -- C:\kblfsr.pif
[2011/01/24 09:57:10 | 000,103,140 | RHS- | C] () -- C:\iwvfj.pif
[2011/01/24 09:56:29 | 000,103,140 | RHS- | C] () -- C:\mvduhy.exe
[2011/01/24 09:55:45 | 000,103,140 | RHS- | C] () -- C:\aelx.exe
[2011/01/24 09:54:56 | 000,103,140 | RHS- | C] () -- C:\qoqb.pif
[2011/01/24 09:53:45 | 000,103,140 | RHS- | C] () -- C:\nelm.pif
[2011/01/24 09:52:51 | 000,103,140 | RHS- | C] () -- C:\kwmtgc.pif
[2011/01/24 09:52:01 | 000,103,140 | RHS- | C] () -- C:\fikup.exe
[2011/01/24 09:51:11 | 000,103,140 | RHS- | C] () -- C:\hxblux.exe
[2011/01/24 09:49:16 | 000,103,140 | RHS- | C] () -- C:\hlvlsv.exe
[2011/01/24 09:48:30 | 000,103,140 | RHS- | C] () -- C:\wdcqp.pif
[2011/01/24 09:47:30 | 000,103,140 | RHS- | C] () -- C:\mkwf.exe
[2011/01/24 09:46:43 | 000,103,140 | RHS- | C] () -- C:\kfyhrp.exe
[2011/01/24 09:45:59 | 000,103,140 | RHS- | C] () -- C:\fcffut.pif
[2011/01/24 09:45:12 | 000,103,140 | RHS- | C] () -- C:\lswg.exe
[2011/01/24 09:44:30 | 000,103,140 | RHS- | C] () -- C:\itxy.pif
[2011/01/24 09:43:32 | 000,103,140 | RHS- | C] () -- C:\qvjfxv.exe
[2011/01/24 09:42:24 | 000,103,140 | RHS- | C] () -- C:\tjtpo.pif
[2011/01/24 09:41:34 | 000,103,140 | RHS- | C] () -- C:\grdf.pif
[2011/01/24 09:40:40 | 000,103,140 | RHS- | C] () -- C:\bpwd.pif
[2011/01/24 09:39:41 | 000,103,140 | RHS- | C] () -- C:\kgbmhp.exe
[2011/01/24 09:38:47 | 000,103,140 | RHS- | C] () -- C:\wuix.pif
[2011/01/24 09:37:54 | 000,103,140 | RHS- | C] () -- C:\bmcvd.exe
[2011/01/24 09:37:05 | 000,103,140 | RHS- | C] () -- C:\lmjkj.pif
[2011/01/24 09:36:16 | 000,103,140 | RHS- | C] () -- C:\ypyitg.exe
[2011/01/24 09:35:20 | 000,103,140 | RHS- | C] () -- C:\aklxcj.exe
[2011/01/24 09:33:46 | 000,103,140 | RHS- | C] () -- C:\cmoiw.pif
[2011/01/24 09:32:01 | 000,103,140 | RHS- | C] () -- C:\pojtxc.exe
[2011/01/24 09:30:19 | 000,103,140 | RHS- | C] () -- C:\pahb.pif
[2011/01/24 09:28:51 | 000,103,140 | RHS- | C] () -- C:\jateu.exe
[2011/01/24 09:27:29 | 000,103,140 | RHS- | C] () -- C:\axqex.pif
[2011/01/24 09:25:33 | 000,103,140 | RHS- | C] () -- C:\qxemb.exe
[2011/01/24 09:23:44 | 000,103,140 | RHS- | C] () -- C:\dodps.exe
[2011/01/24 09:22:22 | 000,103,140 | RHS- | C] () -- C:\cnafjg.pif
[2011/01/24 09:21:24 | 000,103,140 | RHS- | C] () -- C:\yjkuxg.pif
[2011/01/24 09:20:33 | 000,103,140 | RHS- | C] () -- C:\pghxjb.exe
[2011/01/24 09:19:15 | 000,103,140 | RHS- | C] () -- C:\oiod.exe
[2011/01/24 09:18:07 | 000,103,140 | RHS- | C] () -- C:\oivi.exe
[2011/01/24 09:17:16 | 000,103,140 | RHS- | C] () -- C:\smyf.pif
[2011/01/24 09:16:26 | 000,103,140 | RHS- | C] () -- C:\edhw.exe
[2011/01/24 09:15:19 | 000,103,140 | RHS- | C] () -- C:\aexp.pif
[2011/01/24 09:14:22 | 000,103,140 | RHS- | C] () -- C:\vtaabf.exe
[2011/01/24 09:13:26 | 000,103,140 | RHS- | C] () -- C:\wqeksn.exe
[2011/01/24 09:12:21 | 000,103,140 | RHS- | C] () -- C:\ynljvi.exe
[2011/01/24 09:10:27 | 000,103,140 | RHS- | C] () -- C:\flgeo.exe
[2011/01/24 09:08:45 | 000,103,140 | RHS- | C] () -- C:\gifld.exe
[2011/01/24 09:06:44 | 000,103,140 | RHS- | C] () -- C:\qyyib.pif
[2011/01/24 09:05:25 | 000,103,140 | RHS- | C] () -- C:\enggiu.exe
[2011/01/24 09:04:10 | 000,103,140 | RHS- | C] () -- C:\mwladh.exe
[2011/01/24 09:02:52 | 000,103,140 | RHS- | C] () -- C:\qsjuhq.pif
[2011/01/24 09:01:38 | 000,103,140 | RHS- | C] () -- C:\srwmap.pif
[2011/01/24 08:59:56 | 000,103,140 | RHS- | C] () -- C:\hqqsu.pif
[2011/01/24 08:58:35 | 000,103,140 | RHS- | C] () -- C:\kqft.exe
[2011/01/21 17:00:56 | 000,103,140 | RHS- | C] () -- C:\gxxeql.exe
[2011/01/21 16:59:19 | 000,103,140 | RHS- | C] () -- C:\uryhg.exe
[2011/01/21 16:58:40 | 000,103,140 | RHS- | C] () -- C:\bipsi.pif
[2011/01/21 16:57:58 | 000,103,140 | RHS- | C] () -- C:\hinau.exe
[2011/01/21 16:57:18 | 000,103,140 | RHS- | C] () -- C:\peeaim.pif
[2011/01/21 16:56:33 | 000,103,140 | RHS- | C] () -- C:\gastc.exe
[2011/01/21 16:55:53 | 000,103,140 | RHS- | C] () -- C:\ccbymo.exe
[2011/01/21 16:55:12 | 000,103,140 | RHS- | C] () -- C:\aytmno.pif
[2011/01/21 16:54:23 | 000,103,140 | RHS- | C] () -- C:\cjraxd.pif
[2011/01/21 16:53:44 | 000,103,140 | RHS- | C] () -- C:\hwgc.exe
[2011/01/21 16:53:04 | 000,103,140 | RHS- | C] () -- C:\odvdwn.exe
[2011/01/21 16:52:23 | 000,103,140 | RHS- | C] () -- C:\dyaip.exe
[2011/01/21 16:51:42 | 000,103,140 | RHS- | C] () -- C:\jxfk.exe
[2011/01/21 16:51:02 | 000,103,140 | RHS- | C] () -- C:\klike.exe
[2011/01/21 16:50:04 | 000,103,140 | RHS- | C] () -- C:\swpxk.pif
[2011/01/21 16:49:25 | 000,103,140 | RHS- | C] () -- C:\xpxi.pif
[2011/01/21 16:48:40 | 000,103,140 | RHS- | C] () -- C:\vsalp.pif
[2011/01/21 16:47:47 | 000,103,140 | RHS- | C] () -- C:\wlhlk.exe
[2011/01/21 16:46:58 | 000,103,140 | RHS- | C] () -- C:\nwhdnm.exe
[2011/01/21 16:46:12 | 000,103,140 | RHS- | C] () -- C:\pfepa.pif
[2011/01/21 16:45:28 | 000,103,140 | RHS- | C] () -- C:\bttc.pif
[2011/01/21 16:44:38 | 000,103,140 | RHS- | C] () -- C:\ddqpxe.pif
[2011/01/21 16:43:59 | 000,103,140 | RHS- | C] () -- C:\hblkq.exe
[2011/01/21 16:43:19 | 000,103,140 | RHS- | C] () -- C:\lmvyu.pif
[2011/01/21 16:42:32 | 000,103,140 | RHS- | C] () -- C:\mmtscg.pif
[2011/01/21 16:41:45 | 000,103,140 | RHS- | C] () -- C:\okgeet.pif
[2011/01/21 16:41:02 | 000,103,140 | RHS- | C] () -- C:\imrrcf.exe
[2011/01/21 16:40:15 | 000,103,140 | RHS- | C] () -- C:\qnxjp.exe
[2011/01/21 16:39:34 | 000,103,140 | RHS- | C] () -- C:\sixrup.exe
[2011/01/21 16:38:54 | 000,103,140 | RHS- | C] () -- C:\ldhn.pif
[2011/01/21 16:38:11 | 000,103,140 | RHS- | C] () -- C:\gmjkdn.pif
[2011/01/21 16:37:27 | 000,103,140 | RHS- | C] () -- C:\cktiky.exe
[2011/01/21 16:36:46 | 000,103,140 | RHS- | C] () -- C:\xvtvly.exe
[2011/01/21 16:36:04 | 000,103,140 | RHS- | C] () -- C:\mcvl.pif
[2011/01/21 16:35:06 | 000,103,140 | RHS- | C] () -- C:\jdmiap.exe
[2011/01/21 16:34:15 | 000,103,140 | RHS- | C] () -- C:\joph.exe
[2011/01/21 16:33:33 | 000,103,140 | RHS- | C] () -- C:\ygdh.exe
[2011/01/21 16:32:46 | 000,103,140 | RHS- | C] () -- C:\jsjuqu.pif
[2011/01/21 16:32:00 | 000,103,140 | RHS- | C] () -- C:\tugqvk.exe
[2011/01/21 16:31:14 | 000,103,140 | RHS- | C] () -- C:\uynibu.pif
[2011/01/21 16:30:24 | 000,103,140 | RHS- | C] () -- C:\micr.exe
[2011/01/21 16:29:42 | 000,103,140 | RHS- | C] () -- C:\wxymn.exe
[2011/01/21 16:28:59 | 000,103,140 | RHS- | C] () -- C:\llkpwd.exe
[2011/01/21 16:28:15 | 000,103,140 | RHS- | C] () -- C:\vdrfhf.exe
[2011/01/21 16:27:31 | 000,103,140 | RHS- | C] () -- C:\ilhs.exe
[2011/01/21 16:26:44 | 000,103,140 | RHS- | C] () -- C:\wtic.pif
[2011/01/21 16:25:56 | 000,103,140 | RHS- | C] () -- C:\qfsclb.exe
[2011/01/21 16:25:11 | 000,103,140 | RHS- | C] () -- C:\wshl.exe
[2011/01/21 16:24:32 | 000,103,140 | RHS- | C] () -- C:\mytvt.pif
[2011/01/21 16:23:52 | 000,103,140 | RHS- | C] () -- C:\dfsv.pif
[2011/01/21 16:23:10 | 000,103,140 | RHS- | C] () -- C:\aosy.pif
[2011/01/21 16:22:31 | 000,103,140 | RHS- | C] () -- C:\pomdu.pif
[2011/01/21 16:21:48 | 000,103,140 | RHS- | C] () -- C:\xwofb.pif
[2011/01/21 16:21:03 | 000,103,140 | RHS- | C] () -- C:\qfsooa.exe
[2011/01/21 16:20:13 | 000,103,140 | RHS- | C] () -- C:\godtx.exe
[2011/01/21 16:19:32 | 000,103,140 | RHS- | C] () -- C:\neiytb.pif
[2011/01/21 16:18:55 | 000,103,140 | RHS- | C] () -- C:\gvrx.pif
[2011/01/21 16:18:17 | 000,103,140 | RHS- | C] () -- C:\kligce.pif
[2011/01/21 16:17:38 | 000,103,140 | RHS- | C] () -- C:\imrmts.exe
[2011/01/21 16:16:57 | 000,103,140 | RHS- | C] () -- C:\vyuioc.pif
[2011/01/21 16:16:07 | 000,103,140 | RHS- | C] () -- C:\lswisa.pif
[2011/01/21 16:15:28 | 000,103,140 | RHS- | C] () -- C:\yyys.exe
[2011/01/21 16:14:42 | 000,103,140 | RHS- | C] () -- C:\xovaec.exe
[2011/01/21 16:13:54 | 000,103,140 | RHS- | C] () -- C:\klhe.exe
[2011/01/21 16:13:13 | 000,103,140 | RHS- | C] () -- C:\mbkb.exe
[2011/01/21 16:12:32 | 000,103,140 | RHS- | C] () -- C:\txau.pif
[2011/01/21 16:11:53 | 000,103,140 | RHS- | C] () -- C:\kepkaw.pif
[2011/01/21 16:11:12 | 000,103,140 | RHS- | C] () -- C:\niwe.pif
[2011/01/21 16:10:34 | 000,103,140 | RHS- | C] () -- C:\xnrnth.pif
[2011/01/21 16:09:53 | 000,103,140 | RHS- | C] () -- C:\nipbfc.pif
[2011/01/21 16:09:16 | 000,103,140 | RHS- | C] () -- C:\kmwo.exe
[2011/01/21 16:08:32 | 000,103,140 | RHS- | C] () -- C:\gaeee.pif
[2011/01/21 16:07:35 | 000,103,140 | RHS- | C] () -- C:\wnvvka.exe
[2011/01/21 16:06:56 | 000,103,140 | RHS- | C] () -- C:\fnkw.pif
[2011/01/21 16:06:13 | 000,103,140 | RHS- | C] () -- C:\bfwim.exe
[2011/01/21 16:05:34 | 000,103,140 | RHS- | C] () -- C:\ulex.exe
[2011/01/21 16:04:54 | 000,103,140 | RHS- | C] () -- C:\jbnqok.pif
[2011/01/21 16:03:55 | 000,103,140 | RHS- | C] () -- C:\heifhc.pif
[2011/01/21 16:02:59 | 000,103,140 | RHS- | C] () -- C:\ylqhc.pif
[2011/01/21 16:02:12 | 000,103,140 | RHS- | C] () -- C:\nnwpan.exe
[2011/01/21 16:01:32 | 000,103,140 | RHS- | C] () -- C:\clgklx.pif
[2011/01/21 16:00:53 | 000,103,140 | RHS- | C] () -- C:\boed.pif
[2011/01/21 16:00:15 | 000,103,140 | RHS- | C] () -- C:\ilsko.pif
[2011/01/21 15:59:35 | 000,103,140 | RHS- | C] () -- C:\yknmgs.exe
[2011/01/21 15:58:48 | 000,103,140 | RHS- | C] () -- C:\ebkj.exe
[2011/01/21 15:58:10 | 000,103,140 | RHS- | C] () -- C:\oqpvvr.exe
[2011/01/21 15:57:32 | 000,103,140 | RHS- | C] () -- C:\rghwp.pif
[2011/01/21 15:56:52 | 000,103,140 | RHS- | C] () -- C:\eywtfn.pif
[2011/01/21 15:56:10 | 000,103,140 | RHS- | C] () -- C:\njclxo.exe
[2011/01/21 15:55:31 | 000,103,140 | RHS- | C] () -- C:\mefco.pif
[2011/01/21 15:54:43 | 000,103,140 | RHS- | C] () -- C:\gjgbri.pif
[2011/01/21 15:53:57 | 000,103,140 | RHS- | C] () -- C:\fjxre.exe
[2011/01/21 15:53:07 | 000,103,140 | RHS- | C] () -- C:\vjpdt.pif
[2011/01/21 15:52:27 | 000,103,140 | RHS- | C] () -- C:\xweaxb.exe
[2011/01/21 15:51:47 | 000,103,140 | RHS- | C] () -- C:\figbv.exe
[2011/01/21 15:51:02 | 000,103,140 | RHS- | C] () -- C:\kjyv.exe
[2011/01/21 15:50:16 | 000,103,140 | RHS- | C] () -- C:\afse.pif
[2011/01/21 15:49:35 | 000,103,140 | RHS- | C] () -- C:\tfrri.pif
[2011/01/21 15:48:54 | 000,103,140 | RHS- | C] () -- C:\ducqxd.exe
[2011/01/21 15:48:10 | 000,103,140 | RHS- | C] () -- C:\dgwp.exe
[2011/01/21 15:47:14 | 000,103,140 | RHS- | C] () -- C:\almqkb.pif
[2011/01/21 15:46:28 | 000,103,140 | RHS- | C] () -- C:\renj.pif
[2011/01/21 15:45:47 | 000,103,140 | RHS- | C] () -- C:\bgjvyd.pif
[2011/01/21 15:45:05 | 000,103,140 | RHS- | C] () -- C:\goqegk.exe
[2011/01/21 15:44:19 | 000,103,140 | RHS- | C] () -- C:\qyhhgc.pif
[2011/01/21 15:43:39 | 000,103,140 | RHS- | C] () -- C:\oqgejg.pif
[2011/01/21 15:42:54 | 000,103,140 | RHS- | C] () -- C:\opggt.exe
[2011/01/21 15:42:15 | 000,103,140 | RHS- | C] () -- C:\lyklt.pif
[2011/01/21 15:41:33 | 000,103,140 | RHS- | C] () -- C:\nrwmq.pif
[2011/01/21 15:40:52 | 000,103,140 | RHS- | C] () -- C:\upnwn.exe
[2011/01/21 15:40:12 | 000,103,140 | RHS- | C] () -- C:\mkewd.pif
[2011/01/21 15:39:33 | 000,103,140 | RHS- | C] () -- C:\xwan.pif
[2011/01/21 15:38:48 | 000,103,140 | RHS- | C] () -- C:\phmq.pif
[2011/01/21 15:38:08 | 000,103,140 | RHS- | C] () -- C:\nmnspx.exe
[2011/01/21 15:37:30 | 000,103,140 | RHS- | C] () -- C:\rsxch.exe
[2011/01/21 15:36:50 | 000,103,140 | RHS- | C] () -- C:\awayt.pif
[2011/01/21 15:36:11 | 000,103,140 | RHS- | C] () -- C:\jior.pif
[2011/01/21 15:35:30 | 000,103,140 | RHS- | C] () -- C:\oyym.exe
[2011/01/21 15:34:50 | 000,103,140 | RHS- | C] () -- C:\fprpta.pif
[2011/01/21 15:34:09 | 000,103,140 | RHS- | C] () -- C:\nsnwra.exe
[2011/01/21 15:33:26 | 000,103,140 | RHS- | C] () -- C:\vcysy.exe
[2011/01/21 15:32:45 | 000,103,140 | RHS- | C] () -- C:\spjfo.pif
[2011/01/21 15:32:03 | 000,103,140 | RHS- | C] () -- C:\smmd.exe
[2011/01/21 15:31:17 | 000,103,140 | RHS- | C] () -- C:\ddcw.pif
[2011/01/21 15:30:17 | 000,103,140 | RHS- | C] () -- C:\rifdw.exe
[2011/01/21 15:29:37 | 000,103,140 | RHS- | C] () -- C:\fnhxfb.exe
[2011/01/21 15:28:57 | 000,103,140 | RHS- | C] () -- C:\mtwg.pif
[2011/01/21 15:28:17 | 000,103,140 | RHS- | C] () -- C:\wqhh.exe
[2011/01/21 15:27:38 | 000,103,140 | RHS- | C] () -- C:\rrvmsg.pif
[2011/01/21 15:26:53 | 000,103,140 | RHS- | C] () -- C:\kgdip.exe
[2011/01/21 15:26:12 | 000,103,140 | RHS- | C] () -- C:\ywlmn.pif
[2011/01/21 15:25:31 | 000,103,140 | RHS- | C] () -- C:\svadbs.pif
[2011/01/21 15:24:52 | 000,103,140 | RHS- | C] () -- C:\wcfgwe.pif
[2011/01/21 15:24:10 | 000,103,140 | RHS- | C] () -- C:\agwv.exe
[2011/01/21 15:23:31 | 000,103,140 | RHS- | C] () -- C:\sbjdwk.pif
[2011/01/21 15:22:50 | 000,103,140 | RHS- | C] () -- C:\exumb.pif
[2011/01/21 15:21:39 | 000,103,140 | RHS- | C] () -- C:\wnndc.pif
[2011/01/21 15:20:53 | 000,103,140 | RHS- | C] () -- C:\xdfjd.pif
[2011/01/21 15:19:28 | 000,103,140 | RHS- | C] () -- C:\qpxwlw.pif
[2011/01/21 15:18:22 | 000,103,140 | RHS- | C] () -- C:\tlwdf.pif
[2011/01/21 15:17:24 | 000,103,140 | RHS- | C] () -- C:\qexrq.exe
[2011/01/21 15:16:40 | 000,103,140 | RHS- | C] () -- C:\wrslob.exe
[2011/01/21 15:15:57 | 000,103,140 | RHS- | C] () -- C:\ellub.pif
[2011/01/21 15:14:59 | 000,103,140 | RHS- | C] () -- C:\kxkrrk.pif
[2011/01/21 15:14:14 | 000,103,140 | RHS- | C] () -- C:\twbxqc.pif
[2011/01/21 15:13:25 | 000,103,140 | RHS- | C] () -- C:\xghqdm.pif
[2011/01/21 15:12:43 | 000,103,140 | RHS- | C] () -- C:\eylyt.pif
[2011/01/21 15:11:53 | 000,103,140 | RHS- | C] () -- C:\cjkp.exe
[2011/01/21 15:11:11 | 000,103,140 | RHS- | C] () -- C:\utibr.pif
[2011/01/21 15:10:19 | 000,103,140 | RHS- | C] () -- C:\dietv.pif
[2011/01/21 15:09:36 | 000,103,140 | RHS- | C] () -- C:\ptal.pif
[2011/01/21 15:08:51 | 000,103,140 | RHS- | C] () -- C:\aehsr.exe
[2011/01/21 15:07:52 | 000,103,140 | RHS- | C] () -- C:\umys.exe
[2011/01/21 15:07:11 | 000,103,140 | RHS- | C] () -- C:\qeme.pif
[2011/01/21 15:06:29 | 000,103,140 | RHS- | C] () -- C:\cdwfp.exe
[2011/01/21 15:05:47 | 000,103,140 | RHS- | C] () -- C:\ayglc.exe
[2011/01/21 15:04:57 | 000,103,140 | RHS- | C] () -- C:\jwyve.pif
[2011/01/21 15:04:04 | 000,103,140 | RHS- | C] () -- C:\suil.exe
[2011/01/21 15:03:11 | 000,103,140 | RHS- | C] () -- C:\tish.pif
[2011/01/21 15:02:28 | 000,103,140 | RHS- | C] () -- C:\fluu.exe
[2011/01/21 15:01:30 | 000,103,140 | RHS- | C] () -- C:\uijpqx.exe
[2011/01/21 15:00:49 | 000,103,140 | RHS- | C] () -- C:\rvgd.exe
[2011/01/21 15:00:05 | 000,103,140 | RHS- | C] () -- C:\iwoslc.exe
[2011/01/21 14:59:21 | 000,103,140 | RHS- | C] () -- C:\qhbdgi.exe
[2011/01/21 14:58:39 | 000,103,140 | RHS- | C] () -- C:\kaewl.pif
[2011/01/21 14:58:00 | 000,103,140 | RHS- | C] () -- C:\eibc.pif
[2011/01/21 14:57:22 | 000,103,140 | RHS- | C] () -- C:\wlmf.pif
[2011/01/21 14:56:38 | 000,103,140 | RHS- | C] () -- C:\brlp.exe
[2011/01/21 14:55:53 | 000,103,140 | RHS- | C] () -- C:\hexes.exe
[2011/01/21 14:55:04 | 000,103,140 | RHS- | C] () -- C:\ruix.exe
[2011/01/21 14:54:22 | 000,103,140 | RHS- | C] () -- C:\kaslf.exe
[2011/01/21 14:53:32 | 000,103,140 | RHS- | C] () -- C:\anfsv.pif
[2011/01/21 14:52:53 | 000,103,140 | RHS- | C] () -- C:\riwxy.exe
[2011/01/21 14:52:13 | 000,103,140 | RHS- | C] () -- C:\xxjv.pif
[2011/01/21 14:51:36 | 000,103,140 | RHS- | C] () -- C:\pxfoj.exe
[2011/01/21 14:51:00 | 000,103,140 | RHS- | C] () -- C:\ikcvya.exe
[2011/01/21 14:50:19 | 000,103,140 | RHS- | C] () -- C:\xqhhy.exe
[2011/01/21 14:49:41 | 000,103,140 | RHS- | C] () -- C:\uyxb.exe
[2011/01/21 14:48:58 | 000,103,140 | RHS- | C] () -- C:\eente.pif
[2011/01/21 14:48:17 | 000,103,140 | RHS- | C] () -- C:\mpwcf.pif
[2011/01/21 14:46:53 | 000,103,140 | RHS- | C] () -- C:\okldhm.exe
[2011/01/21 14:46:01 | 000,103,140 | RHS- | C] () -- C:\qrfwl.exe
[2011/01/21 14:45:08 | 000,103,140 | RHS- | C] () -- C:\yqnqfv.exe
[2011/01/21 14:44:09 | 000,103,140 | RHS- | C] () -- C:\ohwsyf.pif
[2011/01/21 14:43:29 | 000,103,140 | RHS- | C] () -- C:\upaabr.pif
[2011/01/21 14:42:26 | 000,103,140 | RHS- | C] () -- C:\uhbjym.exe
[2011/01/21 14:41:45 | 000,103,140 | RHS- | C] () -- C:\fparrg.exe
[2011/01/21 14:40:57 | 000,103,140 | RHS- | C] () -- C:\cvosl.exe
[2011/01/21 14:40:13 | 000,103,140 | RHS- | C] () -- C:\jfibt.pif
[2011/01/21 14:39:19 | 000,103,140 | RHS- | C] () -- C:\ljojyg.pif
[2011/01/21 14:38:37 | 000,103,140 | RHS- | C] () -- C:\cxty.exe
[2011/01/21 14:37:57 | 000,103,140 | RHS- | C] () -- C:\gutks.exe
[2011/01/21 14:36:45 | 000,103,140 | RHS- | C] () -- C:\fatu.pif
[2011/01/21 14:35:53 | 000,103,140 | RHS- | C] () -- C:\gpeww.pif
[2011/01/21 14:35:12 | 000,103,140 | RHS- | C] () -- C:\jsedu.pif
[2011/01/21 14:34:33 | 000,103,140 | RHS- | C] () -- C:\fgmx.pif
[2011/01/21 14:33:54 | 000,103,140 | RHS- | C] () -- C:\yhkbu.exe
[2011/01/21 14:33:16 | 000,103,140 | RHS- | C] () -- C:\cgdx.exe
[2011/01/21 14:32:37 | 000,103,140 | RHS- | C] () -- C:\hlnv.exe
[2011/01/21 14:31:50 | 000,103,140 | RHS- | C] () -- C:\mpua.exe
[2011/01/21 14:31:11 | 000,103,140 | RHS- | C] () -- C:\kpnad.exe
[2011/01/21 14:30:31 | 000,103,140 | RHS- | C] () -- C:\oswr.exe
[2011/01/21 14:29:47 | 000,103,140 | RHS- | C] () -- C:\ifde.pif
[2011/01/21 14:28:56 | 000,103,140 | RHS- | C] () -- C:\pdwra.exe
[2011/01/21 14:28:19 | 000,103,140 | RHS- | C] () -- C:\ftggt.exe
[2011/01/21 14:27:41 | 000,103,140 | RHS- | C] () -- C:\udnv.exe
[2011/01/21 14:26:54 | 000,103,140 | RHS- | C] () -- C:\tbmgdv.pif
[2011/01/21 14:26:14 | 000,103,140 | RHS- | C] () -- C:\cshfpc.pif
[2011/01/21 14:25:35 | 000,103,140 | RHS- | C] () -- C:\bkekr.pif
[2011/01/21 14:24:52 | 000,103,140 | RHS- | C] () -- C:\gjoyh.pif
[2011/01/21 14:23:13 | 000,103,140 | RHS- | C] () -- C:\tlaay.pif
[2011/01/21 14:22:29 | 000,103,140 | RHS- | C] () -- C:\ffjs.pif
[2011/01/21 14:21:49 | 000,103,140 | RHS- | C] () -- C:\oefu.pif
[2011/01/21 14:21:08 | 000,103,140 | RHS- | C] () -- C:\ywinu.exe
[2011/01/21 14:20:29 | 000,103,140 | RHS- | C] () -- C:\uuup.pif
[2011/01/21 14:19:36 | 000,103,140 | RHS- | C] () -- C:\eyspl.exe
[2011/01/21 14:18:58 | 000,103,140 | RHS- | C] () -- C:\cygx.exe
[2011/01/21 14:18:18 | 000,103,140 | RHS- | C] () -- C:\bohis.pif
[2011/01/21 14:17:40 | 000,103,140 | RHS- | C] () -- C:\lgcc.exe
[2011/01/21 14:16:58 | 000,103,140 | RHS- | C] () -- C:\rhyw.exe
[2011/01/21 14:16:18 | 000,103,140 | RHS- | C] () -- C:\fchf.exe
[2011/01/21 14:15:26 | 000,103,140 | RHS- | C] () -- C:\ydqbf.pif
[2011/01/21 14:14:45 | 000,103,140 | RHS- | C] () -- C:\wlhfw.pif
[2011/01/21 14:14:02 | 000,103,140 | RHS- | C] () -- C:\sdwl.exe
[2011/01/21 14:13:18 | 000,103,140 | RHS- | C] () -- C:\ohwyn.pif
[2011/01/21 14:12:39 | 000,103,140 | RHS- | C] () -- C:\ujjw.exe
[2011/01/21 14:11:54 | 000,103,140 | RHS- | C] () -- C:\hievtk.exe
[2011/01/21 14:11:08 | 000,103,140 | RHS- | C] () -- C:\wxfa.pif
[2011/01/21 14:10:28 | 000,103,140 | RHS- | C] () -- C:\gemej.exe
[2011/01/21 14:09:49 | 000,103,140 | RHS- | C] () -- C:\neyqam.pif
[2011/01/21 14:09:07 | 000,103,140 | RHS- | C] () -- C:\mikpu.exe
[2011/01/21 14:08:24 | 000,103,140 | RHS- | C] () -- C:\nisd.pif
[2011/01/21 14:07:43 | 000,103,140 | RHS- | C] () -- C:\rwwgv.pif
[2011/01/21 14:06:58 | 000,103,140 | RHS- | C] () -- C:\ugri.exe
[2011/01/21 14:06:05 | 000,103,140 | RHS- | C] () -- C:\ggubxl.exe
[2011/01/21 14:05:20 | 000,103,140 | RHS- | C] () -- C:\kmyev.exe
[2011/01/21 14:04:27 | 000,103,140 | RHS- | C] () -- C:\kgubw.pif
[2011/01/21 14:03:45 | 000,103,140 | RHS- | C] () -- C:\aafxu.pif
[2011/01/21 14:03:04 | 000,103,140 | RHS- | C] () -- C:\qkdr.exe
[2011/01/21 14:02:25 | 000,103,140 | RHS- | C] () -- C:\wgnweg.exe
[2011/01/21 14:01:45 | 000,103,140 | RHS- | C] () -- C:\aopcjh.exe
[2011/01/21 14:01:05 | 000,103,140 | RHS- | C] () -- C:\rffb.pif
[2011/01/21 14:00:04 | 000,103,140 | RHS- | C] () -- C:\wfhfbo.exe
[2011/01/21 13:59:22 | 000,103,140 | RHS- | C] () -- C:\eciu.exe
[2011/01/21 13:58:40 | 000,103,140 | RHS- | C] () -- C:\lxyfl.exe
[2011/01/21 13:58:00 | 000,103,140 | RHS- | C] () -- C:\fepp.pif
[2011/01/21 13:57:22 | 000,103,140 | RHS- | C] () -- C:\fdhko.pif
[2011/01/21 13:56:44 | 000,103,140 | RHS- | C] () -- C:\owxh.pif
[2011/01/21 13:56:06 | 000,103,140 | RHS- | C] () -- C:\sgno.pif
[2011/01/21 13:55:26 | 000,103,140 | RHS- | C] () -- C:\yciyjg.pif
[2011/01/21 13:54:45 | 000,103,140 | RHS- | C] () -- C:\kbfh.exe
[2011/01/21 13:54:01 | 000,103,140 | RHS- | C] () -- C:\rtgi.exe
[2011/01/21 13:52:43 | 000,103,140 | RHS- | C] () -- C:\vlleu.exe
[2011/01/21 13:51:39 | 000,103,140 | RHS- | C] () -- C:\diwguv.exe
[2011/01/21 13:50:54 | 000,103,140 | RHS- | C] () -- C:\ymujuj.exe
[2011/01/21 13:49:37 | 000,103,140 | RHS- | C] () -- C:\mlmfc.exe
[2011/01/21 13:48:25 | 000,103,140 | RHS- | C] () -- C:\fhur.exe

pfchang
Intermediate
Intermediate

Posts Posts : 66
Joined Joined : 2009-03-05
OS OS : Windows XP Professional
Points Points : 28695
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Virus - Shutting down antivirus

