Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

Stubborn Malware

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Stubborn Malware

Unread postby fullbug » June 10th, 2010, 8:28 am

First time here, hope you can help....
In the past I have had all the tools I seemed to need to get rid of any malware, but whatever is in my system this time I cant seem to get rid of....
The big problem is IE will constantly open to different websites with ads, like skill2thrill.com and newyorkchronicle.com, sometimes 3-4 IE windows opening at once, and are really hard to close....Normally I use Firefox, so the fact IE is even opening on its own is a bad sign....
I have used SuperAntispyware- last scan found nothing....
Spybot - ran last night and found 11 things, but problem remains....
MalwareBytes- found 1 or 2 things, didnt help....
Also ran a program I have had for awhile, Loaris Trojan Remover and it found a few things, but no help....
I'm on a Windows XP SP2, using a Dell tower.....Also use
One more thing, I also use a external hard drive for ALOT of my stuff, not sure how to configure HJT to scan that drive though.....
Thanx for any help that can be given!

32 Bit HP CIO Components Installer
7 Wonders II 1.00
7-Zip 4.57
Acrobat.com
Acrobat.com
Adobe AIR
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 9.3
AGEIA PhysX v7.11.13
Apple Application Support
Apple Mobile Device Support
Apple Software Update
Art Explosion Scrapbook Factory
Atlantis Quest
Atomic Alarm Clock 5.81
AusLogics Disk Defrag
AusLogics Visual Styler
AviSynth 2.5
Bonjour
BurnAware Professional 2.0.1.700
Canon Camera Access Library
Canon Camera Support Core Library
Canon Camera Window DC_DV 5 for ZoomBrowser EX
Canon Camera Window DC_DV 6 for ZoomBrowser EX
Canon Camera Window MC 6 for ZoomBrowser EX
Canon G.726 WMP-Decoder
Canon MovieEdit Task for ZoomBrowser EX
Canon RAW Image Task for ZoomBrowser EX
Canon RemoteCapture Task for ZoomBrowser EX
Canon Utilities Easy-PhotoPrint EX
Canon Utilities EOS Utility
Canon Utilities PhotoStitch
Canon Utilities Solution Menu
CCleaner (remove only)
ClipX
CodeStuff Starter
Content Transfer
Cricut DesignStudio
DivX
DivX Player
DivX Web Player
Eraser
Eraser
FastStone Image Viewer 4.0
FastStone MaxView 2.1
Folder Guide
Folderico 3.7.2
Foxit Reader
Gmail Notifier
HD Tune Pro 3.50
Heroes of Hellas 2 1.00
HiJackThis
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows XP (KB981793)
HP Imaging Device Functions 11.0
HP Photosmart C5500 All-In-One Driver Software 11.0 Rel .4
HP Photosmart Essential 3.0
HP Smart Web Printing
HP Solution Center 11.0
HP Update
Image Resizer Powertoy for Windows XP
Inkjet Printer/Scanner Extended Survey Program
Inpaint
Intel(R) Extreme Graphics 2 Driver
Intel(R) PRO Network Adapters and Drivers
iTunes
Java(TM) 6 Update 18
Java(TM) 6 Update 4
Java(TM) 6 Update 7
Junk Mail filter update
KillProcess 2.42
Loaris Trojan Remover 1.2
Logitech User's Guide
Magic ISO Maker v5.5 (build 0265)
Make The Cut! 1.3.0
Malwarebytes' Anti-Malware
McAfee SiteAdvisor
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1
Microsoft Choice Guard
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Enterprise 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office Groove MUI (English) 2007
Microsoft Office Groove Setup Metadata MUI (English) 2007
Microsoft Office InfoPath MUI (English) 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Mozilla Firefox (3.6.3)
MP3 Rocket
MSVCRT
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MSXML 6 Service Pack 2 (KB973686)
NickelsAndMore
NotesHolder 2.2
OCR Software by I.R.I.S. 11.0
Online Radio Tuner Standard Edition
OpenAL
OpenOffice.org 3.2
PegSol 1.2
Pizza Chef 2 1.00
QuickTime
Rainlendar2 (remove only)
RegSupreme Pro
Revo Uninstaller 1.75
Seagate Manager Installer
Seagate Manager Installer
Security Update for 2007 Microsoft Office System (KB969559)
Security Update for 2007 Microsoft Office System (KB976321)
Security Update for 2007 Microsoft Office System (KB978380)
Security Update for CAPICOM (KB931906)
Security Update for CAPICOM (KB931906)
Security Update for Microsoft Office Excel 2007 (KB978382)
Security Update for Microsoft Office Outlook 2007 (KB972363)
Security Update for Microsoft Office PowerPoint 2007 (KB957789)
Security Update for Microsoft Office Publisher 2007 (KB980470)
Security Update for Microsoft Office system 2007 (972581)
Security Update for Microsoft Office system 2007 (KB969613)
Security Update for Microsoft Office system 2007 (KB974234)
Security Update for Microsoft Office Visio Viewer 2007 (KB973709)
Security Update for Microsoft Office Word 2007 (KB969604)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB938127-v2)
Security Update for Windows Internet Explorer 7 (KB953838)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows Internet Explorer 7 (KB958215)
Security Update for Windows Internet Explorer 7 (KB960714)
Security Update for Windows Internet Explorer 7 (KB961260)
Security Update for Windows Internet Explorer 7 (KB963027)
Security Update for Windows Internet Explorer 7 (KB969897)
Security Update for Windows Internet Explorer 8 (KB969897)
Security Update for Windows Internet Explorer 8 (KB971961)
Security Update for Windows Internet Explorer 8 (KB972260)
Security Update for Windows Internet Explorer 8 (KB974455)
Security Update for Windows Internet Explorer 8 (KB976325)
Security Update for Windows Internet Explorer 8 (KB978207)
Security Update for Windows Internet Explorer 8 (KB981332)
Security Update for Windows XP (KB923789)
Security Update for Windows XP (KB978542)
Segoe UI
Slots from Bally Gaming
Snaky Jake (remove only)
Spybot - Search & Destroy
Super Mario 3 : Mario Forever
SUPERAntiSpyware Free Edition
Sure Cuts A Lot 1.016
The Da Vinci Code 1.00
The Treasures of Montezuma 2 1.00
Tibor - Tale of a Kind Vampire 1.00
TouchCopy 09
Trojan Remover 6.7.5
Turtle Odyssey 2
Universal Extractor 1.6
Unlocker 1.8.7
Unwell Mel
Update for 2007 Microsoft Office System (KB967642)
Update for 2007 Microsoft Office System (KB981715)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Microsoft Office InfoPath 2007 (KB976416)
Update for Microsoft Office OneNote 2007 (KB980729)
Update for Outlook 2007 Junk Email Filter (kb981726)
Update for Windows Internet Explorer 8 (KB971930)
Update for Windows Internet Explorer 8 (KB976662)
Update for Windows Internet Explorer 8 (KB976749)
Update for Windows Internet Explorer 8 (KB980182)
USB PC Camera-168
VLC media player 0.9.2
Windows Imaging Component
Windows Internet Explorer 8
Windows Live Call
Windows Live Communications Platform
Windows Live Essentials
Windows Live Essentials
Windows Live Mail
Windows Live Messenger
Windows Live Sign-in Assistant
Windows Live Upload Tool
Windows Media Format 11 runtime
Windows Media Format 11 runtime
Windows Media Player 11
Windows Media Player 11
Word Zen 1.00
Yahoo! Install Manager
Zuma's Revenge!

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:13:35 AM, on 10/06/2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AusLogics Visual Styler\themehelpersvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Eraser\Eraser.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\NotesHolder\NotesHolder.exe
C:\Program Files\ClipX\clipx.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\ClipX\clipx .exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - (no file)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O3 - Toolbar: (no name) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - (no file)
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [KillProcess] "C:\Program Files\KillProcess\KillProcess.exe"
O4 - HKLM\..\Run: [ClipX] C:\Program Files\ClipX\clipx.exe
O4 - HKCU\..\Run: [Eraser] C:\Program Files\Eraser\Eraser.exe -hide
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: NotesHolder.lnk = C:\Program Files\NotesHolder\NotesHolder.exe
O4 - Startup: starter.lnk = ?
O8 - Extra context menu item: Add to AMV Convert Tool... - C:\Program Files\MP3 Player Utilities 3.81\AMVConverter\grab.html
O8 - Extra context menu item: Add to Media Manager... - C:\Program Files\MP3 Player Utilities 3.81\MediaManager\grab.html
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: HP Smart Select - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: McAfee Application Installer Cleanup (0230321274842472) (0230321274842472mcinstcleanup) - Unknown owner - C:\WINDOWS\TEMP\023032~1.EXE (file missing)
O23 - Service: 0324051232751199mcinstcleanup - Unknown owner - (no file)
O23 - Service: AusLogics Windows Themes Helper (ALThemeHelper) - Unknown owner - C:\Program Files\AusLogics Visual Styler\themehelpersvc.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Seagate Service (FreeAgentGoNext Service) - Seagate Technology LLC - C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Inkjet Printer/Scanner Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
O23 - Service: Microsoft Office Groove Audit Service - Unknown owner - C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe (file missing)
O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe (file missing)

--
End of file - 8307 bytes
fullbug
Regular Member
 
Posts: 31
Joined: June 10th, 2010, 7:51 am
Advertisement
Register to Remove

Re: Stubborn Malware

Unread postby melboy » June 11th, 2010, 7:59 pm

Hi and welcome to the MR forums. :)

I'm melboy and I am going to try to help you with your problem. Please take note of the following:

  1. I will be working on your Malware issues this may or may not solve other issues you have with your machine.
  2. The fixes are specific to your problem and should only be used for this issue on this machine.
  3. If you don't know or understand something, please don't hesitate to ask.
  4. Please refrain from making any further changes to your computer (Install/Uninstall programs, delete files, edit the registry, etc...)
  5. Please DO NOT run any other tools or scans whilst I am helping you.
  6. It is important that you reply to this thread. Do not start a new topic.
  7. DO NOT attach logs unless requested to. Please copy/paste all requested logs into your replies.
  8. Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
  9. Absence of symptoms does not mean that everything is clear.


NOTE: Please take time to read the Malware Removal Forum Guidelines and Rules where the conditions for receiving help at this forum are explained.


IMPORTANT: Please be aware that removing Malware is a potentially hazardous undertaking. I will take care not to knowingly suggest courses of action that might damage your computer. However it is impossible for me to foresee all interactions that may happen between the software on your computer and those we'll use to clear you of infection, and I cannot guarantee the safety of your system. It is possible that we might encounter situations where the only recourse is to re-format and re-install your operating system, or to necessitate you taking your computer to a repair shop.

Because of this, I advise you to backup any personal files and folders before you start.



No Reply Within 3 Days Will Result In Your Topic Being Closed!! If you need more time, please inform me.


============================================


WVCheck

Please download WVCheck by Artellos from Here and save it to your desktop.

  • Double click WVCheck.exe to run it.
  • As prompted, press enter on your keyboard to continue. The program can take a while depending on your hard drive space.
  • When the program is finished, notepad will open, copy the contents of the notepad file as a reply.
  • The log can be found on your desktop named WVCheck_Time_DD-MM-Year.txt



OTL
Download OTL by Old Timer and save it to your Desktop.
  • Double click on OTL.exe to run it.
  • Under the Custom Scan box paste this in
    Code: Select all
    netsvcs
    drivers32
    %SYSTEMDRIVE%\*.*
    %systemroot%\*. /mp /s
    CREATERESTOREPOINT
    %systemroot%\system32\*.dll /lockedfiles
    %systemroot%\Tasks\*.job /lockedfiles
    %systemroot%\System32\config\*.sav 
    %systemroot%\system32\user32.dll /md5
    %systemroot%\system32\ws2_32.dll /md5
    
  • Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  • When done, two Notepad files will open.
    • OTL.txt <-- Will be opened
    • Extras.txt <-- Will be minimized
  • Please post the contents of these 2 Notepad files in your next reply.



Gmer

Download GMER Rootkit Scanner from here.

  • Disconnect from the Internet and close all running programs.
  • Temporarily disable any real-time active protection so your security programs will not conflict with gmer's driver.
  • Double click the .exe file. If asked to allow gmer.sys driver to load, please consent
  • If it gives you a warning about rootkit activity and asks if you want to run scan...click on NO
  • In the right panel, you will see several boxes that have been checked. Uncheck the following ...
    • IAT/EAT
    • Drives/Partition other than Systemdrive (typically C:\)
    • Show All (don't miss this one)
    See image below
    Image
  • Then click the Scan button & wait for it to finish
  • Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file
  • Save it where you can easily find it, such as your desktop, and post it in your next reply
  • Exit GMER and be sure to re-enable your anti-virus, Firewall and any other security programs you had disabled.