Post by pfchang on Tue Feb 01, 2011 12:07 am

[2011/01/21 13:47:42 | 000,103,140 | RHS- | C] () -- C:\qqtto.pif
[2011/01/21 13:46:59 | 000,103,140 | RHS- | C] () -- C:\xmpt.exe
[2011/01/21 13:46:18 | 000,103,140 | RHS- | C] () -- C:\fgnpfb.pif
[2011/01/21 13:45:38 | 000,103,140 | RHS- | C] () -- C:\dxkn.pif
[2011/01/21 13:45:00 | 000,103,140 | RHS- | C] () -- C:\utnaj.pif
[2011/01/21 13:44:18 | 000,103,140 | RHS- | C] () -- C:\ffywf.exe
[2011/01/21 13:43:36 | 000,103,140 | RHS- | C] () -- C:\ekwsf.pif
[2011/01/21 13:42:58 | 000,103,140 | RHS- | C] () -- C:\qbao.pif
[2011/01/21 13:42:20 | 000,103,140 | RHS- | C] () -- C:\ydodn.pif
[2011/01/21 13:41:42 | 000,103,140 | RHS- | C] () -- C:\vtgs.pif
[2011/01/21 13:41:03 | 000,103,140 | RHS- | C] () -- C:\uxfec.pif
[2011/01/21 13:40:22 | 000,103,140 | RHS- | C] () -- C:\fpjehb.exe
[2011/01/21 13:39:36 | 000,103,140 | RHS- | C] () -- C:\dyfire.pif
[2011/01/21 13:38:59 | 000,103,140 | RHS- | C] () -- C:\bcwhq.pif
[2011/01/21 13:38:21 | 000,103,140 | RHS- | C] () -- C:\kefnva.pif
[2011/01/21 13:37:44 | 000,103,140 | RHS- | C] () -- C:\sqrr.exe
[2011/01/21 13:37:05 | 000,103,140 | RHS- | C] () -- C:\iydjqs.exe
[2011/01/21 13:36:27 | 000,103,140 | RHS- | C] () -- C:\gghq.exe
[2011/01/21 13:35:47 | 000,103,140 | RHS- | C] () -- C:\jhtx.exe
[2011/01/21 13:35:07 | 000,103,140 | RHS- | C] () -- C:\bgdkl.pif
[2011/01/21 13:34:26 | 000,103,140 | RHS- | C] () -- C:\eumha.pif
[2011/01/21 13:33:45 | 000,103,140 | RHS- | C] () -- C:\bsokkc.exe
[2011/01/21 13:33:05 | 000,103,140 | RHS- | C] () -- C:\cptnd.exe
[2011/01/21 13:32:25 | 000,103,140 | RHS- | C] () -- C:\bsqk.exe
[2011/01/21 13:31:43 | 000,103,140 | RHS- | C] () -- C:\pyyorn.exe
[2011/01/21 13:31:03 | 000,103,140 | RHS- | C] () -- C:\uxaemj.exe
[2011/01/21 13:30:14 | 000,103,140 | RHS- | C] () -- C:\eugs.exe
[2011/01/21 13:29:04 | 000,103,140 | RHS- | C] () -- C:\wcrv.pif
[2011/01/21 13:28:16 | 000,103,140 | RHS- | C] () -- C:\udnva.exe
[2011/01/21 13:27:32 | 000,103,140 | RHS- | C] () -- C:\esku.pif
[2011/01/21 13:26:49 | 000,103,140 | RHS- | C] () -- C:\htoh.pif
[2011/01/21 13:26:06 | 000,103,140 | RHS- | C] () -- C:\jefwr.pif
[2011/01/21 13:25:24 | 000,103,140 | RHS- | C] () -- C:\mbtuhm.pif
[2011/01/21 13:24:38 | 000,103,140 | RHS- | C] () -- C:\bjigmb.pif
[2011/01/21 13:23:28 | 000,103,140 | RHS- | C] () -- C:\yfnlji.exe
[2011/01/21 13:21:53 | 000,103,140 | RHS- | C] () -- C:\kggpju.exe
[2011/01/21 13:18:31 | 000,103,140 | RHS- | C] () -- C:\xbsk.pif
[2011/01/21 13:14:44 | 000,103,140 | RHS- | C] () -- C:\yodimw.pif
[2011/01/21 13:12:35 | 000,103,140 | RHS- | C] () -- C:\jjwanp.exe
[2011/01/21 13:11:14 | 000,103,140 | RHS- | C] () -- C:\ogxq.exe
[2011/01/21 13:07:46 | 000,103,140 | RHS- | C] () -- C:\hqjf.pif
[2011/01/21 13:06:37 | 000,103,140 | RHS- | C] () -- C:\rkbs.exe
[2011/01/21 13:05:20 | 000,103,140 | RHS- | C] () -- C:\epbawp.exe
[2011/01/21 13:02:29 | 000,103,140 | RHS- | C] () -- C:\prsfd.exe
[2011/01/21 12:58:26 | 000,103,140 | RHS- | C] () -- C:\osjte.exe
[2011/01/21 12:55:23 | 000,103,140 | RHS- | C] () -- C:\qlffb.exe
[2011/01/21 12:54:36 | 000,103,140 | RHS- | C] () -- C:\vavi.pif
[2011/01/21 12:53:58 | 000,103,140 | RHS- | C] () -- C:\okme.exe
[2011/01/21 12:50:58 | 000,103,140 | RHS- | C] () -- C:\otpdmi.exe
[2011/01/21 12:49:59 | 000,103,140 | RHS- | C] () -- C:\ossp.pif
[2011/01/21 12:46:38 | 000,103,140 | RHS- | C] () -- C:\mrrd.exe
[2011/01/21 12:45:30 | 000,103,140 | RHS- | C] () -- C:\jpedlv.pif
[2011/01/21 12:43:23 | 000,103,140 | RHS- | C] () -- C:\lwki.pif
[2011/01/21 12:42:42 | 000,103,140 | RHS- | C] () -- C:\keird.exe
[2011/01/21 12:41:24 | 000,103,140 | RHS- | C] () -- C:\ycqv.pif
[2011/01/21 12:40:44 | 000,103,140 | RHS- | C] () -- C:\stuhxq.exe
[2011/01/21 12:40:02 | 000,103,140 | RHS- | C] () -- C:\yhuxi.pif
[2011/01/21 12:39:03 | 000,103,140 | RHS- | C] () -- C:\fwtd.exe
[2011/01/21 12:38:23 | 000,103,140 | RHS- | C] () -- C:\xhyqkw.pif
[2011/01/21 12:35:32 | 000,103,140 | RHS- | C] () -- C:\mhkpyl.exe
[2011/01/21 12:34:47 | 000,103,140 | RHS- | C] () -- C:\ldmp.exe
[2011/01/21 12:34:05 | 000,103,140 | RHS- | C] () -- C:\gmckwa.pif
[2011/01/21 12:31:03 | 000,103,140 | RHS- | C] () -- C:\ehbqb.exe
[2011/01/21 12:30:21 | 000,103,140 | RHS- | C] () -- C:\ejjb.pif
[2011/01/21 12:29:29 | 000,103,140 | RHS- | C] () -- C:\xudrhm.exe
[2011/01/21 12:26:39 | 000,103,140 | RHS- | C] () -- C:\lgoqu.exe
[2011/01/21 12:23:45 | 000,103,140 | RHS- | C] () -- C:\iktfdl.pif
[2011/01/21 12:23:05 | 000,103,140 | RHS- | C] () -- C:\uemv.pif
[2011/01/21 12:22:02 | 000,103,140 | RHS- | C] () -- C:\apgufk.pif
[2011/01/21 12:21:11 | 000,103,140 | RHS- | C] () -- C:\yjvv.exe
[2011/01/21 12:20:10 | 000,103,140 | RHS- | C] () -- C:\tnhyp.exe
[2011/01/21 12:19:13 | 000,103,140 | RHS- | C] () -- C:\kwvigw.pif
[2011/01/21 12:18:15 | 000,103,140 | RHS- | C] () -- C:\uuhsk.exe
[2011/01/21 12:14:43 | 000,103,140 | RHS- | C] () -- C:\myhk.exe
[2011/01/21 12:11:42 | 000,103,140 | RHS- | C] () -- C:\irrh.exe
[2011/01/21 12:10:47 | 000,103,140 | RHS- | C] () -- C:\dtyh.exe
[2011/01/21 12:09:58 | 000,103,140 | RHS- | C] () -- C:\wwkpkp.exe
[2011/01/21 12:09:18 | 000,103,140 | RHS- | C] () -- C:\cbgxqx.pif
[2011/01/21 12:08:23 | 000,103,140 | RHS- | C] () -- C:\kmys.exe
[2011/01/21 12:07:32 | 000,103,140 | RHS- | C] () -- C:\xqorpl.exe
[2011/01/21 12:06:09 | 000,103,140 | RHS- | C] () -- C:\yrkgr.exe
[2011/01/21 12:03:11 | 000,103,140 | RHS- | C] () -- C:\hswj.pif
[2011/01/21 12:02:09 | 000,103,140 | RHS- | C] () -- C:\jsbxn.exe
[2011/01/21 11:59:02 | 000,103,140 | RHS- | C] () -- C:\lbesos.exe
[2011/01/21 11:58:22 | 000,103,140 | RHS- | C] () -- C:\kfug.exe
[2011/01/21 11:55:25 | 000,103,140 | RHS- | C] () -- C:\viasqy.pif
[2011/01/21 11:53:08 | 000,103,140 | RHS- | C] () -- C:\akihbh.pif
[2011/01/21 11:49:55 | 000,103,140 | RHS- | C] () -- C:\lcaw.pif
[2011/01/21 11:46:39 | 000,103,140 | RHS- | C] () -- C:\gfwg.exe
[2011/01/21 11:45:07 | 000,103,140 | RHS- | C] () -- C:\slxtss.pif
[2011/01/21 11:42:01 | 000,103,140 | RHS- | C] () -- C:\lyehaf.exe
[2011/01/21 11:41:22 | 000,103,140 | RHS- | C] () -- C:\xmnhjq.pif
[2011/01/21 11:38:58 | 000,103,140 | RHS- | C] () -- C:\attto.pif
[2011/01/21 11:38:18 | 000,103,140 | RHS- | C] () -- C:\kkpnv.exe
[2011/01/21 11:37:29 | 000,103,140 | RHS- | C] () -- C:\nltiy.pif
[2011/01/21 11:36:46 | 000,103,140 | RHS- | C] () -- C:\pqcucl.exe
[2011/01/21 11:34:26 | 000,103,140 | RHS- | C] () -- C:\rlhe.exe
[2011/01/21 11:33:47 | 000,103,140 | RHS- | C] () -- C:\dlsx.exe
[2011/01/21 11:30:38 | 000,103,140 | RHS- | C] () -- C:\uspfqg.exe
[2011/01/21 11:29:48 | 000,103,140 | RHS- | C] () -- C:\hlfchj.exe
[2011/01/21 11:27:02 | 000,103,140 | RHS- | C] () -- C:\yijgm.pif
[2011/01/21 11:26:19 | 000,103,140 | RHS- | C] () -- C:\hfrgji.exe
[2011/01/21 11:25:39 | 000,103,140 | RHS- | C] () -- C:\udicat.pif
[2011/01/21 11:24:57 | 000,103,140 | RHS- | C] () -- C:\xypy.exe
[2011/01/21 11:23:56 | 000,103,140 | RHS- | C] () -- C:\nxvdp.exe
[2011/01/21 11:22:36 | 000,103,140 | RHS- | C] () -- C:\jwlw.exe
[2011/01/21 11:19:00 | 000,103,140 | RHS- | C] () -- C:\crso.exe
[2011/01/21 11:15:14 | 000,103,140 | RHS- | C] () -- C:\trcmsp.exe
[2011/01/21 11:14:25 | 000,103,140 | RHS- | C] () -- C:\orfd.exe
[2011/01/21 11:11:34 | 000,103,140 | RHS- | C] () -- C:\ghyly.exe
[2011/01/21 11:10:46 | 000,103,140 | RHS- | C] () -- C:\slxpve.exe
[2011/01/21 11:09:57 | 000,103,140 | RHS- | C] () -- C:\yiny.pif
[2011/01/21 11:07:49 | 000,103,140 | RHS- | C] () -- C:\cacmvu.pif
[2011/01/21 11:07:00 | 000,103,140 | RHS- | C] () -- C:\qbjj.pif
[2011/01/21 11:06:15 | 000,103,140 | RHS- | C] () -- C:\idel.pif
[2011/01/21 11:03:21 | 000,103,140 | RHS- | C] () -- C:\ipcy.exe
[2011/01/21 11:02:28 | 000,103,140 | RHS- | C] () -- C:\qngfb.exe
[2011/01/21 10:59:11 | 000,103,140 | RHS- | C] () -- C:\meiik.exe
[2011/01/21 10:58:31 | 000,103,140 | RHS- | C] () -- C:\tudjyc.exe
[2011/01/21 10:54:46 | 000,103,140 | RHS- | C] () -- C:\cejw.exe
[2011/01/21 10:51:11 | 000,103,140 | RHS- | C] () -- C:\ccmaw.exe
[2011/01/21 10:50:32 | 000,103,140 | RHS- | C] () -- C:\mthg.pif
[2011/01/21 10:47:16 | 000,103,140 | RHS- | C] () -- C:\aprd.pif
[2011/01/21 10:46:32 | 000,103,140 | RHS- | C] () -- C:\wdqd.pif
[2011/01/21 10:43:05 | 000,103,140 | RHS- | C] () -- C:\apjdf.exe
[2011/01/21 10:39:57 | 000,103,140 | RHS- | C] () -- C:\oxwxi.exe
[2011/01/21 10:39:17 | 000,103,140 | RHS- | C] () -- C:\nrentt.pif
[2011/01/21 10:38:37 | 000,103,140 | RHS- | C] () -- C:\apekn.pif
[2011/01/21 10:37:21 | 000,103,140 | RHS- | C] () -- C:\vxos.exe
[2011/01/21 10:36:03 | 000,103,140 | RHS- | C] () -- C:\pval.pif
[2011/01/21 10:35:22 | 000,103,140 | RHS- | C] () -- C:\hcht.exe
[2011/01/21 10:32:53 | 000,103,140 | RHS- | C] () -- C:\qplbdr.exe
[2011/01/21 10:30:02 | 000,103,140 | RHS- | C] () -- C:\ewgafw.exe
[2011/01/21 10:29:18 | 000,103,140 | RHS- | C] () -- C:\iwxyv.exe
[2011/01/21 10:28:39 | 000,103,140 | RHS- | C] () -- C:\cnxdo.exe
[2011/01/21 10:27:08 | 000,103,140 | RHS- | C] () -- C:\uisr.exe
[2011/01/21 10:24:44 | 000,103,140 | RHS- | C] () -- C:\mdosf.pif
[2011/01/21 10:24:05 | 000,103,140 | RHS- | C] () -- C:\enkep.exe
[2011/01/21 10:15:04 | 000,103,140 | RHS- | C] () -- C:\phknn.pif
[2011/01/21 10:13:41 | 000,103,140 | RHS- | C] () -- C:\xpck.pif
[2011/01/21 10:06:59 | 000,103,140 | RHS- | C] () -- C:\yaae.exe
[2011/01/21 10:06:18 | 000,103,140 | RHS- | C] () -- C:\yighco.exe
[2011/01/21 10:05:23 | 000,103,140 | RHS- | C] () -- C:\ucngpu.pif
[2011/01/21 10:04:31 | 000,103,140 | RHS- | C] () -- C:\rnorr.pif
[2011/01/21 10:02:20 | 000,103,140 | RHS- | C] () -- C:\gdwmn.exe
[2011/01/21 10:01:05 | 000,103,140 | RHS- | C] () -- C:\lbijp.exe
[2011/01/21 09:58:07 | 000,103,140 | RHS- | C] () -- C:\faspp.exe
[2011/01/21 09:57:11 | 000,103,140 | RHS- | C] () -- C:\fjwno.pif
[2011/01/21 09:53:58 | 000,103,140 | RHS- | C] () -- C:\eifg.exe
[2011/01/21 09:53:09 | 000,103,140 | RHS- | C] () -- C:\kyno.exe
[2011/01/21 09:52:03 | 000,103,140 | RHS- | C] () -- C:\bepo.exe
[2011/01/21 09:50:11 | 000,103,140 | RHS- | C] () -- C:\bhgmx.exe
[2011/01/21 09:49:13 | 000,103,140 | RHS- | C] () -- C:\nwfleg.exe
[2011/01/21 09:48:33 | 000,103,140 | RHS- | C] () -- C:\txpr.exe
[2011/01/21 09:47:52 | 000,103,140 | RHS- | C] () -- C:\cdot.pif
[2011/01/21 09:47:11 | 000,103,140 | RHS- | C] () -- C:\mleetg.exe
[2011/01/21 09:42:14 | 000,103,140 | RHS- | C] () -- C:\jmcqs.pif
[2011/01/21 09:39:00 | 000,103,140 | RHS- | C] () -- C:\kiln.pif
[2011/01/21 09:38:17 | 000,103,140 | RHS- | C] () -- C:\xhma.pif
[2011/01/21 09:36:32 | 000,103,140 | RHS- | C] () -- C:\hcpd.pif
[2011/01/21 09:34:25 | 000,103,140 | RHS- | C] () -- C:\rctqpk.exe
[2011/01/21 09:33:25 | 000,103,140 | RHS- | C] () -- C:\cliba.exe
[2011/01/21 09:26:15 | 000,103,140 | RHS- | C] () -- C:\guvxgv.pif
[2011/01/21 09:25:22 | 000,103,140 | RHS- | C] () -- C:\owqdmv.exe
[2011/01/20 17:03:38 | 000,103,140 | RHS- | C] () -- C:\uotakg.pif
[2011/01/20 17:03:01 | 000,103,140 | RHS- | C] () -- C:\ihabaf.exe
[2011/01/20 17:02:24 | 000,103,140 | RHS- | C] () -- C:\tecdq.pif
[2011/01/20 17:01:47 | 000,103,140 | RHS- | C] () -- C:\ksfmle.pif
[2011/01/20 17:01:10 | 000,103,140 | RHS- | C] () -- C:\ukwb.exe
[2011/01/20 17:00:33 | 000,103,140 | RHS- | C] () -- C:\hcse.exe
[2011/01/20 16:59:55 | 000,103,140 | RHS- | C] () -- C:\eqeuvt.pif
[2011/01/20 16:59:18 | 000,103,140 | RHS- | C] () -- C:\olkgg.pif
[2011/01/20 16:58:38 | 000,103,140 | RHS- | C] () -- C:\royro.pif
[2011/01/20 16:57:49 | 000,103,140 | RHS- | C] () -- C:\apbew.pif
[2011/01/20 16:57:10 | 000,103,140 | RHS- | C] () -- C:\xbdlfr.exe
[2011/01/20 16:56:32 | 000,103,140 | RHS- | C] () -- C:\rrhpbk.exe
[2011/01/20 16:55:54 | 000,103,140 | RHS- | C] () -- C:\srgjcr.pif
[2011/01/20 16:55:12 | 000,103,140 | RHS- | C] () -- C:\ifkoee.exe
[2011/01/20 16:54:31 | 000,103,140 | RHS- | C] () -- C:\uarxi.exe
[2011/01/20 16:53:49 | 000,103,140 | RHS- | C] () -- C:\ghpa.exe
[2011/01/20 16:53:14 | 000,103,140 | RHS- | C] () -- C:\myljbf.pif
[2011/01/20 16:52:37 | 000,103,140 | RHS- | C] () -- C:\sunjb.exe
[2011/01/20 16:52:02 | 000,103,140 | RHS- | C] () -- C:\ninje.pif
[2011/01/20 16:51:26 | 000,103,140 | RHS- | C] () -- C:\wionis.exe
[2011/01/20 16:50:49 | 000,103,140 | RHS- | C] () -- C:\ktea.pif
[2011/01/20 16:50:09 | 000,103,140 | RHS- | C] () -- C:\fvieh.pif
[2011/01/20 16:49:32 | 000,103,140 | RHS- | C] () -- C:\fdim.pif
[2011/01/20 16:48:56 | 000,103,140 | RHS- | C] () -- C:\jcntvv.exe
[2011/01/20 16:47:46 | 000,103,140 | RHS- | C] () -- C:\qtjbjk.pif
[2011/01/20 16:47:08 | 000,103,140 | RHS- | C] () -- C:\csofyc.exe
[2011/01/20 16:46:29 | 000,103,140 | RHS- | C] () -- C:\xrnvs.pif
[2011/01/20 16:45:47 | 000,103,140 | RHS- | C] () -- C:\utyvj.exe
[2011/01/20 16:45:08 | 000,103,140 | RHS- | C] () -- C:\onae.pif
[2011/01/20 16:44:25 | 000,103,140 | RHS- | C] () -- C:\dkviq.pif
[2011/01/20 16:43:48 | 000,103,140 | RHS- | C] () -- C:\ntlgs.exe
[2011/01/20 16:43:11 | 000,103,140 | RHS- | C] () -- C:\wgugg.pif
[2011/01/20 16:42:34 | 000,103,140 | RHS- | C] () -- C:\cngref.pif
[2011/01/20 16:41:55 | 000,103,140 | RHS- | C] () -- C:\pkiccg.pif
[2011/01/20 16:41:14 | 000,103,140 | RHS- | C] () -- C:\ffjegw.exe
[2011/01/20 16:40:35 | 000,103,140 | RHS- | C] () -- C:\syeqhs.pif
[2011/01/20 16:39:58 | 000,103,140 | RHS- | C] () -- C:\isbfoh.pif
[2011/01/20 16:39:20 | 000,103,140 | RHS- | C] () -- C:\krog.pif
[2011/01/20 16:38:25 | 000,103,140 | RHS- | C] () -- C:\gsybpe.exe
[2011/01/20 16:37:46 | 000,103,140 | RHS- | C] () -- C:\ogxb.pif
[2011/01/20 16:37:09 | 000,103,140 | RHS- | C] () -- C:\tepne.pif
[2011/01/20 16:36:31 | 000,103,140 | RHS- | C] () -- C:\fxeek.exe
[2011/01/20 16:35:54 | 000,103,140 | RHS- | C] () -- C:\tmkgcq.exe
[2011/01/20 16:35:16 | 000,103,140 | RHS- | C] () -- C:\oawmtr.pif
[2011/01/20 16:34:39 | 000,103,140 | RHS- | C] () -- C:\wjjpwj.pif
[2011/01/20 16:33:59 | 000,103,140 | RHS- | C] () -- C:\wdkmc.exe
[2011/01/20 16:33:22 | 000,103,140 | RHS- | C] () -- C:\ihuv.exe
[2011/01/20 16:32:47 | 000,103,140 | RHS- | C] () -- C:\ylhb.exe
[2011/01/20 16:32:11 | 000,103,140 | RHS- | C] () -- C:\orgb.exe
[2011/01/20 16:31:35 | 000,103,140 | RHS- | C] () -- C:\accht.exe
[2011/01/20 16:31:00 | 000,103,140 | RHS- | C] () -- C:\aesvk.exe
[2011/01/20 16:30:24 | 000,103,140 | RHS- | C] () -- C:\xadqov.exe
[2011/01/20 16:29:48 | 000,103,140 | RHS- | C] () -- C:\yfce.pif
[2011/01/20 16:29:12 | 000,103,140 | RHS- | C] () -- C:\jhas.pif
[2011/01/20 16:28:35 | 000,103,140 | RHS- | C] () -- C:\kmrvl.pif
[2011/01/20 16:27:58 | 000,103,140 | RHS- | C] () -- C:\epjq.pif
[2011/01/20 16:27:21 | 000,103,140 | RHS- | C] () -- C:\peeg.pif
[2011/01/20 16:26:44 | 000,103,140 | RHS- | C] () -- C:\wojqnf.pif
[2011/01/20 16:26:06 | 000,103,140 | RHS- | C] () -- C:\sitw.pif
[2011/01/20 16:25:29 | 000,103,140 | RHS- | C] () -- C:\bpqoq.pif
[2011/01/20 16:24:52 | 000,103,140 | RHS- | C] () -- C:\bcqtea.pif
[2011/01/20 16:24:14 | 000,103,140 | RHS- | C] () -- C:\mhio.exe
[2011/01/20 16:23:36 | 000,103,140 | RHS- | C] () -- C:\ciwba.exe
[2011/01/20 16:22:59 | 000,103,140 | RHS- | C] () -- C:\sevqp.exe
[2011/01/20 16:22:23 | 000,103,140 | RHS- | C] () -- C:\pokos.exe
[2011/01/20 16:21:46 | 000,103,140 | RHS- | C] () -- C:\picxdn.pif
[2011/01/20 16:21:09 | 000,103,140 | RHS- | C] () -- C:\nati.pif
[2011/01/20 16:20:31 | 000,103,140 | RHS- | C] () -- C:\gqjpj.pif
[2011/01/20 16:19:54 | 000,103,140 | RHS- | C] () -- C:\wopn.pif
[2011/01/20 16:19:16 | 000,103,140 | RHS- | C] () -- C:\aamvjb.pif
[2011/01/20 16:18:39 | 000,103,140 | RHS- | C] () -- C:\aasnr.pif
[2011/01/20 16:18:03 | 000,103,140 | RHS- | C] () -- C:\tujrj.exe
[2011/01/20 16:17:27 | 000,103,140 | RHS- | C] () -- C:\kymw.exe
[2011/01/20 16:16:50 | 000,103,140 | RHS- | C] () -- C:\vvymo.pif
[2011/01/20 16:16:11 | 000,103,140 | RHS- | C] () -- C:\qywolq.exe
[2011/01/20 16:15:33 | 000,103,140 | RHS- | C] () -- C:\ptbr.exe
[2011/01/20 16:14:56 | 000,103,140 | RHS- | C] () -- C:\ftrl.pif
[2011/01/20 16:14:20 | 000,103,140 | RHS- | C] () -- C:\iddt.exe
[2011/01/20 16:13:45 | 000,103,140 | RHS- | C] () -- C:\vjdl.exe
[2011/01/20 16:13:09 | 000,103,140 | RHS- | C] () -- C:\iukjmt.pif
[2011/01/20 16:12:34 | 000,103,140 | RHS- | C] () -- C:\doigm.exe
[2011/01/20 16:11:58 | 000,103,140 | RHS- | C] () -- C:\fxrhtw.exe
[2011/01/20 16:11:21 | 000,103,140 | RHS- | C] () -- C:\hkppac.exe
[2011/01/20 16:10:45 | 000,103,140 | RHS- | C] () -- C:\jwjhr.pif
[2011/01/20 16:10:07 | 000,103,140 | RHS- | C] () -- C:\gjssu.pif
[2011/01/20 16:09:30 | 000,103,140 | RHS- | C] () -- C:\dyhsk.exe
[2011/01/20 16:08:51 | 000,103,140 | RHS- | C] () -- C:\uvhpi.pif
[2011/01/20 16:08:10 | 000,103,140 | RHS- | C] () -- C:\shmte.pif
[2011/01/20 16:07:32 | 000,103,140 | RHS- | C] () -- C:\vqmna.pif
[2011/01/20 16:06:54 | 000,103,140 | RHS- | C] () -- C:\drsoi.pif
[2011/01/20 16:06:16 | 000,103,140 | RHS- | C] () -- C:\juys.pif
[2011/01/20 16:05:40 | 000,103,140 | RHS- | C] () -- C:\jvxi.exe
[2011/01/20 16:05:03 | 000,103,140 | RHS- | C] () -- C:\dcqaq.exe
[2011/01/20 16:04:26 | 000,103,140 | RHS- | C] () -- C:\luovmo.pif
[2011/01/20 16:03:43 | 000,103,140 | RHS- | C] () -- C:\fuwdyg.exe
[2011/01/20 16:03:06 | 000,103,140 | RHS- | C] () -- C:\mlyo.pif
[2011/01/20 16:02:28 | 000,103,140 | RHS- | C] () -- C:\wllori.exe
[2011/01/20 16:01:51 | 000,103,140 | RHS- | C] () -- C:\gysdn.exe
[2011/01/20 16:01:13 | 000,103,140 | RHS- | C] () -- C:\foviyx.exe
[2011/01/20 16:00:26 | 000,103,140 | RHS- | C] () -- C:\coxl.exe
[2011/01/20 15:59:47 | 000,103,140 | RHS- | C] () -- C:\fpal.pif
[2011/01/20 15:58:57 | 000,103,140 | RHS- | C] () -- C:\iludn.pif
[2011/01/20 15:58:20 | 000,103,140 | RHS- | C] () -- C:\qldpu.exe
[2011/01/20 15:57:43 | 000,103,140 | RHS- | C] () -- C:\qouc.pif
[2011/01/20 15:57:05 | 000,103,140 | RHS- | C] () -- C:\cvkct.exe
[2011/01/20 15:56:27 | 000,103,140 | RHS- | C] () -- C:\xqspk.exe
[2011/01/20 15:55:48 | 000,103,140 | RHS- | C] () -- C:\yrylxf.exe
[2011/01/20 15:55:11 | 000,103,140 | RHS- | C] () -- C:\rjftxd.pif
[2011/01/20 15:54:33 | 000,103,140 | RHS- | C] () -- C:\gkcvk.pif
[2011/01/20 15:53:56 | 000,103,140 | RHS- | C] () -- C:\eynqg.pif
[2011/01/20 15:53:20 | 000,103,140 | RHS- | C] () -- C:\tjyc.exe
[2011/01/20 15:52:42 | 000,103,140 | RHS- | C] () -- C:\oqxj.pif
[2011/01/20 15:52:00 | 000,103,140 | RHS- | C] () -- C:\oofi.pif
[2011/01/20 15:51:22 | 000,103,140 | RHS- | C] () -- C:\xujl.pif
[2011/01/20 15:50:46 | 000,103,140 | RHS- | C] () -- C:\pxvnmw.pif
[2011/01/20 15:50:09 | 000,103,140 | RHS- | C] () -- C:\alfp.exe
[2011/01/20 15:49:27 | 000,103,140 | RHS- | C] () -- C:\dclllc.exe
[2011/01/20 15:48:45 | 000,103,140 | RHS- | C] () -- C:\yyleku.exe
[2011/01/20 15:48:07 | 000,103,140 | RHS- | C] () -- C:\dnlxkx.pif
[2011/01/20 15:47:30 | 000,103,140 | RHS- | C] () -- C:\jyyqp.pif
[2011/01/20 15:46:54 | 000,103,140 | RHS- | C] () -- C:\ujsrq.exe
[2011/01/20 15:46:15 | 000,103,140 | RHS- | C] () -- C:\ahfs.exe
[2011/01/20 15:45:39 | 000,103,140 | RHS- | C] () -- C:\gwyqrj.exe
[2011/01/20 15:45:03 | 000,103,140 | RHS- | C] () -- C:\preyec.pif
[2011/01/20 15:44:26 | 000,103,140 | RHS- | C] () -- C:\mhhgj.exe
[2011/01/20 15:43:49 | 000,103,140 | RHS- | C] () -- C:\puqg.pif
[2011/01/20 15:43:13 | 000,103,140 | RHS- | C] () -- C:\xouwo.exe
[2011/01/20 15:42:37 | 000,103,140 | RHS- | C] () -- C:\ldpp.pif
[2011/01/20 15:42:00 | 000,103,140 | RHS- | C] () -- C:\womp.exe
[2011/01/20 15:41:23 | 000,103,140 | RHS- | C] () -- C:\micrk.pif
[2011/01/20 15:40:46 | 000,103,140 | RHS- | C] () -- C:\mewlgc.exe
[2011/01/20 15:40:08 | 000,103,140 | RHS- | C] () -- C:\gxkolf.pif
[2011/01/20 15:39:30 | 000,103,140 | RHS- | C] () -- C:\cnlkjx.exe
[2011/01/20 15:38:54 | 000,103,140 | RHS- | C] () -- C:\neqypm.pif
[2011/01/20 15:38:14 | 000,103,140 | RHS- | C] () -- C:\skkopj.exe
[2011/01/20 15:37:28 | 000,103,140 | RHS- | C] () -- C:\tqabsv.exe
[2011/01/20 15:36:51 | 000,103,140 | RHS- | C] () -- C:\fqxi.pif
[2011/01/20 15:36:15 | 000,103,140 | RHS- | C] () -- C:\midgvd.exe
[2011/01/20 15:35:37 | 000,103,140 | RHS- | C] () -- C:\fiixd.exe
[2011/01/20 15:35:00 | 000,103,140 | RHS- | C] () -- C:\lcwv.pif
[2011/01/20 15:34:22 | 000,103,140 | RHS- | C] () -- C:\flhh.pif
[2011/01/20 15:33:41 | 000,103,140 | RHS- | C] () -- C:\wske.pif
[2011/01/20 15:33:04 | 000,103,140 | RHS- | C] () -- C:\fiqu.pif
[2011/01/20 15:32:27 | 000,103,140 | RHS- | C] () -- C:\kqpbjs.pif
[2011/01/20 15:31:51 | 000,103,140 | RHS- | C] () -- C:\qjkxc.exe
[2011/01/20 15:31:12 | 000,103,140 | RHS- | C] () -- C:\dyllun.exe
[2011/01/20 15:30:35 | 000,103,140 | RHS- | C] () -- C:\cwfd.pif
[2011/01/20 15:29:56 | 000,103,140 | RHS- | C] () -- C:\avcibq.exe
[2011/01/20 15:28:50 | 000,103,140 | RHS- | C] () -- C:\duxyvu.pif
[2011/01/20 15:27:52 | 000,103,140 | RHS- | C] () -- C:\hqsrg.pif
[2011/01/20 15:27:15 | 000,103,140 | RHS- | C] () -- C:\xjoco.pif
[2011/01/20 15:26:39 | 000,103,140 | RHS- | C] () -- C:\ldlgf.pif
[2011/01/20 15:26:02 | 000,103,140 | RHS- | C] () -- C:\vyovgm.pif
[2011/01/20 15:25:21 | 000,103,140 | RHS- | C] () -- C:\jgbv.pif
[2011/01/20 15:24:41 | 000,103,140 | RHS- | C] () -- C:\rbqw.pif
[2011/01/20 15:24:02 | 000,103,140 | RHS- | C] () -- C:\nxmiyk.pif
[2011/01/20 15:23:24 | 000,103,140 | RHS- | C] () -- C:\gxpjay.pif
[2011/01/20 15:22:43 | 000,103,140 | RHS- | C] () -- C:\hwbr.pif
[2011/01/20 15:22:05 | 000,103,140 | RHS- | C] () -- C:\acyu.exe
[2011/01/20 15:21:17 | 000,103,140 | RHS- | C] () -- C:\akpcsf.pif
[2011/01/20 15:20:38 | 000,103,140 | RHS- | C] () -- C:\lkgje.exe
[2011/01/20 15:20:02 | 000,103,140 | RHS- | C] () -- C:\enbm.exe
[2011/01/20 15:19:22 | 000,103,140 | RHS- | C] () -- C:\fyaf.exe
[2011/01/20 15:18:41 | 000,103,140 | RHS- | C] () -- C:\qlwxuf.pif
[2011/01/20 15:17:56 | 000,103,140 | RHS- | C] () -- C:\fadb.pif
[2011/01/20 15:17:14 | 000,103,140 | RHS- | C] () -- C:\wbprl.exe
[2011/01/20 15:16:35 | 000,103,140 | RHS- | C] () -- C:\jdnvr.pif
[2011/01/20 15:15:55 | 000,103,140 | RHS- | C] () -- C:\pscw.pif
[2011/01/20 15:15:17 | 000,103,140 | RHS- | C] () -- C:\nfjqa.exe
[2011/01/20 15:14:18 | 000,103,140 | RHS- | C] () -- C:\ffkerk.pif
[2011/01/20 15:13:42 | 000,103,140 | RHS- | C] () -- C:\bnmj.exe
[2011/01/20 15:13:05 | 000,103,140 | RHS- | C] () -- C:\krktmb.exe
[2011/01/20 15:12:29 | 000,103,140 | RHS- | C] () -- C:\wxgoy.exe
[2011/01/20 15:11:52 | 000,103,140 | RHS- | C] () -- C:\spujj.exe
[2011/01/20 15:11:16 | 000,103,140 | RHS- | C] () -- C:\vlew.pif
[2011/01/20 15:10:40 | 000,103,140 | RHS- | C] () -- C:\galpn.pif
[2011/01/20 15:10:04 | 000,103,140 | RHS- | C] () -- C:\ktlx.pif
[2011/01/20 15:09:27 | 000,103,140 | RHS- | C] () -- C:\metqs.exe
[2011/01/20 15:08:51 | 000,103,140 | RHS- | C] () -- C:\ynesu.exe
[2011/01/20 15:08:15 | 000,103,140 | RHS- | C] () -- C:\ahcmxf.pif
[2011/01/20 15:07:38 | 000,103,140 | RHS- | C] () -- C:\isoitm.exe
[2011/01/20 15:07:00 | 000,103,140 | RHS- | C] () -- C:\ktet.exe
[2011/01/20 15:06:23 | 000,103,140 | RHS- | C] () -- C:\omtq.exe
[2011/01/20 15:05:45 | 000,103,140 | RHS- | C] () -- C:\gotvi.exe
[2011/01/20 15:05:07 | 000,103,140 | RHS- | C] () -- C:\ijhje.pif
[2011/01/20 15:04:13 | 000,103,140 | RHS- | C] () -- C:\vyjfj.pif
[2011/01/20 15:03:32 | 000,103,140 | RHS- | C] () -- C:\qttlbx.exe
[2011/01/20 15:02:54 | 000,103,140 | RHS- | C] () -- C:\wrgyfi.exe
[2011/01/20 15:02:15 | 000,103,140 | RHS- | C] () -- C:\gqul.pif
[2011/01/20 15:01:36 | 000,103,140 | RHS- | C] () -- C:\cvow.pif
[2011/01/20 15:00:56 | 000,103,140 | RHS- | C] () -- C:\arffmc.exe
[2011/01/20 15:00:17 | 000,103,140 | RHS- | C] () -- C:\sheoyj.exe
[2011/01/20 14:59:36 | 000,103,140 | RHS- | C] () -- C:\umkc.exe
[2011/01/20 14:58:56 | 000,103,140 | RHS- | C] () -- C:\kgbac.exe
[2011/01/20 14:58:19 | 000,103,140 | RHS- | C] () -- C:\gcyn.pif
[2011/01/20 14:57:36 | 000,103,140 | RHS- | C] () -- C:\eeuwo.exe
[2011/01/20 14:56:57 | 000,103,140 | RHS- | C] () -- C:\bedqc.exe
[2011/01/20 14:56:16 | 000,103,140 | RHS- | C] () -- C:\xgvyb.exe
[2011/01/20 14:55:38 | 000,103,140 | RHS- | C] () -- C:\vlytd.exe
[2011/01/20 14:55:00 | 000,103,140 | RHS- | C] () -- C:\gmmc.exe
[2011/01/20 14:54:22 | 000,103,140 | RHS- | C] () -- C:\eoxruj.pif
[2011/01/20 14:53:44 | 000,103,140 | RHS- | C] () -- C:\muhsb.pif
[2011/01/20 14:53:05 | 000,103,140 | RHS- | C] () -- C:\cohefc.exe
[2011/01/20 14:52:26 | 000,103,140 | RHS- | C] () -- C:\tdjo.exe
[2011/01/20 14:51:47 | 000,103,140 | RHS- | C] () -- C:\ekje.exe
[2011/01/20 14:51:06 | 000,103,140 | RHS- | C] () -- C:\llec.pif
[2011/01/20 14:50:26 | 000,103,140 | RHS- | C] () -- C:\mkaq.pif
[2011/01/20 14:49:48 | 000,103,140 | RHS- | C] () -- C:\qgevl.exe
[2011/01/20 14:49:08 | 000,103,140 | RHS- | C] () -- C:\kiiw.exe
[2011/01/20 14:48:30 | 000,103,140 | RHS- | C] () -- C:\funkw.exe
[2011/01/20 14:47:48 | 000,103,140 | RHS- | C] () -- C:\yfcm.exe
[2011/01/20 14:47:09 | 000,103,140 | RHS- | C] () -- C:\gonusy.exe
[2011/01/20 14:46:15 | 000,103,140 | RHS- | C] () -- C:\dvqgk.pif
[2011/01/20 14:45:37 | 000,103,140 | RHS- | C] () -- C:\eednav.exe
[2011/01/20 14:44:56 | 000,103,140 | RHS- | C] () -- C:\cmbk.exe
[2011/01/20 14:44:16 | 000,103,140 | RHS- | C] () -- C:\lpyf.pif
[2011/01/20 14:43:37 | 000,103,140 | RHS- | C] () -- C:\jowbc.pif
[2011/01/20 14:42:55 | 000,103,140 | RHS- | C] () -- C:\rgxtu.pif
[2011/01/20 14:42:17 | 000,103,140 | RHS- | C] () -- C:\yywvq.pif
[2011/01/20 14:41:38 | 000,103,140 | RHS- | C] () -- C:\fjxndf.pif
[2011/01/20 14:40:58 | 000,103,140 | RHS- | C] () -- C:\iroeie.pif
[2011/01/20 14:40:17 | 000,103,140 | RHS- | C] () -- C:\tutocd.exe
[2011/01/20 14:39:37 | 000,103,140 | RHS- | C] () -- C:\tnsti.pif
[2011/01/20 14:38:58 | 000,103,140 | RHS- | C] () -- C:\miexvp.exe
[2011/01/20 14:38:18 | 000,103,140 | RHS- | C] () -- C:\fbhkrc.exe
[2011/01/20 14:37:38 | 000,103,140 | RHS- | C] () -- C:\wwmxkk.pif
[2011/01/20 14:37:01 | 000,103,140 | RHS- | C] () -- C:\auravf.exe
[2011/01/20 14:36:23 | 000,103,140 | RHS- | C] () -- C:\svpr.pif
[2011/01/20 14:35:41 | 000,103,140 | RHS- | C] () -- C:\sltt.pif
[2011/01/20 14:34:49 | 000,103,140 | RHS- | C] () -- C:\srpvn.pif
[2011/01/20 14:34:02 | 000,103,140 | RHS- | C] () -- C:\efoby.pif
[2011/01/20 14:33:15 | 000,103,140 | RHS- | C] () -- C:\bcpli.exe
[2011/01/20 14:32:34 | 000,103,140 | RHS- | C] () -- C:\xmliq.exe
[2011/01/20 14:31:36 | 000,103,140 | RHS- | C] () -- C:\hkshs.pif
[2011/01/20 14:30:28 | 000,103,140 | RHS- | C] () -- C:\nvfjd.pif
[2011/01/20 14:29:46 | 000,103,140 | RHS- | C] () -- C:\agcedn.pif
[2011/01/20 14:29:01 | 000,103,140 | RHS- | C] () -- C:\qvown.pif
[2011/01/20 14:28:04 | 000,103,140 | RHS- | C] () -- C:\pddq.exe
[2011/01/20 14:25:28 | 000,103,140 | RHS- | C] () -- C:\nmmt.exe
[2011/01/20 14:24:47 | 000,103,140 | RHS- | C] () -- C:\dgena.exe
[2011/01/20 14:24:07 | 000,103,140 | RHS- | C] () -- C:\xpoo.exe
[2011/01/20 14:23:15 | 000,103,140 | RHS- | C] () -- C:\jyrgt.exe
[2011/01/20 14:22:34 | 000,103,140 | RHS- | C] () -- C:\ioing.pif
[2011/01/20 14:21:55 | 000,103,140 | RHS- | C] () -- C:\pegiyn.pif
[2011/01/20 14:21:14 | 000,103,140 | RHS- | C] () -- C:\vwors.pif
[2011/01/20 14:20:07 | 000,103,140 | RHS- | C] () -- C:\vcna.pif
[2011/01/20 14:19:20 | 000,103,140 | RHS- | C] () -- C:\ibqluo.pif
[2011/01/20 14:18:40 | 000,103,140 | RHS- | C] () -- C:\gwkefj.exe
[2011/01/20 14:17:56 | 000,103,140 | RHS- | C] () -- C:\lmwjo.exe
[2011/01/20 14:17:13 | 000,103,140 | RHS- | C] () -- C:\mree.exe
[2011/01/20 14:16:29 | 000,103,140 | RHS- | C] () -- C:\rdfemw.pif
[2011/01/20 14:15:29 | 000,103,140 | RHS- | C] () -- C:\pnxutq.pif
[2011/01/20 14:14:49 | 000,103,140 | RHS- | C] () -- C:\rmmi.exe
[2011/01/20 14:14:09 | 000,103,140 | RHS- | C] () -- C:\dbgglw.exe
[2011/01/20 14:13:31 | 000,103,140 | RHS- | C] () -- C:\nuec.pif
[2011/01/20 14:12:50 | 000,103,140 | RHS- | C] () -- C:\obsma.exe
[2011/01/20 14:12:09 | 000,103,140 | RHS- | C] () -- C:\nmbv.pif
[2011/01/20 14:11:20 | 000,103,140 | RHS- | C] () -- C:\lmwslg.pif