-- If GMER crashes or keeps resulting in a BSoDs, uncheck Devices on the right side before scanning -- If you continue to encounter problems, try running GMER in safe mode


**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<--- ROOKIT" entries


Note: Do not run any programs while Gmer is running.



In your next reply:
  1. WVCheck
  2. OTL.txt
  3. Extras.txt
  4. GMER log
User avatar
melboy
MRU Expert
MRU Expert
 
Posts: 3670
Joined: July 25th, 2008, 4:25 pm
Location: UK

Re: Stubborn Malware

Unread postby fullbug » June 12th, 2010, 1:00 pm

Thanx for the help melboy, here are the files.....

Windows Validation Check
Log Created On: 2207_11-06-2010
------------------------

Windows Information
-----------------------
Windows Version: Windows XP Service Pack 2
Windows Mode: Normal


WVCheck's Auto Update Check
-----------------------
Auto-Update Option: Download updates and install them automatically.
------------------------------
Last Success Time for Update Detection: 2010-06-11 04:44:14
Last Success Time for Update Download: 2010-05-30 12:39:25
Last Success Time for Update Installation: 2010-05-31 07:01:52


WVCheck's File Dump
-------------------
WVCheck found no known bad files.


WVCheck's Missing File Check
-------------------
WVCheck found no missing Windows files.


WVCheck's MBAM Quarantine Check
-------------------
There were no bad files quarantined by MBAM.


WVCheck's HOSTS File Check
-------------------
WVCheck found no bad lines in the hosts file.


WVCheck's MD5 Check
EXPERIMENTAL!!
-------------------
user32.dll - b409909f6e2e8a7067076ed748abf1e7


-------- End of File, program close at 2213_11-06-2010 --------
fullbug
Regular Member
 
Posts: 31
Joined: June 10th, 2010, 7:51 am

Re: Stubborn Malware

Unread postby fullbug » June 12th, 2010, 1:37 pm

I have tried to both post and attach the OTL file but in both cases the site says its too big.....Can do it in pieces I guess.....

TL logfile created on: 11/06/2010 10:18:07 PM - Run 1
OTL by OldTimer - Version 3.2.6.0 Folder = C:\Documents and Settings\Administrator\Desktop
Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00001009 | Country: Canada | Language: ENC | Date Format: dd/MM/yyyy

510.00 Mb Total Physical Memory | 59.00 Mb Available Physical Memory | 11.00% Memory free
1.00 Gb Paging File | 1.00 Gb Available in Paging File | 59.00% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 37.24 Gb Total Space | 20.62 Gb Free Space | 55.37% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
Drive H: | 465.76 Gb Total Space | 367.85 Gb Free Space | 78.98% Space Free | Partition Type: NTFS
I: Drive not present or media not loaded

Computer Name: TRACEY
Current User Name: Administrator
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 90 Days
Output = Standard
Quick Scan

========== Processes (SafeList) ==========

PRC - [2010/06/11 22:15:49 | 000,572,416 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Desktop\OTL.exe
PRC - [2010/04/03 22:02:48 | 000,910,296 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2010/03/26 11:16:04 | 000,093,320 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
PRC - [2010/03/19 10:49:20 | 000,144,672 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
PRC - [2009/11/11 17:08:14 | 001,622,320 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe
PRC - [2009/10/22 21:24:28 | 001,085,720 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\seccenter.exe
PRC - [2009/10/22 21:24:16 | 001,118,144 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe
PRC - [2009/06/11 15:24:36 | 001,668,608 | ---- | M] (A!K Research Labs) -- C:\Program Files\NotesHolder\NotesHolder.exe
PRC - [2009/05/01 14:35:54 | 000,181,544 | ---- | M] (Seagate Technology LLC) -- C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe
PRC - [2008/04/08 15:04:32 | 000,116,336 | ---- | M] () -- C:\Program Files\AusLogics Visual Styler\themehelpersvc.exe
PRC - [2008/01/22 13:35:52 | 000,103,808 | ---- | M] () -- C:\Program Files\Canon\IJPLM\ijplmsvc.exe
PRC - [2007/12/22 19:03:28 | 000,916,240 | ---- | M] (The Eraser Project) -- C:\Program Files\Eraser\Eraser.exe
PRC - [2007/06/26 16:43:40 | 001,295,872 | ---- | M] (Orange Lamp Software Solutions) -- C:\Program Files\KillProcess\KillProcess .exe
PRC - [2007/06/13 06:23:07 | 001,033,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007/04/15 22:50:48 | 001,112,064 | ---- | M] () -- C:\Documents and Settings\Administrator\Desktop\FSCapture.exe
PRC - [2006/03/30 12:15:44 | 000,096,341 | ---- | M] (Canon Inc.) -- C:\Program Files\Canon\CAL\CALMAIN.exe


========== Modules (SafeList) ==========

MOD - [2010/06/11 22:15:49 | 000,572,416 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Desktop\OTL.exe
MOD - [2009/11/09 16:38:22 | 000,172,032 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- C:\Program Files\BitDefender\BitDefender 2010\Active Virus Control\midas32-v2_000\plugin_extra.m32
MOD - [2009/11/09 16:38:08 | 000,266,240 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- C:\Program Files\BitDefender\BitDefender 2010\Active Virus Control\midas32-v2_000\plugin_nt.m32
MOD - [2009/11/09 16:37:42 | 000,098,304 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- C:\Program Files\BitDefender\BitDefender 2010\Active Virus Control\midas32-v2_000\plugin_net.m32
MOD - [2009/11/09 16:37:30 | 000,299,008 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- C:\Program Files\BitDefender\BitDefender 2010\Active Virus Control\midas32-v2_000\plugin_fragments.m32
MOD - [2009/11/09 16:37:10 | 000,126,976 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- C:\Program Files\BitDefender\BitDefender 2010\Active Virus Control\midas32-v2_000\plugin_registry.m32
MOD - [2009/11/09 16:37:02 | 000,143,360 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- C:\Program Files\BitDefender\BitDefender 2010\Active Virus Control\midas32-v2_000\plugin_base.m32
MOD - [2009/11/09 16:33:58 | 000,221,184 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- C:\Program Files\BitDefender\BitDefender 2010\Active Virus Control\midas32-v2_000\midas32.dll
MOD - [2008/04/08 14:05:56 | 000,090,624 | ---- | M] (AusLogics, Inc.) -- C:\Program Files\AusLogics Visual Styler\themehelper.dll
MOD - [2006/08/25 11:45:55 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
MOD - [2006/02/28 08:00:00 | 000,102,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx


========== Win32 Services (SafeList) ==========

SRV - File not found [On_Demand | Stopped] -- -- (NMIndexingService)
SRV - File not found [On_Demand | Stopped] -- -- (Microsoft Office Groove Audit Service)
SRV - File not found [Auto | Stopped] -- -- (0324051232751199mcinstcleanup)
SRV - File not found [Auto | Stopped] -- -- (0230321274842472mcinstcleanup) McAfee Application Installer Cleanup (0230321274842472)
SRV - [2010/03/26 11:16:04 | 000,093,320 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\McAfee\SiteAdvisor\McSACore.exe -- (McAfee SiteAdvisor Service)
SRV - [2010/03/19 10:49:20 | 000,144,672 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2009/11/11 17:08:14 | 001,622,320 | ---- | M] (BitDefender S.R.L.) [Auto | Running] -- C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe -- (VSSERV)
SRV - [2009/11/09 12:35:04 | 000,326,656 | ---- | M] (BitDefender S.R.L.) [Auto | Stopped] -- C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe -- (LIVESRV)
SRV - [2009/10/23 14:45:26 | 000,311,296 | ---- | M] (S.C. BitDefender S.R.L) [On_Demand | Stopped] -- C:\Program Files\Common Files\BitDefender\BitDefender Threat Scanner\scan.dll -- (scan)
SRV - [2009/10/19 16:06:10 | 000,183,880 | ---- | M] (BitDefender S.R.L. http://www.bitdefender.com) [On_Demand | Stopped] -- C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe -- (Arrakis3)
SRV - [2009/05/01 14:35:54 | 000,181,544 | ---- | M] (Seagate Technology LLC) [Auto | Running] -- C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe -- (FreeAgentGoNext Service)
SRV - [2008/04/08 15:04:32 | 000,116,336 | ---- | M] () [Auto | Running] -- C:\Program Files\AusLogics Visual Styler\themehelpersvc.exe -- (ALThemeHelper)
SRV - [2008/01/22 13:35:52 | 000,103,808 | ---- | M] () [Auto | Running] -- C:\Program Files\Canon\IJPLM\ijplmsvc.exe -- (IJPLMSVC)
SRV - [2006/03/30 12:15:44 | 000,096,341 | ---- | M] (Canon Inc.) [Auto | Running] -- C:\Program Files\Canon\CAL\CALMAIN.exe -- (CCALib8)


========== Driver Services (SafeList) ==========

DRV - [2009/11/10 17:04:14 | 000,152,456 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\bdfm.sys -- (bdfm)
DRV - [2009/11/10 16:14:22 | 000,054,912 | ---- | M] (BitDefender) [Kernel | On_Demand | Running] -- C:\Program Files\BitDefender\BitDefender 2010\bdselfpr.sys -- (BDSelfPr)
DRV - [2009/10/19 16:04:00 | 000,119,048 | ---- | M] (BitDefender LLC) [Kernel | System | Running] -- C:\Program Files\Common Files\BitDefender\BitDefender Firewall\bdftdif.sys -- (bdftdif)
DRV - [2009/08/27 16:28:44 | 000,014,720 | ---- | M] (BitDefender S.R.L.) [Kernel | On_Demand | Stopped] -- C:\Program Files\Common Files\BitDefender\BitDefender Threat Scanner\profos.sys -- (Profos)
DRV - [2009/07/24 11:26:08 | 000,285,704 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) [File_System | Boot | Running] -- C:\WINDOWS\system32\drivers\bdfsfltr.sys -- (bdfsfltr)
DRV - [2009/05/07 03:22:06 | 000,039,808 | ---- | M] (BitDefender S.R.L.) [Kernel | On_Demand | Stopped] -- C:\Program Files\Common Files\BitDefender\BitDefender Threat Scanner\trufos.sys -- (Trufos)
DRV - [2008/08/22 16:22:41 | 000,717,296 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2008/08/20 02:34:22 | 000,007,408 | R--- | M] ( SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | On_Demand | Stopped] -- C:\Program Files\SUPERAntiSpyware\SASENUM.SYS -- (SASENUM)
DRV - [2008/08/20 02:34:20 | 000,055,024 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL)
DRV - [2008/08/20 02:34:20 | 000,008,944 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\sasdifsv.sys -- (SASDIFSV)
DRV - [2004/08/03 23:07:56 | 000,059,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\USBAUDIO.sys -- (usbaudio) USB Audio Driver (WDM)
DRV - [2002/11/08 05:50:00 | 000,041,420 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LHidUsb.sys -- (LHidUsb)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========


IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.update: false
FF - prefs.js..browser.startup.homepage: "chrome://speeddial/content/speeddial.xul"
FF - prefs.js..extensions.enabledItems: {B7082FAA-CB62-4872-9106-E42DD88EDE45}:3.1
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {64161300-e22b-11db-8314-0800200c9a66}:0.9.5
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2

FF - HKLM\software\mozilla\Firefox\Extensions\\{B7082FAA-CB62-4872-9106-E42DD88EDE45}: C:\Program Files\McAfee\SiteAdvisor [2010/06/01 16:48:44 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn2 [2009/05/17 18:54:51 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\FFToolbar@bitdefender.com: C:\Program Files\BitDefender\BitDefender 2010\bdaphffext\ [2010/06/10 13:33:44 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/06/10 13:24:52 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/04/03 22:03:27 | 000,000,000 | ---D | M]

[2010/03/09 11:58:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Extensions
[2010/06/11 22:05:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\cs19zxyc.default\extensions
[2010/03/09 11:59:54 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\cs19zxyc.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/03/09 11:59:54 | 000,000,000 | ---D | M] (Speed Dial) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\cs19zxyc.default\extensions\{64161300-e22b-11db-8314-0800200c9a66}
[2010/05/29 18:41:56 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\cs19zxyc.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2010/06/11 21:46:38 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2009/10/19 18:59:44 | 000,047,104 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\Mozilla Firefox\components\FFComm.dll
[2008/09/10 21:22:22 | 000,024,683 | ---- | M] (Ask.com) -- C:\Program Files\Mozilla Firefox\plugins\NPAskSBr.dll
[2009/07/26 14:13:05 | 000,072,960 | ---- | M] (Foxit Software Company) -- C:\Program Files\Mozilla Firefox\plugins\npFoxitReaderPlugin.dll
[2010/01/15 20:55:13 | 000,001,538 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\amazon-en-GB.xml
[2010/01/15 20:55:13 | 000,000,947 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\chambers-en-GB.xml
[2010/01/15 20:55:13 | 000,000,769 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\eBay-en-GB.xml
[2010/01/15 20:55:13 | 000,001,135 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\yahoo-en-GB.xml