[2011/01/20 14:10:39 | 000,103,140 | RHS- | C] () -- C:\etqtfb.pif
[2011/01/20 14:09:56 | 000,103,140 | RHS- | C] () -- C:\ijhwq.pif
[2011/01/20 14:09:00 | 000,103,140 | RHS- | C] () -- C:\cudl.exe
[2011/01/20 14:08:07 | 000,103,140 | RHS- | C] () -- C:\srft.pif
[2011/01/20 14:07:22 | 000,103,140 | RHS- | C] () -- C:\yhlra.exe
[2011/01/20 14:06:42 | 000,103,140 | RHS- | C] () -- C:\dhynec.exe
[2011/01/20 14:06:02 | 000,103,140 | RHS- | C] () -- C:\dbgua.exe
[2011/01/20 14:05:15 | 000,103,140 | RHS- | C] () -- C:\vmpgmn.pif
[2011/01/20 14:04:32 | 000,103,140 | RHS- | C] () -- C:\ilghq.pif
[2011/01/20 14:03:06 | 000,103,140 | RHS- | C] () -- C:\pbeul.exe
[2011/01/20 14:01:24 | 000,103,140 | RHS- | C] () -- C:\cakees.pif
[2011/01/20 13:59:59 | 000,103,140 | RHS- | C] () -- C:\dmrinq.pif
[2011/01/20 13:58:54 | 000,103,140 | RHS- | C] () -- C:\kwplhd.exe
[2011/01/20 13:58:12 | 000,103,140 | RHS- | C] () -- C:\vbpdp.pif
[2011/01/20 13:57:30 | 000,103,140 | ---- | C] () -- C:\acgxoo.exe
[2011/01/20 13:56:46 | 000,103,140 | RHS- | C] () -- C:\gfnr.exe
[2011/01/20 13:56:05 | 000,103,140 | RHS- | C] () -- C:\oqic.pif
[2011/01/20 13:55:24 | 000,103,140 | RHS- | C] () -- C:\qqocl.exe
[2011/01/20 13:54:40 | 000,103,140 | RHS- | C] () -- C:\ncjiqr.exe
[2011/01/20 13:53:57 | 000,103,140 | RHS- | C] () -- C:\patsiq.pif
[2011/01/20 13:53:14 | 000,103,140 | RHS- | C] () -- C:\qinmju.exe
[2011/01/20 13:52:10 | 000,103,140 | RHS- | C] () -- C:\ljwwnp.pif
[2011/01/20 13:51:22 | 000,103,140 | RHS- | C] () -- C:\rkajd.pif
[2011/01/20 13:50:40 | 000,103,140 | RHS- | C] () -- C:\angr.exe
[2011/01/20 13:49:40 | 000,103,140 | RHS- | C] () -- C:\inrwqc.pif
[2011/01/20 13:48:59 | 000,103,140 | RHS- | C] () -- C:\neauoh.pif
[2011/01/20 13:48:18 | 000,103,140 | RHS- | C] () -- C:\etvr.pif
[2011/01/20 13:47:39 | 000,103,140 | RHS- | C] () -- C:\djwmjt.pif
[2011/01/20 13:46:59 | 000,103,140 | RHS- | C] () -- C:\japif.pif
[2011/01/20 13:46:16 | 000,103,140 | RHS- | C] () -- C:\nekqq.pif
[2011/01/20 13:45:25 | 000,103,140 | RHS- | C] () -- C:\yekera.exe
[2011/01/20 13:44:10 | 000,103,140 | RHS- | C] () -- C:\eycid.pif
[2011/01/20 13:43:26 | 000,103,140 | RHS- | C] () -- C:\afxhv.exe
[2011/01/20 13:42:35 | 000,103,140 | RHS- | C] () -- C:\axat.exe
[2011/01/20 13:41:18 | 000,103,140 | RHS- | C] () -- C:\nubckd.pif
[2011/01/20 13:40:11 | 000,103,140 | RHS- | C] () -- C:\ecffgk.exe
[2011/01/20 13:39:00 | 000,103,140 | RHS- | C] () -- C:\lipfxg.pif
[2011/01/20 13:38:16 | 000,103,140 | RHS- | C] () -- C:\kjiinw.exe
[2011/01/20 13:37:35 | 000,103,140 | RHS- | C] () -- C:\xpvvk.exe
[2011/01/20 13:36:46 | 000,103,140 | RHS- | C] () -- C:\ldsu.pif
[2011/01/20 13:35:35 | 000,103,140 | RHS- | C] () -- C:\kkgdxy.exe
[2011/01/20 13:34:15 | 000,103,140 | RHS- | C] () -- C:\ikgso.pif
[2011/01/20 13:33:00 | 000,103,140 | RHS- | C] () -- C:\nwqtp.pif
[2011/01/20 13:32:16 | 000,103,140 | RHS- | C] () -- C:\eeqqg.exe
[2011/01/20 13:31:35 | 000,103,140 | RHS- | C] () -- C:\awqd.pif
[2011/01/20 13:30:55 | 000,103,140 | RHS- | C] () -- C:\iudmg.pif
[2011/01/20 13:30:11 | 000,103,140 | RHS- | C] () -- C:\hpfst.exe
[2011/01/20 13:29:30 | 000,103,140 | RHS- | C] () -- C:\vvgkhx.exe
[2011/01/20 13:28:48 | 000,103,140 | RHS- | C] () -- C:\yuik.exe
[2011/01/20 13:27:59 | 000,103,140 | RHS- | C] () -- C:\mqdasd.pif
[2011/01/20 13:27:20 | 000,103,140 | RHS- | C] () -- C:\wlbxyr.pif
[2011/01/20 13:26:39 | 000,103,140 | RHS- | C] () -- C:\iulla.exe
[2011/01/20 13:25:57 | 000,103,140 | RHS- | C] () -- C:\ecxet.exe
[2011/01/20 13:24:40 | 000,103,140 | RHS- | C] () -- C:\bvqlje.exe
[2011/01/20 13:24:02 | 000,103,140 | RHS- | C] () -- C:\ryjo.pif
[2011/01/20 13:23:20 | 000,103,140 | RHS- | C] () -- C:\qfvh.exe
[2011/01/20 13:22:41 | 000,103,140 | RHS- | C] () -- C:\knhn.pif
[2011/01/20 13:22:01 | 000,103,140 | RHS- | C] () -- C:\ouefb.pif
[2011/01/20 13:21:18 | 000,103,140 | RHS- | C] () -- C:\ixdl.exe
[2011/01/20 13:20:30 | 000,103,140 | RHS- | C] () -- C:\xsdg.pif
[2011/01/20 13:19:52 | 000,103,140 | RHS- | C] () -- C:\eyio.pif
[2011/01/20 13:19:12 | 000,103,140 | RHS- | C] () -- C:\aebma.pif
[2011/01/20 13:18:33 | 000,103,140 | RHS- | C] () -- C:\yttnw.exe
[2011/01/20 13:17:54 | 000,103,140 | RHS- | C] () -- C:\qyiyng.pif
[2011/01/20 13:17:14 | 000,103,140 | RHS- | C] () -- C:\wbdd.pif
[2011/01/20 13:16:35 | 000,103,140 | RHS- | C] () -- C:\sdpgjp.pif
[2011/01/20 13:15:54 | 000,103,140 | RHS- | C] () -- C:\lvbnn.exe
[2011/01/20 13:14:54 | 000,103,140 | RHS- | C] () -- C:\nube.exe
[2011/01/20 13:13:47 | 000,103,140 | RHS- | C] () -- C:\nlhr.exe
[2011/01/20 13:13:07 | 000,103,140 | RHS- | C] () -- C:\mmxxgq.exe
[2011/01/20 13:12:00 | 000,103,140 | RHS- | C] () -- C:\mypokx.exe
[2011/01/20 13:11:19 | 000,103,140 | RHS- | C] () -- C:\lkcbse.exe
[2011/01/20 13:10:38 | 000,103,140 | RHS- | C] () -- C:\nuktno.exe
[2011/01/20 13:09:18 | 000,103,140 | RHS- | C] () -- C:\knofx.exe
[2011/01/20 13:08:28 | 000,103,140 | RHS- | C] () -- C:\tnsj.pif
[2011/01/20 13:07:46 | 000,103,140 | RHS- | C] () -- C:\sujti.pif
[2011/01/20 13:07:02 | 000,103,140 | RHS- | C] () -- C:\msrq.exe
[2011/01/20 13:06:20 | 000,103,140 | RHS- | C] () -- C:\nimo.pif
[2011/01/20 13:05:41 | 000,103,140 | RHS- | C] () -- C:\goltmu.exe
[2011/01/20 13:05:00 | 000,103,140 | RHS- | C] () -- C:\fbfs.exe
[2011/01/20 13:04:08 | 000,103,140 | RHS- | C] () -- C:\rgaga.exe
[2011/01/20 13:03:13 | 000,103,140 | RHS- | C] () -- C:\bljo.exe
[2011/01/20 13:02:19 | 000,103,140 | RHS- | C] () -- C:\opht.pif
[2011/01/20 13:01:24 | 000,103,140 | RHS- | C] () -- C:\couun.pif
[2011/01/20 13:00:44 | 000,103,140 | RHS- | C] () -- C:\cahopg.pif
[2011/01/20 13:00:03 | 000,103,140 | RHS- | C] () -- C:\esirk.pif
[2011/01/20 12:59:11 | 000,103,140 | RHS- | C] () -- C:\khkdvk.exe
[2011/01/20 12:58:18 | 000,103,140 | RHS- | C] () -- C:\luwo.pif
[2011/01/20 12:57:38 | 000,103,140 | RHS- | C] () -- C:\lkgaqu.exe
[2011/01/20 12:56:54 | 000,103,140 | RHS- | C] () -- C:\yckb.pif
[2011/01/20 12:56:03 | 000,103,140 | RHS- | C] () -- C:\yiymx.exe
[2011/01/20 12:55:02 | 000,103,140 | RHS- | C] () -- C:\oskpa.exe
[2011/01/20 12:53:59 | 000,103,140 | RHS- | C] () -- C:\bdkgje.exe
[2011/01/20 12:53:17 | 000,103,140 | RHS- | C] () -- C:\adqm.pif
[2011/01/20 12:52:15 | 000,103,140 | RHS- | C] () -- C:\wcradr.exe
[2011/01/20 12:51:13 | 000,103,140 | RHS- | C] () -- C:\whgk.exe
[2011/01/20 12:50:11 | 000,103,140 | RHS- | C] () -- C:\bufdq.exe
[2011/01/20 12:49:01 | 000,103,140 | RHS- | C] () -- C:\hqbyrj.pif
[2011/01/20 12:48:17 | 000,103,140 | RHS- | C] () -- C:\cqerxe.pif
[2011/01/20 12:47:22 | 000,103,140 | RHS- | C] () -- C:\gagoa.pif
[2011/01/20 12:46:42 | 000,103,140 | RHS- | C] () -- C:\bcwxk.exe
[2011/01/20 12:46:02 | 000,103,140 | RHS- | C] () -- C:\kgdbr.exe
[2011/01/20 12:45:23 | 000,103,140 | RHS- | C] () -- C:\vnjgsn.pif
[2011/01/20 12:44:45 | 000,103,140 | RHS- | C] () -- C:\rhty.exe
[2011/01/20 12:44:06 | 000,103,140 | RHS- | C] () -- C:\momc.exe
[2011/01/20 12:43:14 | 000,103,140 | RHS- | C] () -- C:\jdhi.exe
[2011/01/20 12:42:34 | 000,103,140 | RHS- | C] () -- C:\uqwii.pif
[2011/01/20 12:41:56 | 000,103,140 | RHS- | C] () -- C:\qlbhu.exe
[2011/01/20 12:41:18 | 000,103,140 | RHS- | C] () -- C:\hvvmq.exe
[2011/01/20 12:40:36 | 000,103,140 | RHS- | C] () -- C:\iupt.pif
[2011/01/20 12:39:57 | 000,103,140 | RHS- | C] () -- C:\ioax.pif
[2011/01/20 12:39:16 | 000,103,140 | RHS- | C] () -- C:\eabfks.exe
[2011/01/20 12:38:36 | 000,103,140 | RHS- | C] () -- C:\mysqak.pif
[2011/01/20 12:37:55 | 000,103,140 | RHS- | C] () -- C:\fnrxak.exe
[2011/01/20 12:37:14 | 000,103,140 | RHS- | C] () -- C:\tqqw.pif
[2011/01/20 12:36:33 | 000,103,140 | RHS- | C] () -- C:\lmturo.exe
[2011/01/20 12:35:52 | 000,103,140 | RHS- | C] () -- C:\ywdnfs.exe
[2011/01/20 12:35:11 | 000,103,140 | RHS- | C] () -- C:\mhdy.exe
[2011/01/20 12:34:28 | 000,103,140 | RHS- | C] () -- C:\wvdugs.pif
[2011/01/20 12:33:48 | 000,103,140 | RHS- | C] () -- C:\gmbyu.pif
[2011/01/20 12:33:04 | 000,103,140 | RHS- | C] () -- C:\ymqpdw.exe
[2011/01/20 12:32:21 | 000,103,140 | RHS- | C] () -- C:\ijmbgw.pif
[2011/01/20 12:31:38 | 000,103,140 | RHS- | C] () -- C:\rfqk.pif
[2011/01/20 12:30:48 | 000,103,140 | RHS- | C] () -- C:\npcvjr.pif
[2011/01/20 12:30:06 | 000,103,140 | RHS- | C] () -- C:\cajbs.pif
[2011/01/20 12:29:26 | 000,103,140 | RHS- | C] () -- C:\baukpu.exe
[2011/01/20 12:28:41 | 000,103,140 | RHS- | C] () -- C:\pjsfms.pif
[2011/01/20 12:27:53 | 000,103,140 | RHS- | C] () -- C:\xbsacj.exe
[2011/01/20 12:27:00 | 000,103,140 | RHS- | C] () -- C:\uarkbx.pif
[2011/01/20 12:26:04 | 000,103,140 | RHS- | C] () -- C:\robvq.pif
[2011/01/20 12:25:19 | 000,103,140 | RHS- | C] () -- C:\bcnv.exe
[2011/01/20 12:24:32 | 000,103,140 | RHS- | C] () -- C:\ujjtu.exe
[2011/01/20 12:23:39 | 000,103,140 | RHS- | C] () -- C:\skffu.pif
[2011/01/20 12:22:52 | 000,103,140 | RHS- | C] () -- C:\yxhxd.exe
[2011/01/20 12:22:01 | 000,103,140 | RHS- | C] () -- C:\oypt.exe
[2011/01/20 12:21:14 | 000,103,140 | RHS- | C] () -- C:\txxemg.exe
[2011/01/20 12:20:28 | 000,103,140 | RHS- | C] () -- C:\fcyp.exe
[2011/01/20 12:19:42 | 000,103,140 | RHS- | C] () -- C:\mdobi.pif
[2011/01/20 12:18:24 | 000,103,140 | RHS- | C] () -- C:\olsd.pif
[2011/01/20 12:17:37 | 000,103,140 | RHS- | C] () -- C:\ufbcyy.exe
[2011/01/20 12:16:52 | 000,103,140 | RHS- | C] () -- C:\uqnh.pif
[2011/01/20 12:16:03 | 000,103,140 | RHS- | C] () -- C:\skekbd.pif
[2011/01/20 12:15:24 | 000,103,140 | RHS- | C] () -- C:\jtwdyh.exe
[2011/01/20 12:14:35 | 000,103,140 | RHS- | C] () -- C:\eryo.exe
[2011/01/20 12:13:45 | 000,103,140 | RHS- | C] () -- C:\begrh.pif
[2011/01/20 12:12:48 | 000,103,140 | RHS- | C] () -- C:\cskn.pif
[2011/01/20 12:11:55 | 000,103,140 | RHS- | C] () -- C:\isoep.pif
[2011/01/20 12:11:03 | 000,103,140 | RHS- | C] () -- C:\pvmk.exe
[2011/01/20 12:10:14 | 000,103,140 | RHS- | C] () -- C:\xwff.exe
[2011/01/20 12:09:26 | 000,103,140 | RHS- | C] () -- C:\rjta.exe
[2011/01/20 12:08:41 | 000,103,140 | RHS- | C] () -- C:\smjw.pif
[2011/01/20 12:07:56 | 000,103,140 | RHS- | C] () -- C:\odaw.pif
[2011/01/20 12:07:07 | 000,103,140 | RHS- | C] () -- C:\rqcncb.exe
[2011/01/20 12:06:26 | 000,103,140 | RHS- | C] () -- C:\ipso.pif
[2011/01/20 12:05:37 | 000,103,140 | RHS- | C] () -- C:\vahja.exe
[2011/01/20 12:04:56 | 000,103,140 | RHS- | C] () -- C:\rsjva.pif
[2011/01/20 12:04:02 | 000,103,140 | RHS- | C] () -- C:\imddo.exe
[2011/01/20 12:03:15 | 000,103,140 | RHS- | C] () -- C:\nemup.pif
[2011/01/20 12:02:30 | 000,103,140 | RHS- | C] () -- C:\iiqvg.exe
[2011/01/20 12:01:46 | 000,103,140 | RHS- | C] () -- C:\qgpy.exe
[2011/01/20 12:00:55 | 000,103,140 | RHS- | C] () -- C:\krjur.pif
[2011/01/20 12:00:14 | 000,103,140 | RHS- | C] () -- C:\ecnlp.exe
[2011/01/20 11:59:30 | 000,103,140 | RHS- | C] () -- C:\tggin.pif
[2011/01/20 11:58:42 | 000,103,140 | RHS- | C] () -- C:\xbba.exe
[2011/01/20 11:57:55 | 000,103,140 | RHS- | C] () -- C:\liudo.exe
[2011/01/20 11:57:17 | 000,103,140 | RHS- | C] () -- C:\ccnt.exe
[2011/01/20 11:56:35 | 000,103,140 | RHS- | C] () -- C:\atol.pif
[2011/01/20 11:55:52 | 000,103,140 | RHS- | C] () -- C:\vubd.exe
[2011/01/20 11:55:09 | 000,103,140 | RHS- | C] () -- C:\rkxitp.pif
[2011/01/20 11:54:29 | 000,103,140 | RHS- | C] () -- C:\gmkdk.exe
[2011/01/20 11:53:50 | 000,103,140 | RHS- | C] () -- C:\bianc.exe
[2011/01/20 11:53:12 | 000,103,140 | RHS- | C] () -- C:\ykbc.pif
[2011/01/20 11:52:29 | 000,103,140 | RHS- | C] () -- C:\ijmxqh.exe
[2011/01/20 11:51:39 | 000,103,140 | RHS- | C] () -- C:\tfppv.exe
[2011/01/20 11:51:00 | 000,103,140 | RHS- | C] () -- C:\sqtw.exe
[2011/01/20 11:50:15 | 000,103,140 | RHS- | C] () -- C:\smsovn.exe
[2011/01/20 11:49:25 | 000,103,140 | RHS- | C] () -- C:\aunfk.pif
[2011/01/20 11:48:45 | 000,103,140 | RHS- | C] () -- C:\xngof.exe
[2011/01/20 11:47:58 | 000,103,140 | RHS- | C] () -- C:\elybjl.pif
[2011/01/20 11:47:08 | 000,103,140 | RHS- | C] () -- C:\xunvws.pif
[2011/01/20 11:46:23 | 000,103,140 | RHS- | C] () -- C:\itncdc.exe
[2011/01/20 11:45:40 | 000,103,140 | RHS- | C] () -- C:\owqkv.pif
[2011/01/20 11:44:34 | 000,103,140 | RHS- | C] () -- C:\vxuah.pif
[2011/01/20 11:43:43 | 000,103,140 | RHS- | C] () -- C:\laqb.exe
[2011/01/20 11:42:56 | 000,103,140 | RHS- | C] () -- C:\ofvgw.exe
[2011/01/20 11:42:11 | 000,103,140 | RHS- | C] () -- C:\ibcon.pif
[2011/01/20 11:41:13 | 000,103,140 | RHS- | C] () -- C:\smpnj.pif
[2011/01/20 11:40:07 | 000,103,140 | RHS- | C] () -- C:\lmvgn.exe
[2011/01/20 11:39:21 | 000,103,140 | RHS- | C] () -- C:\rjvw.exe
[2011/01/20 11:38:28 | 000,103,140 | RHS- | C] () -- C:\urpb.exe
[2011/01/20 11:37:35 | 000,103,140 | RHS- | C] () -- C:\bentmu.exe
[2011/01/20 11:36:19 | 000,103,140 | RHS- | C] () -- C:\ldbyb.pif
[2011/01/20 11:35:39 | 000,103,140 | RHS- | C] () -- C:\ajgsuw.pif
[2011/01/20 11:34:56 | 000,103,140 | RHS- | C] () -- C:\ajgye.pif
[2011/01/20 11:34:06 | 000,103,140 | RHS- | C] () -- C:\qbmm.exe
[2011/01/20 11:33:18 | 000,103,140 | RHS- | C] () -- C:\kwynje.exe
[2011/01/20 11:32:29 | 000,103,140 | RHS- | C] () -- C:\yubrt.exe
[2011/01/20 11:31:44 | 000,103,140 | RHS- | C] () -- C:\ekwgu.pif
[2011/01/20 11:30:47 | 000,103,140 | RHS- | C] () -- C:\qafpn.pif
[2011/01/20 11:29:43 | 000,103,140 | RHS- | C] () -- C:\lghewk.exe
[2011/01/20 11:28:34 | 000,103,140 | RHS- | C] () -- C:\sgkgk.pif
[2011/01/20 11:27:52 | 000,103,140 | RHS- | C] () -- C:\cssaqk.exe
[2011/01/20 11:27:06 | 000,103,140 | RHS- | C] () -- C:\fnpri.exe
[2011/01/20 11:26:10 | 000,103,140 | RHS- | C] () -- C:\hbrvol.exe
[2011/01/20 11:25:25 | 000,103,140 | RHS- | C] () -- C:\xynmb.exe
[2011/01/20 11:24:40 | 000,103,140 | RHS- | C] () -- C:\ltnl.exe
[2011/01/20 11:23:54 | 000,103,140 | RHS- | C] () -- C:\bsno.pif
[2011/01/20 11:23:04 | 000,103,140 | RHS- | C] () -- C:\tqppwg.pif
[2011/01/20 11:22:11 | 000,103,140 | RHS- | C] () -- C:\gtvgos.pif
[2011/01/20 11:21:31 | 000,103,140 | RHS- | C] () -- C:\mtsnu.exe
[2011/01/20 11:20:41 | 000,103,140 | RHS- | C] () -- C:\igdhr.pif
[2011/01/20 11:19:56 | 000,103,140 | RHS- | C] () -- C:\palup.exe
[2011/01/20 11:19:18 | 000,103,140 | RHS- | C] () -- C:\nsby.pif
[2011/01/20 11:18:39 | 000,103,140 | RHS- | C] () -- C:\ntnwp.pif
[2011/01/20 11:17:58 | 000,103,140 | RHS- | C] () -- C:\msrkv.exe
[2011/01/20 11:17:18 | 000,103,140 | RHS- | C] () -- C:\wuna.exe
[2011/01/20 11:16:33 | 000,103,140 | RHS- | C] () -- C:\dciaqf.exe
[2011/01/20 11:15:47 | 000,103,140 | RHS- | C] () -- C:\kvulod.exe
[2011/01/20 11:15:01 | 000,103,140 | RHS- | C] () -- C:\tara.pif
[2011/01/20 11:14:01 | 000,103,140 | RHS- | C] () -- C:\dpenho.exe
[2011/01/20 11:13:13 | 000,103,140 | RHS- | C] () -- C:\btdre.pif
[2011/01/20 11:12:08 | 000,103,140 | RHS- | C] () -- C:\obydn.exe
[2011/01/20 11:10:54 | 000,103,140 | RHS- | C] () -- C:\pokykt.exe
[2011/01/20 11:10:01 | 000,103,140 | RHS- | C] () -- C:\jhxglc.pif
[2011/01/20 11:09:06 | 000,103,140 | RHS- | C] () -- C:\wmif.pif
[2011/01/20 11:08:10 | 000,103,140 | RHS- | C] () -- C:\iinam.exe
[2011/01/20 11:07:22 | 000,103,140 | RHS- | C] () -- C:\etmy.exe
[2011/01/20 11:06:36 | 000,103,140 | RHS- | C] () -- C:\uxpx.pif
[2011/01/20 11:05:49 | 000,103,140 | RHS- | C] () -- C:\rumk.exe
[2011/01/20 11:04:57 | 000,103,140 | RHS- | C] () -- C:\afvxd.pif
[2011/01/20 11:04:12 | 000,103,140 | RHS- | C] () -- C:\pjvm.pif
[2011/01/20 11:03:30 | 000,103,140 | RHS- | C] () -- C:\ejpygu.exe
[2011/01/20 11:02:48 | 000,103,140 | RHS- | C] () -- C:\yiyvm.exe
[2011/01/20 11:01:58 | 000,103,140 | RHS- | C] () -- C:\ysvqf.pif
[2011/01/20 11:01:13 | 000,103,140 | RHS- | C] () -- C:\kifnv.exe
[2011/01/20 10:59:52 | 000,103,140 | RHS- | C] () -- C:\mikw.exe
[2011/01/20 10:59:12 | 000,103,140 | RHS- | C] () -- C:\ofuhf.pif
[2011/01/20 10:58:32 | 000,103,140 | RHS- | C] () -- C:\ruseww.pif
[2011/01/20 10:57:52 | 000,103,140 | RHS- | C] () -- C:\pstkj.pif
[2011/01/20 10:57:05 | 000,103,140 | RHS- | C] () -- C:\viaf.pif
[2011/01/20 10:56:21 | 000,103,140 | RHS- | C] () -- C:\yvjfkr.pif
[2011/01/20 10:55:40 | 000,103,140 | RHS- | C] () -- C:\mltaja.pif
[2011/01/20 10:54:57 | 000,103,140 | RHS- | C] () -- C:\edvb.pif
[2011/01/20 10:54:17 | 000,103,140 | RHS- | C] () -- C:\ekvc.exe
[2011/01/20 10:53:07 | 000,103,140 | RHS- | C] () -- C:\xlli.exe
[2011/01/20 10:52:28 | 000,103,140 | RHS- | C] () -- C:\agwcl.exe
[2011/01/20 10:51:48 | 000,103,140 | RHS- | C] () -- C:\jxtnek.exe
[2011/01/20 10:50:56 | 000,103,140 | RHS- | C] () -- C:\hjbvx.pif
[2011/01/20 10:49:58 | 000,103,140 | RHS- | C] () -- C:\ttapmw.pif
[2011/01/20 10:49:18 | 000,103,140 | RHS- | C] () -- C:\sfhn.exe
[2011/01/20 10:48:33 | 000,103,140 | RHS- | C] () -- C:\vxqq.pif
[2011/01/20 10:46:56 | 000,103,140 | RHS- | C] () -- C:\jyvya.exe
[2011/01/20 10:46:10 | 000,103,140 | RHS- | C] () -- C:\xlcxgf.exe
[2011/01/20 10:45:24 | 000,103,140 | RHS- | C] () -- C:\ufpat.exe
[2011/01/20 10:44:36 | 000,103,140 | RHS- | C] () -- C:\adcb.pif
[2011/01/20 10:43:21 | 000,103,140 | RHS- | C] () -- C:\xbhhx.exe
[2011/01/20 10:42:12 | 000,103,140 | RHS- | C] () -- C:\ljrdkq.exe
[2011/01/20 10:41:12 | 000,103,140 | RHS- | C] () -- C:\pbimu.exe
[2011/01/20 10:40:30 | 000,103,140 | RHS- | C] () -- C:\ilqetb.pif
[2011/01/20 10:39:36 | 000,103,140 | RHS- | C] () -- C:\hpcws.pif
[2011/01/20 10:38:53 | 000,103,140 | RHS- | C] () -- C:\dedqok.exe
[2011/01/20 10:38:08 | 000,103,140 | RHS- | C] () -- C:\gyib.pif
[2011/01/20 10:37:24 | 000,103,140 | RHS- | C] () -- C:\lmpqoj.pif
[2011/01/20 10:36:30 | 000,103,140 | RHS- | C] () -- C:\gbvp.exe
[2011/01/20 10:35:44 | 000,103,140 | RHS- | C] () -- C:\lhwsw.exe
[2011/01/20 10:34:59 | 000,103,140 | RHS- | C] () -- C:\evpuw.exe
[2011/01/20 10:34:13 | 000,103,140 | RHS- | C] () -- C:\kejt.exe
[2011/01/20 10:33:19 | 000,103,140 | RHS- | C] () -- C:\vyxici.exe
[2011/01/20 10:32:09 | 000,103,140 | RHS- | C] () -- C:\uedcrs.pif
[2011/01/20 10:31:03 | 000,103,140 | RHS- | C] () -- C:\cffy.exe
[2011/01/20 10:30:08 | 000,103,140 | RHS- | C] () -- C:\ngljaf.pif
[2011/01/20 10:29:27 | 000,103,140 | RHS- | C] () -- C:\uhup.exe
[2011/01/20 10:28:32 | 000,103,140 | RHS- | C] () -- C:\idvth.exe
[2011/01/20 10:27:30 | 000,103,140 | RHS- | C] () -- C:\cycjhp.pif
[2011/01/20 10:26:45 | 000,103,140 | RHS- | C] () -- C:\glqu.exe
[2011/01/20 10:25:57 | 000,103,140 | RHS- | C] () -- C:\olph.pif
[2011/01/20 10:25:02 | 000,103,140 | RHS- | C] () -- C:\sqcuwb.exe
[2011/01/20 10:24:01 | 000,103,140 | RHS- | C] () -- C:\pkgj.pif
[2011/01/20 10:23:03 | 000,103,140 | RHS- | C] () -- C:\uvci.pif
[2011/01/20 10:22:10 | 000,103,140 | RHS- | C] () -- C:\bodcva.pif
[2011/01/20 10:21:21 | 000,103,140 | RHS- | C] () -- C:\yfxspw.pif
[2011/01/20 10:20:30 | 000,103,140 | RHS- | C] () -- C:\apjj.pif
[2011/01/20 10:19:21 | 000,103,140 | RHS- | C] () -- C:\xwxfl.pif
[2011/01/20 10:18:24 | 000,103,140 | RHS- | C] () -- C:\ullx.pif
[2011/01/20 10:17:34 | 000,103,140 | RHS- | C] () -- C:\adyyne.exe
[2011/01/20 10:16:53 | 000,103,140 | RHS- | C] () -- C:\nxvac.exe
[2011/01/20 10:16:11 | 000,103,140 | RHS- | C] () -- C:\ujflxe.exe
[2011/01/20 10:15:29 | 000,103,140 | RHS- | C] () -- C:\nygrt.pif
[2011/01/20 10:14:44 | 000,103,140 | RHS- | C] () -- C:\wbuyqx.exe
[2011/01/20 10:13:21 | 000,103,140 | RHS- | C] () -- C:\jfmtu.exe
[2011/01/20 10:12:27 | 000,103,140 | RHS- | C] () -- C:\dlqga.pif
[2011/01/20 10:11:31 | 000,103,140 | RHS- | C] () -- C:\ugov.exe
[2011/01/20 10:10:30 | 000,103,140 | RHS- | C] () -- C:\bllow.pif
[2011/01/20 10:09:38 | 000,103,140 | RHS- | C] () -- C:\rdbikp.exe
[2011/01/20 10:08:43 | 000,103,140 | RHS- | C] () -- C:\lepk.exe
[2011/01/20 10:07:36 | 000,103,140 | RHS- | C] () -- C:\drofg.pif
[2011/01/20 10:06:54 | 000,103,140 | RHS- | C] () -- C:\vkywny.pif
[2011/01/20 10:06:13 | 000,103,140 | RHS- | C] () -- C:\sbfk.pif
[2011/01/20 10:05:21 | 000,103,140 | RHS- | C] () -- C:\lbti.exe
[2011/01/20 10:04:42 | 000,103,140 | RHS- | C] () -- C:\ehqd.pif
[2011/01/20 10:04:01 | 000,103,140 | RHS- | C] () -- C:\epgrbi.exe
[2011/01/20 10:03:20 | 000,103,140 | RHS- | C] () -- C:\vexnjb.exe
[2011/01/20 10:02:39 | 000,103,140 | RHS- | C] () -- C:\uqbw.exe
[2011/01/20 10:02:00 | 000,103,140 | RHS- | C] () -- C:\dqsja.pif
[2011/01/20 10:01:19 | 000,103,140 | RHS- | C] () -- C:\wxxan.pif
[2011/01/20 10:00:37 | 000,103,140 | RHS- | C] () -- C:\hostu.exe
[2011/01/20 09:59:45 | 000,103,140 | RHS- | C] () -- C:\lasry.exe
[2011/01/20 09:59:03 | 000,103,140 | RHS- | C] () -- C:\nwgf.exe
[2011/01/20 09:58:23 | 000,103,140 | RHS- | C] () -- C:\ijslwt.pif
[2011/01/20 09:57:45 | 000,103,140 | RHS- | C] () -- C:\vybgc.exe
[2011/01/20 09:57:02 | 000,103,140 | RHS- | C] () -- C:\yytsek.exe
[2011/01/20 09:56:20 | 000,103,140 | RHS- | C] () -- C:\ifepr.exe
[2011/01/20 09:55:37 | 000,103,140 | RHS- | C] () -- C:\bwbrls.pif
[2011/01/20 09:54:55 | 000,103,140 | RHS- | C] () -- C:\oiure.exe
[2011/01/20 09:54:13 | 000,103,140 | RHS- | C] () -- C:\xvutv.pif
[2011/01/20 09:52:41 | 000,103,140 | RHS- | C] () -- C:\jbbhh.pif
[2011/01/20 09:51:45 | 000,103,140 | RHS- | C] () -- C:\yfxo.exe
[2011/01/20 09:51:00 | 000,103,140 | RHS- | C] () -- C:\fyqxmc.pif
[2011/01/20 09:50:19 | 000,103,140 | RHS- | C] () -- C:\gmwd.pif
[2011/01/20 09:49:38 | 000,103,140 | RHS- | C] () -- C:\swud.exe
[2011/01/20 09:48:57 | 000,103,140 | RHS- | C] () -- C:\ettp.exe
[2011/01/20 09:48:15 | 000,103,140 | RHS- | C] () -- C:\mana.pif
[2011/01/20 09:47:34 | 000,103,140 | RHS- | C] () -- C:\pxmr.pif
[2011/01/20 09:46:20 | 000,103,140 | RHS- | C] () -- C:\jnyxri.exe
[2011/01/20 09:44:53 | 000,103,140 | RHS- | C] () -- C:\qxnwst.pif
[2011/01/20 09:44:13 | 000,103,140 | RHS- | C] () -- C:\clvxi.exe
[2011/01/20 09:43:34 | 000,103,140 | RHS- | C] () -- C:\vmxxno.pif
[2011/01/20 09:42:53 | 000,103,140 | RHS- | C] () -- C:\ryou.exe
[2011/01/20 09:41:53 | 000,103,140 | RHS- | C] () -- C:\pwyxoj.pif
[2011/01/20 09:40:21 | 000,103,140 | RHS- | C] () -- C:\nnnw.pif
[2011/01/20 09:39:05 | 000,103,140 | RHS- | C] () -- C:\knvoof.pif
[2011/01/20 09:37:52 | 000,103,140 | RHS- | C] () -- C:\seyr.pif
[2011/01/20 09:35:40 | 000,103,140 | RHS- | C] () -- C:\rcswp.pif
[2011/01/20 09:33:22 | 000,103,140 | RHS- | C] () -- C:\eela.exe
[2011/01/20 09:31:13 | 000,103,140 | RHS- | C] () -- C:\efyjyt.pif
[2011/01/20 09:29:50 | 000,103,140 | RHS- | C] () -- C:\pwhxpp.exe
[2011/01/20 09:28:53 | 000,103,140 | RHS- | C] () -- C:\txxm.exe
[2011/01/20 09:28:09 | 000,103,140 | RHS- | C] () -- C:\ulfbid.exe
[2011/01/20 09:27:26 | 000,103,140 | RHS- | C] () -- C:\tksx.pif
[2011/01/20 09:26:45 | 000,103,140 | RHS- | C] () -- C:\lxki.pif
[2011/01/20 09:25:50 | 000,103,140 | RHS- | C] () -- C:\food.exe
[2011/01/20 09:25:03 | 000,103,140 | RHS- | C] () -- C:\mguo.pif
[2011/01/20 09:24:08 | 000,103,140 | RHS- | C] () -- C:\epwuo.pif
[2011/01/20 09:23:21 | 000,103,140 | RHS- | C] () -- C:\yawjmo.exe
[2011/01/20 09:22:41 | 000,103,140 | RHS- | C] () -- C:\igtwp.pif
[2011/01/20 09:21:57 | 000,103,140 | RHS- | C] () -- C:\vpmem.exe
[2011/01/20 09:21:09 | 000,103,140 | RHS- | C] () -- C:\sbuj.pif
[2011/01/20 09:20:13 | 000,103,140 | RHS- | C] () -- C:\irbg.exe
[2011/01/20 09:19:01 | 000,103,140 | RHS- | C] () -- C:\wnaus.pif
[2011/01/20 09:18:09 | 000,103,140 | RHS- | C] () -- C:\dgjbjj.exe
[2011/01/20 09:17:16 | 000,103,140 | RHS- | C] () -- C:\wjbtij.exe
[2011/01/20 09:16:35 | 000,103,140 | RHS- | C] () -- C:\ipgcxn.exe
[2011/01/20 09:15:48 | 000,103,140 | RHS- | C] () -- C:\yltrs.exe
[2011/01/20 09:15:00 | 000,103,140 | RHS- | C] () -- C:\eabj.exe
[2011/01/20 09:14:02 | 000,103,140 | RHS- | C] () -- C:\wcdv.exe
[2011/01/20 09:13:17 | 000,103,140 | RHS- | C] () -- C:\wxehfg.exe
[2011/01/20 09:12:33 | 000,103,140 | RHS- | C] () -- C:\pugoh.exe
[2011/01/20 09:10:46 | 000,103,140 | RHS- | C] () -- C:\nvji.exe
[2011/01/20 09:08:47 | 000,103,140 | RHS- | C] () -- C:\taon.exe
[2011/01/20 09:06:23 | 000,103,140 | RHS- | C] () -- C:\ldjq.pif
[2011/01/20 09:04:33 | 000,103,140 | RHS- | C] () -- C:\yudrkj.exe
[2011/01/20 09:02:37 | 000,103,140 | RHS- | C] () -- C:\pnqsd.pif
[2011/01/20 09:01:33 | 000,103,140 | RHS- | C] () -- C:\vpufl.exe
[2011/01/19 17:21:27 | 000,103,140 | RHS- | C] () -- C:\qcyrj.exe
[2011/01/19 17:20:49 | 000,103,140 | RHS- | C] () -- C:\aitj.pif
[2011/01/19 17:20:11 | 000,103,140 | RHS- | C] () -- C:\ycqte.exe
[2011/01/19 17:19:30 | 000,103,140 | RHS- | C] () -- C:\pkjgo.pif
[2011/01/19 17:18:53 | 000,103,140 | RHS- | C] () -- C:\atken.exe
[2011/01/19 17:18:16 | 000,103,140 | RHS- | C] () -- C:\qnbo.exe
[2011/01/19 17:17:32 | 000,103,140 | RHS- | C] () -- C:\seahqf.exe
[2011/01/19 17:16:55 | 000,103,140 | RHS- | C] () -- C:\bnogt.pif
[2011/01/19 17:16:15 | 000,103,140 | RHS- | C] () -- C:\hrkd.pif
[2011/01/19 17:15:10 | 000,103,140 | RHS- | C] () -- C:\jrti.pif
[2011/01/19 17:14:32 | 000,103,140 | RHS- | C] () -- C:\ocoe.pif
[2011/01/19 17:13:45 | 000,103,140 | RHS- | C] () -- C:\rjuvg.exe
[2011/01/19 17:13:08 | 000,103,140 | RHS- | C] () -- C:\grhycw.pif
[2011/01/19 17:12:31 | 000,103,140 | RHS- | C] () -- C:\tvfc.pif
[2011/01/19 17:11:50 | 000,103,140 | RHS- | C] () -- C:\uboet.pif
[2011/01/19 17:11:06 | 000,103,140 | RHS- | C] () -- C:\vsho.exe
[2011/01/19 17:10:15 | 000,103,140 | RHS- | C] () -- C:\ranoqc.pif
[2011/01/19 17:09:37 | 000,103,140 | RHS- | C] () -- C:\ebnuok.pif
[2011/01/19 17:08:53 | 000,103,140 | RHS- | C] () -- C:\cofnlq.pif
[2011/01/19 17:08:15 | 000,103,140 | RHS- | C] () -- C:\rihn.exe
[2011/01/19 17:07:38 | 000,103,140 | RHS- | C] () -- C:\oxxeon.pif
[2011/01/19 17:07:00 | 000,103,140 | RHS- | C] () -- C:\cflln.exe
[2011/01/19 17:06:21 | 000,103,140 | RHS- | C] () -- C:\feguyx.pif
[2011/01/19 17:05:42 | 000,103,140 | RHS- | C] () -- C:\nufo.exe
[2011/01/19 17:05:03 | 000,103,140 | RHS- | C] () -- C:\bwbeaf.pif
[2011/01/19 17:03:03 | 000,103,140 | RHS- | C] () -- C:\atkxlt.pif
[2011/01/19 17:02:05 | 000,103,140 | RHS- | C] () -- C:\ewgtj.exe
[2011/01/19 17:00:38 | 000,103,140 | RHS- | C] () -- C:\ntcy.exe
[2011/01/19 16:59:53 | 000,103,140 | RHS- | C] () -- C:\ykcr.exe
[2011/01/19 16:59:07 | 001,221,348 | ---- | C] () -- C:\atfvaa.exe
[2011/01/19 16:57:57 | 000,103,140 | RHS- | C] () -- C:\owpf.exe
[2011/01/19 16:56:57 | 000,103,140 | RHS- | C] () -- C:\ytlngj.pif
[2011/01/19 16:56:07 | 000,103,140 | RHS- | C] () -- C:\ivwiby.pif
[2011/01/19 16:55:15 | 000,103,140 | RHS- | C] () -- C:\kvlsa.exe
[2011/01/19 16:54:23 | 000,103,140 | RHS- | C] () -- C:\nyxqc.pif
[2011/01/19 16:53:39 | 000,103,140 | RHS- | C] () -- C:\yipj.exe
[2011/01/19 16:52:59 | 000,103,140 | RHS- | C] () -- C:\evsw.pif
[2011/01/19 16:52:18 | 000,103,140 | RHS- | C] () -- C:\pkcjnq.pif
[2008/04/10 15:20:56 | 000,000,251 | ---- | C] () -- C:\WINDOWS\System32\drivers\hlldrvr.sys
[2008/04/10 15:18:49 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\qxdaedrs.dll
[2008/04/10 15:18:48 | 000,172,032 | ---- | C] () -- C:\WINDOWS\System32\cwbrw.dll
[2008/04/10 15:18:48 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\cwbwiz.dll
[2008/04/10 15:10:57 | 000,000,636 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2008/03/05 09:09:19 | 000,459,664 | ---- | C] () -- C:\WINDOWS\System32\igmedkrn.dll
[2008/03/05 09:09:19 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4670.dll
[2008/03/05 08:41:24 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2008/03/05 08:23:28 | 000,204,800 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeW7.dll
[2008/03/05 08:23:28 | 000,200,704 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeA6.dll
[2008/03/05 08:23:28 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeP6.dll
[2008/03/05 08:23:28 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeM6.dll
[2008/03/05 08:23:28 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\IVIresizePX.dll
[2008/03/05 08:23:28 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\IVIresize.dll
[2004/08/09 05:33:30 | 000,004,580 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2003/01/07 14:05:08 | 000,002,695 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI
[2002/05/08 02:12:22 | 000,000,790 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini

========== Custom Scans ==========


< %systemroot%\Fonts\*.com >
[2006/04/18 14:39:28 | 000,026,040 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalMonospace.CompositeFont
[2006/06/29 13:53:56 | 000,026,489 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalSansSerif.CompositeFont
[2006/04/18 14:39:28 | 000,029,779 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalSerif.CompositeFont
[2006/06/29 13:58:52 | 000,030,808 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2004/08/09 05:32:58 | 000,000,067 | -HS- | M] () -- C:\WINDOWS\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2008/07/06 04:06:10 | 000,089,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
[2008/03/26 23:00:14 | 000,084,480 | ---- | M] (Microsoft Corporation.) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\lmdippr8.dll
[2003/06/18 16:31:48 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\mdippr.dll
[2008/07/06 02:50:03 | 000,597,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >

< %APPDATA%\Update\*.* >

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
[2009/11/06 14:10:57 | 000,000,272 | -HS- | M] () -- C:\Documents and Settings\All Users\Start Menu\desktop.ini

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2009/11/09 11:28:57 | 000,000,119 | -HS- | M] () -- C:\Documents and Settings\sarechig\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini

< %USERPROFILE%\Desktop\*.exe >
[2009/12/22 10:58:34 | 000,308,160 | ---- | M] (ALWIL Software) -- C:\Documents and Settings\sarechig\Desktop\avast_home_setup.exe
[2009/12/22 10:53:24 | 030,909,992 | ---- | M] () -- C:\Documents and Settings\sarechig\Desktop\avira_antivir_personal_en.exe
[2009/12/22 10:22:52 | 004,913,928 | ---- | M] (Malwarebytes Corporation ) -- C:\Documents and Settings\sarechig\Desktop\mbam-setup.exe
[2011/01/31 14:24:49 | 058,833,152 | ---- | M] () -- C:\Documents and Settings\sarechig\Desktop\setup_av_free.exe

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< %APPDATA%\Roaming\Microsoft\Windows\Recent\*.lnk /x >

< %PROGRAMFILES%\PC-Doctor\Downloads\*.* >

< %PROGRAMFILES%\Internet Explorer\*.tmp >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %USERPROFILE%\My Documents\*.exe >

< %USERPROFILE%\*.exe >

< %systemroot%\ADDINS\*.* >

< %systemroot%\assembly\*.bak2 >

< %systemroot%\Config\*.* >

< %systemroot%\REPAIR\*.bak2 >

< %systemroot%\SECURITY\Database\*.sdb /x >

< %systemroot%\SYSTEM\*.bak2 >

< %systemroot%\Web\*.bak2 >

< %systemroot%\Driver Cache\*.* >

< %PROGRAMFILES%\Mozilla Firefox\*.exe >

< %ProgramFiles%\Microsoft Common\*.* >

< %ProgramFiles%\TinyProxy. >

< %USERPROFILE%\Favorites\*.url /x >
[2009/11/09 11:28:56 | 000,000,122 | -HS- | M] () -- C:\Documents and Settings\sarechig\Favorites\Desktop.ini

< %systemroot%\system32\*.bk >

< %systemroot%\*.te >

< %systemroot%\system32\system32\*.* >

< %ALLUSERSPROFILE%\*.dat /x >

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\system32\*.exe /lockedfiles >
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >
[2004/08/08 22:20:08 | 000,094,208 | ---- | M] () -- C:\WINDOWS\system32\config\default.sav
[2004/08/08 22:20:08 | 000,659,456 | ---- | M] () -- C:\WINDOWS\system32\config\software.sav
[2004/08/08 22:20:08 | 000,864,256 | ---- | M] () -- C:\WINDOWS\system32\config\system.sav

< %systemroot%\system32\*.sys >
[2004/08/04 00:00:00 | 000,009,029 | ---- | M] () -- C:\WINDOWS\system32\ansi.sys
[2004/08/04 00:00:00 | 000,027,097 | ---- | M] () -- C:\WINDOWS\system32\country.sys
[2004/08/04 00:00:00 | 000,004,768 | ---- | M] () -- C:\WINDOWS\system32\himem.sys
[2004/08/04 00:00:00 | 000,042,809 | ---- | M] () -- C:\WINDOWS\system32\key01.sys
[2004/08/04 00:00:00 | 000,042,537 | ---- | M] () -- C:\WINDOWS\system32\keyboard.sys
[2004/08/04 00:00:00 | 000,027,866 | ---- | M] () -- C:\WINDOWS\system32\ntdos.sys
[2004/08/04 00:00:00 | 000,029,146 | ---- | M] () -- C:\WINDOWS\system32\ntdos404.sys
[2004/08/04 00:00:00 | 000,029,370 | ---- | M] () -- C:\WINDOWS\system32\ntdos411.sys
[2004/08/04 00:00:00 | 000,029,274 | ---- | M] () -- C:\WINDOWS\system32\ntdos412.sys
[2004/08/04 00:00:00 | 000,029,146 | ---- | M] () -- C:\WINDOWS\system32\ntdos804.sys
[2004/08/04 00:00:00 | 000,033,840 | ---- | M] () -- C:\WINDOWS\system32\ntio.sys
[2004/08/04 00:00:00 | 000,034,560 | ---- | M] () -- C:\WINDOWS\system32\ntio404.sys
[2004/08/04 00:00:00 | 000,035,648 | ---- | M] () -- C:\WINDOWS\system32\ntio411.sys
[2004/08/04 00:00:00 | 000,035,424 | ---- | M] () -- C:\WINDOWS\system32\ntio412.sys
[2004/08/04 00:00:00 | 000,034,560 | ---- | M] () -- C:\WINDOWS\system32\ntio804.sys
[2008/04/13 10:44:59 | 000,017,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\watchdog.sys
[2010/10/26 05:25:00 | 001,853,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\win32k.sys
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

pfchang
Intermediate
Intermediate

Posts Posts : 66
Joined Joined : 2009-03-05
OS OS : Windows XP Professional
Points Points : 28695
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Virus - Shutting down antivirus

Post by pfchang on Tue Feb 01, 2011 12:09 am

< %systemroot%\system32\drivers\*.dll >
[2008/04/13 16:11:48 | 000,004,255 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv01nt5.dll
[2008/04/13 16:11:48 | 000,003,967 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv02nt5.dll
[2008/04/13 16:11:48 | 000,003,615 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv05nt5.dll
[2008/04/13 16:11:48 | 000,003,647 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv07nt5.dll
[2008/04/13 16:11:48 | 000,003,135 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv08nt5.dll
[2008/04/13 16:11:48 | 000,003,711 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv09nt5.dll
[2008/04/13 16:11:48 | 000,003,775 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv11nt5.dll
[2008/04/13 16:11:50 | 000,021,183 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\atv01nt5.dll
[2008/04/13 16:11:50 | 000,011,359 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\atv02nt5.dll
[2008/04/13 16:11:50 | 000,025,471 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\atv04nt5.dll
[2008/04/13 16:11:50 | 000,014,143 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\atv06nt5.dll
[2008/04/13 16:11:50 | 000,017,279 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\atv10nt5.dll
[2008/04/13 16:11:50 | 000,015,423 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\ch7xxnt5.dll
[2008/04/13 16:12:05 | 000,003,901 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\siint5.dll
[2008/04/13 16:12:08 | 000,011,325 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\vchnt5.dll

< %systemroot%\system32\drivers\*.ini >

< %systemroot%\system32\drivers\*.exe >

< %systemroot%\system32\Spool\prtprocs\w32x86\*.dll >
[2008/07/06 04:06:10 | 000,089,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
[2008/03/26 23:00:14 | 000,084,480 | ---- | M] (Microsoft Corporation.) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\lmdippr8.dll
[2003/06/18 16:31:48 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\mdippr.dll

< %SYSTEMDRIVE%\*.* >
[2009/12/03 11:34:47 | 000,000,053 | ---- | M] () -- C:\29200 Pricing 1061_120309.FDF
[2009/12/03 11:38:04 | 000,021,504 | ---- | M] () -- C:\29200 Pricing 1061_120309.xls
[2010/06/07 12:13:36 | 000,003,528 | ---- | M] () -- C:\29200 Pricing 1185_060710.xls
[2010/03/16 11:09:49 | 000,000,053 | ---- | M] () -- C:\29200 Pricing_031610.FDF
[2010/03/16 11:22:08 | 000,004,419 | ---- | M] () -- C:\29200 Pricing_031610.xls
[2010/02/17 14:06:51 | 000,000,053 | ---- | M] () -- C:\29200 XREF_021710.FDF
[2010/02/17 14:06:58 | 000,007,829 | ---- | M] () -- C:\29200 XREF_021710.xls
[2009/12/03 10:36:25 | 000,000,053 | ---- | M] () -- C:\799728 Pricing 1061_1203009.FDF
[2009/12/03 11:32:12 | 000,297,984 | ---- | M] () -- C:\799728 Pricing 1061_1203009.xls
[2010/04/06 13:09:01 | 000,000,053 | ---- | M] () -- C:\799728 Pricing 1098_040610.FDF
[2010/04/06 13:21:51 | 000,143,024 | ---- | M] () -- C:\799728 Pricing 1098_040610.xls
[2010/06/07 15:40:08 | 000,373,760 | ---- | M] () -- C:\799728 Pricing 1185_060710.xls
[2009/12/10 16:30:01 | 000,000,053 | ---- | M] () -- C:\799728 Pricing GM 1061_121009.FDF
[2009/12/10 16:31:53 | 000,060,828 | ---- | M] () -- C:\799728 Pricing GM 1061_121009.xls
[2010/09/29 11:03:12 | 000,065,024 | ---- | M] () -- C:\799728 Pricing GM 1300_092910.xls
[2010/03/16 10:56:09 | 000,000,053 | ---- | M] () -- C:\799728 Pricing_031610.FDF
[2010/03/16 11:06:14 | 000,142,936 | ---- | M] () -- C:\799728 Pricing_031610.xls
[2010/06/07 15:07:27 | 000,154,025 | ---- | M] () -- C:\799728 Pricing_060710.xls
[2009/11/10 10:32:40 | 000,000,053 | ---- | M] () -- C:\799728 Pricing_111009.FDF
[2009/11/10 10:45:56 | 000,140,325 | ---- | M] () -- C:\799728 Pricing_111009.xls
[2009/11/19 10:47:43 | 000,000,053 | ---- | M] () -- C:\799728 Pricing_111909.FDF
[2009/11/23 17:38:18 | 000,140,070 | ---- | M] () -- C:\799728 Pricing_111909.xls
[2010/02/02 15:36:52 | 000,000,053 | ---- | M] () -- C:\799728 XREF_021010.FDF
[2010/02/02 15:46:44 | 000,357,376 | ---- | M] () -- C:\799728 XREF_021010.xls
[2010/02/02 15:52:51 | 000,000,053 | ---- | M] () -- C:\799728 XREF_021010X.FDF
[2010/02/02 16:01:29 | 000,353,280 | ---- | M] () -- C:\799728 XREF_021010X.xls
[2010/02/17 13:58:28 | 000,000,053 | ---- | M] () -- C:\799728 XREF_021710.FDF
[2010/02/17 14:02:50 | 000,260,315 | ---- | M] () -- C:\799728 XREF_021710.xls
[2010/07/27 09:25:01 | 000,423,424 | ---- | M] () -- C:\799728 XREF_072710.xls
[2009/12/03 11:36:58 | 000,000,053 | ---- | M] () -- C:\799830 Pricing 1061_120309.FDF
[2009/12/03 11:39:44 | 000,024,576 | ---- | M] () -- C:\799830 Pricing 1061_120309.xls
[2010/06/07 12:13:27 | 000,014,287 | ---- | M] () -- C:\799830 Pricing 1185_060710.xls
[2010/03/03 13:56:12 | 000,000,053 | ---- | M] () -- C:\799830 Pricing GM 1061_030310.FDF
[2010/03/03 13:56:21 | 000,009,439 | ---- | M] () -- C:\799830 Pricing GM 1061_030310.xls
[2009/11/30 16:11:46 | 000,000,053 | ---- | M] () -- C:\799830 Pricing GM 1061_113009.FDF
[2009/11/30 16:13:58 | 000,007,896 | ---- | M] () -- C:\799830 Pricing GM 1061_113009.xls
[2010/03/03 13:57:41 | 000,000,053 | ---- | M] () -- C:\799830 Pricing GM 1111_030310.FDF
[2010/03/03 14:33:43 | 000,005,575 | ---- | M] () -- C:\799830 Pricing GM 1111_030310.xls
[2010/05/20 09:05:36 | 000,012,292 | ---- | M] () -- C:\799830 Pricing GM 1111_052010.xls
[2010/05/20 09:22:50 | 000,013,085 | ---- | M] () -- C:\799830 Pricing GM 1179_052010.xls
[2009/11/30 15:54:20 | 000,000,053 | ---- | M] () -- C:\799830 Pricing GM_113009.FDF
[2009/11/30 16:07:07 | 000,028,160 | ---- | M] () -- C:\799830 Pricing GM_113009.xls
[2009/11/30 16:06:32 | 000,000,053 | ---- | M] () -- C:\799830 Pricing GM_113009X.FDF
[2009/11/30 16:10:17 | 000,007,922 | ---- | M] () -- C:\799830 Pricing GM_113009X.xls
[2010/03/16 11:24:45 | 000,000,053 | ---- | M] () -- C:\799830 Pricing_031610.FDF
[2010/03/16 11:27:47 | 000,010,293 | ---- | M] () -- C:\799830 Pricing_031610.xls
[2010/03/03 13:41:31 | 000,000,053 | ---- | M] () -- C:\799830 XREF_030310.FDF
[2010/03/03 15:19:06 | 000,008,658 | ---- | M] () -- C:\799830 XREF_030310.xls
[2010/05/20 10:35:58 | 000,035,840 | ---- | M] () -- C:\799830 XREF_052010.xls
[2011/01/21 14:03:47 | 000,103,140 | RHS- | M] () -- C:\aafxu.pif
[2011/01/20 16:19:17 | 000,103,140 | RHS- | M] () -- C:\aamvjb.pif
[2011/01/20 16:18:40 | 000,103,140 | RHS- | M] () -- C:\aasnr.pif
[2011/01/25 16:51:23 | 000,103,140 | RHS- | M] () -- C:\aatjs.pif
[2011/01/25 16:11:30 | 000,103,140 | RHS- | M] () -- C:\abjs.exe
[2011/01/20 16:31:38 | 000,103,140 | RHS- | M] () -- C:\accht.exe
[2011/01/20 13:57:34 | 000,103,140 | ---- | M] () -- C:\acgxoo.exe
[2011/01/20 15:22:10 | 000,103,140 | RHS- | M] () -- C:\acyu.exe
[2011/01/20 10:44:38 | 000,103,140 | RHS- | M] () -- C:\adcb.pif
[2011/01/20 12:53:18 | 000,103,140 | RHS- | M] () -- C:\adqm.pif
[2011/01/24 10:46:58 | 000,103,140 | RHS- | M] () -- C:\adqw.exe
[2011/01/20 10:17:36 | 000,103,140 | RHS- | M] () -- C:\adyyne.exe
[2011/01/20 13:19:13 | 000,103,140 | RHS- | M] () -- C:\aebma.pif
[2011/01/24 12:28:02 | 000,103,140 | RHS- | M] () -- C:\aedq.exe
[2011/01/21 15:08:56 | 000,103,140 | RHS- | M] () -- C:\aehsr.exe
[2011/01/25 15:54:30 | 000,103,140 | RHS- | M] () -- C:\aelaml.exe
[2011/01/24 09:55:48 | 000,103,140 | RHS- | M] () -- C:\aelx.exe
[2011/01/20 16:31:02 | 000,103,140 | RHS- | M] () -- C:\aesvk.exe
[2011/01/24 09:15:22 | 000,103,140 | RHS- | M] () -- C:\aexp.pif
[2011/01/21 15:50:17 | 000,103,140 | RHS- | M] () -- C:\afse.pif
[2011/01/20 11:04:59 | 000,103,140 | RHS- | M] () -- C:\afvxd.pif
[2011/01/20 13:43:32 | 000,103,140 | RHS- | M] () -- C:\afxhv.exe
[2011/01/20 14:29:48 | 000,103,140 | RHS- | M] () -- C:\agcedn.pif
[2011/01/20 10:52:30 | 000,103,140 | RHS- | M] () -- C:\agwcl.exe
[2011/01/21 15:24:12 | 000,103,140 | RHS- | M] () -- C:\agwv.exe
[2011/01/20 15:08:16 | 000,103,140 | RHS- | M] () -- C:\ahcmxf.pif
[2011/01/20 15:46:20 | 000,103,140 | RHS- | M] () -- C:\ahfs.exe
[2011/01/24 11:18:18 | 000,103,140 | RHS- | M] () -- C:\ahtfo.exe
[2011/01/19 17:20:50 | 000,103,140 | RHS- | M] () -- C:\aitj.pif
[2011/01/20 11:35:40 | 000,103,140 | RHS- | M] () -- C:\ajgsuw.pif
[2011/01/20 11:34:57 | 000,103,140 | RHS- | M] () -- C:\ajgye.pif
[2011/01/24 13:05:34 | 000,103,140 | RHS- | M] () -- C:\ajhoid.exe
[2011/01/21 11:53:10 | 000,103,140 | RHS- | M] () -- C:\akihbh.pif
[2011/01/24 09:35:28 | 000,103,140 | RHS- | M] () -- C:\aklxcj.exe
[2011/01/20 15:21:19 | 000,103,140 | RHS- | M] () -- C:\akpcsf.pif
[2011/01/20 15:50:12 | 000,103,140 | RHS- | M] () -- C:\alfp.exe
[2011/01/25 15:43:06 | 000,103,140 | RHS- | M] () -- C:\algb.exe
[2011/01/21 15:47:15 | 000,103,140 | RHS- | M] () -- C:\almqkb.pif
[2011/01/21 14:53:33 | 000,103,140 | RHS- | M] () -- C:\anfsv.pif
[2011/01/20 13:50:44 | 000,103,140 | RHS- | M] () -- C:\angr.exe
[2011/01/21 14:01:48 | 000,103,140 | RHS- | M] () -- C:\aopcjh.exe
[2011/01/21 16:23:11 | 000,103,140 | RHS- | M] () -- C:\aosy.pif
[2011/01/20 16:57:50 | 000,103,140 | RHS- | M] () -- C:\apbew.pif
[2011/01/21 10:38:37 | 000,103,140 | RHS- | M] () -- C:\apekn.pif
[2011/01/21 12:22:03 | 000,103,140 | RHS- | M] () -- C:\apgufk.pif
[2011/01/21 10:43:08 | 000,103,140 | RHS- | M] () -- C:\apjdf.exe
[2011/01/20 10:20:32 | 000,103,140 | RHS- | M] () -- C:\apjj.pif
[2011/01/21 10:47:18 | 000,103,140 | RHS- | M] () -- C:\aprd.pif
[2011/01/24 12:01:50 | 000,103,140 | RHS- | M] () -- C:\aqkk.exe
[2011/01/24 11:40:30 | 000,103,140 | RHS- | M] () -- C:\arcoo.exe
[2011/01/20 15:00:58 | 000,103,140 | RHS- | M] () -- C:\arffmc.exe
[2011/01/24 13:46:56 | 000,103,140 | RHS- | M] () -- C:\asuhe.exe
[2011/01/21 09:26:30 | 001,221,348 | ---- | M] () -- C:\atfvaa.exe
[2011/01/19 17:18:56 | 000,103,140 | RHS- | M] () -- C:\atken.exe
[2011/01/19 17:03:05 | 000,103,140 | RHS- | M] () -- C:\atkxlt.pif
[2011/01/20 11:56:36 | 000,103,140 | RHS- | M] () -- C:\atol.pif
[2011/01/21 11:38:58 | 000,103,140 | RHS- | M] () -- C:\attto.pif
[2011/01/25 15:37:30 | 000,103,140 | RHS- | M] () -- C:\atxw.pif
[2011/01/25 16:06:08 | 000,103,140 | RHS- | M] () -- C:\atytr.exe
[2011/01/20 11:49:26 | 000,103,140 | RHS- | M] () -- C:\aunfk.pif
[2011/01/24 11:46:38 | 000,103,140 | RHS- | M] () -- C:\auqp.exe
[2011/01/20 14:37:04 | 000,103,140 | RHS- | M] () -- C:\auravf.exe
[2011/01/19 16:45:20 | 000,000,304 | ---- | M] () -- C:\autorun.inf
[2011/01/20 15:29:58 | 000,103,140 | RHS- | M] () -- C:\avcibq.exe
[2011/01/21 15:36:52 | 000,103,140 | RHS- | M] () -- C:\awayt.pif
[2011/01/25 16:01:32 | 000,103,140 | RHS- | M] () -- C:\awhgdd.exe
[2011/01/20 13:31:36 | 000,103,140 | RHS- | M] () -- C:\awqd.pif
[2011/01/20 13:42:38 | 000,103,140 | RHS- | M] () -- C:\axat.exe
[2011/01/24 09:27:31 | 000,103,140 | RHS- | M] () -- C:\axqex.pif
[2011/01/21 15:05:50 | 000,103,140 | RHS- | M] () -- C:\ayglc.exe
[2011/01/21 16:55:13 | 000,103,140 | RHS- | M] () -- C:\aytmno.pif
[2011/01/20 12:29:28 | 000,103,140 | RHS- | M] () -- C:\baukpu.exe
[2011/01/20 12:25:22 | 000,103,140 | RHS- | M] () -- C:\bcnv.exe
[2011/01/20 14:33:18 | 000,103,140 | RHS- | M] () -- C:\bcpli.exe
[2011/01/20 16:24:54 | 000,103,140 | RHS- | M] () -- C:\bcqtea.pif
[2011/01/21 13:39:00 | 000,103,140 | RHS- | M] () -- C:\bcwhq.pif
[2011/01/20 12:46:44 | 000,103,140 | RHS- | M] () -- C:\bcwxk.exe
[2011/01/20 12:54:02 | 000,103,140 | RHS- | M] () -- C:\bdkgje.exe
[2011/01/20 14:57:00 | 000,103,140 | RHS- | M] () -- C:\bedqc.exe
[2011/01/20 12:13:52 | 000,103,140 | RHS- | M] () -- C:\begrh.pif
[2011/01/25 17:05:25 | 000,103,140 | RHS- | M] () -- C:\behdq.pif
[2011/01/20 11:37:38 | 000,103,140 | RHS- | M] () -- C:\bentmu.exe
[2011/01/21 09:52:06 | 000,103,140 | RHS- | M] () -- C:\bepo.exe
[2011/01/21 16:06:16 | 000,103,140 | RHS- | M] () -- C:\bfwim.exe
[2011/01/21 13:35:07 | 000,103,140 | RHS- | M] () -- C:\bgdkl.pif
[2011/01/21 15:45:48 | 000,103,140 | RHS- | M] () -- C:\bgjvyd.pif
[2011/01/21 09:50:14 | 000,103,140 | RHS- | M] () -- C:\bhgmx.exe
[2011/01/20 11:53:52 | 000,103,140 | RHS- | M] () -- C:\bianc.exe
[2011/01/25 14:25:56 | 000,103,140 | RHS- | M] () -- C:\biekmt.exe
[2011/01/21 16:58:42 | 000,103,140 | RHS- | M] () -- C:\bipsi.pif
[2011/01/24 13:29:14 | 000,103,140 | RHS- | M] () -- C:\bitqsu.exe
[2011/01/24 11:07:34 | 000,103,140 | RHS- | M] () -- C:\bjbpxx.exe
[2011/01/21 13:24:39 | 000,103,140 | RHS- | M] () -- C:\bjigmb.pif
[2011/01/21 14:25:36 | 000,103,140 | RHS- | M] () -- C:\bkekr.pif
[2011/01/25 15:11:04 | 000,103,140 | RHS- | M] () -- C:\bkifl.exe
[2011/01/24 12:55:40 | 000,103,140 | RHS- | M] () -- C:\bkmkq.pif
[2011/01/20 13:03:16 | 000,103,140 | RHS- | M] () -- C:\bljo.exe
[2011/01/20 10:10:32 | 000,103,140 | RHS- | M] () -- C:\bllow.pif
[2011/01/25 14:17:57 | 000,103,140 | RHS- | M] () -- C:\bltr.exe
[2011/01/24 09:38:00 | 000,103,140 | RHS- | M] () -- C:\bmcvd.exe
[2011/01/25 15:59:38 | 000,103,140 | RHS- | M] () -- C:\bngr.pif
[2011/01/20 15:13:44 | 000,103,140 | RHS- | M] () -- C:\bnmj.exe
[2011/01/19 17:16:56 | 000,103,140 | RHS- | M] () -- C:\bnogt.pif
[2011/01/20 10:22:11 | 000,103,140 | RHS- | M] () -- C:\bodcva.pif
[2011/01/21 16:00:54 | 000,103,140 | RHS- | M] () -- C:\boed.pif
[2011/01/21 14:18:19 | 000,103,140 | RHS- | M] () -- C:\bohis.pif
[2009/12/22 15:48:50 | 000,000,211 | ---- | M] () -- C:\Boot.bak
[2009/12/22 17:05:57 | 000,000,281 | RHS- | M] () -- C:\boot.ini
[2011/01/20 16:25:31 | 000,103,140 | RHS- | M] () -- C:\bpqoq.pif
[2011/01/25 16:20:43 | 000,103,140 | RHS- | M] () -- C:\bprwf.pif
[2011/01/24 09:40:42 | 000,103,140 | RHS- | M] () -- C:\bpwd.pif
[2011/01/24 12:24:35 | 000,103,140 | RHS- | M] () -- C:\bqdsud.pif
[2011/01/21 14:56:42 | 000,103,140 | RHS- | M] () -- C:\brlp.exe
[2011/01/24 15:34:06 | 000,103,140 | RHS- | M] () -- C:\brrs.exe
[2011/01/20 11:23:56 | 000,103,140 | RHS- | M] () -- C:\bsno.pif
[2011/01/21 13:33:48 | 000,103,140 | RHS- | M] () -- C:\bsokkc.exe
[2011/01/21 13:32:28 | 000,103,140 | RHS- | M] () -- C:\bsqk.exe
[2011/01/20 11:13:16 | 000,103,140 | RHS- | M] () -- C:\btdre.pif
[2011/01/21 16:45:30 | 000,103,140 | RHS- | M] () -- C:\bttc.pif
[2011/01/25 15:56:28 | 000,103,140 | RHS- | M] () -- C:\btxa.exe
[2011/01/25 16:02:11 | 000,103,140 | RHS- | M] () -- C:\btytd.pif
[2011/01/20 12:50:16 | 000,103,140 | RHS- | M] () -- C:\bufdq.exe
[2011/01/20 13:24:44 | 000,103,140 | RHS- | M] () -- C:\bvqlje.exe
[2011/01/19 17:05:04 | 000,103,140 | RHS- | M] () -- C:\bwbeaf.pif
[2011/01/20 09:55:39 | 000,103,140 | RHS- | M] () -- C:\bwbrls.pif
[2011/01/25 14:22:18 | 000,103,140 | RHS- | M] () -- C:\bwspa.exe
[2011/01/25 15:25:28 | 000,103,140 | RHS- | M] () -- C:\bxin.exe
[2011/01/25 14:44:17 | 000,103,140 | RHS- | M] () -- C:\bxlyi.pif
[2011/01/24 13:20:51 | 000,103,140 | RHS- | M] () -- C:\bytk.pif
[2011/01/25 14:38:09 | 000,103,140 | RHS- | M] () -- C:\byvd.pif
[2011/01/21 11:07:51 | 000,103,140 | RHS- | M] () -- C:\cacmvu.pif
[2011/01/20 13:00:45 | 000,103,140 | RHS- | M] () -- C:\cahopg.pif
[2011/01/20 12:30:08 | 000,103,140 | RHS- | M] () -- C:\cajbs.pif
[2011/01/20 14:01:28 | 000,103,140 | RHS- | M] () -- C:\cakees.pif
[2011/01/21 12:09:19 | 000,103,140 | RHS- | M] () -- C:\cbgxqx.pif
[2011/01/21 16:55:56 | 000,103,140 | RHS- | M] () -- C:\ccbymo.exe
[2011/01/21 10:51:12 | 000,103,140 | RHS- | M] () -- C:\ccmaw.exe
[2011/01/20 11:57:20 | 000,103,140 | RHS- | M] () -- C:\ccnt.exe
[2011/01/24 11:20:33 | 000,103,140 | RHS- | M] () -- C:\cdgw.exe
[2011/01/25 16:50:05 | 000,103,140 | RHS- | M] () -- C:\cdnrmr.pif
[2011/01/21 09:47:53 | 000,103,140 | RHS- | M] () -- C:\cdot.pif
[2011/01/21 15:06:32 | 000,103,140 | RHS- | M] () -- C:\cdwfp.exe
[2011/01/21 10:54:48 | 000,103,140 | RHS- | M] () -- C:\cejw.exe
[2011/01/20 10:31:06 | 000,103,140 | RHS- | M] () -- C:\cffy.exe
[2011/01/19 17:07:04 | 000,103,140 | RHS- | M] () -- C:\cflln.exe
[2011/01/25 14:49:41 | 000,103,140 | RHS- | M] () -- C:\cfsamf.pif
[2011/01/25 17:06:03 | 000,103,140 | RHS- | M] () -- C:\cfyvvm.exe
[2011/01/21 14:33:18 | 000,103,140 | RHS- | M] () -- C:\cgdx.exe
[2011/01/25 14:45:02 | 000,103,140 | RHS- | M] () -- C:\cgjdoq.exe
[2011/01/24 10:33:32 | 000,103,140 | RHS- | M] () -- C:\cgnwew.pif
[2011/01/24 10:21:57 | 000,103,140 | RHS- | M] () -- C:\cgpwk.exe
[2011/01/24 11:05:40 | 000,103,140 | RHS- | M] () -- C:\cherg.exe
[2011/01/20 16:23:40 | 000,103,140 | RHS- | M] () -- C:\ciwba.exe
[2011/01/21 15:11:56 | 000,103,140 | RHS- | M] () -- C:\cjkp.exe
[2011/01/21 16:54:24 | 000,103,140 | RHS- | M] () -- C:\cjraxd.pif
[2011/01/21 16:37:30 | 000,103,140 | RHS- | M] () -- C:\cktiky.exe
[2011/01/24 11:53:29 | 000,103,140 | RHS- | M] () -- C:\clfdi.exe
[2011/01/21 16:01:33 | 000,103,140 | RHS- | M] () -- C:\clgklx.pif
[2011/01/25 14:45:42 | 000,103,140 | RHS- | M] () -- C:\clgktb.exe
[2011/01/21 09:33:27 | 000,103,140 | RHS- | M] () -- C:\cliba.exe
[2011/01/20 09:44:16 | 000,103,140 | RHS- | M] () -- C:\clvxi.exe
[2011/01/25 15:34:29 | 000,103,140 | RHS- | M] () -- C:\cmae.pif
[2011/01/20 14:45:00 | 000,103,140 | RHS- | M] () -- C:\cmbk.exe
[2004/08/03 23:00:00 | 000,260,272 | ---- | M] () -- C:\cmldr
[2011/01/24 09:33:53 | 000,103,140 | RHS- | M] () -- C:\cmoiw.pif
[2011/01/25 16:52:38 | 000,103,140 | RHS- | M] () -- C:\cmquw.pif
[2011/01/24 09:22:25 | 000,103,140 | RHS- | M] () -- C:\cnafjg.pif
[2011/01/24 10:30:24 | 000,103,140 | RHS- | M] () -- C:\cnaxty.pif
[2011/01/20 16:42:35 | 000,103,140 | RHS- | M] () -- C:\cngref.pif
[2011/01/24 12:34:20 | 000,103,140 | RHS- | M] () -- C:\cnik.pif
[2011/01/20 15:39:32 | 000,103,140 | RHS- | M] () -- C:\cnlkjx.exe
[2011/01/21 10:28:42 | 000,103,140 | RHS- | M] () -- C:\cnxdo.exe
[2011/01/19 17:08:54 | 000,103,140 | RHS- | M] () -- C:\cofnlq.pif
[2011/01/20 14:53:08 | 000,103,140 | RHS- | M] () -- C:\cohefc.exe
[2009/12/22 16:30:35 | 000,007,837 | ---- | M] () -- C:\ComboFix.txt
[2011/01/25 15:41:44 | 000,103,140 | RHS- | M] () -- C:\coqq.exe
[2011/01/24 13:18:46 | 000,103,140 | RHS- | M] () -- C:\cotb.exe
[2011/01/20 13:01:24 | 000,103,140 | RHS- | M] () -- C:\couun.pif
[2011/01/25 16:24:50 | 000,103,140 | RHS- | M] () -- C:\cove.exe
[2011/01/20 16:00:28 | 000,103,140 | RHS- | M] () -- C:\coxl.exe
[2011/01/24 11:35:36 | 000,103,140 | RHS- | M] () -- C:\coxsr.pif
[2011/01/21 13:33:08 | 000,103,140 | RHS- | M] () -- C:\cptnd.exe
[2011/01/24 15:27:50 | 000,103,140 | RHS- | M] () -- C:\cpwcrd.exe
[2011/01/20 12:48:19 | 000,103,140 | RHS- | M] () -- C:\cqerxe.pif
[2011/01/24 15:34:54 | 000,103,140 | RHS- | M] () -- C:\cqgv.exe
[2011/01/24 13:38:17 | 000,103,140 | RHS- | M] () -- C:\cqorrn.pif
[2011/01/24 10:45:08 | 000,103,140 | RHS- | M] () -- C:\crfpe.exe
[2011/01/21 11:19:04 | 000,103,140 | RHS- | M] () -- C:\crso.exe
[2011/01/25 14:29:49 | 000,103,140 | RHS- | M] () -- C:\crxl.pif
[2011/01/21 14:26:15 | 000,103,140 | RHS- | M] () -- C:\cshfpc.pif
[2011/01/24 12:37:02 | 000,103,140 | RHS- | M] () -- C:\csik.pif
[2011/01/20 12:12:50 | 000,103,140 | RHS- | M] () -- C:\cskn.pif
[2011/01/20 16:47:09 | 000,103,140 | RHS- | M] () -- C:\csofyc.exe
[2011/01/25 17:08:35 | 000,103,140 | RHS- | M] () -- C:\csoxl.pif
[2011/01/20 11:27:53 | 000,103,140 | RHS- | M] () -- C:\cssaqk.exe
[2011/01/25 17:09:49 | 000,103,140 | RHS- | M] () -- C:\cthqg.exe
[2011/01/24 12:00:02 | 000,103,140 | RHS- | M] () -- C:\ctmbw.pif
[2011/01/20 14:09:06 | 000,103,140 | RHS- | M] () -- C:\cudl.exe
[2011/01/25 16:23:17 | 000,103,140 | RHS- | M] () -- C:\cvitth.exe
[2011/01/20 15:57:08 | 000,103,140 | RHS- | M] () -- C:\cvkct.exe
[2011/01/25 15:04:16 | 000,103,140 | RHS- | M] () -- C:\cvkei.exe
[2011/01/21 14:41:04 | 000,103,140 | RHS- | M] () -- C:\cvosl.exe
[2011/01/20 15:01:37 | 000,103,140 | RHS- | M] () -- C:\cvow.pif
[2011/01/25 16:42:20 | 000,103,140 | RHS- | M] () -- C:\cwdou.exe
[2011/01/20 15:30:36 | 000,103,140 | RHS- | M] () -- C:\cwfd.pif
[2011/01/21 14:38:40 | 000,103,140 | RHS- | M] () -- C:\cxty.exe
[2011/01/20 10:27:31 | 000,103,140 | RHS- | M] () -- C:\cycjhp.pif
[2011/01/21 14:19:00 | 000,103,140 | RHS- | M] () -- C:\cygx.exe
[2011/01/20 14:14:12 | 000,103,140 | RHS- | M] () -- C:\dbgglw.exe
[2011/01/20 14:06:04 | 000,103,140 | RHS- | M] () -- C:\dbgua.exe
[2011/01/20 11:16:36 | 000,103,140 | RHS- | M] () -- C:\dciaqf.exe
[2011/01/20 15:49:34 | 000,103,140 | RHS- | M] () -- C:\dclllc.exe
[2011/01/20 16:05:06 | 000,103,140 | RHS- | M] () -- C:\dcqaq.exe
[2011/01/21 15:31:18 | 000,103,140 | RHS- | M] () -- C:\ddcw.pif
[2011/01/21 16:44:39 | 000,103,140 | RHS- | M] () -- C:\ddqpxe.pif
[2011/01/20 10:38:56 | 000,103,140 | RHS- | M] () -- C:\dedqok.exe
[2011/01/24 13:02:30 | 000,103,140 | RHS- | M] () -- C:\defsr.exe
[2011/01/24 12:03:40 | 000,103,140 | RHS- | M] () -- C:\dfqa.exe
[2011/01/21 16:23:53 | 000,103,140 | RHS- | M] () -- C:\dfsv.pif
[2011/01/20 14:24:50 | 000,103,140 | RHS- | M] () -- C:\dgena.exe
[2011/01/20 09:18:14 | 000,103,140 | RHS- | M] () -- C:\dgjbjj.exe
[2011/01/25 15:53:11 | 000,103,140 | RHS- | M] () -- C:\dgsgq.pif
[2011/01/21 15:48:12 | 000,103,140 | RHS- | M] () -- C:\dgwp.exe
[2011/01/24 12:05:04 | 000,103,140 | RHS- | M] () -- C:\dhgrh.pif
[2011/01/20 14:06:46 | 000,103,140 | RHS- | M] () -- C:\dhynec.exe
[2011/01/21 15:10:20 | 000,103,140 | RHS- | M] () -- C:\dietv.pif
[2011/01/21 13:51:42 | 000,103,140 | RHS- | M] () -- C:\diwguv.exe
[2011/01/24 12:39:44 | 000,103,140 | RHS- | M] () -- C:\djlj.pif
[2011/01/24 13:21:36 | 000,103,140 | RHS- | M] () -- C:\djqlss.exe
[2011/01/20 13:47:40 | 000,103,140 | RHS- | M] () -- C:\djwmjt.pif
[2011/01/24 12:45:13 | 000,103,140 | RHS- | M] () -- C:\dkdd.pif
[2011/01/20 16:44:27 | 000,103,140 | RHS- | M] () -- C:\dkviq.pif
[2011/01/24 12:51:09 | 000,103,140 | RHS- | M] () -- C:\dkyi.pif
[2011/01/25 15:36:51 | 000,103,140 | RHS- | M] () -- C:\dlap.pif
[2011/01/25 15:50:38 | 000,103,140 | RHS- | M] () -- C:\dldvls.pif
[2011/01/20 10:12:30 | 000,103,140 | RHS- | M] () -- C:\dlqga.pif
[2011/01/21 11:33:48 | 000,103,140 | RHS- | M] () -- C:\dlsx.exe
[2011/01/25 16:27:24 | 000,103,140 | RHS- | M] () -- C:\dmec.exe
[2011/01/25 16:55:50 | 000,103,140 | RHS- | M] () -- C:\dmrf.exe
[2011/01/20 14:00:00 | 000,103,140 | RHS- | M] () -- C:\dmrinq.pif
[2011/01/25 15:45:54 | 000,103,140 | RHS- | M] () -- C:\dmvjxy.pif
[2011/01/20 15:48:08 | 000,103,140 | RHS- | M] () -- C:\dnlxkx.pif
[2011/01/24 09:23:48 | 000,103,140 | RHS- | M] () -- C:\dodps.exe
[2011/01/20 16:12:36 | 000,103,140 | RHS- | M] () -- C:\doigm.exe
[2011/01/20 11:14:04 | 000,103,140 | RHS- | M] () -- C:\dpenho.exe
[2011/01/24 11:37:42 | 000,103,140 | RHS- | M] () -- C:\dpyy.pif
[2011/01/25 15:39:30 | 000,103,140 | RHS- | M] () -- C:\dqefj.exe
[2011/01/24 12:40:38 | 000,103,140 | RHS- | M] () -- C:\dqisub.exe
[2011/01/20 10:02:01 | 000,103,140 | RHS- | M] () -- C:\dqsja.pif
[2011/01/20 10:07:37 | 000,103,140 | RHS- | M] () -- C:\drofg.pif
[2011/01/20 16:06:55 | 000,103,140 | RHS- | M] () -- C:\drsoi.pif
[2011/01/24 12:15:25 | 000,103,140 | RHS- | M] () -- C:\dsvw.exe
[2011/01/25 15:32:29 | 000,103,140 | RHS- | M] () -- C:\dsylh.exe
[2011/01/25 16:29:19 | 000,103,140 | RHS- | M] () -- C:\dtdng.pif
[2011/01/24 13:34:49 | 000,103,140 | RHS- | M] () -- C:\dtqipg.pif
[2011/01/21 12:10:50 | 000,103,140 | RHS- | M] () -- C:\dtyh.exe
[2011/01/21 15:48:58 | 000,103,140 | RHS- | M] () -- C:\ducqxd.exe
[2011/01/24 13:14:28 | 000,103,140 | RHS- | M] () -- C:\dudrf.exe
[2011/01/24 12:16:13 | 000,103,140 | RHS- | M] () -- C:\dueba.pif
[2011/01/24 12:38:12 | 000,103,140 | RHS- | M] () -- C:\duec.pif
[2011/01/20 15:28:58 | 000,103,140 | RHS- | M] () -- C:\duxyvu.pif
[2011/01/20 14:46:16 | 000,103,140 | RHS- | M] () -- C:\dvqgk.pif
[2011/01/24 10:43:34 | 000,103,140 | RHS- | M] () -- C:\dwwah.exe
[2011/01/24 11:01:24 | 000,103,140 | RHS- | M] () -- C:\dxdsnb.exe
[2011/01/24 12:23:03 | 000,103,140 | RHS- | M] () -- C:\dxgt.pif
[2011/01/21 13:45:39 | 000,103,140 | RHS- | M] () -- C:\dxkn.pif
[2011/01/21 16:52:26 | 000,103,140 | RHS- | M] () -- C:\dyaip.exe
[2011/01/21 13:39:37 | 000,103,140 | RHS- | M] () -- C:\dyfire.pif
[2011/01/24 09:58:54 | 000,103,140 | RHS- | M] () -- C:\dyfxdb.pif
[2011/01/20 16:09:32 | 000,103,140 | RHS- | M] () -- C:\dyhsk.exe
[2011/01/20 15:31:14 | 000,103,140 | RHS- | M] () -- C:\dyllun.exe
[2011/01/20 12:39:20 | 000,103,140 | RHS- | M] () -- C:\eabfks.exe
[2011/01/20 09:15:04 | 000,103,140 | RHS- | M] () -- C:\eabj.exe
[2011/01/21 15:58:50 | 000,103,140 | RHS- | M] () -- C:\ebkj.exe
[2011/01/19 17:09:38 | 000,103,140 | RHS- | M] () -- C:\ebnuok.pif
[2011/01/20 13:40:16 | 000,103,140 | RHS- | M] () -- C:\ecffgk.exe
[2011/01/21 13:59:24 | 000,103,140 | RHS- | M] () -- C:\eciu.exe
[2011/01/20 12:00:16 | 000,103,140 | RHS- | M] () -- C:\ecnlp.exe
[2011/01/20 13:26:02 | 000,103,140 | RHS- | M] () -- C:\ecxet.exe
[2011/01/24 09:16:29 | 000,103,140 | RHS- | M] () -- C:\edhw.exe
[2011/01/25 15:35:56 | 000,103,140 | RHS- | M] () -- C:\edojsf.exe
[2011/01/20 10:54:59 | 000,103,140 | RHS- | M] () -- C:\edvb.pif
[2011/01/20 14:45:40 | 000,103,140 | RHS- | M] () -- C:\eednav.exe
[2011/01/20 09:33:30 | 000,103,140 | RHS- | M] () -- C:\eela.exe
[2011/01/21 14:48:59 | 000,103,140 | RHS- | M] () -- C:\eente.pif
[2011/01/20 13:32:16 | 000,103,140 | RHS- | M] () -- C:\eeqqg.exe
[2011/01/20 14:57:37 | 000,103,140 | RHS- | M] () -- C:\eeuwo.exe
[2011/01/25 14:59:08 | 000,103,140 | RHS- | M] () -- C:\efgu.exe
[2011/01/20 14:34:04 | 000,103,140 | RHS- | M] () -- C:\efoby.pif
[2011/01/24 10:36:56 | 000,103,140 | RHS- | M] () -- C:\efqutx.exe
[2011/01/20 09:31:18 | 000,103,140 | RHS- | M] () -- C:\efyjyt.pif
[2011/01/24 11:17:05 | 000,103,140 | RHS- | M] () -- C:\egcs.pif
[2011/01/21 12:31:06 | 000,103,140 | RHS- | M] () -- C:\ehbqb.exe
[2011/01/25 09:00:01 | 000,103,140 | RHS- | M] () -- C:\ehpu.pif
[2011/01/20 10:04:43 | 000,103,140 | RHS- | M] () -- C:\ehqd.pif
[2011/01/25 16:22:39 | 000,103,140 | RHS- | M] () -- C:\ehure.pif
[2011/01/24 12:17:27 | 000,103,140 | RHS- | M] () -- C:\eiad.pif
[2011/01/21 14:58:01 | 000,103,140 | RHS- | M] () -- C:\eibc.pif
[2011/01/21 09:54:00 | 000,103,140 | RHS- | M] () -- C:\eifg.exe
[2011/01/21 12:30:23 | 000,103,140 | RHS- | M] () -- C:\ejjb.pif
[2011/01/20 11:03:32 | 000,103,140 | RHS- | M] () -- C:\ejpygu.exe
[2011/01/20 14:51:50 | 000,103,140 | RHS- | M] () -- C:\ekje.exe
[2011/01/20 10:54:20 | 000,103,140 | RHS- | M] () -- C:\ekvc.exe
[2011/01/20 11:31:46 | 000,103,140 | RHS- | M] () -- C:\ekwgu.pif
[2011/01/21 13:43:37 | 000,103,140 | RHS- | M] () -- C:\ekwsf.pif
[2011/01/21 15:15:58 | 000,103,140 | RHS- | M] () -- C:\ellub.pif
[2011/01/20 11:48:03 | 000,103,140 | RHS- | M] () -- C:\elybjl.pif
[2011/01/20 15:20:04 | 000,103,140 | RHS- | M] () -- C:\enbm.exe
[2011/01/25 14:33:52 | 000,103,140 | RHS- | M] () -- C:\enfphv.exe
[2011/01/24 09:05:30 | 000,103,140 | RHS- | M] () -- C:\enggiu.exe
[2011/01/21 10:24:08 | 000,103,140 | RHS- | M] () -- C:\enkep.exe
[2011/01/25 14:51:42 | 000,103,140 | RHS- | M] () -- C:\eodx.pif
[2011/01/20 14:54:23 | 000,103,140 | RHS- | M] () -- C:\eoxruj.pif
[2011/01/21 13:05:22 | 000,103,140 | RHS- | M] () -- C:\epbawp.exe
[2011/01/20 10:04:04 | 000,103,140 | RHS- | M] () -- C:\epgrbi.exe
[2011/01/20 16:27:59 | 000,103,140 | RHS- | M] () -- C:\epjq.pif
[2011/01/20 09:24:09 | 000,103,140 | RHS- | M] () -- C:\epwuo.pif
[2011/01/24 10:20:11 | 000,103,140 | RHS- | M] () -- C:\epyacg.pif
[2011/01/20 16:59:56 | 000,103,140 | RHS- | M] () -- C:\eqeuvt.pif
[2011/01/20 12:14:42 | 000,103,140 | RHS- | M] () -- C:\eryo.exe
[2011/01/25 14:19:44 | 000,103,140 | RHS- | M] () -- C:\esds.exe
[2011/01/20 13:00:04 | 000,103,140 | RHS- | M] () -- C:\esirk.pif
[2011/01/21 13:27:33 | 000,103,140 | RHS- | M] () -- C:\esku.pif
[2011/01/24 13:45:02 | 000,103,140 | RHS- | M] () -- C:\esug.exe
[2011/01/24 12:14:32 | 000,103,140 | RHS- | M] () -- C:\etanp.exe
[2011/01/25 14:39:40 | 000,103,140 | RHS- | M] () -- C:\etkemn.exe
[2011/01/20 11:07:26 | 000,103,140 | RHS- | M] () -- C:\etmy.exe
[2011/01/20 14:10:40 | 000,103,140 | RHS- | M] () -- C:\etqtfb.pif
[2011/01/20 09:49:00 | 000,103,140 | RHS- | M] () -- C:\ettp.exe
[2011/01/20 13:48:20 | 000,103,140 | RHS- | M] () -- C:\etvr.pif
[2011/01/24 13:03:12 | 000,103,140 | RHS- | M] () -- C:\euekx.pif
[2011/01/21 13:30:20 | 000,103,140 | RHS- | M] () -- C:\eugs.exe
[2011/01/24 13:41:59 | 000,103,140 | RHS- | M] () -- C:\eukrbp.pif
[2011/01/21 13:34:27 | 000,103,140 | RHS- | M] () -- C:\eumha.pif
[2011/01/25 17:12:21 | 000,103,140 | RHS- | M] () -- C:\evesfb.pif
[2011/01/20 10:35:02 | 000,103,140 | RHS- | M] () -- C:\evpuw.exe
[2011/01/19 16:53:00 | 000,103,140 | RHS- | M] () -- C:\evsw.pif
[2011/01/24 12:29:28 | 000,103,140 | RHS- | M] () -- C:\evwumi.exe
[2011/01/25 14:21:17 | 000,103,140 | RHS- | M] () -- C:\ewdvm.pif
[2011/01/21 10:30:04 | 000,103,140 | RHS- | M] () -- C:\ewgafw.exe
[2011/01/19 17:02:12 | 000,103,140 | RHS- | M] () -- C:\ewgtj.exe
[2011/01/21 15:22:53 | 000,103,140 | RHS- | M] () -- C:\exumb.pif
[2011/01/20 13:44:11 | 000,103,140 | RHS- | M] () -- C:\eycid.pif
[2011/01/20 13:19:53 | 000,103,140 | RHS- | M] () -- C:\eyio.pif
[2011/01/25 16:47:26 | 000,103,140 | RHS- | M] () -- C:\eyktj.exe
[2011/01/21 15:12:44 | 000,103,140 | RHS- | M] () -- C:\eylyt.pif
[2011/01/20 15:53:57 | 000,103,140 | RHS- | M] () -- C:\eynqg.pif
[2011/01/25 14:15:45 | 000,103,140 | RHS- | M] () -- C:\eyprc.pif
[2011/01/21 14:19:40 | 000,103,140 | RHS- | M] () -- C:\eyspl.exe
[2011/01/21 15:56:54 | 000,103,140 | RHS- | M] () -- C:\eywtfn.pif
[2011/01/20 15:17:57 | 000,103,140 | RHS- | M] () -- C:\fadb.pif
[2011/01/25 16:53:58 | 000,103,140 | RHS- | M] () -- C:\fafccq.pif
[2011/01/21 09:58:12 | 000,103,140 | RHS- | M] () -- C:\faspp.exe
[2011/01/21 14:36:48 | 000,103,140 | RHS- | M] () -- C:\fatu.pif
[2011/01/24 12:51:56 | 000,103,140 | RHS- | M] () -- C:\fbaap.exe
[2011/01/20 13:05:02 | 000,103,140 | RHS- | M] () -- C:\fbfs.exe
[2011/01/20 14:38:22 | 000,103,140 | RHS- | M] () -- C:\fbhkrc.exe
[2011/01/25 15:18:30 | 000,103,140 | RHS- | M] () -- C:\fbru.pif
[2011/01/24 09:46:00 | 000,103,140 | RHS- | M] () -- C:\fcffut.pif
[2011/01/25 15:57:06 | 000,103,140 | RHS- | M] () -- C:\fcheo.exe
[2011/01/21 14:16:20 | 000,103,140 | RHS- | M] () -- C:\fchf.exe
[2011/01/24 11:15:14 | 000,103,140 | RHS- | M] () -- C:\fcmjp.pif
[2011/01/20 12:20:30 | 000,103,140 | RHS- | M] () -- C:\fcyp.exe
[2011/01/21 13:57:23 | 000,103,140 | RHS- | M] () -- C:\fdhko.pif
[2011/01/20 16:49:34 | 000,103,140 | RHS- | M] () -- C:\fdim.pif
[2011/01/19 17:06:22 | 000,103,140 | RHS- | M] () -- C:\feguyx.pif
[2011/01/21 13:58:01 | 000,103,140 | RHS- | M] () -- C:\fepp.pif
[2011/01/24 10:21:02 | 000,103,140 | RHS- | M] () -- C:\fess.exe
[2011/01/20 16:41:18 | 000,103,140 | RHS- | M] () -- C:\ffjegw.exe
[2011/01/21 14:22:31 | 000,103,140 | RHS- | M] () -- C:\ffjs.pif
[2011/01/24 10:15:38 | 000,103,140 | RHS- | M] () -- C:\ffjw.exe
[2011/01/20 15:14:20 | 000,103,140 | RHS- | M] () -- C:\ffkerk.pif
[2011/01/21 13:44:20 | 000,103,140 | RHS- | M] () -- C:\ffywf.exe
[2011/01/24 13:20:10 | 000,103,140 | RHS- | M] () -- C:\fggyk.exe
[2011/01/21 14:34:34 | 000,103,140 | RHS- | M] () -- C:\fgmx.pif
[2011/01/21 13:46:19 | 000,103,140 | RHS- | M] () -- C:\fgnpfb.pif
[2011/01/24 10:23:46 | 000,103,140 | RHS- | M] () -- C:\fhbv.exe
[2011/01/25 14:16:35 | 000,103,140 | RHS- | M] () -- C:\fhobd.pif
[2011/01/21 13:48:28 | 000,103,140 | RHS- | M] () -- C:\fhur.exe
[2011/01/21 15:51:50 | 000,103,140 | RHS- | M] () -- C:\figbv.exe
[2011/01/20 15:35:40 | 000,103,140 | RHS- | M] () -- C:\fiixd.exe
[2011/01/24 09:52:04 | 000,103,140 | RHS- | M] () -- C:\fikup.exe
[2011/01/20 15:33:05 | 000,103,140 | RHS- | M] () -- C:\fiqu.pif
[2011/01/21 09:57:12 | 000,103,140 | RHS- | M] () -- C:\fjwno.pif
[2011/01/20 14:41:40 | 000,103,140 | RHS- | M] () -- C:\fjxndf.pif
[2011/01/21 15:54:00 | 000,103,140 | RHS- | M] () -- C:\fjxre.exe
[2011/01/24 13:13:08 | 000,103,140 | RHS- | M] () -- C:\fkhjit.exe
[2011/01/25 15:21:28 | 000,103,140 | RHS- | M] () -- C:\fkoksa.exe
[2011/01/24 09:10:34 | 000,103,140 | RHS- | M] () -- C:\flgeo.exe
[2011/01/20 15:34:24 | 000,103,140 | RHS- | M] () -- C:\flhh.pif
[2011/01/21 15:02:30 | 000,103,140 | RHS- | M] () -- C:\fluu.exe