O1 HOSTS File: ([2010/06/02 16:56:38 | 000,334,518 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 127.0.0.1 1-2005-search.com
O1 - Hosts: 11488 more lines...
O2 - BHO: (HP Print Enhancer) - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
O2 - BHO: (no name) - {201f27d4-3704-41d6-89c1-aa35e39143ed} - No CLSID value found.
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O2 - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O2 - BHO: (HP Smart BHO Class) - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O3 - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O3 - HKLM\..\Toolbar: (no name) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - No CLSID value found.
O3 - HKLM\..\Toolbar: (BitDefender Toolbar) - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2010\ietoolbar.dll (BitDefender S.R.L.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No CLSID value found.
O4 - HKLM..\Run: [BDAgent] C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe (BitDefender S.R.L.)
O4 - HKLM..\Run: [BitDefender Antiphishing Helper] C:\Program Files\BitDefender\BitDefender 2010\IEShow.exe (BitDefender S.R.L.)
O4 - HKCU..\Run: [Eraser] C:\Program Files\Eraser\Eraser.exe (The Eraser Project)
O4 - Startup: C:\Documents and Settings\Administrator\Start Menu\Programs\Startup\Kill Process.lnk = C:\Program Files\KillProcess\KillProcess .exe (Orange Lamp Software Solutions)
O4 - Startup: C:\Documents and Settings\Administrator\Start Menu\Programs\Startup\NotesHolder.lnk = C:\Program Files\NotesHolder\NotesHolder.exe (A!K Research Labs)
O4 - Startup: C:\Documents and Settings\Administrator\Start Menu\Programs\Startup\starter.lnk = C:\Program Files\Codestuff Starter\Starter\Starter.exe (CodeStuff)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: HP Smart Select - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOWS\system32\nwprovau.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} C:\Program Files\Yahoo!\Common\yinsthelper.dll (YInstStarter Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_18)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UIHost - (C:\Documents and Settings\All Users\Application Data\Visual Styler\Logon Screens\logonui.exe) - C:\Documents and Settings\All Users\Application Data\Visual Styler\Logon Screens\logonui.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\igfxcui: DllName - igfxsrvc.dll - C:\WINDOWS\System32\igfxsrvc.dll (Intel Corporation)
O24 - Desktop WallPaper: C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008/08/22 14:57:03 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2010/04/05 12:26:24 | 000,000,067 | ---- | M] () - H:\Autorun.inf -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs: 6to4 - File not found
NetSvcs: Ias - C:\WINDOWS\system32\ias [2008/08/22 14:56:25 | 000,000,000 | ---D | M]
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.siren - C:\WINDOWS\System32\sirenacm.dll (Microsoft Corporation)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - C:\WINDOWS\System32\DivX.dll (DivXNetworks, Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point (86707903578243072)

========== Files/Folders - Created Within 90 Days ==========

[2010/06/11 22:15:46 | 000,572,416 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Desktop\OTL.exe
[2010/06/10 14:48:41 | 000,000,000 | ---D | C] -- C:\Program Files\Tibor - Tale of a Kind Vampire
[2010/06/10 13:33:48 | 000,153,448 | ---- | C] (BitDefender S.R.L. Bucharest, ROMANIA) -- C:\WINDOWS\System32\drivers\bdfm.sys.upd
[2010/06/10 13:33:48 | 000,106,464 | ---- | C] (BitDefender S.R.L. Bucharest, ROMANIA) -- C:\WINDOWS\System32\drivers\bdhv.sys.upd
[2010/06/10 13:33:33 | 000,291,352 | ---- | C] (BitDefender) -- C:\WINDOWS\System32\drivers\bdfsfltr.sys.upd
[2010/06/10 13:16:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Application Data\BitDefender
[2010/06/10 08:11:56 | 000,000,000 | ---D | C] -- C:\Program Files\Trend Micro
[2010/06/09 22:46:03 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Administrator\Recent
[2010/06/09 22:43:16 | 000,000,000 | ---D | C] -- C:\Program Files\Tibor The Vampire Platform Game
[2010/06/05 10:01:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Application Data\Sun
[2010/06/02 17:51:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Application Data\Gmail Notifier
[2010/06/02 17:51:14 | 000,000,000 | ---D | C] -- C:\Program Files\Gmail Notifier
[2010/05/31 19:29:02 | 000,000,000 | ---D | C] -- C:\Program Files\BitDefender
[2010/05/31 19:29:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\BitDefender
[2010/05/31 19:27:06 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\BitDefender
[2010/05/22 10:31:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Application Data\Macromedia
[2010/05/22 10:30:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Application Data\Adobe
[2010/05/21 12:41:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Application Data\Macromedia
[2010/05/21 12:41:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Application Data\Adobe
[2010/05/21 10:18:17 | 000,000,000 | ---D | C] -- C:\Program Files\Loaris
[2010/05/19 13:30:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Local Settings\Application Data\SnakyJake
[2010/05/19 13:25:46 | 000,000,000 | ---D | C] -- C:\Program Files\BFG
[2010/05/19 13:20:13 | 000,000,000 | ---D | C] -- C:\Program Files\Sean's Stuff
[2010/05/16 21:55:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Documents\PlayfulAge
[2010/05/16 21:52:01 | 000,000,000 | ---D | C] -- C:\Program Files\Pizza Chef 2
[2010/05/16 18:24:15 | 000,000,000 | ---D | C] -- C:\Program Files\Vitys Rapid Downloader
[2010/05/15 13:18:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Local Settings\Application Data\ICS
[2010/05/15 13:18:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Local Settings\Application Data\Deployment
[2010/05/13 13:07:08 | 016,509,622 | ---- | C] (Loaris, Inc. ) -- C:\Documents and Settings\Administrator\Application Data\loaristrojanremover.exe
[2010/04/06 09:55:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Documents\CraftEdge
[2010/04/03 18:10:26 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2010/04/03 18:10:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2010/04/03 17:57:34 | 000,000,000 | ---D | C] -- C:\Program Files\QuickTime
[2010/04/03 17:51:39 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour
[2008/08/22 19:07:36 | 000,571,904 | ---- | C] ( ) -- C:\WINDOWS\System32\csnpstd3.dll
[2008/08/22 19:07:36 | 000,061,440 | ---- | C] ( ) -- C:\WINDOWS\System32\rsnpstd3.dll
[2008/08/22 19:07:36 | 000,053,248 | ---- | C] ( ) -- C:\WINDOWS\System32\vsnpstd3.dll
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 90 Days ==========