[2011/01/25 17:07:55 | 000,103,140 | RHS- | M] () -- C:\fnaqy.exe
[2011/01/21 15:29:40 | 000,103,140 | RHS- | M] () -- C:\fnhxfb.exe
[2011/01/24 10:38:48 | 000,103,140 | RHS- | M] () -- C:\fnii.exe
[2011/01/21 16:06:57 | 000,103,140 | RHS- | M] () -- C:\fnkw.pif
[2011/01/20 11:27:10 | 000,103,140 | RHS- | M] () -- C:\fnpri.exe
[2011/01/20 12:37:58 | 000,103,140 | RHS- | M] () -- C:\fnrxak.exe
[2011/01/20 09:25:56 | 000,103,140 | RHS- | M] () -- C:\food.exe
[2011/01/24 13:30:08 | 000,103,140 | RHS- | M] () -- C:\foqo.pif
[2011/01/20 16:01:16 | 000,103,140 | RHS- | M] () -- C:\foviyx.exe
[2011/01/24 13:41:10 | 000,103,140 | RHS- | M] () -- C:\fpaku.exe
[2011/01/20 15:59:49 | 000,103,140 | RHS- | M] () -- C:\fpal.pif
[2011/01/21 14:41:48 | 000,103,140 | RHS- | M] () -- C:\fparrg.exe
[2011/01/21 13:40:24 | 000,103,140 | RHS- | M] () -- C:\fpjehb.exe
[2011/01/24 10:37:34 | 000,103,140 | RHS- | M] () -- C:\fpmfsa.pif
[2011/01/21 15:34:51 | 000,103,140 | RHS- | M] () -- C:\fprpta.pif
[2011/01/25 15:04:58 | 000,103,140 | RHS- | M] () -- C:\fqbvoq.exe
[2011/01/24 13:45:46 | 000,103,140 | RHS- | M] () -- C:\fqcxp.exe
[2011/01/20 15:36:52 | 000,103,140 | RHS- | M] () -- C:\fqxi.pif
[2011/01/25 15:44:29 | 000,103,140 | RHS- | M] () -- C:\fshsm.exe
[2011/01/24 11:54:14 | 000,103,140 | RHS- | M] () -- C:\fsjqm.exe
[2011/01/21 14:28:22 | 000,103,140 | RHS- | M] () -- C:\ftggt.exe
[2011/01/20 16:14:58 | 000,103,140 | RHS- | M] () -- C:\ftrl.pif
[2011/01/24 15:31:10 | 000,103,140 | RHS- | M] () -- C:\fuhe.exe
[2011/01/20 14:48:32 | 000,103,140 | RHS- | M] () -- C:\funkw.exe
[2011/01/20 16:03:44 | 000,103,140 | RHS- | M] () -- C:\fuwdyg.exe
[2011/01/20 16:50:10 | 000,103,140 | RHS- | M] () -- C:\fvieh.pif
[2011/01/21 12:39:06 | 000,103,140 | RHS- | M] () -- C:\fwtd.exe
[2011/01/20 16:36:34 | 000,103,140 | RHS- | M] () -- C:\fxeek.exe
[2011/01/20 16:12:00 | 000,103,140 | RHS- | M] () -- C:\fxrhtw.exe
[2011/01/20 15:19:26 | 000,103,140 | RHS- | M] () -- C:\fyaf.exe
[2011/01/20 09:51:01 | 000,103,140 | RHS- | M] () -- C:\fyqxmc.pif
[2011/01/21 16:08:34 | 000,103,140 | RHS- | M] () -- C:\gaeee.pif
[2011/01/20 12:47:23 | 000,103,140 | RHS- | M] () -- C:\gagoa.pif
[2011/01/20 15:10:41 | 000,103,140 | RHS- | M] () -- C:\galpn.pif
[2011/01/25 16:15:32 | 000,103,140 | RHS- | M] () -- C:\garxck.pif
[2011/01/21 16:56:36 | 000,103,140 | RHS- | M] () -- C:\gastc.exe
[2011/01/20 10:36:32 | 000,103,140 | RHS- | M] () -- C:\gbvp.exe
[2011/01/20 14:58:20 | 000,103,140 | RHS- | M] () -- C:\gcyn.pif
[2011/01/25 16:59:50 | 000,103,140 | RHS- | M] () -- C:\gdic.pif
[2011/01/21 10:02:28 | 000,103,140 | RHS- | M] () -- C:\gdwmn.exe
[2011/01/21 14:10:32 | 000,103,140 | RHS- | M] () -- C:\gemej.exe
[2011/01/25 15:50:02 | 000,103,140 | RHS- | M] () -- C:\gfdl.exe
[2011/01/20 13:56:48 | 000,103,140 | RHS- | M] () -- C:\gfnr.exe
[2011/01/25 15:31:00 | 000,103,140 | RHS- | M] () -- C:\gfqjh.exe
[2011/01/25 16:39:48 | 000,103,140 | RHS- | M] () -- C:\gftr.pif
[2011/01/21 11:46:42 | 000,103,140 | RHS- | M] () -- C:\gfwg.exe
[2011/01/21 13:36:30 | 000,103,140 | RHS- | M] () -- C:\gghq.exe
[2011/01/24 12:26:42 | 000,103,140 | RHS- | M] () -- C:\ggnpl.exe
[2011/01/24 13:39:08 | 000,103,140 | RHS- | M] () -- C:\ggphvj.exe
[2011/01/24 11:22:10 | 000,103,140 | RHS- | M] () -- C:\ggtulh.exe
[2011/01/21 14:06:08 | 000,103,140 | RHS- | M] () -- C:\ggubxl.exe
[2011/01/25 16:21:24 | 000,103,140 | RHS- | M] () -- C:\ghfaov.exe
[2011/01/20 16:53:52 | 000,103,140 | RHS- | M] () -- C:\ghpa.exe
[2011/01/25 16:40:28 | 000,103,140 | RHS- | M] () -- C:\ghrpgw.exe
[2011/01/21 11:11:38 | 000,103,140 | RHS- | M] () -- C:\ghyly.exe
[2011/01/25 15:19:53 | 000,103,140 | RHS- | M] () -- C:\gibpcn.pif
[2011/01/24 09:08:52 | 000,103,140 | RHS- | M] () -- C:\gifld.exe
[2011/01/25 16:44:58 | 000,103,140 | RHS- | M] () -- C:\givr.exe
[2011/01/21 15:54:50 | 000,103,140 | RHS- | M] () -- C:\gjgbri.pif
[2011/01/25 16:35:44 | 000,103,140 | RHS- | M] () -- C:\gjhhi.exe
[2011/01/21 14:24:54 | 000,103,140 | RHS- | M] () -- C:\gjoyh.pif
[2011/01/20 16:10:08 | 000,103,140 | RHS- | M] () -- C:\gjssu.pif
[2011/01/20 15:54:34 | 000,103,140 | RHS- | M] () -- C:\gkcvk.pif
[2011/01/24 10:42:22 | 000,103,140 | RHS- | M] () -- C:\gkdc.exe
[2011/01/25 16:36:24 | 000,103,140 | RHS- | M] () -- C:\glifer.exe
[2011/01/20 10:26:48 | 000,103,140 | RHS- | M] () -- C:\glqu.exe
[2011/01/25 14:42:44 | 000,103,140 | RHS- | M] () -- C:\gltbet.exe
[2011/01/20 12:33:49 | 000,103,140 | RHS- | M] () -- C:\gmbyu.pif
[2011/01/21 12:34:07 | 000,103,140 | RHS- | M] () -- C:\gmckwa.pif
[2011/01/21 16:38:11 | 000,103,140 | RHS- | M] () -- C:\gmjkdn.pif
[2011/01/20 11:54:32 | 000,103,140 | RHS- | M] () -- C:\gmkdk.exe
[2011/01/20 14:55:04 | 000,103,140 | RHS- | M] () -- C:\gmmc.exe
[2011/01/20 09:50:20 | 000,103,140 | RHS- | M] () -- C:\gmwd.pif
[2011/01/24 11:52:44 | 000,103,140 | RHS- | M] () -- C:\gndgk.exe
[2011/01/21 16:20:16 | 000,103,140 | RHS- | M] () -- C:\godtx.exe
[2011/01/20 13:05:44 | 000,103,140 | RHS- | M] () -- C:\goltmu.exe
[2011/01/20 14:47:12 | 000,103,140 | RHS- | M] () -- C:\gonusy.exe
[2011/01/24 13:08:26 | 000,103,140 | RHS- | M] () -- C:\gopv.exe
[2011/01/21 15:45:08 | 000,103,140 | RHS- | M] () -- C:\goqegk.exe
[2011/01/20 15:05:48 | 000,103,140 | RHS- | M] () -- C:\gotvi.exe
[2011/01/21 14:35:55 | 000,103,140 | RHS- | M] () -- C:\gpeww.pif
[2011/01/20 16:20:33 | 000,103,140 | RHS- | M] () -- C:\gqjpj.pif
[2011/01/20 15:02:16 | 000,103,140 | RHS- | M] () -- C:\gqul.pif
[2011/01/24 09:41:37 | 000,103,140 | RHS- | M] () -- C:\grdf.pif
[2011/01/19 17:13:09 | 000,103,140 | RHS- | M] () -- C:\grhycw.pif
[2011/01/25 17:01:44 | 000,103,140 | RHS- | M] () -- C:\groupu.exe
[2011/01/24 10:00:20 | 000,103,140 | RHS- | M] () -- C:\grrfg.pif
[2011/01/24 12:48:07 | 000,103,140 | RHS- | M] () -- C:\gsfyh.pif
[2011/01/20 16:38:28 | 000,103,140 | RHS- | M] () -- C:\gsybpe.exe
[2011/01/20 11:22:12 | 000,103,140 | RHS- | M] () -- C:\gtvgos.pif
[2011/01/25 14:59:51 | 000,103,140 | RHS- | M] () -- C:\gulwt.pif
[2011/01/24 15:29:18 | 000,103,140 | RHS- | M] () -- C:\gunxx.exe
[2011/01/21 14:38:00 | 000,103,140 | RHS- | M] () -- C:\gutks.exe
[2011/01/21 09:26:16 | 000,103,140 | RHS- | M] () -- C:\guvxgv.pif
[2011/01/21 16:18:55 | 000,103,140 | RHS- | M] () -- C:\gvrx.pif
[2011/01/25 16:51:59 | 000,103,140 | RHS- | M] () -- C:\gvwwt.pif
[2011/01/20 14:18:44 | 000,103,140 | RHS- | M] () -- C:\gwkefj.exe
[2011/01/20 15:45:42 | 000,103,140 | RHS- | M] () -- C:\gwyqrj.exe
[2011/01/20 15:40:09 | 000,103,140 | RHS- | M] () -- C:\gxkolf.pif
[2011/01/20 15:23:25 | 000,103,140 | RHS- | M] () -- C:\gxpjay.pif
[2011/01/21 17:00:58 | 000,103,140 | RHS- | M] () -- C:\gxxeql.exe
[2011/01/20 10:38:10 | 000,103,140 | RHS- | M] () -- C:\gyib.pif
[2011/01/25 17:11:06 | 000,103,140 | RHS- | M] () -- C:\gykr.exe
[2011/01/20 16:01:54 | 000,103,140 | RHS- | M] () -- C:\gysdn.exe
[2011/01/21 16:44:02 | 000,103,140 | RHS- | M] () -- C:\hblkq.exe
[2011/01/24 11:19:44 | 000,103,140 | RHS- | M] () -- C:\hbnupe.pif
[2011/01/20 11:26:14 | 000,103,140 | RHS- | M] () -- C:\hbrvol.exe
[2011/01/25 17:04:50 | 000,103,140 | RHS- | M] () -- C:\hbwjam.exe
[2011/01/21 10:35:24 | 000,103,140 | RHS- | M] () -- C:\hcht.exe
[2011/01/21 09:36:34 | 000,103,140 | RHS- | M] () -- C:\hcpd.pif
[2011/01/20 17:00:34 | 000,103,140 | RHS- | M] () -- C:\hcse.exe
[2011/01/24 11:59:12 | 000,103,140 | RHS- | M] () -- C:\hdih.exe
[2011/01/21 16:03:56 | 000,103,140 | RHS- | M] () -- C:\heifhc.pif
[2011/01/25 14:56:14 | 000,103,140 | RHS- | M] () -- C:\hevff.pif
[2011/01/21 14:55:58 | 000,103,140 | RHS- | M] () -- C:\hexes.exe
[2011/01/21 11:26:22 | 000,103,140 | RHS- | M] () -- C:\hfrgji.exe
[2011/01/24 13:18:01 | 000,103,140 | RHS- | M] () -- C:\hhckob.pif
[2011/01/31 15:14:29 | 1063,768,064 | -HS- | M] () -- C:\hiberfil.sys
[2011/01/21 14:11:58 | 000,103,140 | RHS- | M] () -- C:\hievtk.exe
[2011/01/21 16:58:00 | 000,103,140 | RHS- | M] () -- C:\hinau.exe
[2011/01/20 10:50:57 | 000,103,140 | RHS- | M] () -- C:\hjbvx.pif
[2011/01/25 14:51:02 | 000,103,140 | RHS- | M] () -- C:\hjie.pif
[2011/01/25 16:32:53 | 000,103,140 | RHS- | M] () -- C:\hjxfeq.exe
[2011/01/20 16:11:24 | 000,103,140 | RHS- | M] () -- C:\hkppac.exe
[2011/01/20 14:31:38 | 000,103,140 | RHS- | M] () -- C:\hkshs.pif
[2011/01/21 11:29:50 | 000,103,140 | RHS- | M] () -- C:\hlfchj.exe
[2011/01/21 14:32:40 | 000,103,140 | RHS- | M] () -- C:\hlnv.exe
[2011/01/24 09:49:20 | 000,103,140 | RHS- | M] () -- C:\hlvlsv.exe
[2011/01/25 15:33:10 | 000,103,140 | RHS- | M] () -- C:\hmrfi.pif
[2011/01/25 15:05:38 | 000,103,140 | RHS- | M] () -- C:\hnrdji.pif
[2011/01/25 15:58:22 | 000,103,140 | RHS- | M] () -- C:\holpp.exe
[2011/01/24 12:06:30 | 000,103,140 | RHS- | M] () -- C:\horinv.exe
[2011/01/20 10:00:40 | 000,103,140 | RHS- | M] () -- C:\hostu.exe
[2011/01/20 10:39:37 | 000,103,140 | RHS- | M] () -- C:\hpcws.pif
[2011/01/20 13:30:14 | 000,103,140 | RHS- | M] () -- C:\hpfst.exe
[2011/01/24 13:03:53 | 000,103,140 | RHS- | M] () -- C:\hphipl.exe
[2011/01/20 12:49:03 | 000,103,140 | RHS- | M] () -- C:\hqbyrj.pif
[2011/01/21 13:07:46 | 000,103,140 | RHS- | M] () -- C:\hqjf.pif
[2011/01/25 16:00:16 | 000,103,140 | RHS- | M] () -- C:\hqqnu.pif
[2011/01/24 09:00:01 | 000,103,140 | RHS- | M] () -- C:\hqqsu.pif
[2011/01/20 15:27:53 | 000,103,140 | RHS- | M] () -- C:\hqsrg.pif
[2011/01/19 17:16:19 | 000,103,140 | RHS- | M] () -- C:\hrkd.pif
[2011/01/24 11:09:39 | 000,103,140 | RHS- | M] () -- C:\hrxkst.pif
[2011/01/21 12:03:12 | 000,103,140 | RHS- | M] () -- C:\hswj.pif
[2011/01/24 11:48:46 | 000,103,140 | RHS- | M] () -- C:\htab.exe
[2011/01/21 13:26:50 | 000,103,140 | RHS- | M] () -- C:\htoh.pif
[2011/01/24 12:01:00 | 000,103,140 | RHS- | M] () -- C:\huhsnm.exe
[2011/01/25 15:00:48 | 000,103,140 | RHS- | M] () -- C:\hvar.exe
[2011/01/24 10:19:23 | 000,103,140 | RHS- | M] () -- C:\hver.pif
[2011/01/25 16:37:50 | 000,103,140 | RHS- | M] () -- C:\hvmx.exe
[2011/01/20 12:41:20 | 000,103,140 | RHS- | M] () -- C:\hvvmq.exe
[2011/01/20 15:22:44 | 000,103,140 | RHS- | M] () -- C:\hwbr.pif
[2011/01/25 16:39:06 | 000,103,140 | RHS- | M] () -- C:\hwfthi.exe
[2011/01/21 16:53:46 | 000,103,140 | RHS- | M] () -- C:\hwgc.exe
[2011/01/24 13:43:52 | 000,103,140 | RHS- | M] () -- C:\hwnlu.exe
[2011/01/24 09:51:20 | 000,103,140 | RHS- | M] () -- C:\hxblux.exe
[2011/01/24 11:49:40 | 000,103,140 | RHS- | M] () -- C:\hypjb.pif
[2011/01/20 11:42:14 | 000,103,140 | RHS- | M] () -- C:\ibcon.pif
[2011/01/20 14:19:21 | 000,103,140 | RHS- | M] () -- C:\ibqluo.pif
[2011/01/25 14:40:19 | 000,103,140 | RHS- | M] () -- C:\ibyw.pif
[2011/01/25 15:55:08 | 000,103,140 | RHS- | M] () -- C:\ichwu.pif
[2011/01/25 16:28:02 | 000,103,140 | RHS- | M] () -- C:\icjb.exe
[2011/01/20 16:14:21 | 000,103,140 | RHS- | M] () -- C:\iddt.exe
[2011/01/21 11:06:16 | 000,103,140 | RHS- | M] () -- C:\idel.pif
[2011/01/25 14:41:38 | 000,103,140 | RHS- | M] () -- C:\idmiki.pif
[2011/01/20 10:28:33 | 000,103,140 | RHS- | M] () -- C:\idvth.exe
[2011/01/24 12:59:23 | 000,103,140 | RHS- | M] () -- C:\ieepf.pif
[2011/01/21 14:29:50 | 000,103,140 | RHS- | M] () -- C:\ifde.pif
[2011/01/20 09:56:22 | 000,103,140 | RHS- | M] () -- C:\ifepr.exe
[2011/01/20 16:55:14 | 000,103,140 | RHS- | M] () -- C:\ifkoee.exe
[2011/01/20 11:20:45 | 000,103,140 | RHS- | M] () -- C:\igdhr.pif
[2011/01/25 17:12:59 | 000,103,140 | RHS- | M] () -- C:\igidc.exe
[2011/01/20 09:22:42 | 000,103,140 | RHS- | M] () -- C:\igtwp.pif
[2011/01/20 17:03:02 | 000,103,140 | RHS- | M] () -- C:\ihabaf.exe
[2011/01/20 16:33:23 | 000,103,140 | RHS- | M] () -- C:\ihuv.exe
[2011/01/25 14:48:20 | 000,103,140 | RHS- | M] () -- C:\ihyu.pif
[2011/01/24 10:44:21 | 000,103,140 | RHS- | M] () -- C:\iidgaf.exe
[2011/01/20 11:08:12 | 000,103,140 | RHS- | M] () -- C:\iinam.exe
[2011/01/20 12:02:31 | 000,103,140 | RHS- | M] () -- C:\iiqvg.exe
[2011/01/20 15:05:08 | 000,103,140 | RHS- | M] () -- C:\ijhje.pif
[2011/01/20 14:09:57 | 000,103,140 | RHS- | M] () -- C:\ijhwq.pif
[2011/01/20 12:32:23 | 000,103,140 | RHS- | M] () -- C:\ijmbgw.pif
[2011/01/20 11:52:34 | 000,103,140 | RHS- | M] () -- C:\ijmxqh.exe
[2011/01/20 09:58:24 | 000,103,140 | RHS- | M] () -- C:\ijslwt.pif
[2011/01/21 14:51:02 | 000,103,140 | RHS- | M] () -- C:\ikcvya.exe
[2011/01/20 13:34:19 | 000,103,140 | RHS- | M] () -- C:\ikgso.pif
[2011/01/24 11:24:58 | 000,103,140 | RHS- | M] () -- C:\ikptoq.exe
[2011/01/21 12:23:46 | 000,103,140 | RHS- | M] () -- C:\iktfdl.pif
[2011/01/20 14:04:33 | 000,103,140 | RHS- | M] () -- C:\ilghq.pif
[2011/01/21 16:27:34 | 000,103,140 | RHS- | M] () -- C:\ilhs.exe
[2011/01/25 16:44:18 | 000,103,140 | RHS- | M] () -- C:\ilqbr.pif
[2011/01/20 10:40:32 | 000,103,140 | RHS- | M] () -- C:\ilqetb.pif
[2011/01/21 16:00:16 | 000,103,140 | RHS- | M] () -- C:\ilsko.pif
[2011/01/20 15:58:58 | 000,103,140 | RHS- | M] () -- C:\iludn.pif
[2011/01/20 12:04:04 | 000,103,140 | RHS- | M] () -- C:\imddo.exe
[2011/01/21 16:17:40 | 000,103,140 | RHS- | M] () -- C:\imrmts.exe
[2011/01/21 16:41:06 | 000,103,140 | RHS- | M] () -- C:\imrrcf.exe
[2011/01/20 13:49:41 | 000,103,140 | RHS- | M] () -- C:\inrwqc.pif
[2011/01/24 13:19:24 | 000,103,140 | RHS- | M] () -- C:\insnva.exe
[2008/04/11 09:43:52 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2011/01/20 12:39:58 | 000,103,140 | RHS- | M] () -- C:\ioax.pif
[2011/01/20 14:22:35 | 000,103,140 | RHS- | M] () -- C:\ioing.pif
[2011/01/21 11:03:24 | 000,103,140 | RHS- | M] () -- C:\ipcy.exe
[2011/01/20 09:16:38 | 000,103,140 | RHS- | M] () -- C:\ipgcxn.exe
[2010/06/11 15:55:40 | 000,081,920 | ---- | M] () -- C:\IPROJ_OPROJ_OO_061110.xls
[2011/01/20 12:06:27 | 000,103,140 | RHS- | M] () -- C:\ipso.pif
[2011/01/25 15:06:20 | 000,103,140 | RHS- | M] () -- C:\iptq.exe
[2011/01/24 12:31:06 | 000,103,140 | RHS- | M] () -- C:\ipwcv.pif
[2011/01/24 12:54:17 | 000,103,140 | RHS- | M] () -- C:\iqtym.pif
[2011/01/25 16:06:49 | 000,103,140 | RHS- | M] () -- C:\iqutt.pif
[2011/01/20 09:20:18 | 000,103,140 | RHS- | M] () -- C:\irbg.exe
[2011/01/24 12:07:21 | 000,103,140 | RHS- | M] () -- C:\irlhh.pif
[2011/01/20 14:40:59 | 000,103,140 | RHS- | M] () -- C:\iroeie.pif
[2011/01/21 12:11:46 | 000,103,140 | RHS- | M] () -- C:\irrh.exe
[2011/01/20 16:39:59 | 000,103,140 | RHS- | M] () -- C:\isbfoh.pif
[2011/01/20 12:11:57 | 000,103,140 | RHS- | M] () -- C:\isoep.pif
[2011/01/20 15:07:40 | 000,103,140 | RHS- | M] () -- C:\isoitm.exe
[2011/01/20 11:46:26 | 000,103,140 | RHS- | M] () -- C:\itncdc.exe
[2011/01/24 09:44:32 | 000,103,140 | RHS- | M] () -- C:\itxy.pif
[2011/01/20 13:30:56 | 000,103,140 | RHS- | M] () -- C:\iudmg.pif
[2011/01/20 16:13:10 | 000,103,140 | RHS- | M] () -- C:\iukjmt.pif
[2011/01/20 13:26:42 | 000,103,140 | RHS- | M] () -- C:\iulla.exe
[2011/01/20 12:40:39 | 000,103,140 | RHS- | M] () -- C:\iupt.pif
[2011/01/24 13:27:48 | 000,103,140 | RHS- | M] () -- C:\ivdxq.exe
[2011/01/19 16:56:08 | 000,103,140 | RHS- | M] () -- C:\ivwiby.pif
[2011/01/25 16:03:45 | 000,103,140 | RHS- | M] () -- C:\iwbso.exe
[2011/01/25 15:49:21 | 000,103,140 | RHS- | M] () -- C:\iwev.exe
[2011/01/24 13:23:50 | 000,103,140 | RHS- | M] () -- C:\iwjejw.pif
[2011/01/21 15:00:08 | 000,103,140 | RHS- | M] () -- C:\iwoslc.exe
[2011/01/24 09:57:11 | 000,103,140 | RHS- | M] () -- C:\iwvfj.pif
[2011/01/21 10:29:20 | 000,103,140 | RHS- | M] () -- C:\iwxyv.exe
[2011/01/20 13:21:20 | 000,103,140 | RHS- | M] () -- C:\ixdl.exe
[2011/01/21 13:37:08 | 000,103,140 | RHS- | M] () -- C:\iydjqs.exe
[2011/01/24 12:45:58 | 000,103,140 | RHS- | M] () -- C:\iydntg.exe
[2011/01/24 11:39:36 | 000,103,140 | RHS- | M] () -- C:\iyyw.exe
[2011/01/24 15:25:10 | 000,103,140 | RHS- | M] () -- C:\jacmcv.exe
[2011/01/24 11:43:19 | 000,103,140 | RHS- | M] () -- C:\jaekwi.pif
[2011/01/20 13:47:00 | 000,103,140 | RHS- | M] () -- C:\japif.pif
[2011/01/24 09:28:58 | 000,103,140 | RHS- | M] () -- C:\jateu.exe
[2009/12/22 10:31:47 | 000,000,639 | ---- | M] () -- C:\JavaRa.log
[2011/01/20 09:52:46 | 000,103,140 | RHS- | M] () -- C:\jbbhh.pif
[2011/01/21 16:04:55 | 000,103,140 | RHS- | M] () -- C:\jbnqok.pif
[2011/01/20 16:49:00 | 000,103,140 | RHS- | M] () -- C:\jcntvv.exe
[2011/01/25 15:48:43 | 000,103,140 | RHS- | M] () -- C:\jdak.pif
[2011/01/25 15:15:40 | 000,103,140 | RHS- | M] () -- C:\jdfy.exe
[2011/01/20 12:43:16 | 000,103,140 | RHS- | M] () -- C:\jdhi.exe
[2011/01/21 16:35:10 | 000,103,140 | RHS- | M] () -- C:\jdmiap.exe
[2011/01/20 15:16:37 | 000,103,140 | RHS- | M] () -- C:\jdnvr.pif
[2011/01/25 15:09:43 | 000,103,140 | RHS- | M] () -- C:\jdswe.exe
[2011/01/21 13:26:08 | 000,103,140 | RHS- | M] () -- C:\jefwr.pif
[2011/01/25 14:47:41 | 000,103,140 | RHS- | M] () -- C:\jera.pif
[2011/01/21 14:40:15 | 000,103,140 | RHS- | M] () -- C:\jfibt.pif
[2011/01/20 10:13:26 | 000,103,140 | RHS- | M] () -- C:\jfmtu.exe
[2011/01/20 15:25:22 | 000,103,140 | RHS- | M] () -- C:\jgbv.pif
[2011/01/24 13:26:58 | 000,103,140 | RHS- | M] () -- C:\jgmv.pif
[2011/01/20 16:29:13 | 000,103,140 | RHS- | M] () -- C:\jhas.pif
[2011/01/25 16:46:11 | 000,103,140 | RHS- | M] () -- C:\jhlw.exe
[2011/01/21 13:35:50 | 000,103,140 | RHS- | M] () -- C:\jhtx.exe
[2011/01/20 11:10:04 | 000,103,140 | RHS- | M] () -- C:\jhxglc.pif
[2011/01/21 15:36:13 | 000,103,140 | RHS- | M] () -- C:\jior.pif
[2011/01/25 16:41:03 | 000,103,140 | RHS- | M] () -- C:\jjveva.exe
[2011/01/21 13:12:42 | 000,103,140 | RHS- | M] () -- C:\jjwanp.exe
[2011/01/24 10:25:24 | 000,103,140 | RHS- | M] () -- C:\jkjm.pif
[2011/01/24 10:32:49 | 000,103,140 | RHS- | M] () -- C:\jlst.pif
[2011/01/25 16:54:35 | 000,103,140 | RHS- | M] () -- C:\jluoo.pif
[2011/01/21 09:42:15 | 000,103,140 | RHS- | M] () -- C:\jmcqs.pif
[2011/01/25 16:49:22 | 000,103,140 | RHS- | M] () -- C:\jmxj.exe
[2011/01/24 15:21:59 | 000,103,140 | RHS- | M] () -- C:\jnfa.pif
[2011/01/24 11:50:36 | 000,103,140 | RHS- | M] () -- C:\jngom.pif
[2011/01/20 09:46:26 | 000,103,140 | RHS- | M] () -- C:\jnyxri.exe
[2011/01/24 10:39:25 | 000,103,140 | RHS- | M] () -- C:\jobar.pif
[2011/01/25 15:29:32 | 000,103,140 | RHS- | M] () -- C:\joboc.pif
[2008/04/29 09:24:14 | 000,000,177 | ---- | M] () -- C:\Join Meeting.url
[2011/01/21 16:34:18 | 000,103,140 | RHS- | M] () -- C:\joph.exe
[2011/01/20 14:43:38 | 000,103,140 | RHS- | M] () -- C:\jowbc.pif
[2011/01/21 12:45:32 | 000,103,140 | RHS- | M] () -- C:\jpedlv.pif
[2011/01/19 17:15:11 | 000,103,140 | RHS- | M] () -- C:\jrti.pif
[2011/01/21 12:02:12 | 000,103,140 | RHS- | M] () -- C:\jsbxn.exe
[2011/01/21 14:35:13 | 000,103,140 | RHS- | M] () -- C:\jsedu.pif
[2011/01/21 16:32:48 | 000,103,140 | RHS- | M] () -- C:\jsjuqu.pif
[2011/01/25 16:13:55 | 000,103,140 | RHS- | M] () -- C:\jsxeux.pif
[2011/01/20 12:15:26 | 000,103,140 | RHS- | M] () -- C:\jtwdyh.exe
[2011/01/20 16:06:17 | 000,103,140 | RHS- | M] () -- C:\juys.pif
[2011/01/20 16:05:42 | 000,103,140 | RHS- | M] () -- C:\jvxi.exe
[2011/01/20 16:10:46 | 000,103,140 | RHS- | M] () -- C:\jwjhr.pif
[2011/01/21 11:22:38 | 000,103,140 | RHS- | M] () -- C:\jwlw.exe
[2011/01/21 15:04:59 | 000,103,140 | RHS- | M] () -- C:\jwyve.pif
[2011/01/21 16:51:44 | 000,103,140 | RHS- | M] () -- C:\jxfk.exe
[2011/01/20 10:51:50 | 000,103,140 | RHS- | M] () -- C:\jxtnek.exe
[2011/01/24 12:09:52 | 000,103,140 | RHS- | M] () -- C:\jyfmy.pif
[2011/01/24 13:11:28 | 000,103,140 | RHS- | M] () -- C:\jyms.exe
[2011/01/20 14:23:18 | 000,103,140 | RHS- | M] () -- C:\jyrgt.exe
[2011/01/20 10:47:00 | 000,103,140 | RHS- | M] () -- C:\jyvya.exe
[2011/01/20 15:47:32 | 000,103,140 | RHS- | M] () -- C:\jyyqp.pif
[2011/01/21 14:58:40 | 000,103,140 | RHS- | M] () -- C:\kaewl.pif
[2011/01/21 14:54:26 | 000,103,140 | RHS- | M] () -- C:\kaslf.exe
[2011/01/21 13:54:48 | 000,103,140 | RHS- | M] () -- C:\kbfh.exe
[2011/01/24 09:58:03 | 000,103,140 | RHS- | M] () -- C:\kblfsr.pif
[2011/01/24 10:02:54 | 000,103,140 | RHS- | M] () -- C:\kcbxsc.exe
[2011/01/21 13:38:22 | 000,103,140 | RHS- | M] () -- C:\kefnva.pif
[2011/01/21 12:42:44 | 000,103,140 | RHS- | M] () -- C:\keird.exe
[2011/01/20 10:34:16 | 000,103,140 | RHS- | M] () -- C:\kejt.exe
[2011/01/21 16:11:54 | 000,103,140 | RHS- | M] () -- C:\kepkaw.pif
[2011/01/21 11:58:24 | 000,103,140 | RHS- | M] () -- C:\kfug.exe
[2011/01/24 13:12:09 | 000,103,140 | RHS- | M] () -- C:\kfwg.pif
[2011/01/24 09:46:48 | 000,103,140 | RHS- | M] () -- C:\kfyhrp.exe
[2011/01/20 14:59:00 | 000,103,140 | RHS- | M] () -- C:\kgbac.exe
[2011/01/24 09:39:46 | 000,103,140 | RHS- | M] () -- C:\kgbmhp.exe
[2011/01/20 12:46:04 | 000,103,140 | RHS- | M] () -- C:\kgdbr.exe
[2011/01/21 15:26:56 | 000,103,140 | RHS- | M] () -- C:\kgdip.exe
[2011/01/21 13:21:56 | 000,103,140 | RHS- | M] () -- C:\kggpju.exe
[2011/01/21 14:04:29 | 000,103,140 | RHS- | M] () -- C:\kgubw.pif
[2011/01/24 11:08:30 | 000,103,140 | RHS- | M] () -- C:\khcht.exe
[2011/01/20 12:59:14 | 000,103,140 | RHS- | M] () -- C:\khkdvk.exe
[2011/01/25 15:02:54 | 000,103,140 | RHS- | M] () -- C:\khtirl.exe
[2011/01/20 11:01:16 | 000,103,140 | RHS- | M] () -- C:\kifnv.exe
[2011/01/20 14:49:10 | 000,103,140 | RHS- | M] () -- C:\kiiw.exe
[2011/01/21 09:39:02 | 000,103,140 | RHS- | M] () -- C:\kiln.pif
[2011/01/25 15:07:02 | 000,103,140 | RHS- | M] () -- C:\kjbl.exe
[2011/01/24 13:26:11 | 000,103,140 | RHS- | M] () -- C:\kjgby.pif
[2011/01/20 13:38:18 | 000,103,140 | RHS- | M] () -- C:\kjiinw.exe
[2011/01/25 17:07:18 | 000,103,140 | RHS- | M] () -- C:\kjwnwm.pif
[2011/01/21 15:51:08 | 000,103,140 | RHS- | M] () -- C:\kjyv.exe
[2011/01/20 13:35:40 | 000,103,140 | RHS- | M] () -- C:\kkgdxy.exe
[2011/01/21 11:38:22 | 000,103,140 | RHS- | M] () -- C:\kkpnv.exe
[2011/01/24 13:13:47 | 000,103,140 | RHS- | M] () -- C:\kkulmn.pif
[2011/01/21 16:13:58 | 000,103,140 | RHS- | M] () -- C:\klhe.exe
[2011/01/21 16:18:17 | 000,103,140 | RHS- | M] () -- C:\kligce.pif
[2011/01/21 16:51:06 | 000,103,140 | RHS- | M] () -- C:\klike.exe
[2011/01/20 16:28:35 | 000,103,140 | RHS- | M] () -- C:\kmrvl.pif
[2011/01/21 16:09:18 | 000,103,140 | RHS- | M] () -- C:\kmwo.exe
[2011/01/21 14:05:24 | 000,103,140 | RHS- | M] () -- C:\kmyev.exe
[2011/01/21 12:08:24 | 000,103,140 | RHS- | M] () -- C:\kmys.exe
[2011/01/20 13:22:42 | 000,103,140 | RHS- | M] () -- C:\knhn.pif
[2011/01/25 17:09:12 | 000,103,140 | RHS- | M] () -- C:\knmdrk.pif
[2011/01/20 13:09:22 | 000,103,140 | RHS- | M] () -- C:\knofx.exe
[2011/01/25 14:34:32 | 000,103,140 | RHS- | M] () -- C:\knuff.pif
[2011/01/20 09:39:06 | 000,103,140 | RHS- | M] () -- C:\knvoof.pif
[2011/01/24 13:06:56 | 000,103,140 | RHS- | M] () -- C:\koenth.exe
[2011/01/21 14:31:14 | 000,103,140 | RHS- | M] () -- C:\kpnad.exe
[2011/01/24 11:38:48 | 000,103,140 | RHS- | M] () -- C:\kpvov.pif
[2011/01/24 08:58:42 | 000,103,140 | RHS- | M] () -- C:\kqft.exe
[2011/01/20 15:32:28 | 000,103,140 | RHS- | M] () -- C:\kqpbjs.pif
[2011/01/20 12:00:55 | 000,103,140 | RHS- | M] () -- C:\krjur.pif
[2011/01/20 15:13:08 | 000,103,140 | RHS- | M] () -- C:\krktmb.exe
[2011/01/20 16:39:21 | 000,103,140 | RHS- | M] () -- C:\krog.pif
[2011/01/20 17:01:47 | 000,103,140 | RHS- | M] () -- C:\ksfmle.pif
[2011/01/20 16:50:50 | 000,103,140 | RHS- | M] () -- C:\ktea.pif
[2011/01/20 15:07:04 | 000,103,140 | RHS- | M] () -- C:\ktet.exe
[2011/01/20 15:10:05 | 000,103,140 | RHS- | M] () -- C:\ktlx.pif
[2011/01/24 10:01:10 | 000,103,140 | RHS- | M] () -- C:\kuqona.exe
[2011/01/19 16:55:18 | 000,103,140 | RHS- | M] () -- C:\kvlsa.exe
[2011/01/20 11:15:50 | 000,103,140 | RHS- | M] () -- C:\kvulod.exe
[2011/01/24 09:52:53 | 000,103,140 | RHS- | M] () -- C:\kwmtgc.pif
[2011/01/20 13:58:56 | 000,103,140 | RHS- | M] () -- C:\kwplhd.exe
[2011/01/21 12:19:14 | 000,103,140 | RHS- | M] () -- C:\kwvigw.pif
[2011/01/20 11:33:20 | 000,103,140 | RHS- | M] () -- C:\kwynje.exe
[2011/01/25 16:32:15 | 000,103,140 | RHS- | M] () -- C:\kxcblb.pif
[2011/01/21 15:15:00 | 000,103,140 | RHS- | M] () -- C:\kxkrrk.pif
[2011/01/25 16:30:36 | 000,103,140 | RHS- | M] () -- C:\kyee.pif
[2011/01/20 16:17:30 | 000,103,140 | RHS- | M] () -- C:\kymw.exe
[2011/01/21 09:53:12 | 000,103,140 | RHS- | M] () -- C:\kyno.exe
[2011/01/20 11:43:46 | 000,103,140 | RHS- | M] () -- C:\laqb.exe
[2011/01/20 09:59:48 | 000,103,140 | RHS- | M] () -- C:\lasry.exe
[2011/01/21 11:59:04 | 000,103,140 | RHS- | M] () -- C:\lbesos.exe
[2011/01/21 10:01:08 | 000,103,140 | RHS- | M] () -- C:\lbijp.exe
[2011/01/20 10:05:24 | 000,103,140 | RHS- | M] () -- C:\lbti.exe
[2011/01/21 11:49:59 | 000,103,140 | RHS- | M] () -- C:\lcaw.pif
[2011/01/25 16:25:28 | 000,103,140 | RHS- | M] () -- C:\lcgwfq.exe
[2011/01/20 15:35:01 | 000,103,140 | RHS- | M] () -- C:\lcwv.pif
[2011/01/20 11:36:20 | 000,103,140 | RHS- | M] () -- C:\ldbyb.pif
[2011/01/21 16:38:55 | 000,103,140 | RHS- | M] () -- C:\ldhn.pif
[2011/01/20 09:06:32 | 000,103,140 | RHS- | M] () -- C:\ldjq.pif
[2011/01/20 15:26:40 | 000,103,140 | RHS- | M] () -- C:\ldlgf.pif
[2011/01/21 12:34:50 | 000,103,140 | RHS- | M] () -- C:\ldmp.exe
[2011/01/20 15:42:38 | 000,103,140 | RHS- | M] () -- C:\ldpp.pif
[2011/01/20 13:36:49 | 000,103,140 | RHS- | M] () -- C:\ldsu.pif
[2011/01/25 16:17:27 | 000,103,140 | RHS- | M] () -- C:\leery.exe
[2011/01/20 10:08:48 | 000,103,140 | RHS- | M] () -- C:\lepk.exe
[2011/01/24 10:26:58 | 000,103,140 | RHS- | M] () -- C:\letn.exe
[2011/01/21 14:17:42 | 000,103,140 | RHS- | M] () -- C:\lgcc.exe
[2011/01/20 11:29:48 | 000,103,140 | RHS- | M] () -- C:\lghewk.exe
[2011/01/21 12:26:42 | 000,103,140 | RHS- | M] () -- C:\lgoqu.exe
[2011/01/20 10:35:48 | 000,103,140 | RHS- | M] () -- C:\lhwsw.exe
[2011/01/20 13:39:03 | 000,103,140 | RHS- | M] () -- C:\lipfxg.pif
[2011/01/20 11:57:58 | 000,103,140 | RHS- | M] () -- C:\liudo.exe
[2011/01/21 14:39:20 | 000,103,140 | RHS- | M] () -- C:\ljojyg.pif
[2011/01/20 10:42:14 | 000,103,140 | RHS- | M] () -- C:\ljrdkq.exe
[2011/01/20 13:52:12 | 000,103,140 | RHS- | M] () -- C:\ljwwnp.pif
[2011/01/20 13:11:22 | 000,103,140 | RHS- | M] () -- C:\lkcbse.exe
[2011/01/20 12:57:40 | 000,103,140 | RHS- | M] () -- C:\lkgaqu.exe
[2011/01/20 15:20:40 | 000,103,140 | RHS- | M] () -- C:\lkgje.exe
[2011/01/20 14:51:07 | 000,103,140 | RHS- | M] () -- C:\llec.pif
[2011/01/21 16:29:02 | 000,103,140 | RHS- | M] () -- C:\llkpwd.exe
[2011/01/25 14:52:24 | 000,103,140 | RHS- | M] () -- C:\lmcpmv.exe
[2011/01/24 09:37:07 | 000,103,140 | RHS- | M] () -- C:\lmjkj.pif
[2011/01/20 10:37:26 | 000,103,140 | RHS- | M] () -- C:\lmpqoj.pif
[2011/01/20 12:36:36 | 000,103,140 | RHS- | M] () -- C:\lmturo.exe
[2011/01/20 11:40:12 | 000,103,140 | RHS- | M] () -- C:\lmvgn.exe
[2011/01/21 16:43:20 | 000,103,140 | RHS- | M] () -- C:\lmvyu.pif
[2011/01/20 14:18:02 | 000,103,140 | RHS- | M] () -- C:\lmwjo.exe
[2011/01/20 14:11:21 | 000,103,140 | RHS- | M] () -- C:\lmwslg.pif
[2011/01/24 12:12:19 | 000,103,140 | RHS- | M] () -- C:\lnel.pif
[2011/01/24 12:19:02 | 000,103,140 | RHS- | M] () -- C:\lnxi.exe
[2011/01/24 11:27:46 | 000,103,140 | RHS- | M] () -- C:\lorm.pif
[2011/01/20 14:44:17 | 000,103,140 | RHS- | M] () -- C:\lpyf.pif
[2011/01/24 10:40:56 | 000,103,140 | RHS- | M] () -- C:\lqutdu.exe
[2011/01/24 13:49:46 | 000,103,140 | RHS- | M] () -- C:\lrqhu.pif
[2011/01/25 17:02:20 | 000,103,140 | RHS- | M] () -- C:\lsatud.exe
[2011/01/24 09:45:16 | 000,103,140 | RHS- | M] () -- C:\lswg.exe
[2011/01/21 16:16:09 | 000,103,140 | RHS- | M] () -- C:\lswisa.pif
[2011/01/20 11:24:44 | 000,103,140 | RHS- | M] () -- C:\ltnl.exe
[2011/01/24 10:41:39 | 000,103,140 | RHS- | M] () -- C:\ltsoc.pif
[2011/01/20 16:04:27 | 000,103,140 | RHS- | M] () -- C:\luovmo.pif
[2011/01/24 10:17:56 | 000,103,140 | RHS- | M] () -- C:\lupctr.exe
[2011/01/24 12:44:18 | 000,103,140 | RHS- | M] () -- C:\luscip.exe
[2011/01/20 12:58:20 | 000,103,140 | RHS- | M] () -- C:\luwo.pif
[2011/01/20 13:15:56 | 000,103,140 | RHS- | M] () -- C:\lvbnn.exe
[2011/01/21 12:43:24 | 000,103,140 | RHS- | M] () -- C:\lwki.pif
[2011/01/20 09:26:47 | 000,103,140 | RHS- | M] () -- C:\lxki.pif
[2011/01/24 11:25:57 | 000,103,140 | RHS- | M] () -- C:\lxtcs.pif
[2011/01/21 13:58:44 | 000,103,140 | RHS- | M] () -- C:\lxyfl.exe
[2011/01/21 11:42:04 | 000,103,140 | RHS- | M] () -- C:\lyehaf.exe
[2011/01/21 15:42:17 | 000,103,140 | RHS- | M] () -- C:\lyklt.pif
[2011/01/20 09:48:16 | 000,103,140 | RHS- | M] () -- C:\mana.pif
[2011/01/24 11:14:20 | 000,103,140 | RHS- | M] () -- C:\maqrd.pif
[2011/01/24 11:28:52 | 000,103,140 | RHS- | M] () -- C:\mbjqm.exe
[2011/01/21 16:13:16 | 000,103,140 | RHS- | M] () -- C:\mbkb.exe
[2011/01/21 13:25:26 | 000,103,140 | RHS- | M] () -- C:\mbtuhm.pif
[2011/01/24 10:04:12 | 000,103,140 | RHS- | M] () -- C:\mcqkp.pif
[2011/01/21 16:36:06 | 000,103,140 | RHS- | M] () -- C:\mcvl.pif
[2011/01/20 12:19:43 | 000,103,140 | RHS- | M] () -- C:\mdobi.pif
[2011/01/21 10:24:44 | 000,103,140 | RHS- | M] () -- C:\mdosf.pif
[2011/01/24 10:34:14 | 000,103,140 | RHS- | M] () -- C:\meagc.exe
[2011/01/21 15:55:32 | 000,103,140 | RHS- | M] () -- C:\mefco.pif
[2011/01/25 15:30:14 | 000,103,140 | RHS- | M] () -- C:\megcf.exe
[2011/01/21 10:59:14 | 000,103,140 | RHS- | M] () -- C:\meiik.exe
[2011/01/20 15:09:30 | 000,103,140 | RHS- | M] () -- C:\metqs.exe
[2011/01/20 15:40:48 | 000,103,140 | RHS- | M] () -- C:\mewlgc.exe
[2011/01/25 15:41:01 | 000,103,140 | RHS- | M] () -- C:\mfjf.exe
[2011/01/25 14:27:04 | 000,103,140 | RHS- | M] () -- C:\mfkih.exe
[2011/01/25 16:29:57 | 000,103,140 | RHS- | M] () -- C:\mgtcnl.exe
[2011/01/20 09:25:05 | 000,103,140 | RHS- | M] () -- C:\mguo.pif
[2011/01/20 12:35:14 | 000,103,140 | RHS- | M] () -- C:\mhdy.exe
[2011/01/20 15:44:28 | 000,103,140 | RHS- | M] () -- C:\mhhgj.exe
[2011/01/20 16:24:16 | 000,103,140 | RHS- | M] () -- C:\mhio.exe
[2011/01/21 12:35:36 | 000,103,140 | RHS- | M] () -- C:\mhkpyl.exe
[2011/01/21 16:30:26 | 000,103,140 | RHS- | M] () -- C:\micr.exe
[2011/01/20 15:41:24 | 000,103,140 | RHS- | M] () -- C:\micrk.pif
[2011/01/20 15:36:18 | 000,103,140 | RHS- | M] () -- C:\midgvd.exe
[2011/01/20 14:39:00 | 000,103,140 | RHS- | M] () -- C:\miexvp.exe
[2011/01/21 14:09:10 | 000,103,140 | RHS- | M] () -- C:\mikpu.exe
[2011/01/20 10:59:54 | 000,103,140 | RHS- | M] () -- C:\mikw.exe
[2011/01/20 14:50:27 | 000,103,140 | RHS- | M] () -- C:\mkaq.pif