[2010/06/11 22:21:01 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At23.job
[2010/06/11 22:15:49 | 000,572,416 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Desktop\OTL.exe
[2010/06/11 22:15:14 | 000,017,525 | ---- | M] () -- C:\Documents and Settings\Administrator\Desktop\corrupt.jpg
[2010/06/11 22:05:28 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010/06/11 22:03:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At959.job
[2010/06/11 22:03:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At95.job
[2010/06/11 22:03:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At935.job
[2010/06/11 22:03:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At911.job
[2010/06/11 22:03:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At887.job
[2010/06/11 22:03:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At863.job
[2010/06/11 22:03:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At839.job
[2010/06/11 22:03:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At815.job
[2010/06/11 22:03:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At791.job
[2010/06/11 22:03:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At767.job
[2010/06/11 22:03:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At743.job
[2010/06/11 22:03:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At719.job
[2010/06/11 22:03:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At71.job
[2010/06/11 22:03:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At695.job
[2010/06/11 22:03:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At671.job
[2010/06/11 22:03:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At647.job
[2010/06/11 22:03:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At623.job
[2010/06/11 22:03:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At599.job
[2010/06/11 22:03:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At575.job
[2010/06/11 22:03:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At551.job
[2010/06/11 22:03:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At527.job
[2010/06/11 22:03:40 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010/06/11 22:03:33 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010/06/11 22:01:41 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At503.job
[2010/06/11 22:01:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At479.job
[2010/06/11 22:01:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At47.job
[2010/06/11 22:01:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At455.job
[2010/06/11 22:01:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At431.job
[2010/06/11 22:01:39 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At407.job
[2010/06/11 22:01:39 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At383.job
[2010/06/11 22:01:39 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At359.job
[2010/06/11 22:01:38 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At335.job
[2010/06/11 22:01:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At311.job
[2010/06/11 22:01:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At287.job
[2010/06/11 22:01:36 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At263.job
[2010/06/11 22:01:35 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At239.job
[2010/06/11 22:01:34 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At215.job
[2010/06/11 22:01:33 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At191.job
[2010/06/11 22:01:33 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At167.job
[2010/06/11 22:01:32 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At143.job
[2010/06/11 22:01:30 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At119.job
[2010/06/11 21:58:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At41.job
[2010/06/11 21:58:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At401.job
[2010/06/11 21:58:12 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At377.job
[2010/06/11 21:58:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At353.job
[2010/06/11 21:58:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At329.job
[2010/06/11 21:58:09 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At305.job
[2010/06/11 21:58:08 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At281.job
[2010/06/11 21:58:08 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At257.job
[2010/06/11 21:58:07 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At233.job
[2010/06/11 21:58:05 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At209.job
[2010/06/11 21:58:04 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At185.job
[2010/06/11 21:58:04 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At161.job
[2010/06/11 21:58:04 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At137.job
[2010/06/11 21:58:04 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At113.job
[2010/06/11 21:56:59 | 001,103,998 | -H-- | M] () -- C:\Documents and Settings\Administrator\Local Settings\Application Data\IconCache.db
[2010/06/11 21:56:55 | 014,942,208 | ---- | M] () -- C:\Documents and Settings\Administrator\ntuser.dat
[2010/06/11 21:53:19 | 003,513,237 | ---- | M] () -- C:\Documents and Settings\Administrator\Desktop\WVCheck.exe
[2010/06/11 15:21:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At16.job
[2010/06/11 15:01:51 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At952.job
[2010/06/11 15:01:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At928.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At904.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At880.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At88.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At856.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At832.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At808.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At784.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At760.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At736.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At712.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At688.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At664.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At640.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At64.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At616.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At592.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At568.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At544.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At520.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At496.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At472.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At448.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At424.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At400.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At40.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At376.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At352.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At328.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At304.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At280.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At256.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At232.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At208.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At184.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At160.job
[2010/06/11 15:01:47 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At136.job
[2010/06/11 15:01:47 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At112.job
[2010/06/11 14:21:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At15.job
[2010/06/11 14:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At447.job
[2010/06/11 14:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At423.job
[2010/06/11 14:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At399.job
[2010/06/11 14:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At39.job
[2010/06/11 14:03:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At375.job
[2010/06/11 14:03:47 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At351.job
[2010/06/11 14:03:46 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At327.job
[2010/06/11 14:03:45 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At303.job
[2010/06/11 14:03:44 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At279.job
[2010/06/11 14:03:44 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At255.job
[2010/06/11 14:03:44 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At231.job
[2010/06/11 14:03:44 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At207.job
[2010/06/11 14:03:43 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At183.job
[2010/06/11 14:03:43 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At159.job
[2010/06/11 14:03:43 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At135.job
[2010/06/11 14:03:43 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At111.job
[2010/06/11 13:21:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At14.job
[2010/06/11 13:03:33 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At950.job
[2010/06/11 13:03:33 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At926.job
[2010/06/11 13:03:33 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At902.job
[2010/06/11 13:03:32 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At878.job
[2010/06/11 13:03:32 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At86.job
[2010/06/11 13:03:32 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At854.job
[2010/06/11 13:03:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At830.job
[2010/06/11 13:03:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At806.job
[2010/06/11 13:03:29 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At782.job
[2010/06/11 13:03:28 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At758.job
[2010/06/11 13:03:28 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At734.job
[2010/06/11 13:03:28 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At710.job
[2010/06/11 13:03:27 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At686.job
[2010/06/11 13:03:26 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At662.job
[2010/06/11 13:03:26 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At638.job
[2010/06/11 13:03:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At62.job
[2010/06/11 13:03:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At614.job
[2010/06/11 13:03:24 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At590.job
[2010/06/11 13:03:24 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At566.job
[2010/06/11 13:03:24 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At542.job
[2010/06/11 13:03:22 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At518.job
[2010/06/11 13:03:22 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At494.job
[2010/06/11 13:03:21 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At470.job
[2010/06/11 13:03:20 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At446.job
[2010/06/11 13:03:20 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At422.job
[2010/06/11 13:03:19 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At398.job
[2010/06/11 13:03:19 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At38.job
[2010/06/11 13:03:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At374.job
[2010/06/11 13:03:10 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At350.job
[2010/06/11 13:03:08 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At326.job
[2010/06/11 13:03:06 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At302.job
[2010/06/11 13:02:53 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At278.job
[2010/06/11 13:02:39 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At254.job
[2010/06/11 13:02:34 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At230.job
[2010/06/11 13:01:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At206.job
[2010/06/11 13:00:19 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At182.job
[2010/06/11 13:00:16 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At158.job
[2010/06/11 13:00:16 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At134.job
[2010/06/11 13:00:15 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At110.job
[2010/06/11 12:21:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At13.job
[2010/06/11 12:04:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At949.job
[2010/06/11 12:04:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At925.job
[2010/06/11 12:04:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At901.job
[2010/06/11 12:04:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At877.job
[2010/06/11 12:04:47 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At853.job
[2010/06/11 12:04:47 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At829.job
[2010/06/11 12:04:46 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At805.job
[2010/06/11 12:04:46 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At781.job
[2010/06/11 12:04:45 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At757.job
[2010/06/11 12:04:45 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At733.job
[2010/06/11 12:04:44 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At709.job
[2010/06/11 12:04:43 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At685.job
[2010/06/11 12:04:42 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At661.job
[2010/06/11 12:04:42 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At637.job
[2010/06/11 12:04:41 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At613.job
[2010/06/11 12:04:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At61.job
[2010/06/11 12:04:39 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At589.job
[2010/06/11 12:04:38 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At565.job
[2010/06/11 12:04:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At541.job
[2010/06/11 12:04:30 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At85.job
[2010/06/11 12:01:24 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At517.job
[2010/06/11 12:01:14 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At493.job
[2010/06/11 12:01:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At445.job
[2010/06/11 12:01:03 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At469.job
[2010/06/11 12:01:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At421.job
[2010/06/11 12:01:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At397.job
[2010/06/11 12:01:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At373.job
[2010/06/11 12:01:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At37.job
[2010/06/11 12:01:01 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At349.job
[2010/06/11 12:01:01 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At325.job
[2010/06/11 12:01:01 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At301.job
[2010/06/11 12:01:01 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At277.job
[2010/06/11 12:01:01 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At253.job
[2010/06/11 12:01:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At229.job
[2010/06/11 12:01:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At205.job
[2010/06/11 12:00:59 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At181.job
[2010/06/11 12:00:59 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At157.job
[2010/06/11 12:00:59 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At133.job
[2010/06/11 12:00:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At109.job
[2010/06/11 11:21:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At12.job
[2010/06/11 11:14:46 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At732.job
[2010/06/11 11:14:44 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At900.job
[2010/06/11 11:14:43 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At828.job
[2010/06/11 11:14:43 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At804.job
[2010/06/11 11:14:42 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At756.job
[2010/06/11 11:14:41 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At948.job
[2010/06/11 11:14:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At708.job
[2010/06/11 11:14:39 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At660.job
[2010/06/11 11:14:38 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At84.job
[2010/06/11 11:14:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At780.job
[2010/06/11 11:14:35 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At924.job
[2010/06/11 11:14:34 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At876.job
[2010/06/11 11:14:33 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At852.job
[2010/06/11 11:14:32 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At684.job
[2010/06/11 11:14:30 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At636.job
[2010/06/11 11:14:28 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At612.job
[2010/06/11 11:14:27 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At60.job
fullbug
Regular Member
 
Posts: 31
Joined: June 10th, 2010, 7:51 am

Re: Stubborn Malware

Unread postby fullbug » June 12th, 2010, 1:44 pm

C:\WINDOWS\tasks\At612.job
[2010/06/11 11:14:27 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At60.job
[2010/06/11 11:14:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At588.job
[2010/06/11 11:14:24 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At564.job
[2010/06/11 11:14:23 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At540.job
[2010/06/11 11:14:20 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At516.job
[2010/06/11 11:14:19 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At492.job
[2010/06/11 11:14:18 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At468.job
[2010/06/11 11:14:16 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At444.job
[2010/06/11 11:14:15 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At420.job
[2010/06/11 11:14:14 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At396.job
[2010/06/11 11:14:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At372.job
[2010/06/11 11:14:10 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At36.job
[2010/06/11 11:14:05 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At348.job
[2010/06/11 11:14:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At300.job
[2010/06/11 11:13:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At276.job
[2010/06/11 11:13:55 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At252.job
[2010/06/11 11:13:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At228.job
[2010/06/11 11:13:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At204.job
[2010/06/11 11:10:26 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At156.job
[2010/06/11 11:10:24 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At132.job
[2010/06/11 11:10:22 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At108.job
[2010/06/11 11:10:14 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At324.job
[2010/06/11 11:04:33 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At180.job
[2010/06/11 10:21:06 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At11.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At803.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At779.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At755.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At731.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At707.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At683.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At659.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At635.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At611.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At59.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At587.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At563.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At539.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At515.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At491.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At467.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At443.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At419.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At395.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At371.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At35.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At347.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At323.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At299.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At275.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At251.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At227.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At203.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At179.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At155.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At131.job
[2010/06/11 10:03:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At107.job
[2010/06/11 09:21:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At10.job
[2010/06/11 09:13:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At946.job
[2010/06/11 09:13:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At922.job
[2010/06/11 09:13:12 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At898.job
[2010/06/11 09:13:12 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At874.job
[2010/06/11 09:13:12 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At850.job
[2010/06/11 09:13:12 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At826.job
[2010/06/11 09:13:12 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At82.job
[2010/06/11 09:13:12 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At802.job
[2010/06/11 09:13:12 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At778.job
[2010/06/11 09:13:12 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At754.job
[2010/06/11 09:13:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At730.job
[2010/06/11 09:13:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At706.job
[2010/06/11 09:13:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At682.job
[2010/06/11 09:13:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At658.job
[2010/06/11 09:13:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At634.job
[2010/06/11 09:13:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At610.job
[2010/06/11 09:13:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At586.job
[2010/06/11 09:13:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At58.job
[2010/06/11 09:13:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At562.job
[2010/06/11 09:13:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At538.job
[2010/06/11 09:13:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At514.job
[2010/06/11 09:13:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At490.job
[2010/06/11 09:13:10 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At466.job
[2010/06/11 09:13:08 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At442.job
[2010/06/11 09:13:08 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At418.job
[2010/06/11 09:13:08 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At394.job
[2010/06/11 09:13:06 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At370.job
[2010/06/11 09:13:06 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At346.job
[2010/06/11 09:13:06 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At34.job
[2010/06/11 09:13:05 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At322.job
[2010/06/11 09:13:05 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At298.job
[2010/06/11 09:13:05 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At274.job
[2010/06/11 09:13:05 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At250.job
[2010/06/11 09:13:05 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At226.job
[2010/06/11 09:13:04 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At202.job
[2010/06/11 09:13:04 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At178.job
[2010/06/11 09:13:04 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At154.job
[2010/06/11 09:13:04 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At130.job
[2010/06/11 09:13:04 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At106.job
[2010/06/10 14:50:21 | 000,001,553 | ---- | M] () -- C:\Documents and Settings\Administrator\Desktop\Tibor - Tale of a Kind Vampire.lnk
[2010/06/10 14:15:30 | 000,000,000 | ---- | M] () -- C:\pcwords2.dat
[2010/06/10 14:15:30 | 000,000,000 | ---- | M] () -- C:\pcwords.dat
[2010/06/10 14:15:30 | 000,000,000 | ---- | M] () -- C:\pc_sign.slf
[2010/06/10 14:15:21 | 000,000,000 | ---- | M] () -- C:\pcconf.ini
[2010/06/10 14:05:18 | 000,000,751 | ---- | M] () -- C:\Documents and Settings\Administrator\Start Menu\Programs\Startup\Kill Process.lnk
[2010/06/10 13:35:55 | 000,000,132 | ---- | M] () -- C:\WINDOWS\System32\rezumatenoi.dat
[2010/06/10 13:33:48 | 000,153,448 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- C:\WINDOWS\System32\drivers\bdfm.sys.upd
[2010/06/10 13:33:48 | 000,106,464 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- C:\WINDOWS\System32\drivers\bdhv.sys.upd