pfchang
Intermediate
Intermediate

Posts Posts : 66
Joined Joined : 2009-03-05
OS OS : Windows XP Professional
Points Points : 28695
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Virus - Shutting down antivirus

Post by pfchang on Tue Feb 01, 2011 12:10 am

[2011/01/21 15:40:13 | 000,103,140 | RHS- | M] () -- C:\mkewd.pif
[2011/01/25 15:22:49 | 000,103,140 | RHS- | M] () -- C:\mkfa.exe
[2011/01/24 09:47:31 | 000,103,140 | RHS- | M] () -- C:\mkwf.exe
[2011/01/21 09:47:14 | 000,103,140 | RHS- | M] () -- C:\mleetg.exe
[2011/01/21 13:49:42 | 000,103,140 | RHS- | M] () -- C:\mlmfc.exe
[2011/01/20 10:55:42 | 000,103,140 | RHS- | M] () -- C:\mltaja.pif
[2011/01/24 11:47:52 | 000,103,140 | RHS- | M] () -- C:\mlwcvi.pif
[2011/01/20 16:03:07 | 000,103,140 | RHS- | M] () -- C:\mlyo.pif
[2011/01/21 16:42:33 | 000,103,140 | RHS- | M] () -- C:\mmtscg.pif
[2011/01/20 13:13:10 | 000,103,140 | RHS- | M] () -- C:\mmxxgq.exe
[2011/01/25 14:38:48 | 000,103,140 | RHS- | M] () -- C:\mnwjq.pif
[2011/01/25 14:32:12 | 000,103,140 | RHS- | M] () -- C:\mofe.pif
[2011/01/20 12:44:10 | 000,103,140 | RHS- | M] () -- C:\momc.exe
[2011/01/24 11:42:18 | 000,103,140 | RHS- | M] () -- C:\mphjeq.exe
[2011/01/21 14:31:52 | 000,103,140 | RHS- | M] () -- C:\mpua.exe
[2011/01/21 14:48:20 | 000,103,140 | RHS- | M] () -- C:\mpwcf.pif
[2011/01/20 13:28:00 | 000,103,140 | RHS- | M] () -- C:\mqdasd.pif
[2011/01/25 14:43:28 | 000,103,140 | RHS- | M] () -- C:\mrcy.pif
[2011/01/20 14:17:16 | 000,103,140 | RHS- | M] () -- C:\mree.exe
[2011/01/25 16:26:46 | 000,103,140 | RHS- | M] () -- C:\mriwh.exe
[2011/01/25 16:37:03 | 000,103,140 | RHS- | M] () -- C:\mrkn.exe
[2011/01/21 12:46:42 | 000,103,140 | RHS- | M] () -- C:\mrrd.exe
[2008/04/11 09:43:52 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2011/01/25 14:49:00 | 000,103,140 | RHS- | M] () -- C:\msipcx.exe
[2011/01/20 11:18:00 | 000,103,140 | RHS- | M] () -- C:\msrkv.exe
[2011/01/20 13:07:04 | 000,103,140 | RHS- | M] () -- C:\msrq.exe
[2011/01/21 10:50:33 | 000,103,140 | RHS- | M] () -- C:\mthg.pif
[2011/01/20 11:21:34 | 000,103,140 | RHS- | M] () -- C:\mtsnu.exe
[2011/01/21 15:28:58 | 000,103,140 | RHS- | M] () -- C:\mtwg.pif
[2011/01/20 14:53:45 | 000,103,140 | RHS- | M] () -- C:\muhsb.pif
[2011/01/24 09:56:32 | 000,103,140 | RHS- | M] () -- C:\mvduhy.exe
[2011/01/24 10:35:34 | 000,103,140 | RHS- | M] () -- C:\mvga.pif
[2011/01/24 13:36:57 | 000,103,140 | RHS- | M] () -- C:\mvtlso.pif
[2011/01/24 10:55:50 | 000,103,140 | RHS- | M] () -- C:\mwargt.exe
[2011/01/24 12:49:43 | 000,103,140 | RHS- | M] () -- C:\mwhban.pif
[2011/01/24 09:04:30 | 000,103,140 | RHS- | M] () -- C:\mwladh.exe
[2011/01/25 14:35:17 | 000,103,140 | RHS- | M] () -- C:\mxst.pif
[2011/01/24 10:31:16 | 000,103,140 | RHS- | M] () -- C:\mxux.exe
[2011/01/25 16:57:11 | 000,103,140 | RHS- | M] () -- C:\mybmik.pif
[2011/01/21 12:14:46 | 000,103,140 | RHS- | M] () -- C:\myhk.exe
[2011/01/20 16:53:15 | 000,103,140 | RHS- | M] () -- C:\myljbf.pif
[2011/01/20 13:12:04 | 000,103,140 | RHS- | M] () -- C:\mypokx.exe
[2011/01/20 12:38:37 | 000,103,140 | RHS- | M] () -- C:\mysqak.pif
[2011/01/21 16:24:33 | 000,103,140 | RHS- | M] () -- C:\mytvt.pif
[2011/01/20 16:21:10 | 000,103,140 | RHS- | M] () -- C:\nati.pif
[2011/01/25 15:16:20 | 000,103,140 | RHS- | M] () -- C:\naxw.pif
[2011/01/20 13:54:44 | 000,103,140 | RHS- | M] () -- C:\ncjiqr.exe
[2011/01/25 16:53:21 | 000,103,140 | RHS- | M] () -- C:\ndass.exe
[2011/01/20 13:48:59 | 000,103,140 | RHS- | M] () -- C:\neauoh.pif
[2011/01/21 16:19:33 | 000,103,140 | RHS- | M] () -- C:\neiytb.pif
[2011/01/20 13:46:22 | 000,103,140 | RHS- | M] () -- C:\nekqq.pif
[2011/01/24 09:53:53 | 000,103,140 | RHS- | M] () -- C:\nelm.pif
[2011/01/20 12:03:16 | 000,103,140 | RHS- | M] () -- C:\nemup.pif
[2011/01/25 15:24:07 | 000,103,140 | RHS- | M] () -- C:\neog.exe
[2011/01/20 15:38:54 | 000,103,140 | RHS- | M] () -- C:\neqypm.pif
[2011/01/21 14:09:51 | 000,103,140 | RHS- | M] () -- C:\neyqam.pif
[2011/01/20 15:15:20 | 000,103,140 | RHS- | M] () -- C:\nfjqa.exe
[2011/01/25 17:02:56 | 000,103,140 | RHS- | M] () -- C:\nfvd.exe
[2011/01/20 10:30:09 | 000,103,140 | RHS- | M] () -- C:\ngljaf.pif
[2011/01/25 16:26:04 | 000,103,140 | RHS- | M] () -- C:\nifb.exe
[2011/01/20 13:06:22 | 000,103,140 | RHS- | M] () -- C:\nimo.pif
[2011/01/20 16:52:03 | 000,103,140 | RHS- | M] () -- C:\ninje.pif
[2011/01/21 16:09:55 | 000,103,140 | RHS- | M] () -- C:\nipbfc.pif
[2011/01/21 14:08:25 | 000,103,140 | RHS- | M] () -- C:\nisd.pif
[2011/01/21 16:11:13 | 000,103,140 | RHS- | M] () -- C:\niwe.pif
[2011/01/25 15:02:11 | 000,103,140 | RHS- | M] () -- C:\njbje.exe
[2011/01/21 15:56:14 | 000,103,140 | RHS- | M] () -- C:\njclxo.exe
[2011/01/20 13:13:50 | 000,103,140 | RHS- | M] () -- C:\nlhr.exe
[2011/01/21 11:37:30 | 000,103,140 | RHS- | M] () -- C:\nltiy.pif
[2011/01/20 14:12:11 | 000,103,140 | RHS- | M] () -- C:\nmbv.pif
[2011/01/20 14:25:30 | 000,103,140 | RHS- | M] () -- C:\nmmt.exe
[2011/01/21 15:38:10 | 000,103,140 | RHS- | M] () -- C:\nmnspx.exe
[2011/01/25 16:46:48 | 000,103,140 | RHS- | M] () -- C:\nnlh.exe
[2011/01/20 09:40:26 | 000,103,140 | RHS- | M] () -- C:\nnnw.pif
[2011/01/24 15:24:10 | 000,103,140 | RHS- | M] () -- C:\nntqy.exe
[2011/01/21 16:02:14 | 000,103,140 | RHS- | M] () -- C:\nnwpan.exe
[2011/01/24 12:55:00 | 000,103,140 | RHS- | M] () -- C:\nolpfg.exe
[2011/01/20 12:30:50 | 000,103,140 | RHS- | M] () -- C:\npcvjr.pif
[2011/01/25 14:58:27 | 000,103,140 | RHS- | M] () -- C:\nqckf.pif
[2011/01/25 15:09:04 | 000,103,140 | RHS- | M] () -- C:\nqypk.exe
[2011/01/21 10:39:18 | 000,103,140 | RHS- | M] () -- C:\nrentt.pif
[2011/01/25 16:56:32 | 000,103,140 | RHS- | M] () -- C:\nrld.exe
[2011/01/25 16:19:13 | 000,103,140 | RHS- | M] () -- C:\nrmm.exe
[2011/01/24 12:50:25 | 000,103,140 | RHS- | M] () -- C:\nrtkr.pif
[2011/01/21 15:41:36 | 000,103,140 | RHS- | M] () -- C:\nrwmq.pif
[2011/01/20 11:19:19 | 000,103,140 | RHS- | M] () -- C:\nsby.pif
[2011/01/21 15:34:12 | 000,103,140 | RHS- | M] () -- C:\nsnwra.exe
[2011/01/24 13:04:36 | 000,103,140 | RHS- | M] () -- C:\nstc.exe
[2011/01/24 12:38:57 | 000,103,140 | RHS- | M] () -- C:\nsusuq.pif
[2011/01/19 17:00:42 | 000,103,140 | RHS- | M] () -- C:\ntcy.exe
[2004/08/04 00:00:00 | 000,047,564 | RHS- | M] () -- C:\NTDETECT.COM
[2009/11/06 14:05:53 | 000,250,048 | RHS- | M] () -- C:\ntldr
[2011/01/20 16:43:50 | 000,103,140 | RHS- | M] () -- C:\ntlgs.exe
[2011/01/20 11:18:40 | 000,103,140 | RHS- | M] () -- C:\ntnwp.pif
[2011/01/20 13:41:21 | 000,103,140 | RHS- | M] () -- C:\nubckd.pif
[2011/01/20 13:14:56 | 000,103,140 | RHS- | M] () -- C:\nube.exe
[2011/01/20 14:13:31 | 000,103,140 | RHS- | M] () -- C:\nuec.pif
[2011/01/19 17:05:44 | 000,103,140 | RHS- | M] () -- C:\nufo.exe
[2011/01/20 13:10:42 | 000,103,140 | RHS- | M] () -- C:\nuktno.exe
[2011/01/20 14:30:29 | 000,103,140 | RHS- | M] () -- C:\nvfjd.pif
[2011/01/20 09:10:58 | 000,103,140 | RHS- | M] () -- C:\nvji.exe
[2011/01/25 16:28:39 | 000,103,140 | RHS- | M] () -- C:\nvxks.exe
[2011/01/25 16:31:33 | 000,103,140 | RHS- | M] () -- C:\nwaon.pif
[2011/01/21 09:49:16 | 000,103,140 | RHS- | M] () -- C:\nwfleg.exe
[2011/01/20 09:59:06 | 000,103,140 | RHS- | M] () -- C:\nwgf.exe
[2011/01/21 16:47:02 | 000,103,140 | RHS- | M] () -- C:\nwhdnm.exe
[2011/01/20 13:33:03 | 000,103,140 | RHS- | M] () -- C:\nwqtp.pif
[2011/01/20 15:24:03 | 000,103,140 | RHS- | M] () -- C:\nxmiyk.pif
[2011/01/20 10:16:56 | 000,103,140 | RHS- | M] () -- C:\nxvac.exe
[2011/01/21 11:24:00 | 000,103,140 | RHS- | M] () -- C:\nxvdp.exe
[2011/01/20 10:15:31 | 000,103,140 | RHS- | M] () -- C:\nygrt.pif
[2011/01/25 15:19:12 | 000,103,140 | RHS- | M] () -- C:\nymr.pif
[2011/01/19 16:54:25 | 000,103,140 | RHS- | M] () -- C:\nyxqc.pif
[2011/01/25 16:55:13 | 000,103,140 | RHS- | M] () -- C:\oacojf.pif
[2011/01/20 16:35:17 | 000,103,140 | RHS- | M] () -- C:\oawmtr.pif
[2011/01/20 14:12:54 | 000,103,140 | RHS- | M] () -- C:\obsma.exe
[2011/01/20 11:12:20 | 000,103,140 | RHS- | M] () -- C:\obydn.exe
[2011/01/19 17:14:33 | 000,103,140 | RHS- | M] () -- C:\ocoe.pif
[2011/01/25 15:33:50 | 000,103,140 | RHS- | M] () -- C:\ocwdq.exe
[2011/01/20 12:07:56 | 000,103,140 | RHS- | M] () -- C:\odaw.pif
[2011/01/24 10:23:00 | 000,103,140 | RHS- | M] () -- C:\odnv.exe
[2011/01/25 16:03:04 | 000,103,140 | RHS- | M] () -- C:\odpnmq.exe
[2011/01/25 15:26:09 | 000,103,140 | RHS- | M] () -- C:\odshhw.pif
[2011/01/21 16:53:06 | 000,103,140 | RHS- | M] () -- C:\odvdwn.exe
[2011/01/21 14:21:50 | 000,103,140 | RHS- | M] () -- C:\oefu.pif
[2011/01/20 10:59:14 | 000,103,140 | RHS- | M] () -- C:\ofuhf.pif
[2011/01/20 11:43:00 | 000,103,140 | RHS- | M] () -- C:\ofvgw.exe
[2011/01/25 14:14:58 | 000,103,140 | RHS- | M] () -- C:\ogft.exe
[2011/01/25 16:41:42 | 000,103,140 | RHS- | M] () -- C:\oghb.pif
[2011/01/20 16:37:47 | 000,103,140 | RHS- | M] () -- C:\ogxb.pif
[2011/01/21 13:11:20 | 000,103,140 | RHS- | M] () -- C:\ogxq.exe
[2011/01/25 15:28:53 | 000,103,140 | RHS- | M] () -- C:\ohqwuw.pif
[2011/01/21 14:44:11 | 000,103,140 | RHS- | M] () -- C:\ohwsyf.pif
[2011/01/21 14:13:20 | 000,103,140 | RHS- | M] () -- C:\ohwyn.pif
[2011/01/24 09:19:18 | 000,103,140 | RHS- | M] () -- C:\oiod.exe
[2011/01/20 09:54:58 | 000,103,140 | RHS- | M] () -- C:\oiure.exe
[2011/01/24 09:18:12 | 000,103,140 | RHS- | M] () -- C:\oivi.exe
[2011/01/21 16:41:46 | 000,103,140 | RHS- | M] () -- C:\okgeet.pif
[2011/01/21 14:46:56 | 000,103,140 | RHS- | M] () -- C:\okldhm.exe
[2011/01/25 16:08:45 | 000,103,140 | RHS- | M] () -- C:\oklglj.pif
[2011/01/21 12:54:02 | 000,103,140 | RHS- | M] () -- C:\okme.exe
[2011/01/20 16:59:19 | 000,103,140 | RHS- | M] () -- C:\olkgg.pif
[2011/01/20 10:26:00 | 000,103,140 | RHS- | M] () -- C:\olph.pif
[2011/01/20 12:18:26 | 000,103,140 | RHS- | M] () -- C:\olsd.pif
[2011/01/20 15:06:26 | 000,103,140 | RHS- | M] () -- C:\omtq.exe
[2011/01/20 16:45:09 | 000,103,140 | RHS- | M] () -- C:\onae.pif
[2011/01/24 11:06:35 | 000,103,140 | RHS- | M] () -- C:\onfpfj.pif
[2011/01/20 15:52:01 | 000,103,140 | RHS- | M] () -- C:\oofi.pif
[2011/01/24 10:36:14 | 000,103,140 | RHS- | M] () -- C:\oofql.exe
[2011/01/21 15:42:56 | 000,103,140 | RHS- | M] () -- C:\opggt.exe
[2011/01/24 15:25:58 | 000,103,140 | RHS- | M] () -- C:\opgjhb.exe
[2011/01/20 13:02:20 | 000,103,140 | RHS- | M] () -- C:\opht.pif
[2010/07/21 16:47:58 | 000,145,920 | ---- | M] () -- C:\OPROJ_072110.xls
[2011/01/21 15:43:40 | 000,103,140 | RHS- | M] () -- C:\oqgejg.pif
[2011/01/20 13:56:06 | 000,103,140 | RHS- | M] () -- C:\oqic.pif
[2011/01/24 12:35:44 | 000,103,140 | RHS- | M] () -- C:\oqmoja.exe
[2011/01/21 15:58:12 | 000,103,140 | RHS- | M] () -- C:\oqpvvr.exe
[2011/01/20 15:52:43 | 000,103,140 | RHS- | M] () -- C:\oqxj.pif
[2011/01/25 14:50:22 | 000,103,140 | RHS- | M] () -- C:\oqylh.pif
[2011/01/21 11:14:28 | 000,103,140 | RHS- | M] () -- C:\orfd.exe
[2011/01/20 16:32:12 | 000,103,140 | RHS- | M] () -- C:\orgb.exe
[2011/01/24 12:08:24 | 000,103,140 | RHS- | M] () -- C:\oruld.exe
[2011/01/24 13:22:28 | 000,103,140 | RHS- | M] () -- C:\osha.pif
[2011/01/21 12:58:28 | 000,103,140 | RHS- | M] () -- C:\osjte.exe
[2011/01/20 12:55:06 | 000,103,140 | RHS- | M] () -- C:\oskpa.exe
[2011/01/25 15:38:50 | 000,103,140 | RHS- | M] () -- C:\osnkq.pif
[2011/01/24 11:54:54 | 000,103,140 | RHS- | M] () -- C:\osrniv.pif
[2011/01/21 12:50:01 | 000,103,140 | RHS- | M] () -- C:\ossp.pif
[2011/01/24 13:17:05 | 000,103,140 | RHS- | M] () -- C:\osudyx.pif
[2011/01/21 14:30:34 | 000,103,140 | RHS- | M] () -- C:\oswr.exe
[2011/01/21 12:51:00 | 000,103,140 | RHS- | M] () -- C:\otpdmi.exe
[2011/01/20 13:22:02 | 000,103,140 | RHS- | M] () -- C:\ouefb.pif
[2011/01/19 16:58:02 | 000,103,140 | RHS- | M] () -- C:\owpf.exe
[2011/01/21 09:25:26 | 000,103,140 | RHS- | M] () -- C:\owqdmv.exe
[2011/01/20 11:45:44 | 000,103,140 | RHS- | M] () -- C:\owqkv.pif
[2011/01/21 13:56:46 | 000,103,140 | RHS- | M] () -- C:\owxh.pif
[2011/01/21 10:40:00 | 000,103,140 | RHS- | M] () -- C:\oxwxi.exe
[2011/01/19 17:07:39 | 000,103,140 | RHS- | M] () -- C:\oxxeon.pif
[2011/01/20 12:22:04 | 000,103,140 | RHS- | M] () -- C:\oypt.exe
[2011/01/25 16:24:06 | 000,103,140 | RHS- | M] () -- C:\oysguh.exe
[2011/01/21 15:35:32 | 000,103,140 | RHS- | M] () -- C:\oyym.exe
[2011/01/31 15:14:28 | 1598,029,824 | -HS- | M] () -- C:\pagefile.sys
[2011/01/24 09:30:23 | 000,103,140 | RHS- | M] () -- C:\pahb.pif
[2011/01/20 11:19:58 | 000,103,140 | RHS- | M] () -- C:\palup.exe
[2011/01/20 13:53:58 | 000,103,140 | RHS- | M] () -- C:\patsiq.pif
[2011/01/20 14:03:12 | 000,103,140 | RHS- | M] () -- C:\pbeul.exe
[2011/01/20 10:41:14 | 000,103,140 | RHS- | M] () -- C:\pbimu.exe
[2011/01/20 14:28:08 | 000,103,140 | RHS- | M] () -- C:\pddq.exe
[2011/01/21 14:29:00 | 000,103,140 | RHS- | M] () -- C:\pdwra.exe
[2011/01/21 16:57:19 | 000,103,140 | RHS- | M] () -- C:\peeaim.pif
[2011/01/20 16:27:22 | 000,103,140 | RHS- | M] () -- C:\peeg.pif
[2011/01/20 14:21:56 | 000,103,140 | RHS- | M] () -- C:\pegiyn.pif
[2011/01/24 13:48:43 | 000,103,140 | RHS- | M] () -- C:\pehqq.pif
[2011/01/24 11:26:56 | 000,103,140 | RHS- | M] () -- C:\pepsw.exe
[2011/01/24 13:42:52 | 000,103,140 | RHS- | M] () -- C:\peykaq.exe
[2011/01/21 16:46:15 | 000,103,140 | RHS- | M] () -- C:\pfepa.pif
[2011/01/25 15:46:39 | 000,103,140 | RHS- | M] () -- C:\pghlm.pif
[2011/01/24 09:20:38 | 000,103,140 | RHS- | M] () -- C:\pghxjb.exe
[2011/01/21 10:15:05 | 000,103,140 | RHS- | M] () -- C:\phknn.pif
[2011/01/21 15:38:49 | 000,103,140 | RHS- | M] () -- C:\phmq.pif
[2011/01/20 16:21:48 | 000,103,140 | RHS- | M] () -- C:\picxdn.pif
[2011/01/25 16:07:29 | 000,103,140 | RHS- | M] () -- C:\pjhyyt.exe
[2011/01/20 12:28:43 | 000,103,140 | RHS- | M] () -- C:\pjsfms.pif
[2011/01/20 11:04:14 | 000,103,140 | RHS- | M] () -- C:\pjvm.pif
[2011/01/19 16:52:20 | 000,103,140 | RHS- | M] () -- C:\pkcjnq.pif
[2011/01/20 10:24:05 | 000,103,140 | RHS- | M] () -- C:\pkgj.pif
[2011/01/20 16:41:57 | 000,103,140 | RHS- | M] () -- C:\pkiccg.pif
[2011/01/19 17:19:31 | 000,103,140 | RHS- | M] () -- C:\pkjgo.pif
[2011/01/25 16:10:48 | 000,103,140 | RHS- | M] () -- C:\plbqs.exe
[2011/01/20 09:02:40 | 000,103,140 | RHS- | M] () -- C:\pnqsd.pif
[2011/01/24 10:29:36 | 000,103,140 | RHS- | M] () -- C:\pnwsp.exe
[2011/01/20 14:15:30 | 000,103,140 | RHS- | M] () -- C:\pnxutq.pif
[2011/01/24 13:23:10 | 000,103,140 | RHS- | M] () -- C:\pojq.exe
[2011/01/24 09:32:10 | 000,103,140 | RHS- | M] () -- C:\pojtxc.exe
[2011/01/20 16:22:26 | 000,103,140 | RHS- | M] () -- C:\pokos.exe
[2011/01/20 11:10:58 | 000,103,140 | RHS- | M] () -- C:\pokykt.exe
[2011/01/21 16:22:32 | 000,103,140 | RHS- | M] () -- C:\pomdu.pif
[2011/01/21 11:36:50 | 000,103,140 | RHS- | M] () -- C:\pqcucl.exe
[2011/01/20 15:45:04 | 000,103,140 | RHS- | M] () -- C:\preyec.pif
[2011/01/21 13:02:30 | 000,103,140 | RHS- | M] () -- C:\prsfd.exe
[2011/01/20 15:15:56 | 000,103,140 | RHS- | M] () -- C:\pscw.pif
[2011/01/24 11:55:36 | 000,103,140 | RHS- | M] () -- C:\psjlk.pif
[2011/01/20 10:57:53 | 000,103,140 | RHS- | M] () -- C:\pstkj.pif
[2011/01/21 15:09:37 | 000,103,140 | RHS- | M] () -- C:\ptal.pif
[2011/01/20 16:15:34 | 000,103,140 | RHS- | M] () -- C:\ptbr.exe
[2011/01/20 09:12:35 | 000,103,140 | RHS- | M] () -- C:\pugoh.exe
[2011/01/20 15:43:50 | 000,103,140 | RHS- | M] () -- C:\puqg.pif
[2011/01/24 10:17:12 | 000,103,140 | RHS- | M] () -- C:\putr.exe
[2011/01/21 10:36:04 | 000,103,140 | RHS- | M] () -- C:\pval.pif
[2011/01/20 12:11:05 | 000,103,140 | RHS- | M] () -- C:\pvmk.exe
[2011/01/20 09:29:51 | 000,103,140 | RHS- | M] () -- C:\pwhxpp.exe
[2011/01/20 09:41:57 | 000,103,140 | RHS- | M] () -- C:\pwyxoj.pif
[2011/01/21 14:51:37 | 000,103,140 | RHS- | M] () -- C:\pxfoj.exe
[2011/01/20 09:47:36 | 000,103,140 | RHS- | M] () -- C:\pxmr.pif
[2011/01/25 15:14:22 | 000,103,140 | RHS- | M] () -- C:\pxporn.exe
[2011/01/20 15:50:46 | 000,103,140 | RHS- | M] () -- C:\pxvnmw.pif
[2011/01/25 16:43:40 | 000,103,140 | RHS- | M] () -- C:\pyqrj.exe
[2011/01/21 13:31:45 | 000,103,140 | RHS- | M] () -- C:\pyyorn.exe
[2011/01/20 11:30:51 | 000,103,140 | RHS- | M] () -- C:\qafpn.pif
[2011/01/25 15:53:49 | 000,103,140 | RHS- | M] () -- C:\qari.pif
[2011/01/21 13:42:59 | 000,103,140 | RHS- | M] () -- C:\qbao.pif
[2011/01/25 15:45:12 | 000,103,140 | RHS- | M] () -- C:\qbfcmf.pif
[2011/01/21 11:07:01 | 000,103,140 | RHS- | M] () -- C:\qbjj.pif
[2011/01/20 11:34:07 | 000,103,140 | RHS- | M] () -- C:\qbmm.exe
[2011/01/25 15:01:30 | 000,103,140 | RHS- | M] () -- C:\qbmpot.exe
[2011/01/19 17:21:29 | 000,103,140 | RHS- | M] () -- C:\qcyrj.exe
[2011/01/24 12:11:39 | 000,103,140 | RHS- | M] () -- C:\qdkfbh.exe
[2011/01/25 14:46:22 | 000,103,140 | RHS- | M] () -- C:\qdwdid.pif
[2011/01/21 15:07:13 | 000,103,140 | RHS- | M] () -- C:\qeme.pif
[2011/01/21 15:17:25 | 000,103,140 | RHS- | M] () -- C:\qexrq.exe
[2011/01/21 16:25:57 | 000,103,140 | RHS- | M] () -- C:\qfsclb.exe
[2011/01/21 16:21:05 | 000,103,140 | RHS- | M] () -- C:\qfsooa.exe
[2011/01/20 13:23:21 | 000,103,140 | RHS- | M] () -- C:\qfvh.exe
[2011/01/20 14:49:49 | 000,103,140 | RHS- | M] () -- C:\qgevl.exe
[2011/01/20 12:01:47 | 000,103,140 | RHS- | M] () -- C:\qgpy.exe
[2011/01/24 15:35:32 | 000,103,140 | RHS- | M] () -- C:\qgrywc.exe
[2011/01/21 14:59:22 | 000,103,140 | RHS- | M] () -- C:\qhbdgi.exe
[2011/01/25 14:33:05 | 000,103,140 | RHS- | M] () -- C:\qifds.pif
[2011/01/20 13:53:15 | 000,103,140 | RHS- | M] () -- C:\qinmju.exe
[2011/01/24 12:58:00 | 000,103,140 | RHS- | M] () -- C:\qiwir.exe
[2011/01/20 15:31:51 | 000,103,140 | RHS- | M] () -- C:\qjkxc.exe
[2011/01/24 15:33:24 | 000,103,140 | RHS- | M] () -- C:\qjyw.exe
[2011/01/21 14:03:05 | 000,103,140 | RHS- | M] () -- C:\qkdr.exe
[2011/01/20 12:41:57 | 000,103,140 | RHS- | M] () -- C:\qlbhu.exe
[2011/01/20 15:58:21 | 000,103,140 | RHS- | M] () -- C:\qldpu.exe
[2011/01/21 12:55:23 | 000,103,140 | RHS- | M] () -- C:\qlffb.exe
[2011/01/25 15:59:01 | 000,103,140 | RHS- | M] () -- C:\qlvabm.pif
[2011/01/20 15:18:45 | 000,103,140 | RHS- | M] () -- C:\qlwxuf.pif
[2011/01/25 14:28:47 | 000,103,140 | RHS- | M] () -- C:\qmwq.exe
[2011/01/19 17:18:18 | 000,103,140 | RHS- | M] () -- C:\qnbo.exe
[2011/01/21 11:02:29 | 000,103,140 | RHS- | M] () -- C:\qngfb.exe
[2011/01/25 15:17:03 | 000,103,140 | RHS- | M] () -- C:\qnml.exe
[2011/01/21 16:40:16 | 000,103,140 | RHS- | M] () -- C:\qnxjp.exe
[2011/01/24 09:55:00 | 000,103,140 | RHS- | M] () -- C:\qoqb.pif
[2011/01/20 15:57:44 | 000,103,140 | RHS- | M] () -- C:\qouc.pif
[2011/01/21 10:32:54 | 000,103,140 | RHS- | M] () -- C:\qplbdr.exe
[2011/01/21 15:19:30 | 000,103,140 | RHS- | M] () -- C:\qpxwlw.pif
[2011/01/20 13:55:25 | 000,103,140 | RHS- | M] () -- C:\qqocl.exe
[2011/01/21 13:47:44 | 000,103,140 | RHS- | M] () -- C:\qqtto.pif
[2011/01/21 14:46:03 | 000,103,140 | RHS- | M] () -- C:\qrfwl.exe
[2011/01/24 09:02:58 | 000,103,140 | RHS- | M] () -- C:\qsjuhq.pif
[2011/01/20 16:47:47 | 000,103,140 | RHS- | M] () -- C:\qtjbjk.pif
[2011/01/20 15:03:34 | 000,103,140 | RHS- | M] () -- C:\qttlbx.exe
[2011/01/24 13:47:50 | 000,103,140 | RHS- | M] () -- C:\qtupp.pif
[2011/01/25 15:10:23 | 000,103,140 | RHS- | M] () -- C:\quict.exe
[2011/01/24 09:43:35 | 000,103,140 | RHS- | M] () -- C:\qvjfxv.exe
[2011/01/20 14:29:03 | 000,103,140 | RHS- | M] () -- C:\qvown.pif
[2011/01/24 11:51:20 | 000,103,140 | RHS- | M] () -- C:\qvunn.exe
[2011/01/25 15:26:52 | 000,103,140 | RHS- | M] () -- C:\qwbb.pif
[2011/01/24 11:45:39 | 000,103,140 | RHS- | M] () -- C:\qwbjt.pif
[2011/01/24 09:25:45 | 000,103,140 | RHS- | M] () -- C:\qxemb.exe
[2011/01/20 09:44:54 | 000,103,140 | RHS- | M] () -- C:\qxnwst.pif
[2011/01/25 16:58:35 | 000,103,140 | RHS- | M] () -- C:\qxwfpq.exe
[2011/01/21 15:44:20 | 000,103,140 | RHS- | M] () -- C:\qyhhgc.pif
[2011/01/20 13:17:55 | 000,103,140 | RHS- | M] () -- C:\qyiyng.pif
[2011/01/25 14:53:04 | 000,103,140 | RHS- | M] () -- C:\qyqs.pif
[2011/01/20 16:16:12 | 000,103,140 | RHS- | M] () -- C:\qywolq.exe
[2011/01/24 09:06:52 | 000,103,140 | RHS- | M] () -- C:\qyyib.pif
[2011/01/19 17:10:17 | 000,103,140 | RHS- | M] () -- C:\ranoqc.pif
[2011/01/25 15:31:38 | 000,103,140 | RHS- | M] () -- C:\ravlm.pif
[2011/01/25 14:54:44 | 000,103,140 | RHS- | M] () -- C:\rblyv.pif
[2011/01/20 15:24:42 | 000,103,140 | RHS- | M] () -- C:\rbqw.pif
[2011/01/25 17:03:33 | 000,103,140 | RHS- | M] () -- C:\rbwr.exe
[2011/01/25 14:40:58 | 000,103,140 | RHS- | M] () -- C:\rchn.exe
[2011/01/20 09:35:48 | 000,103,140 | RHS- | M] () -- C:\rcswp.pif
[2011/01/21 09:34:25 | 000,103,140 | RHS- | M] () -- C:\rctqpk.exe
[2011/01/20 10:09:40 | 000,103,140 | RHS- | M] () -- C:\rdbikp.exe
[2011/01/20 14:16:30 | 000,103,140 | RHS- | M] () -- C:\rdfemw.pif
[2011/01/25 15:28:11 | 000,103,140 | RHS- | M] () -- C:\rejdtf.pif
[2011/01/25 16:57:57 | 000,103,140 | RHS- | M] () -- C:\rekfdc.exe
[2011/01/21 15:46:33 | 000,103,140 | RHS- | M] () -- C:\renj.pif
[2011/01/24 11:56:31 | 000,103,140 | RHS- | M] () -- C:\reqt.pif
[2011/01/21 14:01:06 | 000,103,140 | RHS- | M] () -- C:\rffb.pif
[2011/01/24 15:27:01 | 000,103,140 | RHS- | M] () -- C:\rfjjql.exe
[2011/01/20 12:31:40 | 000,103,140 | RHS- | M] () -- C:\rfqk.pif
[2011/01/20 13:04:11 | 000,103,140 | RHS- | M] () -- C:\rgaga.exe
[2011/01/21 15:57:33 | 000,103,140 | RHS- | M] () -- C:\rghwp.pif
[2011/01/20 14:42:56 | 000,103,140 | RHS- | M] () -- C:\rgxtu.pif
[2011/01/25 16:48:42 | 000,103,140 | RHS- | M] () -- C:\rhhh.pif
[2011/01/24 09:59:38 | 000,103,140 | RHS- | M] () -- C:\rhmxn.pif
[2011/01/20 12:44:46 | 000,103,140 | RHS- | M] () -- C:\rhty.exe
[2011/01/21 14:17:00 | 000,103,140 | RHS- | M] () -- C:\rhyw.exe
[2011/01/21 15:30:18 | 000,103,140 | RHS- | M] () -- C:\rifdw.exe
[2011/01/19 17:08:16 | 000,103,140 | RHS- | M] () -- C:\rihn.exe
[2011/01/21 14:52:54 | 000,103,140 | RHS- | M] () -- C:\riwxy.exe
[2011/01/25 17:13:37 | 000,103,140 | RHS- | M] () -- C:\rjfg.exe
[2011/01/20 15:55:12 | 000,103,140 | RHS- | M] () -- C:\rjftxd.pif
[2011/01/24 12:43:26 | 000,103,140 | RHS- | M] () -- C:\rjhmmt.pif
[2011/01/20 12:09:28 | 000,103,140 | RHS- | M] () -- C:\rjta.exe
[2011/01/19 17:13:46 | 000,103,140 | RHS- | M] () -- C:\rjuvg.exe
[2011/01/20 11:39:23 | 000,103,140 | RHS- | M] () -- C:\rjvw.exe
[2011/01/20 13:51:23 | 000,103,140 | RHS- | M] () -- C:\rkajd.pif
[2011/01/21 13:06:39 | 000,103,140 | RHS- | M] () -- C:\rkbs.exe
[2011/01/20 11:55:09 | 000,103,140 | RHS- | M] () -- C:\rkxitp.pif
[2011/01/21 11:34:28 | 000,103,140 | RHS- | M] () -- C:\rlhe.exe
[2011/01/25 16:09:24 | 000,103,140 | RHS- | M] () -- C:\rlvne.pif
[2011/01/20 14:14:50 | 000,103,140 | RHS- | M] () -- C:\rmmi.exe
[2011/01/24 11:44:38 | 000,103,140 | RHS- | M] () -- C:\rnnats.pif
[2011/01/21 10:04:32 | 000,103,140 | RHS- | M] () -- C:\rnorr.pif
[2011/01/24 11:00:32 | 000,103,140 | RHS- | M] () -- C:\robkxq.pif
[2011/01/20 12:26:06 | 000,103,140 | RHS- | M] () -- C:\robvq.pif
[2011/01/20 16:58:39 | 000,103,140 | RHS- | M] () -- C:\royro.pif
[2011/01/25 16:12:25 | 000,103,140 | RHS- | M] () -- C:\rpjoyk.exe
[2011/01/24 13:24:36 | 000,103,140 | RHS- | M] () -- C:\rpwqhx.exe
[2011/01/20 12:07:08 | 000,103,140 | RHS- | M] () -- C:\rqcncb.exe
[2011/01/24 13:07:36 | 000,103,140 | RHS- | M] () -- C:\rqkhl.pif
[2011/01/20 16:56:33 | 000,103,140 | RHS- | M] () -- C:\rrhpbk.exe
[2011/01/25 17:01:04 | 000,103,140 | RHS- | M] () -- C:\rrnuk.pif
[2011/01/21 15:27:39 | 000,103,140 | RHS- | M] () -- C:\rrvmsg.pif
[2011/01/24 10:57:10 | 000,103,140 | RHS- | M] () -- C:\rsdc.pif
[2011/01/20 12:04:58 | 000,103,140 | RHS- | M] () -- C:\rsjva.pif
[2011/01/25 14:55:26 | 000,103,140 | RHS- | M] () -- C:\rsqb.pif
[2011/01/21 15:37:30 | 000,103,140 | RHS- | M] () -- C:\rsxch.exe
[2011/01/25 15:43:48 | 000,103,140 | RHS- | M] () -- C:\rtak.exe
[2011/01/21 13:54:05 | 000,103,140 | RHS- | M] () -- C:\rtgi.exe
[2011/01/24 11:34:18 | 000,103,140 | RHS- | M] () -- C:\rtwdsg.exe
[2011/01/21 14:55:06 | 000,103,140 | RHS- | M] () -- C:\ruix.exe
[2011/01/20 11:05:50 | 000,103,140 | RHS- | M] () -- C:\rumk.exe
[2011/01/20 10:58:33 | 000,103,140 | RHS- | M] () -- C:\ruseww.pif
[2011/01/21 15:00:50 | 000,103,140 | RHS- | M] () -- C:\rvgd.exe
[2011/01/25 16:59:13 | 000,103,140 | RHS- | M] () -- C:\rvjxss.exe
[2011/01/25 16:33:50 | 000,103,140 | RHS- | M] () -- C:\rvxurd.exe
[2011/01/24 13:37:38 | 000,103,140 | RHS- | M] () -- C:\rwgrd.pif
[2011/01/21 14:07:45 | 000,103,140 | RHS- | M] () -- C:\rwwgv.pif
[2011/01/20 13:24:03 | 000,103,140 | RHS- | M] () -- C:\ryjo.pif
[2011/01/20 09:42:54 | 000,103,140 | RHS- | M] () -- C:\ryou.exe
[2011/01/25 16:48:04 | 000,103,140 | RHS- | M] () -- C:\rywm.exe
[2011/01/25 16:45:34 | 000,103,140 | RHS- | M] () -- C:\saad.exe
[2011/01/24 15:30:01 | 000,103,140 | RHS- | M] () -- C:\saouw.pif
[2011/01/25 16:04:47 | 000,103,140 | RHS- | M] () -- C:\saxxd.pif
[2011/01/24 11:13:23 | 000,103,140 | RHS- | M] () -- C:\sbdw.pif
[2011/01/20 10:06:14 | 000,103,140 | RHS- | M] () -- C:\sbfk.pif
[2011/01/21 15:23:32 | 000,103,140 | RHS- | M] () -- C:\sbjdwk.pif
[2011/01/20 09:21:11 | 000,103,140 | RHS- | M] () -- C:\sbuj.pif
[2011/01/25 17:00:27 | 000,103,140 | RHS- | M] () -- C:\scbdlo.exe
[2011/01/20 13:16:36 | 000,103,140 | RHS- | M] () -- C:\sdpgjp.pif
[2011/01/21 14:14:03 | 000,103,140 | RHS- | M] () -- C:\sdwl.exe
[2011/01/19 17:17:33 | 000,103,140 | RHS- | M] () -- C:\seahqf.exe
[2011/01/20 16:23:00 | 000,103,140 | RHS- | M] () -- C:\sevqp.exe
[2011/01/20 09:38:00 | 000,103,140 | RHS- | M] () -- C:\seyr.pif
[2011/01/20 10:49:19 | 000,103,140 | RHS- | M] () -- C:\sfhn.exe
[2011/01/25 16:34:28 | 000,103,140 | RHS- | M] () -- C:\sfpc.exe
[2011/01/20 11:28:35 | 000,103,140 | RHS- | M] () -- C:\sgkgk.pif
[2011/01/21 13:56:07 | 000,103,140 | RHS- | M] () -- C:\sgno.pif
[2011/01/20 15:00:18 | 000,103,140 | RHS- | M] () -- C:\sheoyj.exe
[2011/01/20 16:08:11 | 000,103,140 | RHS- | M] () -- C:\shmte.pif
[2011/01/20 16:26:07 | 000,103,140 | RHS- | M] () -- C:\sitw.pif
[2011/01/24 12:02:40 | 000,103,140 | RHS- | M] () -- C:\sivujh.pif
[2011/01/21 16:39:35 | 000,103,140 | RHS- | M] () -- C:\sixrup.exe
[2011/01/25 14:56:54 | 000,103,140 | RHS- | M] () -- C:\sjjl.exe
[2011/01/20 12:16:04 | 000,103,140 | RHS- | M] () -- C:\skekbd.pif
[2011/01/20 12:23:41 | 000,103,140 | RHS- | M] () -- C:\skffu.pif
[2011/01/20 15:38:15 | 000,103,140 | RHS- | M] () -- C:\skkopj.exe
[2011/01/25 16:50:45 | 000,103,140 | RHS- | M] () -- C:\skogo.pif
[2011/01/20 14:35:42 | 000,103,140 | RHS- | M] () -- C:\sltt.pif
[2011/01/21 11:10:47 | 000,103,140 | RHS- | M] () -- C:\slxpve.exe
[2011/01/21 11:45:08 | 000,103,140 | RHS- | M] () -- C:\slxtss.pif
[2011/01/20 12:08:43 | 000,103,140 | RHS- | M] () -- C:\smjw.pif
[2011/01/21 15:32:05 | 000,103,140 | RHS- | M] () -- C:\smmd.exe
[2011/01/20 11:41:16 | 000,103,140 | RHS- | M] () -- C:\smpnj.pif
[2011/01/20 11:50:17 | 000,103,140 | RHS- | M] () -- C:\smsovn.exe
[2011/01/24 09:17:20 | 000,103,140 | RHS- | M] () -- C:\smyf.pif
[2011/01/24 12:53:35 | 000,103,140 | RHS- | M] () -- C:\souhc.pif
[2011/01/25 15:51:54 | 000,103,140 | RHS- | M] () -- C:\spfsx.exe
[2011/01/21 15:32:47 | 000,103,140 | RHS- | M] () -- C:\spjfo.pif
[2011/01/24 12:56:33 | 000,103,140 | RHS- | M] () -- C:\spspi.pif
[2011/01/20 15:11:53 | 000,103,140 | RHS- | M] () -- C:\spujj.exe
[2011/01/24 13:25:29 | 000,103,140 | RHS- | M] () -- C:\spxoo.exe
[2011/01/20 10:25:05 | 000,103,140 | RHS- | M] () -- C:\sqcuwb.exe
[2011/01/24 12:41:20 | 000,103,140 | RHS- | M] () -- C:\sqfv.exe
[2011/01/25 15:03:33 | 000,103,140 | RHS- | M] () -- C:\sqkad.pif
[2011/01/21 13:37:45 | 000,103,140 | RHS- | M] () -- C:\sqrr.exe
[2011/01/20 11:51:01 | 000,103,140 | RHS- | M] () -- C:\sqtw.exe
[2011/01/24 13:15:13 | 000,103,140 | RHS- | M] () -- C:\srdmy.pif
[2011/01/20 14:08:08 | 000,103,140 | RHS- | M] () -- C:\srft.pif
[2011/01/20 16:55:55 | 000,103,140 | RHS- | M] () -- C:\srgjcr.pif
[2011/01/20 14:34:50 | 000,103,140 | RHS- | M] () -- C:\srpvn.pif
[2011/01/24 09:01:42 | 000,103,140 | RHS- | M] () -- C:\srwmap.pif
[2011/01/24 13:10:47 | 000,103,140 | RHS- | M] () -- C:\ssitl.exe
[2011/01/21 12:40:45 | 000,103,140 | RHS- | M] () -- C:\stuhxq.exe
[2011/01/21 15:04:08 | 000,103,140 | RHS- | M] () -- C:\suil.exe
[2011/01/20 13:07:49 | 000,103,140 | RHS- | M] () -- C:\sujti.pif
[2011/01/20 16:52:38 | 000,103,140 | RHS- | M] () -- C:\sunjb.exe
[2011/01/21 15:25:33 | 000,103,140 | RHS- | M] () -- C:\svadbs.pif
[2011/01/20 14:36:23 | 000,103,140 | RHS- | M] () -- C:\svpr.pif
[2011/01/25 14:47:02 | 000,103,140 | RHS- | M] () -- C:\svtm.pif
[2011/01/24 12:20:43 | 000,103,140 | RHS- | M] () -- C:\svwgxw.exe
[2011/01/24 12:25:18 | 000,103,140 | RHS- | M] () -- C:\swevht.exe
[2011/01/21 16:50:05 | 000,103,140 | RHS- | M] () -- C:\swpxk.pif
[2011/01/20 09:49:40 | 000,103,140 | RHS- | M] () -- C:\swud.exe
[2011/01/24 11:32:41 | 000,103,140 | RHS- | M] () -- C:\sxcqs.exe
[2011/01/20 16:40:36 | 000,103,140 | RHS- | M] () -- C:\syeqhs.pif
[2011/01/24 13:31:03 | 000,103,140 | RHS- | M] () -- C:\taccuq.pif
[2011/01/20 09:08:56 | 000,103,140 | RHS- | M] () -- C:\taon.exe
[2011/01/20 11:15:05 | 000,103,140 | RHS- | M] () -- C:\tara.pif
[2011/01/24 11:21:19 | 000,103,140 | RHS- | M] () -- C:\tbfi.pif
[2011/01/21 14:26:56 | 000,103,140 | RHS- | M] () -- C:\tbmgdv.pif
[2011/01/20 14:52:27 | 000,103,140 | RHS- | M] () -- C:\tdjo.exe
[2011/01/20 17:02:25 | 000,103,140 | RHS- | M] () -- C:\tecdq.pif
[2011/01/20 16:37:10 | 000,103,140 | RHS- | M] () -- C:\tepne.pif
[2011/01/20 11:51:41 | 000,103,140 | RHS- | M] () -- C:\tfppv.exe
[2011/01/21 15:49:36 | 000,103,140 | RHS- | M] () -- C:\tfrri.pif
[2011/01/24 15:31:51 | 000,103,140 | RHS- | M] () -- C:\tgddcb.exe
[2011/01/20 11:59:33 | 000,103,140 | RHS- | M] () -- C:\tggin.pif
[2011/01/25 15:42:23 | 000,103,140 | RHS- | M] () -- C:\thsk.pif
[2011/01/21 15:03:11 | 000,103,140 | RHS- | M] () -- C:\tish.pif
[2011/01/25 16:08:07 | 000,103,140 | RHS- | M] () -- C:\tiwq.pif
[2011/01/24 09:42:26 | 000,103,140 | RHS- | M] () -- C:\tjtpo.pif
[2011/01/20 15:53:21 | 000,103,140 | RHS- | M] () -- C:\tjyc.exe
[2011/01/20 09:27:27 | 000,103,140 | RHS- | M] () -- C:\tksx.pif
[2011/01/25 15:20:35 | 000,103,140 | RHS- | M] () -- C:\tkwv.exe
[2011/01/21 14:23:14 | 000,103,140 | RHS- | M] () -- C:\tlaay.pif
[2011/01/25 17:14:15 | 000,103,140 | RHS- | M] () -- C:\tllanm.exe
[2011/01/21 15:18:24 | 000,103,140 | RHS- | M] () -- C:\tlwdf.pif
[2011/01/20 16:35:54 | 000,103,140 | RHS- | M] () -- C:\tmkgcq.exe
[2011/01/21 12:20:12 | 000,103,140 | RHS- | M] () -- C:\tnhyp.exe
[2011/01/24 13:16:02 | 000,103,140 | RHS- | M] () -- C:\tnjk.exe
[2011/01/20 13:08:29 | 000,103,140 | RHS- | M] () -- C:\tnsj.pif
[2011/01/20 14:39:38 | 000,103,140 | RHS- | M] () -- C:\tnsti.pif
[2011/01/24 12:09:02 | 000,103,140 | RHS- | M] () -- C:\tnwm.exe
[2011/01/25 17:11:43 | 000,103,140 | RHS- | M] () -- C:\todnj.exe
[2011/01/25 16:35:05 | 000,103,140 | RHS- | M] () -- C:\tomi.pif
[2011/01/25 17:06:40 | 000,103,140 | RHS- | M] () -- C:\tpemts.exe
[2011/01/20 15:37:29 | 000,103,140 | RHS- | M] () -- C:\tqabsv.exe
[2011/01/24 10:40:15 | 000,103,140 | RHS- | M] () -- C:\tqgo.exe
[2011/01/20 11:23:06 | 000,103,140 | RHS- | M] () -- C:\tqppwg.pif
[2011/01/20 12:37:15 | 000,103,140 | RHS- | M] () -- C:\tqqw.pif
[2011/01/21 11:15:15 | 000,103,140 | RHS- | M] () -- C:\trcmsp.exe
[2011/01/25 15:11:44 | 000,103,140 | RHS- | M] () -- C:\triobj.exe
[2011/01/25 15:55:48 | 000,103,140 | RHS- | M] () -- C:\tsahy.exe
[2011/01/20 10:49:59 | 000,103,140 | RHS- | M] () -- C:\ttapmw.pif
[2011/01/21 10:58:32 | 000,103,140 | RHS- | M] () -- C:\tudjyc.exe
[2011/01/21 16:32:02 | 000,103,140 | RHS- | M] () -- C:\tugqvk.exe
[2011/01/20 16:18:04 | 000,103,140 | RHS- | M] () -- C:\tujrj.exe
[2011/01/25 14:35:58 | 000,103,140 | RHS- | M] () -- C:\tujwd.pif
[2011/01/20 14:40:18 | 000,103,140 | RHS- | M] () -- C:\tutocd.exe
[2011/01/19 17:12:32 | 000,103,140 | RHS- | M] () -- C:\tvfc.pif
[2011/01/24 13:00:05 | 000,103,140 | RHS- | M] () -- C:\tvgyc.pif
[2011/01/21 15:14:16 | 000,103,140 | RHS- | M] () -- C:\twbxqc.pif
[2011/01/24 15:28:33 | 000,103,140 | RHS- | M] () -- C:\twqjf.exe
[2011/01/21 16:12:33 | 000,103,140 | RHS- | M] () -- C:\txau.pif
[2011/01/21 09:48:33 | 000,103,140 | RHS- | M] () -- C:\txpr.exe
[2011/01/25 15:35:12 | 000,103,140 | RHS- | M] () -- C:\txtvyx.exe
[2011/01/20 12:21:16 | 000,103,140 | RHS- | M] () -- C:\txxemg.exe
[2011/01/20 09:28:55 | 000,103,140 | RHS- | M] () -- C:\txxm.exe
[2011/01/20 12:27:01 | 000,103,140 | RHS- | M] () -- C:\uarkbx.pif
[2011/01/20 16:54:33 | 000,103,140 | RHS- | M] () -- C:\uarxi.exe
[2011/01/19 17:11:51 | 000,103,140 | RHS- | M] () -- C:\uboet.pif
[2011/01/21 10:05:24 | 000,103,140 | RHS- | M] () -- C:\ucngpu.pif
[2011/01/24 11:10:40 | 000,103,140 | RHS- | M] () -- C:\ucvcto.exe
[2011/01/21 11:25:40 | 000,103,140 | RHS- | M] () -- C:\udicat.pif
[2011/01/21 14:27:42 | 000,103,140 | RHS- | M] () -- C:\udnv.exe
[2011/01/21 13:28:18 | 000,103,140 | RHS- | M] () -- C:\udnva.exe
[2011/01/20 10:32:15 | 000,103,140 | RHS- | M] () -- C:\uedcrs.pif
[2011/01/21 12:23:07 | 000,103,140 | RHS- | M] () -- C:\uemv.pif
[2011/01/20 12:17:39 | 000,103,140 | RHS- | M] () -- C:\ufbcyy.exe
[2011/01/20 10:45:25 | 000,103,140 | RHS- | M] () -- C:\ufpat.exe
[2011/01/24 10:18:39 | 000,103,140 | RHS- | M] () -- C:\ufxqro.pif
[2011/01/20 10:11:34 | 000,103,140 | RHS- | M] () -- C:\ugov.exe
[2011/01/21 14:07:01 | 000,103,140 | RHS- | M] () -- C:\ugri.exe
[2011/01/21 14:42:27 | 000,103,140 | RHS- | M] () -- C:\uhbjym.exe
[2011/01/25 15:27:31 | 000,103,140 | RHS- | M] () -- C:\uhedki.exe
[2011/01/20 10:29:28 | 000,103,140 | RHS- | M] () -- C:\uhup.exe
[2011/01/21 15:01:32 | 000,103,140 | RHS- | M] () -- C:\uijpqx.exe
[2011/01/21 10:27:09 | 000,103,140 | RHS- | M] () -- C:\uisr.exe
[2011/01/20 10:16:13 | 000,103,140 | RHS- | M] () -- C:\ujflxe.exe
[2011/01/25 15:40:19 | 000,103,140 | RHS- | M] () -- C:\ujfp.exe
[2011/01/20 12:24:34 | 000,103,140 | RHS- | M] () -- C:\ujjtu.exe
[2011/01/21 14:12:40 | 000,103,140 | RHS- | M] () -- C:\ujjw.exe
[2011/01/20 15:46:55 | 000,103,140 | RHS- | M] () -- C:\ujsrq.exe
[2011/01/20 17:01:11 | 000,103,140 | RHS- | M] () -- C:\ukwb.exe
[2011/01/21 16:05:36 | 000,103,140 | RHS- | M] () -- C:\ulex.exe
[2011/01/20 09:28:11 | 000,103,140 | RHS- | M] () -- C:\ulfbid.exe
[2011/01/25 14:31:16 | 000,103,140 | RHS- | M] () -- C:\ulha.exe
[2011/01/20 10:18:25 | 000,103,140 | RHS- | M] () -- C:\ullx.pif
[2011/01/24 12:10:43 | 000,103,140 | RHS- | M] () -- C:\umaw.exe
[2011/01/24 10:34:52 | 000,103,140 | RHS- | M] () -- C:\umeir.pif
[2011/01/20 14:59:39 | 000,103,140 | RHS- | M] () -- C:\umkc.exe
[2011/01/21 15:07:54 | 000,103,140 | RHS- | M] () -- C:\umys.exe
[2011/01/24 11:16:12 | 000,103,140 | RHS- | M] () -- C:\unqnje.pif
[2011/01/20 17:03:39 | 000,103,140 | RHS- | M] () -- C:\uotakg.pif
[2011/01/21 14:43:30 | 000,103,140 | RHS- | M] () -- C:\upaabr.pif
[2011/01/21 15:40:53 | 000,103,140 | RHS- | M] () -- C:\upnwn.exe
[2011/01/20 10:02:40 | 000,103,140 | RHS- | M] () -- C:\uqbw.exe
[2011/01/20 12:16:54 | 000,103,140 | RHS- | M] () -- C:\uqnh.pif
[2011/01/20 12:42:35 | 000,103,140 | RHS- | M] () -- C:\uqwii.pif
[2011/01/24 13:10:06 | 000,103,140 | RHS- | M] () -- C:\urepy.exe
[2011/01/20 11:38:30 | 000,103,140 | RHS- | M] () -- C:\urpb.exe
[2011/01/21 16:59:20 | 000,103,140 | RHS- | M] () -- C:\uryhg.exe
[2011/01/21 11:30:39 | 000,103,140 | RHS- | M] () -- C:\uspfqg.exe
[2011/01/21 15:11:13 | 000,103,140 | RHS- | M] () -- C:\utibr.pif
[2011/01/21 13:45:01 | 000,103,140 | RHS- | M] () -- C:\utnaj.pif
[2011/01/20 16:45:47 | 000,103,140 | RHS- | M] () -- C:\utyvj.exe
[2011/01/21 12:18:17 | 000,103,140 | RHS- | M] () -- C:\uuhsk.exe
[2011/01/25 16:22:00 | 000,103,140 | RHS- | M] () -- C:\uuqs.exe
[2011/01/21 14:20:30 | 000,103,140 | RHS- | M] () -- C:\uuup.pif
[2011/01/20 10:23:09 | 000,103,140 | RHS- | M] () -- C:\uvci.pif
[2011/01/20 16:08:52 | 000,103,140 | RHS- | M] () -- C:\uvhpi.pif
[2011/01/24 10:32:00 | 000,103,140 | RHS- | M] () -- C:\uvpp.pif
[2011/01/21 13:31:04 | 000,103,140 | RHS- | M] () -- C:\uxaemj.exe
[2011/01/21 13:41:05 | 000,103,140 | RHS- | M] () -- C:\uxfec.pif
[2011/01/20 11:06:38 | 000,103,140 | RHS- | M] () -- C:\uxpx.pif
[2011/01/21 16:31:16 | 000,103,140 | RHS- | M] () -- C:\uynibu.pif
[2011/01/21 14:49:42 | 000,103,140 | RHS- | M] () -- C:\uyxb.exe
[2011/01/20 12:05:39 | 000,103,140 | RHS- | M] () -- C:\vahja.exe
[2011/01/21 12:54:38 | 000,103,140 | RHS- | M] () -- C:\vavi.pif
[2011/01/24 11:41:24 | 000,103,140 | RHS- | M] () -- C:\vbfh.pif
[2011/01/20 13:58:13 | 000,103,140 | RHS- | M] () -- C:\vbpdp.pif
[2011/01/25 16:38:27 | 000,103,140 | RHS- | M] () -- C:\vbptgl.pif
[2011/01/20 14:20:09 | 000,103,140 | RHS- | M] () -- C:\vcna.pif
[2011/01/24 10:58:54 | 000,103,140 | RHS- | M] () -- C:\vctdra.pif
[2011/01/21 15:33:27 | 000,103,140 | RHS- | M] () -- C:\vcysy.exe
[2011/01/21 16:28:17 | 000,103,140 | RHS- | M] () -- C:\vdrfhf.exe
[2011/01/20 10:03:21 | 000,103,140 | RHS- | M] () -- C:\vexnjb.exe
[2011/01/25 15:13:03 | 000,103,140 | RHS- | M] () -- C:\vfprws.exe
[2011/01/24 10:14:50 | 000,103,140 | RHS- | M] () -- C:\vhbil.exe
[2011/01/24 12:42:01 | 000,103,140 | RHS- | M] () -- C:\vhwv.pif
[2011/01/20 10:57:07 | 000,103,140 | RHS- | M] () -- C:\viaf.pif
[2011/01/21 11:55:27 | 000,103,140 | RHS- | M] () -- C:\viasqy.pif
[2011/01/20 16:13:46 | 000,103,140 | RHS- | M] () -- C:\vjdl.exe
[2011/01/21 15:53:09 | 000,103,140 | RHS- | M] () -- C:\vjpdt.pif
[2011/01/25 15:51:16 | 000,103,140 | RHS- | M] () -- C:\vjsqx.exe
[2011/01/24 11:12:05 | 000,103,140 | RHS- | M] () -- C:\vjvcu.exe
[2011/01/24 15:22:40 | 000,103,140 | RHS- | M] () -- C:\vktvjv.exe
[2011/01/20 10:06:55 | 000,103,140 | RHS- | M] () -- C:\vkywny.pif
[2011/01/25 17:04:10 | 000,103,140 | RHS- | M] () -- C:\vlbcf.exe
[2011/01/20 15:11:17 | 000,103,140 | RHS- | M] () -- C:\vlew.pif
[2011/01/21 13:52:48 | 000,103,140 | RHS- | M] () -- C:\vlleu.exe
[2011/01/20 14:55:39 | 000,103,140 | RHS- | M] () -- C:\vlytd.exe
[2011/01/20 14:05:16 | 000,103,140 | RHS- | M] () -- C:\vmpgmn.pif
[2011/01/20 09:43:35 | 000,103,140 | RHS- | M] () -- C:\vmxxno.pif
[2011/01/20 12:45:24 | 000,103,140 | RHS- | M] () -- C:\vnjgsn.pif
[2011/01/20 09:21:58 | 000,103,140 | RHS- | M] () -- C:\vpmem.exe
[2011/01/20 09:01:35 | 000,103,140 | RHS- | M] () -- C:\vpufl.exe
[2011/01/24 12:47:23 | 000,103,140 | RHS- | M] () -- C:\vqgdse.pif
[2011/01/20 16:07:33 | 000,103,140 | RHS- | M] () -- C:\vqmna.pif
[2011/01/25 14:57:38 | 000,103,140 | RHS- | M] () -- C:\vqyomj.pif
[2011/01/21 16:48:42 | 000,103,140 | RHS- | M] () -- C:\vsalp.pif
[2011/01/19 17:11:12 | 000,103,140 | RHS- | M] () -- C:\vsho.exe
[2011/01/24 09:14:24 | 000,103,140 | RHS- | M] () -- C:\vtaabf.exe
[2011/01/21 13:41:43 | 000,103,140 | RHS- | M] () -- C:\vtgs.pif
[2011/01/24 13:32:10 | 000,103,140 | RHS- | M] () -- C:\vtsrmi.exe
[2011/01/20 11:55:55 | 000,103,140 | RHS- | M] () -- C:\vubd.exe
[2011/01/25 14:23:28 | 000,103,140 | RHS- | M] () -- C:\vuqg.exe
[2011/01/20 13:29:32 | 000,103,140 | RHS- | M] () -- C:\vvgkhx.exe
[2011/01/20 16:16:51 | 000,103,140 | RHS- | M] () -- C:\vvymo.pif
[2011/01/20 14:21:15 | 000,103,140 | RHS- | M] () -- C:\vwors.pif
[2011/01/21 10:37:22 | 000,103,140 | RHS- | M] () -- C:\vxos.exe
[2011/01/20 10:48:34 | 000,103,140 | RHS- | M] () -- C:\vxqq.pif
[2011/01/20 11:44:36 | 000,103,140 | RHS- | M] () -- C:\vxuah.pif
[2011/01/20 09:57:46 | 000,103,140 | RHS- | M] () -- C:\vybgc.exe
[2011/01/20 15:04:14 | 000,103,140 | RHS- | M] () -- C:\vyjfj.pif
[2011/01/20 15:26:02 | 000,103,140 | RHS- | M] () -- C:\vyovgm.pif
[2011/01/21 16:16:59 | 000,103,140 | RHS- | M] () -- C:\vyuioc.pif
[2011/01/20 10:33:24 | 000,103,140 | RHS- | M] () -- C:\vyxici.exe
[2011/01/24 13:09:24 | 000,103,140 | RHS- | M] () -- C:\wagctq.exe
[2011/01/24 11:30:06 | 000,103,140 | RHS- | M] () -- C:\waogpg.pif
[2011/01/24 11:03:27 | 000,103,140 | RHS- | M] () -- C:\waotnh.pif
[2011/01/20 13:17:15 | 000,103,140 | RHS- | M] () -- C:\wbdd.pif
[2011/01/20 15:17:15 | 000,103,140 | RHS- | M] () -- C:\wbprl.exe
[2011/01/20 10:14:45 | 000,103,140 | RHS- | M] () -- C:\wbuyqx.exe
[2011/01/24 12:57:19 | 000,103,140 | RHS- | M] () -- C:\wbyb.pif
[2011/01/20 09:14:04 | 000,103,140 | RHS- | M] () -- C:\wcdv.exe
[2011/01/21 15:24:53 | 000,103,140 | RHS- | M] () -- C:\wcfgwe.pif
[2011/01/24 12:46:38 | 000,103,140 | RHS- | M] () -- C:\wcjhod.exe
[2011/01/24 11:02:22 | 000,103,140 | RHS- | M] () -- C:\wclq.exe
[2011/01/20 12:52:19 | 000,103,140 | RHS- | M] () -- C:\wcradr.exe
[2011/01/21 13:29:08 | 000,103,140 | RHS- | M] () -- C:\wcrv.pif
[2011/01/24 09:48:33 | 000,103,140 | RHS- | M] () -- C:\wdcqp.pif
[2011/01/20 16:34:00 | 000,103,140 | RHS- | M] () -- C:\wdkmc.exe
[2011/01/21 10:46:33 | 000,103,140 | RHS- | M] () -- C:\wdqd.pif
[2011/01/25 14:53:54 | 000,103,140 | RHS- | M] () -- C:\wfapvt.exe
[2011/01/21 14:00:04 | 000,103,140 | RHS- | M] () -- C:\wfhfbo.exe
[2011/01/21 14:02:27 | 000,103,140 | RHS- | M] () -- C:\wgnweg.exe
[2011/01/20 16:43:12 | 000,103,140 | RHS- | M] () -- C:\wgugg.pif
[2011/01/20 12:51:15 | 000,103,140 | RHS- | M] () -- C:\whgk.exe
[2011/01/25 14:36:46 | 000,103,140 | RHS- | M] () -- C:\wims.exe
[2011/01/20 16:51:27 | 000,103,140 | RHS- | M] () -- C:\wionis.exe
[2011/01/20 09:17:17 | 000,103,140 | RHS- | M] () -- C:\wjbtij.exe
[2011/01/24 15:32:36 | 000,103,140 | RHS- | M] () -- C:\wjgtg.exe
[2011/01/20 16:34:40 | 000,103,140 | RHS- | M] () -- C:\wjjpwj.pif
[2011/01/24 11:22:59 | 000,103,140 | RHS- | M] () -- C:\wjwwvn.pif
[2011/01/25 14:37:27 | 000,103,140 | RHS- | M] () -- C:\wjxuoc.exe
[2011/01/24 13:40:14 | 000,103,140 | RHS- | M] () -- C:\wkgd.pif
[2011/01/20 13:27:21 | 000,103,140 | RHS- | M] () -- C:\wlbxyr.pif
[2011/01/24 15:36:48 | 000,103,140 | RHS- | M] () -- C:\wlfgt.pif
[2011/01/21 14:14:46 | 000,103,140 | RHS- | M] () -- C:\wlhfw.pif
[2011/01/21 16:47:49 | 000,103,140 | RHS- | M] () -- C:\wlhlk.exe
[2011/01/20 16:02:29 | 000,103,140 | RHS- | M] () -- C:\wllori.exe
[2011/01/21 14:57:22 | 000,103,140 | RHS- | M] () -- C:\wlmf.pif
[2011/01/24 10:01:55 | 000,103,140 | RHS- | M] () -- C:\wlthmq.pif
[2011/01/20 11:09:09 | 000,103,140 | RHS- | M] () -- C:\wmif.pif
[2011/01/20 09:19:03 | 000,103,140 | RHS- | M] () -- C:\wnaus.pif
[2011/01/21 15:21:41 | 000,103,140 | RHS- | M] () -- C:\wnndc.pif
[2011/01/21 16:07:37 | 000,103,140 | RHS- | M] () -- C:\wnvvka.exe
[2011/01/20 16:26:45 | 000,103,140 | RHS- | M] () -- C:\wojqnf.pif
[2011/01/20 15:42:01 | 000,103,140 | RHS- | M] () -- C:\womp.exe
[2011/01/20 16:19:55 | 000,103,140 | RHS- | M] () -- C:\wopn.pif
[2011/01/24 09:13:30 | 000,103,140 | RHS- | M] () -- C:\wqeksn.exe
[2011/01/21 15:28:18 | 000,103,140 | RHS- | M] () -- C:\wqhh.exe
[2011/01/20 15:02:55 | 000,103,140 | RHS- | M] () -- C:\wrgyfi.exe
[2011/01/21 15:16:40 | 000,103,140 | RHS- | M] () -- C:\wrslob.exe
[2011/01/21 16:25:13 | 000,103,140 | RHS- | M] () -- C:\wshl.exe
[2011/01/24 13:33:33 | 000,103,140 | RHS- | M] () -- C:\wsic.pif
[2011/01/20 15:33:42 | 000,103,140 | RHS- | M] () -- C:\wske.pif
[2011/01/25 15:12:24 | 000,103,140 | RHS- | M] () -- C:\wtfawk.pif
[2011/01/21 16:26:46 | 000,103,140 | RHS- | M] () -- C:\wtic.pif
[2011/01/25 15:07:44 | 000,103,140 | RHS- | M] () -- C:\wtqjyk.pif
[2011/01/24 12:52:52 | 000,103,140 | RHS- | M] () -- C:\wudjh.exe
[2011/01/24 09:38:48 | 000,103,140 | RHS- | M] () -- C:\wuix.pif
[2011/01/20 11:17:19 | 000,103,140 | RHS- | M] () -- C:\wuna.exe
[2011/01/20 12:34:29 | 000,103,140 | RHS- | M] () -- C:\wvdugs.pif
[2011/01/21 12:09:59 | 000,103,140 | RHS- | M] () -- C:\wwkpkp.exe
[2011/01/20 14:37:39 | 000,103,140 | RHS- | M] () -- C:\wwmxkk.pif
[2011/01/20 09:13:18 | 000,103,140 | RHS- | M] () -- C:\wxehfg.exe
[2011/01/21 14:11:09 | 000,103,140 | RHS- | M] () -- C:\wxfa.pif
[2011/01/20 15:12:30 | 000,103,140 | RHS- | M] () -- C:\wxgoy.exe
[2011/01/20 10:01:20 | 000,103,140 | RHS- | M] () -- C:\wxxan.pif
[2011/01/21 16:29:44 | 000,103,140 | RHS- | M] () -- C:\wxymn.exe
[2011/01/25 15:23:27 | 000,103,140 | RHS- | M] () -- C:\wyiv.exe
[2011/01/20 16:30:24 | 000,103,140 | RHS- | M] () -- C:\xadqov.exe
[2011/01/25 15:38:09 | 000,103,140 | RHS- | M] () -- C:\xaelxi.pif
[2011/01/20 11:58:43 | 000,103,140 | RHS- | M] () -- C:\xbba.exe
[2011/01/20 16:57:11 | 000,103,140 | RHS- | M] () -- C:\xbdlfr.exe
[2011/01/20 10:43:24 | 000,103,140 | RHS- | M] () -- C:\xbhhx.exe
[2011/01/20 12:27:54 | 000,103,140 | RHS- | M] () -- C:\xbsacj.exe
[2011/01/21 13:18:36 | 000,103,140 | RHS- | M] () -- C:\xbsk.pif
[2011/01/24 10:28:20 | 000,103,140 | RHS- | M] () -- C:\xcds.pif
[2011/01/25 16:00:53 | 000,103,140 | RHS- | M] () -- C:\xddco.exe
[2011/01/21 15:20:56 | 000,103,140 | RHS- | M] () -- C:\xdfjd.pif
[2011/01/24 12:32:51 | 000,103,140 | RHS- | M] () -- C:\xdiq.exe
[2011/01/25 15:22:09 | 000,103,140 | RHS- | M] () -- C:\xeky.exe
[2011/01/21 15:13:27 | 000,103,140 | RHS- | M] () -- C:\xghqdm.pif
[2011/01/20 14:56:18 | 000,103,140 | RHS- | M] () -- C:\xgvyb.exe
[2011/01/24 15:23:20 | 000,103,140 | RHS- | M] () -- C:\xhew.exe
[2011/01/25 15:13:43 | 000,103,140 | RHS- | M] () -- C:\xhfp.exe
[2011/01/21 09:38:18 | 000,103,140 | RHS- | M] () -- C:\xhma.pif
[2011/01/21 12:38:25 | 000,103,140 | RHS- | M] () -- C:\xhyqkw.pif
[2011/01/25 15:17:46 | 000,103,140 | RHS- | M] () -- C:\xieiye.pif
[2011/01/20 15:27:16 | 000,103,140 | RHS- | M] () -- C:\xjoco.pif
[2011/01/25 17:10:28 | 000,103,140 | RHS- | M] () -- C:\xkonn.pif
[2011/01/20 10:46:11 | 000,103,140 | RHS- | M] () -- C:\xlcxgf.exe
[2011/01/20 10:53:09 | 000,103,140 | RHS- | M] () -- C:\xlli.exe
[2011/01/24 12:49:03 | 000,103,140 | RHS- | M] () -- C:\xmcn.pif
[2011/01/20 14:32:35 | 000,103,140 | RHS- | M] () -- C:\xmliq.exe
[2011/01/21 11:41:23 | 000,103,140 | RHS- | M] () -- C:\xmnhjq.pif
[2011/01/21 13:47:00 | 000,103,140 | RHS- | M] () -- C:\xmpt.exe

pfchang
Intermediate
Intermediate

Posts Posts : 66
Joined Joined : 2009-03-05
OS OS : Windows XP Professional
Points Points : 28695
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Virus - Shutting down antivirus