[2010/06/10 13:33:33 | 000,291,352 | ---- | M] (BitDefender) -- C:\WINDOWS\System32\drivers\bdfsfltr.sys.upd
[2010/06/10 13:20:59 | 000,000,178 | -HS- | M] () -- C:\Documents and Settings\Administrator\ntuser.ini
[2010/06/10 13:17:52 | 000,001,869 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\BitDefender Antivirus 2010.lnk
[2010/06/10 08:21:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At9.job
[2010/06/10 08:14:12 | 000,002,463 | ---- | M] () -- C:\Documents and Settings\Administrator\Desktop\HiJackThis.lnk
[2010/06/10 08:03:39 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At945.job
[2010/06/10 08:03:38 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At921.job
[2010/06/10 08:03:38 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At897.job
[2010/06/10 08:03:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At873.job
[2010/06/10 08:03:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At849.job
[2010/06/10 08:03:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At825.job
[2010/06/10 08:03:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At81.job
[2010/06/10 08:03:36 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At801.job
[2010/06/10 08:03:36 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At777.job
[2010/06/10 08:03:35 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At753.job
[2010/06/10 08:03:35 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At729.job
[2010/06/10 08:03:34 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At705.job
[2010/06/10 08:03:33 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At681.job
[2010/06/10 08:03:33 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At657.job
[2010/06/10 08:03:33 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At633.job
[2010/06/10 08:03:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At609.job
[2010/06/10 08:03:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At585.job
[2010/06/10 08:03:30 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At57.job
[2010/06/10 08:03:30 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At561.job
[2010/06/10 08:03:29 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At513.job
[2010/06/10 08:03:29 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At489.job
[2010/06/10 08:03:28 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At441.job
[2010/06/10 08:03:27 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At417.job
[2010/06/10 08:03:26 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At537.job
[2010/06/10 08:03:24 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At465.job
[2010/06/10 08:03:21 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At393.job
[2010/06/10 08:03:20 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At369.job
[2010/06/10 08:03:19 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At345.job
[2010/06/10 08:03:17 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At33.job
[2010/06/10 08:03:15 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At321.job
[2010/06/10 08:03:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At297.job
[2010/06/10 08:03:10 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At273.job
[2010/06/10 08:03:08 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At249.job
[2010/06/10 08:03:06 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At225.job
[2010/06/10 08:02:53 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At201.job
[2010/06/10 08:02:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At177.job
[2010/06/10 08:02:32 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At153.job
[2010/06/10 08:02:29 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At129.job
[2010/06/10 08:01:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At105.job
[2010/06/10 07:21:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At8.job
[2010/06/10 07:03:23 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At920.job
[2010/06/10 07:03:23 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At896.job
[2010/06/10 07:03:23 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At872.job
[2010/06/10 07:03:22 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At848.job
[2010/06/10 07:03:22 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At824.job
[2010/06/10 07:03:21 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At800.job
[2010/06/10 07:03:21 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At80.job
[2010/06/10 07:03:20 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At776.job
[2010/06/10 07:03:20 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At752.job
[2010/06/10 07:03:20 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At728.job
[2010/06/10 07:03:19 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At704.job
[2010/06/10 07:03:19 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At680.job
[2010/06/10 07:03:18 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At656.job
[2010/06/10 07:03:17 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At632.job
[2010/06/10 07:03:17 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At560.job
[2010/06/10 07:03:16 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At56.job
[2010/06/10 07:03:16 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At512.job
[2010/06/10 07:03:14 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At944.job
[2010/06/10 07:02:16 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At608.job
[2010/06/10 07:02:15 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At584.job
[2010/06/10 07:02:14 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At536.job
[2010/06/10 07:02:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At488.job
[2010/06/10 07:02:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At464.job
[2010/06/10 07:02:09 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At440.job
[2010/06/10 07:02:08 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At416.job
[2010/06/10 07:02:06 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At392.job
[2010/06/10 07:02:04 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At368.job
[2010/06/10 07:02:03 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At344.job
[2010/06/10 07:02:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At320.job
[2010/06/10 07:01:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At32.job
[2010/06/10 07:01:55 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At296.job
[2010/06/10 07:01:54 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At272.job
[2010/06/10 07:01:52 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At248.job
[2010/06/10 07:01:51 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At224.job
[2010/06/10 07:01:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At200.job
[2010/06/10 07:01:47 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At176.job
[2010/06/10 07:01:43 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At152.job
[2010/06/10 07:01:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At128.job
[2010/06/10 07:00:32 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At104.job
[2010/06/10 06:21:01 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At7.job
[2010/06/10 06:02:51 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At943.job
[2010/06/10 06:02:51 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At919.job
[2010/06/10 06:02:51 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At895.job
[2010/06/10 06:02:51 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At871.job
[2010/06/10 06:02:50 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At847.job
[2010/06/10 06:02:50 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At823.job
[2010/06/10 06:02:50 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At799.job
[2010/06/10 06:02:50 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At79.job
[2010/06/10 06:02:50 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At775.job
[2010/06/10 06:02:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At751.job
[2010/06/10 06:02:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At727.job
[2010/06/10 06:02:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At703