Post by pfchang on Tue Feb 01, 2011 12:10 am

[2011/01/20 11:48:46 | 000,103,140 | RHS- | M] () -- C:\xngof.exe
[2011/01/21 16:10:35 | 000,103,140 | RHS- | M] () -- C:\xnrnth.pif
[2011/01/20 15:43:14 | 000,103,140 | RHS- | M] () -- C:\xouwo.exe
[2011/01/21 16:14:45 | 000,103,140 | RHS- | M] () -- C:\xovaec.exe
[2011/01/21 10:13:42 | 000,103,140 | RHS- | M] () -- C:\xpck.pif
[2011/01/20 14:24:09 | 000,103,140 | RHS- | M] () -- C:\xpoo.exe
[2011/01/24 10:16:23 | 000,103,140 | RHS- | M] () -- C:\xpqh.pif
[2011/01/20 13:37:37 | 000,103,140 | RHS- | M] () -- C:\xpvvk.exe
[2011/01/21 16:49:26 | 000,103,140 | RHS- | M] () -- C:\xpxi.pif
[2011/01/21 14:50:23 | 000,103,140 | RHS- | M] () -- C:\xqhhy.exe
[2011/01/25 16:10:11 | 000,103,140 | RHS- | M] () -- C:\xqkup.exe
[2011/01/21 12:07:33 | 000,103,140 | RHS- | M] () -- C:\xqorpl.exe
[2011/01/20 15:56:27 | 000,103,140 | RHS- | M] () -- C:\xqspk.exe
[2011/01/20 16:46:31 | 000,103,140 | RHS- | M] () -- C:\xrnvs.pif
[2011/01/20 13:20:31 | 000,103,140 | RHS- | M] () -- C:\xsdg.pif
[2011/01/25 15:57:44 | 000,103,140 | RHS- | M] () -- C:\xsisd.exe
[2011/01/21 12:29:31 | 000,103,140 | RHS- | M] () -- C:\xudrhm.exe
[2011/01/20 15:51:23 | 000,103,140 | RHS- | M] () -- C:\xujl.pif
[2011/01/20 11:47:09 | 000,103,140 | RHS- | M] () -- C:\xunvws.pif
[2011/01/21 16:36:47 | 000,103,140 | RHS- | M] () -- C:\xvtvly.exe
[2011/01/20 09:54:16 | 000,103,140 | RHS- | M] () -- C:\xvutv.pif
[2011/01/21 15:39:34 | 000,103,140 | RHS- | M] () -- C:\xwan.pif
[2011/01/21 15:52:28 | 000,103,140 | RHS- | M] () -- C:\xweaxb.exe
[2011/01/20 12:10:15 | 000,103,140 | RHS- | M] () -- C:\xwff.exe
[2011/01/21 16:21:49 | 000,103,140 | RHS- | M] () -- C:\xwofb.pif
[2011/01/24 12:42:44 | 000,103,140 | RHS- | M] () -- C:\xwvft.exe
[2011/01/20 10:19:24 | 000,103,140 | RHS- | M] () -- C:\xwxfl.pif
[2011/01/21 14:52:15 | 000,103,140 | RHS- | M] () -- C:\xxjv.pif
[2011/01/24 11:57:59 | 000,103,140 | RHS- | M] () -- C:\xxurcg.pif
[2011/01/24 11:31:29 | 000,103,140 | RHS- | M] () -- C:\xxxet.exe
[2011/01/20 11:25:27 | 000,103,140 | RHS- | M] () -- C:\xynmb.exe
[2011/01/21 11:24:58 | 000,103,140 | RHS- | M] () -- C:\xypy.exe
[2011/01/21 10:07:01 | 000,103,140 | RHS- | M] () -- C:\yaae.exe
[2011/01/20 09:23:24 | 000,103,140 | RHS- | M] () -- C:\yawjmo.exe
[2011/01/21 13:55:28 | 000,103,140 | RHS- | M] () -- C:\yciyjg.pif
[2011/01/20 12:56:55 | 000,103,140 | RHS- | M] () -- C:\yckb.pif
[2011/01/19 17:20:11 | 000,103,140 | RHS- | M] () -- C:\ycqte.exe
[2011/01/21 12:41:25 | 000,103,140 | RHS- | M] () -- C:\ycqv.pif
[2011/01/21 13:42:21 | 000,103,140 | RHS- | M] () -- C:\ydodn.pif
[2011/01/21 14:15:28 | 000,103,140 | RHS- | M] () -- C:\ydqbf.pif
[2011/01/20 13:45:26 | 000,103,140 | RHS- | M] () -- C:\yekera.exe
[2011/01/20 16:29:49 | 000,103,140 | RHS- | M] () -- C:\yfce.pif
[2011/01/20 14:47:50 | 000,103,140 | RHS- | M] () -- C:\yfcm.exe
[2011/01/21 13:23:31 | 000,103,140 | RHS- | M] () -- C:\yfnlji.exe
[2011/01/20 09:51:46 | 000,103,140 | RHS- | M] () -- C:\yfxo.exe
[2011/01/20 10:21:24 | 000,103,140 | RHS- | M] () -- C:\yfxspw.pif
[2011/01/21 16:33:34 | 000,103,140 | RHS- | M] () -- C:\ygdh.exe
[2011/01/24 13:36:01 | 000,103,140 | RHS- | M] () -- C:\ygmou.exe
[2011/01/21 14:33:55 | 000,103,140 | RHS- | M] () -- C:\yhkbu.exe
[2011/01/20 14:07:23 | 000,103,140 | RHS- | M] () -- C:\yhlra.exe
[2011/01/21 12:40:03 | 000,103,140 | RHS- | M] () -- C:\yhuxi.pif
[2011/01/21 10:06:20 | 000,103,140 | RHS- | M] () -- C:\yighco.exe
[2011/01/21 11:27:03 | 000,103,140 | RHS- | M] () -- C:\yijgm.pif
[2011/01/25 16:05:25 | 000,103,140 | RHS- | M] () -- C:\yimnrb.exe
[2011/01/21 11:09:58 | 000,103,140 | RHS- | M] () -- C:\yiny.pif
[2011/01/19 16:53:41 | 000,103,140 | RHS- | M] () -- C:\yipj.exe
[2011/01/20 12:56:06 | 000,103,140 | RHS- | M] () -- C:\yiymx.exe
[2011/01/20 11:02:49 | 000,103,140 | RHS- | M] () -- C:\yiyvm.exe
[2011/01/24 09:21:26 | 000,103,140 | RHS- | M] () -- C:\yjkuxg.pif
[2011/01/25 16:43:02 | 000,103,140 | RHS- | M] () -- C:\yjli.pif
[2011/01/21 12:21:12 | 000,103,140 | RHS- | M] () -- C:\yjvv.exe
[2011/01/20 11:53:13 | 000,103,140 | RHS- | M] () -- C:\ykbc.pif
[2011/01/24 11:04:51 | 000,103,140 | RHS- | M] () -- C:\ykbdnu.exe
[2011/01/19 16:59:55 | 000,103,140 | RHS- | M] () -- C:\ykcr.exe
[2011/01/24 11:23:50 | 000,103,140 | RHS- | M] () -- C:\ykkvl.exe
[2011/01/21 15:59:37 | 000,103,140 | RHS- | M] () -- C:\yknmgs.exe
[2011/01/24 13:01:46 | 000,103,140 | RHS- | M] () -- C:\ykqg.pif
[2011/01/20 16:32:48 | 000,103,140 | RHS- | M] () -- C:\ylhb.exe
[2011/01/21 16:02:59 | 000,103,140 | RHS- | M] () -- C:\ylqhc.pif
[2011/01/24 13:06:14 | 000,103,140 | RHS- | M] () -- C:\yltffy.exe
[2011/01/20 09:15:50 | 000,103,140 | RHS- | M] () -- C:\yltrs.exe
[2011/01/20 12:33:06 | 000,103,140 | RHS- | M] () -- C:\ymqpdw.exe
[2011/01/21 13:50:57 | 000,103,140 | RHS- | M] () -- C:\ymujuj.exe
[2011/01/20 15:08:52 | 000,103,140 | RHS- | M] () -- C:\ynesu.exe
[2011/01/24 09:12:30 | 000,103,140 | RHS- | M] () -- C:\ynljvi.exe
[2011/01/21 13:14:52 | 000,103,140 | RHS- | M] () -- C:\yodimw.pif
[2011/01/24 12:21:50 | 000,103,140 | RHS- | M] () -- C:\yojvsi.exe
[2011/01/24 12:13:01 | 000,103,140 | RHS- | M] () -- C:\yoxb.exe
[2011/01/24 09:36:17 | 000,103,140 | RHS- | M] () -- C:\ypyitg.exe
[2011/01/21 14:45:11 | 000,103,140 | RHS- | M] () -- C:\yqnqfv.exe
[2011/01/25 15:15:01 | 000,103,140 | RHS- | M] () -- C:\yqtsn.pif
[2011/01/21 12:06:10 | 000,103,140 | RHS- | M] () -- C:\yrkgr.exe
[2011/01/25 15:24:47 | 000,103,140 | RHS- | M] () -- C:\yruu.pif
[2011/01/20 15:55:49 | 000,103,140 | RHS- | M] () -- C:\yrylxf.exe
[2011/01/20 11:02:00 | 000,103,140 | RHS- | M] () -- C:\ysvqf.pif
[2011/01/24 10:54:52 | 000,103,140 | RHS- | M] () -- C:\ysyn.pif
[2011/01/19 16:57:03 | 000,103,140 | RHS- | M] () -- C:\ytlngj.pif
[2011/01/20 13:18:34 | 000,103,140 | RHS- | M] () -- C:\yttnw.exe
[2011/01/20 11:32:31 | 000,103,140 | RHS- | M] () -- C:\yubrt.exe
[2011/01/20 09:04:37 | 000,103,140 | RHS- | M] () -- C:\yudrkj.exe
[2011/01/20 13:28:51 | 000,103,140 | RHS- | M] () -- C:\yuik.exe
[2011/01/20 10:56:23 | 000,103,140 | RHS- | M] () -- C:\yvjfkr.pif
[2011/01/20 12:35:54 | 000,103,140 | RHS- | M] () -- C:\ywdnfs.exe
[2011/01/21 14:21:09 | 000,103,140 | RHS- | M] () -- C:\ywinu.exe
[2011/01/21 15:26:13 | 000,103,140 | RHS- | M] () -- C:\ywlmn.pif
[2011/01/25 15:08:26 | 000,103,140 | RHS- | M] () -- C:\ywsks.pif
[2011/01/25 15:52:32 | 000,103,140 | RHS- | M] () -- C:\yxanv.exe
[2011/01/20 12:22:54 | 000,103,140 | RHS- | M] () -- C:\yxhxd.exe
[2011/01/20 15:48:46 | 000,103,140 | RHS- | M] () -- C:\yyleku.exe
[2011/01/24 12:58:42 | 000,103,140 | RHS- | M] () -- C:\yysvtj.pif
[2011/01/20 09:57:03 | 000,103,140 | RHS- | M] () -- C:\yytsek.exe
[2011/01/20 14:42:18 | 000,103,140 | RHS- | M] () -- C:\yywvq.pif
[2011/01/21 16:15:29 | 000,103,140 | RHS- | M] () -- C:\yyys.exe

< %PROGRAMFILES%\*. >
[2008/04/11 09:40:01 | 000,000,000 | ---D | M] -- C:\Program Files\Adobe
[2011/01/31 14:03:51 | 000,000,000 | ---D | M] -- C:\Program Files\Advanced Registry Optimizer
[2009/04/27 16:29:22 | 000,000,000 | ---D | M] -- C:\Program Files\Apple Software Update
[2011/01/31 14:03:59 | 000,000,000 | ---D | M] -- C:\Program Files\Ask.com
[2011/01/31 15:11:11 | 000,000,000 | ---D | M] -- C:\Program Files\Avast4
[2008/06/06 08:51:38 | 000,000,000 | ---D | M] -- C:\Program Files\Citrix
[2009/12/22 16:23:13 | 000,000,000 | ---D | M] -- C:\Program Files\Common Files
[2008/03/05 08:24:37 | 000,000,000 | ---D | M] -- C:\Program Files\Compaq
[2008/03/05 09:08:37 | 000,000,000 | ---D | M] -- C:\Program Files\ComPlus Applications
[2008/04/11 09:45:06 | 000,000,000 | ---D | M] -- C:\Program Files\CostPlus
[2008/04/11 09:43:20 | 000,000,000 | ---D | M] -- C:\Program Files\Cust top 25
[2008/06/30 08:24:31 | 000,000,000 | ---D | M] -- C:\Program Files\Design Science
[2008/04/28 14:07:52 | 000,000,000 | ---D | M] -- C:\Program Files\DIFX
[2010/02/03 17:23:40 | 000,000,000 | ---D | M] -- C:\Program Files\Google
[2008/04/11 10:10:34 | 000,000,000 | ---D | M] -- C:\Program Files\Grisoft
[2008/03/05 08:28:58 | 000,000,000 | ---D | M] -- C:\Program Files\Hewlett-Packard
[2008/03/05 08:24:01 | 000,000,000 | ---D | M] -- C:\Program Files\HPQ
[2008/04/10 15:18:38 | 000,000,000 | ---D | M] -- C:\Program Files\IBM
[2008/04/11 09:43:35 | 000,000,000 | ---D | M] -- C:\Program Files\Imaging
[2008/03/05 08:25:38 | 000,000,000 | -H-D | M] -- C:\Program Files\InstallShield Installation Information
[2010/12/16 03:22:14 | 000,000,000 | ---D | M] -- C:\Program Files\Internet Explorer
[2008/03/05 08:23:25 | 000,000,000 | ---D | M] -- C:\Program Files\InterVideo
[2011/01/31 15:32:03 | 000,000,000 | ---D | M] -- C:\Program Files\Java
[2010/06/14 08:11:02 | 000,000,000 | ---D | M] -- C:\Program Files\McAfee Security Scan
[2009/11/06 14:15:56 | 000,000,000 | ---D | M] -- C:\Program Files\Messenger
[2008/04/11 09:30:47 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft ActiveSync
[2008/03/05 09:08:37 | 000,000,000 | ---D | M] -- C:\Program Files\microsoft frontpage
[2008/04/28 14:07:46 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Office
[2008/03/05 08:37:54 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft SQL Server
[2008/03/05 08:34:37 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Visual Studio
[2008/04/11 09:30:07 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Works
[2008/04/11 09:29:38 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft.NET
[2010/08/13 02:20:47 | 000,000,000 | ---D | M] -- C:\Program Files\Movie Maker
[2009/08/15 02:24:53 | 000,000,000 | ---D | M] -- C:\Program Files\MSBuild
[2008/03/05 09:08:37 | 000,000,000 | ---D | M] -- C:\Program Files\MSN
[2008/03/05 09:08:37 | 000,000,000 | ---D | M] -- C:\Program Files\MSN Gaming Zone
[2009/08/15 02:22:13 | 000,000,000 | ---D | M] -- C:\Program Files\MSXML 6.0
[2009/11/06 14:07:53 | 000,000,000 | ---D | M] -- C:\Program Files\NetMeeting
[2008/03/05 09:08:37 | 000,000,000 | ---D | M] -- C:\Program Files\Online Services
[2008/04/11 09:45:33 | 000,000,000 | ---D | M] -- C:\Program Files\ORL
[2010/12/16 03:20:16 | 000,000,000 | ---D | M] -- C:\Program Files\Outlook Express
[2008/04/10 11:56:12 | 000,000,000 | ---D | M] -- C:\Program Files\Program Shortcuts
[2009/04/27 16:30:01 | 000,000,000 | ---D | M] -- C:\Program Files\QuickTime
[2008/04/11 09:44:03 | 000,000,000 | ---D | M] -- C:\Program Files\Quote
[2008/03/05 08:22:40 | 000,000,000 | ---D | M] -- C:\Program Files\Realtek
[2009/08/15 02:24:45 | 000,000,000 | ---D | M] -- C:\Program Files\Reference Assemblies
[2008/04/11 10:04:21 | 000,000,000 | ---D | M] -- C:\Program Files\Symantec
[2008/04/11 10:20:40 | 000,000,000 | ---D | M] -- C:\Program Files\Trends
[2008/03/05 09:08:37 | 000,000,000 | -H-D | M] -- C:\Program Files\Uninstall Information
[2010/05/13 10:00:31 | 000,000,000 | ---D | M] -- C:\Program Files\WebEx
[2009/11/06 14:10:34 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Media Player
[2009/11/06 14:07:49 | 000,000,000 | ---D | M] -- C:\Program Files\Windows NT
[2008/03/05 09:08:37 | 000,000,000 | -H-D | M] -- C:\Program Files\WindowsUpdate
[2008/03/05 09:08:37 | 000,000,000 | ---D | M] -- C:\Program Files\xerox

< %appdata%\*.* >
[2004/08/08 22:21:18 | 000,000,062 | -HS- | M] () -- C:\Documents and Settings\sarechig\Application Data\desktop.ini


< MD5 for: AGP440.SYS >
[2004/08/04 05:00:00 | 018,738,937 | ---- | M] () .cab file -- C:\I386\sp2.cab:AGP440.sys
[2004/08/04 00:00:00 | 018,738,937 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys
[2009/11/06 14:02:06 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys
[2009/11/06 14:02:06 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:AGP440.sys
[2008/04/13 10:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ERDNT\cache\agp440.sys
[2008/04/13 10:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys
[2008/04/13 10:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys

< MD5 for: AHCIX86.SYS >
[2006/10/26 12:12:32 | 000,120,832 | ---- | M] (ATI Technologies Inc.) MD5=18876330870FE64BF38DD5E3BFAC110B -- C:\COMPAQ\HPBackup\update\DRIVERS\STORAGE\ahcix86.sys
[2006/10/26 12:12:32 | 000,120,832 | ---- | M] (ATI Technologies Inc.) MD5=18876330870FE64BF38DD5E3BFAC110B -- C:\WINDOWS\DRIVERS\STORAGE\ahcix86.sys

< MD5 for: ATAPI.SYS >
[2004/08/04 05:00:00 | 018,738,937 | ---- | M] () .cab file -- C:\I386\sp2.cab:atapi.sys
[2004/08/04 00:00:00 | 018,738,937 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2009/11/06 14:02:06 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2009/11/06 14:02:06 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2008/04/13 10:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ERDNT\cache\atapi.sys
[2008/04/13 10:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008/04/13 10:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
[2004/08/03 22:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys
[2004/08/03 16:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\system32\ReinstallBackups\0003\DriverFiles\i386\atapi.sys

< MD5 for: DISK.SYS >
[2004/08/04 05:00:00 | 018,738,937 | ---- | M] () .cab file -- C:\I386\sp2.cab:disk.sys
[2004/08/04 00:00:00 | 018,738,937 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:disk.sys
[2009/11/06 14:02:06 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:disk.sys
[2009/11/06 14:02:06 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:disk.sys
[2004/08/04 00:00:00 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=00CA44E4534865F8A3B64F7C0984BFF0 -- C:\WINDOWS\$NtServicePackUninstall$\disk.sys
[2008/04/13 10:40:47 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=044452051F3E02E7963599FC8F4F3E25 -- C:\WINDOWS\ServicePackFiles\i386\disk.sys
[2008/04/13 10:40:47 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=044452051F3E02E7963599FC8F4F3E25 -- C:\WINDOWS\system32\drivers\disk.sys

< MD5 for: EVENTLOG.DLL >
[2008/04/13 16:11:53 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=6D4FEB43EE538FC5428CC7F0565AA656 -- C:\WINDOWS\ERDNT\cache\eventlog.dll
[2008/04/13 16:11:53 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=6D4FEB43EE538FC5428CC7F0565AA656 -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll
[2008/04/13 16:11:53 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=6D4FEB43EE538FC5428CC7F0565AA656 -- C:\WINDOWS\system32\eventlog.dll
[2004/08/04 00:00:00 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=82B24CB70E5944E6E34662205A2A5B78 -- C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll

< MD5 for: NETLOGON.DLL >
[2008/04/13 16:12:01 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=1B7F071C51B77C272875C3A23E1E4550 -- C:\WINDOWS\ERDNT\cache\netlogon.dll
[2008/04/13 16:12:01 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=1B7F071C51B77C272875C3A23E1E4550 -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll
[2008/04/13 16:12:01 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=1B7F071C51B77C272875C3A23E1E4550 -- C:\WINDOWS\system32\netlogon.dll
[2009/02/06 10:46:09 | 000,408,064 | ---- | M] (Microsoft Corporation) MD5=6C476D33D82F1054849790181E8F7772 -- C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll
[2004/08/04 00:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=96353FCECBA774BB8DA74A1C6507015A -- C:\WINDOWS\$NtUninstallKB968389_0$\netlogon.dll

< MD5 for: SCECLI.DLL >
[2004/08/04 00:00:00 | 000,180,224 | ---- | M] (Microsoft Corporation) MD5=0F78E27F563F2AAF74B91A49E2ABF19A -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll
[2008/04/13 16:12:05 | 000,181,248 | ---- | M] (Microsoft Corporation) MD5=A86BB5E61BF3E39B62AB4C7E7085A084 -- C:\WINDOWS\ERDNT\cache\scecli.dll
[2008/04/13 16:12:05 | 000,181,248 | ---- | M] (Microsoft Corporation) MD5=A86BB5E61BF3E39B62AB4C7E7085A084 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008/04/13 16:12:05 | 000,181,248 | ---- | M] (Microsoft Corporation) MD5=A86BB5E61BF3E39B62AB4C7E7085A084 -- C:\WINDOWS\system32\scecli.dll

< MD5 for: SYMMPI.SYS >
[2002/04/03 22:32:06 | 000,028,416 | R--- | M] (LSI Logic) MD5=F2B7E8416F508368AC6730E2AE1C614F -- C:\WINDOWS\system32\drivers\symmpi.sys

< MD5 for: USBSTOR.SYS >
[2004/08/04 05:00:00 | 018,738,937 | ---- | M] () .cab file -- C:\I386\sp2.cab:usbstor.sys
[2004/08/04 00:00:00 | 018,738,937 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:usbstor.sys
[2009/11/06 14:02:06 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:usbstor.sys
[2009/11/06 14:02:06 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:usbstor.sys
[2004/08/03 22:08:48 | 000,026,496 | ---- | M] (Microsoft Corporation) MD5=6CD7B22193718F1D17A47A1CD6D37E75 -- C:\WINDOWS\$NtServicePackUninstall$\usbstor.sys
[2008/04/13 10:45:38 | 000,026,368 | ---- | M] (Microsoft Corporation) MD5=A32426D9B14A089EAA1D922E0C5801A9 -- C:\WINDOWS\ServicePackFiles\i386\usbstor.sys
[2008/04/13 10:45:38 | 000,026,368 | ---- | M] (Microsoft Corporation) MD5=A32426D9B14A089EAA1D922E0C5801A9 -- C:\WINDOWS\system32\drivers\usbstor.sys

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2011-01-13 11:29:42

< End of report >

pfchang
Intermediate
Intermediate

Posts Posts : 66
Joined Joined : 2009-03-05
OS OS : Windows XP Professional
Points Points : 28695
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Virus - Shutting down antivirus

Post by pfchang on Tue Feb 01, 2011 12:11 am

OTL Extras logfile created on: 1/31/2011 3:34:48 PM - Run 1
OTL by OldTimer - Version 3.2.20.6 Folder = C:\Documents and Settings\sarechig\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1,014.00 Mb Total Physical Memory | 634.00 Mb Available Physical Memory | 63.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 89.00% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 64.52 Gb Total Space | 48.04 Gb Free Space | 74.47% Space Free | Partition Type: NTFS
Drive D: | 10.01 Gb Total Space | 7.22 Gb Free Space | 72.09% Space Free | Partition Type: NTFS

Computer Name: RICHLINE116 | User Name: sarechig | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 1
"FirewallDisableNotify" = 1
"UpdatesDisableNotify" = 1
"AntiVirusOverride" = 1
"FirewallOverride" = 1
"UacDisableNotify" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 1
"AntiVirusDisableNotify" = 1
"FirewallDisableNotify" = 1
"FirewallOverride" = 1
"UpdatesDisableNotify" = 1
"UacDisableNotify" = 1

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DoNotAllowExceptions" = 0
"DisableNotifications" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\WINDOWS\SMINST\Scheduler.exe" = C:\WINDOWS\SMINST\Scheduler.exe:*:Enabled:Scheduler -- ()
"C:\Program Files\ORL\VNC\WinVNC.exe" = C:\Program Files\ORL\VNC\WinVNC.exe:*:Enabled:VNC server for Win32 -- (AT&T Research Labs Cambridge)
"C:\Program Files\Microsoft Office\Live Meeting 8\Console\PWConsole.exe" = C:\Program Files\Microsoft Office\Live Meeting 8\Console\PWConsole.exe:*:Enabled:Microsoft Office Live Meeting -- (Microsoft Corporation)
"C:\Documents and Settings\sarechig\Local Settings\temp\IXP000.TMP\smwinvnc.exe" = C:\Documents and Settings\sarechig\Local Settings\temp\IXP000.TMP\smwinvnc.exe:*:Enabled:TightVNC Win32 Server
"C:\Documents and Settings\sarechig\Local Settings\temp\IXP000.TMP\SMPCSetup.exe" = C:\Documents and Settings\sarechig\Local Settings\temp\IXP000.TMP\SMPCSetup.exe:*:Enabled:SMPCSetup
"C:\Program Files\Citrix\ICA Client\pn.exe" = C:\Program Files\Citrix\ICA Client\pn.exe:*:Enabled:ipsec -- (Citrix Systems, Inc.)
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winjrtp.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winjrtp.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\xnpj.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\xnpj.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winbooq.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winbooq.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\aihpa.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\aihpa.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winjmlv.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winjmlv.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\w531c2a3.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\w531c2a3.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winwrjfen.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winwrjfen.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winrnwx.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winrnwx.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winwlbyu.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winwlbyu.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\drlwn.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\drlwn.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winvphdk.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winvphdk.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\cvulix.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\cvulix.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winsdcwkm.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winsdcwkm.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winvuqg.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winvuqg.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winnwlwgt.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winnwlwgt.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winjnfq.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winjnfq.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\eitsjk.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\eitsjk.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\w879dc.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\w879dc.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winqadhw.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winqadhw.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winbalw.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winbalw.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winapsedx.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winapsedx.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\wincukowf.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\wincukowf.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\jxlxhc.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\jxlxhc.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\ejxmm.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\ejxmm.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winmttsl.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winmttsl.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winagcsav.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winagcsav.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winrvft.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winrvft.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winkyfvec.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winkyfvec.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winrqgklc.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winrqgklc.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\iael.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\iael.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\pqdye.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\pqdye.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winuqhfk.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winuqhfk.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\tjespp.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\tjespp.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\wmlrk.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\wmlrk.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\wintxftkd.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\wintxftkd.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\mhui.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\mhui.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winmdeu.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winmdeu.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\wingxuq.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\wingxuq.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winqhxq.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winqhxq.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\awopd.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\awopd.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winoleurb.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winoleurb.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winsoorr.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winsoorr.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\qlwwpa.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\qlwwpa.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winreopfv.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winreopfv.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winucpgqb.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winucpgqb.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\ntpmcj.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\ntpmcj.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\we4750b.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\we4750b.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\uund.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\uund.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\wgvjn.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\wgvjn.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winkfnqy.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winkfnqy.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\dsjg.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\dsjg.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winoxeei.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winoxeei.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\psyl.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\psyl.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winihmddn.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winihmddn.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winwgjch.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winwgjch.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winbhnnoc.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winbhnnoc.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\xwdloq.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\xwdloq.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winmvqxuy.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winmvqxuy.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winknhkm.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winknhkm.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\usotuo.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\usotuo.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\bfwvcd.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\bfwvcd.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winqabqqw.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winqabqqw.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\qhniyb.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\qhniyb.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winfhxdat.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winfhxdat.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\upon.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\upon.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\dugf.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\dugf.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\ayqrd.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\ayqrd.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\wwuh.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\wwuh.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winypsjfm.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winypsjfm.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winlpwn.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winlpwn.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\ebvol.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\ebvol.exe:*:Enabled:ipsec
"C:\WINDOWS\Explorer.EXE" = C:\WINDOWS\Explorer.EXE:*:Enabled:ipsec -- (Microsoft Corporation)
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\fhdful.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\fhdful.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winhltq.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winhltq.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\w80865.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\w80865.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winrwdegh.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winrwdegh.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winwisedj.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winwisedj.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\ltgt.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\ltgt.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\lwtbv.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\lwtbv.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\w9b579.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\w9b579.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winrjgy.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winrjgy.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\hqkhi.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\hqkhi.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winblpxxa.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winblpxxa.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\vyiumj.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\vyiumj.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\dccp.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\dccp.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\npdf.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\npdf.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\qotdq.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\qotdq.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\pqfwxc.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\pqfwxc.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winggja.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winggja.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winhkoxf.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winhkoxf.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\sykuq.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\sykuq.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\vjsh.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\vjsh.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\wintawswt.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\wintawswt.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\wintmvnqj.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\wintmvnqj.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winqxavw.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winqxavw.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winmmlf.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winmmlf.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\phsadx.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\phsadx.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winlhygp.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winlhygp.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winjovhf.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winjovhf.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winquiw.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winquiw.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winvsis.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winvsis.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winbqnopu.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winbqnopu.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\w2da5ca.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\w2da5ca.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winnnfggs.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winnnfggs.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\etjgb.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\etjgb.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\fmole.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\fmole.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\tocho.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\tocho.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\desfd.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\desfd.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\wingfploq.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\wingfploq.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\xoflll.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\xoflll.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winecry.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winecry.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winvttsys.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winvttsys.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winhplj.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winhplj.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\wineveecb.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\wineveecb.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\kpsgtw.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\kpsgtw.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\bwsvbq.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\bwsvbq.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\wintarbp.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\wintarbp.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\w89851.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\w89851.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winlcrebu.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winlcrebu.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winrpyu.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winrpyu.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\abwalm.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\abwalm.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\wintpqk.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\wintpqk.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\wingsnxya.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\wingsnxya.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\rnpj.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\rnpj.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winxpwmst.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winxpwmst.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\evhup.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\evhup.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winexro.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winexro.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winiyxa.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winiyxa.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winqqbyq.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winqqbyq.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winrfyht.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winrfyht.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\wonvld.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\wonvld.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winvetr.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winvetr.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\wingxbfqp.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\wingxbfqp.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\lqxro.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\lqxro.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winiwqisq.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winiwqisq.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\iyapvq.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\iyapvq.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winyvjr.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winyvjr.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\w979a8.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\w979a8.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\gmyii.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\gmyii.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winadkmrm.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winadkmrm.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winmrwbf.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winmrwbf.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\xsmmnc.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\xsmmnc.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\wewksa.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\wewksa.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winwjlhug.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winwjlhug.exe:*:Enabled:ipsec
"C:\Documents and Settings\sarechig\Local Settings\Temporary Internet Files\Content.IE5\3D2ID208\ShowMyPC3055[1].exe" = C:\Documents and Settings\sarechig\Local Settings\Temporary Internet Files\Content.IE5\3D2ID208\ShowMyPC3055[1].exe:*:Enabled:ipsec -- (Microsoft Corporation)
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winnfrw.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winnfrw.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winefrlgg.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winefrlgg.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winpcwuv.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winpcwuv.exe:*:Enabled:ipsec -- ()
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\wincgwqdb.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\wincgwqdb.exe:*:Enabled:ipsec -- ()
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winlwcdq.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winlwcdq.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\suyrds.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\suyrds.exe:*:Enabled:ipsec
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\winqnjqub.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\winqnjqub.exe:*:Enabled:ipsec -- ()
"C:\DOCUME~1\sarechig\LOCALS~1\Temp\w9dde1.exe" = C:\DOCUME~1\sarechig\LOCALS~1\Temp\w9dde1.exe:*:Enabled:ipsec -- ()


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{216AB108-2AE1-4130-B3D5-20B2C4C80F8F}" = QuickTime
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{26A24AE4-039D-4CA4-87B4-2F83216023FF}" = Java(TM) 6 Update 23
"{3248F0A8-6813-11D6-A77B-00B0D0160010}" = Java(TM) SE Runtime Environment 6 Update 1
"{32F66A20-7614-11D4-BD11-00104BD3F987}" = MathPlayer
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3F9F7336-6DF8-476F-ABF6-C70A17FAF619}" = HP Backup and Recovery Manager
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{69333A04-5134-40A5-A055-9166A7AA1EC8}" =
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar
"{90110409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}" = InterVideo WinDVD
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A93C4E94-1005-489D-BEAA-B873C1AA6CFC}" = HP Help and Support
"{AC76BA86-1033-0000-BA7E-000000000001}" = Adobe Acrobat 6.0 Standard
"{B2AE44CB-2AAB-4C08-A54B-D264BD604DA8}" = Citrix Presentation Server Client
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{DB518BA6-CB74-4EB6-9ABD-880B6D6E1F38}" = HpSdpAppCoreApp
"{E3CD4EA8-68BB-46E8-9E79-20A417A82C53}" = Microsoft Office Live Meeting 2007
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F18DB86D-BC16-4E01-BCCE-63F62B931D82}" = InterVideo Register Manager
"ActiveTouchMeetingClient" = WebEx
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Advanced Registry Optimizer_is1" = Advanced Registry Optimizer
"ClientAccessExpress" = IBM AS/400 Client Access Express for Windows
"EB88B6218325D2AB47CFFBF7170236B60A6198FF" = Windows Driver Package - Microsoft Corporation (usbvideo) Image (05/25/2007 1.0.3656.0)
"HDMI" = Intel(R) Graphics Media Accelerator Driver
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"ie8" = Windows Internet Explorer 8
"McAfee Security Scan" = McAfee Security Scan Plus
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"PROSet" = Intel(R) PRO Network Connections Drivers
"ST6UNST #1" = Top 25
"ST6UNST #2" = Imaging
"ST6UNST #3" = Quick_quote
"ST6UNST #4" = Trends
"ST6UNST #5" = Aurafin's Cost Plus
"WIC" = Windows Imaging Component
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinVNC" = WinVNC 3.3.3

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 1/25/2011 6:08:46 PM | Computer Name = RICHLINE116 | Source = AutoEnrollment | ID = 15
Description = Automatic certificate enrollment for local system failed to contact
the active directory (0x8007054b). The specified domain either does not exist
or could not be contacted. Enrollment will not be performed.

Error - 1/26/2011 12:48:31 PM | Computer Name = RICHLINE116 | Source = AutoEnrollment | ID = 15
Description = Automatic certificate enrollment for local system failed to contact
the active directory (0x8007054b). The specified domain either does not exist
or could not be contacted. Enrollment will not be performed.

Error - 1/26/2011 8:48:10 PM | Computer Name = RICHLINE116 | Source = AutoEnrollment | ID = 15
Description = Automatic certificate enrollment for local system failed to contact
the active directory (0x8007054b). The specified domain either does not exist
or could not be contacted. Enrollment will not be performed.

Error - 1/28/2011 12:42:43 PM | Computer Name = RICHLINE116 | Source = AutoEnrollment | ID = 15
Description = Automatic certificate enrollment for local system failed to contact
the active directory (0x8007054b). The specified domain either does not exist
or could not be contacted. Enrollment will not be performed.

Error - 1/28/2011 1:03:24 PM | Computer Name = RICHLINE116 | Source = AutoEnrollment | ID = 15
Description = Automatic certificate enrollment for local system failed to contact
the active directory (0x8007054b). The specified domain either does not exist
or could not be contacted. Enrollment will not be performed.

Error - 1/28/2011 5:38:48 PM | Computer Name = RICHLINE116 | Source = AutoEnrollment | ID = 15
Description = Automatic certificate enrollment for local system failed to contact
the active directory (0x8007054b). The specified domain either does not exist
or could not be contacted. Enrollment will not be performed.

Error - 1/31/2011 12:56:03 PM | Computer Name = RICHLINE116 | Source = AutoEnrollment | ID = 15
Description = Automatic certificate enrollment for local system failed to contact
the active directory (0x8007054b). The specified domain either does not exist
or could not be contacted. Enrollment will not be performed.

Error - 1/31/2011 5:37:24 PM | Computer Name = RICHLINE116 | Source = AutoEnrollment | ID = 15
Description = Automatic certificate enrollment for local system failed to contact
the active directory (0x8007054b). The specified domain either does not exist
or could not be contacted. Enrollment will not be performed.

Error - 1/31/2011 7:07:57 PM | Computer Name = RICHLINE116 | Source = AutoEnrollment | ID = 15
Description = Automatic certificate enrollment for local system failed to contact
the active directory (0x8007054b). The specified domain either does not exist
or could not be contacted. Enrollment will not be performed.

Error - 1/31/2011 7:14:55 PM | Computer Name = RICHLINE116 | Source = AutoEnrollment | ID = 15
Description = Automatic certificate enrollment for local system failed to contact
the active directory (0x8007054b). The specified domain either does not exist
or could not be contacted. Enrollment will not be performed.

[ System Events ]
Error - 1/31/2011 5:44:46 PM | Computer Name = RICHLINE116 | Source = Service Control Manager | ID = 7006
Description = The ScRegSetValueExW call failed for Start with the following error:
%%5

Error - 1/31/2011 7:18:09 PM | Computer Name = RICHLINE116 | Source = DCOM | ID = 10010
Description = The server {FBA44040-BD27-4A09-ACC8-C08B7C723DCD} did not register
with DCOM within the required timeout.

Error - 1/31/2011 7:18:40 PM | Computer Name = RICHLINE116 | Source = DCOM | ID = 10010
Description = The server {FBA44040-BD27-4A09-ACC8-C08B7C723DCD} did not register
with DCOM within the required timeout.

Error - 1/31/2011 7:19:33 PM | Computer Name = RICHLINE116 | Source = DCOM | ID = 10010
Description = The server {FBA44040-BD27-4A09-ACC8-C08B7C723DCD} did not register
with DCOM within the required timeout.

Error - 1/31/2011 7:20:10 PM | Computer Name = RICHLINE116 | Source = DCOM | ID = 10010
Description = The server {FBA44040-BD27-4A09-ACC8-C08B7C723DCD} did not register
with DCOM within the required timeout.

Error - 1/31/2011 7:20:50 PM | Computer Name = RICHLINE116 | Source = DCOM | ID = 10010
Description = The server {FBA44040-BD27-4A09-ACC8-C08B7C723DCD} did not register
with DCOM within the required timeout.

Error - 1/31/2011 7:21:27 PM | Computer Name = RICHLINE116 | Source = DCOM | ID = 10010
Description = The server {FBA44040-BD27-4A09-ACC8-C08B7C723DCD} did not register
with DCOM within the required timeout.

Error - 1/31/2011 7:21:57 PM | Computer Name = RICHLINE116 | Source = DCOM | ID = 10010
Description = The server {FBA44040-BD27-4A09-ACC8-C08B7C723DCD} did not register
with DCOM within the required timeout.

Error - 1/31/2011 7:22:36 PM | Computer Name = RICHLINE116 | Source = DCOM | ID = 10010
Description = The server {FBA44040-BD27-4A09-ACC8-C08B7C723DCD} did not register
with DCOM within the required timeout.

Error - 1/31/2011 7:33:45 PM | Computer Name = RICHLINE116 | Source = DCOM | ID = 10010
Description = The server {FBA44040-BD27-4A09-ACC8-C08B7C723DCD} did not register
with DCOM within the required timeout.


< End of report >

pfchang
Intermediate
Intermediate

Posts Posts : 66
Joined Joined : 2009-03-05
OS OS : Windows XP Professional
Points Points : 28695
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Virus - Shutting down antivirus

Post by Belahzur on Tue Feb 01, 2011 1:56 am

Hello.

  • Download combofix from here
    [You must be registered and logged in to see this link.]

    1. If you are using Firefox, make sure that your download settings are as follows:

    * Tools->Options->Main tab
    * Set to "Always ask me where to Save the files".

    2. During the download, rename Combofix to Combo-Fix as follows:





    3. It is important you rename Combofix during the download, but not after.
    4. Please do not rename Combofix to other names, but only to the one indicated.
    5. Close any open browsers.
    6. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

  • We need to disable your local AV (Anti-virus) before running Combofix.
  • See [You must be registered and logged in to see this link.] for how to disable your AV.
  • Double click on ComboFix.exe.
  • Follow the prompts. NOTE:
  • ComboFix will check to see if the Microsoft Windows Recovery Console is installed.
    ***It's strongly recommended to have the Recovery Console installed before doing any malware removal.***

    **Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will automatically proceed with its scan.


  • The Recovery Console provides a recovery/repair mode should a problem occur during a Combofix run.



  • Allow ComboFix to download the Recovery Console.
  • Accept the End-User License Agreement.
  • The Recovery Console will be installed.
  • You will then get this next prompt that asks if you want to continue the malware scan, select yes



  • Allow combofix to run
  • Post C:\combofix.txt back here.

    Note:
    Do not mouseclick combofix's window whilst it's running. That may cause it to stall.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34916
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : XP SP3 Media Centre
Points Points : 245049
# Likes # Likes : 1

View user profile

Back to top Go down

Re: Virus - Shutting down antivirus

Post by pfchang on Tue Feb 01, 2011 6:28 pm

ComboFix 11-01-31.02 - sarechig 02/01/2011 10:06:06.3.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1014.614 [GMT -8:00]
Running from: c:\documents and settings\sarechig\Desktop\Combo-Fix.exe
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\autorun.inf
D:\asfxa.pif
D:\Autorun.inf

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_AMSINT32
-------\Service_amsint32


((((((((((((((((((((((((( Files Created from 2011-01-01 to 2011-02-01 )))))))))))))))))))))))))))))))
.

2011-02-01 18:11 . 2011-02-01 18:11 118784 ----a-w- c:\windows\system32\chg.exe
2011-01-31 22:03 . 2011-01-31 22:03 -------- d-----w- c:\program files\Ask.com
2011-01-26 01:14 . 2011-02-01 01:59 103140 ----a-w- C:\tllanm.exe
2011-01-19 23:36 . 2011-01-19 23:36 -------- d-----w- c:\documents and settings\sarechig\Local Settings\Application Data\Identities

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-01-31 23:32 . 2008-03-05 16:21 73728 ----a-w- c:\windows\system32\javacpl.cpl
2010-11-18 18:12 . 2004-08-04 08:00 81920 ----a-w- c:\windows\system32\isign32.dll
2010-11-09 14:52 . 2004-08-04 08:00 249856 ----a-w- c:\windows\system32\odbc32.dll
2010-11-06 00:26 . 2004-08-04 08:00 916480 ----a-w- c:\windows\system32\wininet.dll
2010-11-06 00:26 . 2004-08-04 08:00 43520 ----a-w- c:\windows\system32\licmgr10.dll
2010-11-06 00:26 . 2004-08-04 08:00 1469440 ------w- c:\windows\system32\inetcpl.cpl
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2010-09-29 06:44 1400712 ----a-w- c:\program files\Ask.com\GenericAskToolbar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2010-09-29 1400712]

[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2010-09-29 1400712]

[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-01-05 413696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SetRefresh"="c:\program files\Compaq\SetRefresh\SetRefresh.exe" [2003-11-20 525824]
"Scheduler"="c:\windows\SMINST\Scheduler.exe" [2006-07-10 872448]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-01-05 413696]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 318184]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\2.0.181\SSScheduler.exe [2010-1-15 255536]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableTaskMgr"= 1 (0x1)
"DisableRegistryTools"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"AntiVirusOverride"=dword:00000001
"AntiVirusDisableNotify"=dword:00000001
"FirewallDisableNotify"=dword:00000001
"FirewallOverride"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
"UacDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
"DisableNotifications"= 1 (0x1)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\WINDOWS\\SMINST\\Scheduler.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Documents and Settings\\sarechig\\Desktop\\sysclean\\sysclean.exe"=
"c:\\Program Files\\Common Files\\Java\\Java Update\\jusched.exe"=
"c:\\DOCUME~1\\sarechig\\LOCALS~1\\Temp\\qjkaho.exe"=
"c:\\DOCUME~1\\sarechig\\LOCALS~1\\Temp\\winyxujhp.exe"=

S2 gupdate;Google Update Service (gupdate);"c:\program files\Google\Update\GoogleUpdate.exe" /svc --> c:\program files\Google\Update\GoogleUpdate.exe [?]
S3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\2.0.181\McCHSvc.exe [1/15/2010 4:49 AM 227232]

--- Other Services/Drivers In Memory ---

*NewlyCreated* - AMSINT32
*NewlyCreated* - MESSENGER
.
Contents of the 'Scheduled Tasks' folder

2011-02-01 c:\windows\Tasks\Scheduled Update for Ask Toolbar.job
- c:\program files\Ask.com\UpdateTask.exe [2010-09-29 06:44]
.
.
------- Supplementary Scan -------
.
uStart Page = about:blank
mStart Page = about:blank
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll/cmsidewiki.html
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, [You must be registered and logged in to see this link.]
Rootkit scan 2011-02-01 10:12
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'explorer.exe'(2160)
c:\windows\system32\WININET.dll
c:\windows\system32\ieframe.dll
.
------------------------ Other Running Processes ------------------------
.
c:\program files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\docume~1\sarechig\LOCALS~1\Temp\qjkaho.exe
c:\docume~1\sarechig\LOCALS~1\Temp\wincmhb.exe
.
**************************************************************************
.
Completion time: 2011-02-01 10:18:37 - machine was rebooted
ComboFix-quarantined-files.txt 2011-02-01 18:18
ComboFix2.txt 2009-12-23 00:30

Pre-Run: 51,222,323,200 bytes free
Post-Run: 51,595,755,520 bytes free

- - End Of File - - CA65CF1A04D5A758E8E2318F9BC9C866

pfchang
Intermediate
Intermediate

Posts Posts : 66
Joined Joined : 2009-03-05
OS OS : Windows XP Professional
Points Points : 28695
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Virus - Shutting down antivirus

Post by Belahzur on Wed Feb 02, 2011 1:41 am

Attention: Your computer is severely infected with Win32\Ramnit what is now called, a cocktail infection. This is an infection that is comprised of many different types of viruses and other malware, to damage your computer, and use it as a zombie for its backdoor network. In other words, your computer is under control of a hacker, and regaining control is now next to impossible.

The first component is a [You must be registered and logged in to see this link.], which is a type of trojan that communicates with a hacker: to transfer personal information about you, use your computer to help perform a denial-of-service attack, redirect your internet searches in order to make money off of your browsing habits, and can be a keylogger to steal personal identifiable information to help rob your identity.

The second component is a [You must be registered and logged in to see this link.], which is a type of malware to take control over your computer at administrator access, having full permission to modify all of your device drivers, and allowing itself to hide all the malware on the system. In other words, it is a hackers way of taking control of your computer, and hiding in the dark at the same time. This is a prime initiative of hackers to help keep access to your computer, robbing all of your personal information, and using your computer to send spam across the internet.

The third component is a [You must be registered and logged in to see this link.], which is a type of virus to purposely damage as many files as possible, in order to keep control of your system, so you have as little access as possible.

Not only has your system been compromised severely, it is also highly damaged, and if you do not commit to my suggested removal method below, then your computer may not function anymore.

If you do any banking or other financial transactions on the PC or if it should contain any other sensitive information, please get to a known clean computer and change all passwords where applicable. Do NOT change passwords or do any transactions while using the infected computer because the attacker may get the new passwords and transaction information. (If using a router, you need to reset it with a strong logon/password so the malware cannot gain control before connecting again.) Banking and credit card institutions should be notified to apprise them of your situation (possible security breach). To protect your information that may have been compromised, I recommend reading these references:


Removal method:

It is recommended to do a reformat and reinstall of your operating system. The experts in the [You must be registered and logged in to see this link.] security community believe that once infected with such a piece of malware, the best course of action would be a reformat and clean reinstall of the OS. This is something I don't like to recommend normally, but in most cases it is the best solution for your safety.

I recommend the following articles to read:
Guides for format and reinstall:

[You must be registered and logged in to see this link.]

[You must be registered and logged in to see this link.]

However, if you do not have the resources to reinstall your computer's OS and would like me to attempt to clean it, I will be happy to do so. But please consider carefully before deciding against a reformat.
If you do make that decision, I will do my best to help you clean the computer of any infections, but you must understand that once a machine has been taken over by this type of malware, I cannot guarantee that it will be 100% secure even after disinfection or that the removal will be successful.

Please let me know what you have decided to do in your next post. Should you have any questions, please feel free to ask.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34916
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : XP SP3 Media Centre
Points Points : 245049
# Likes # Likes : 1

View user profile

Back to top Go down

View previous topic View next topic Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum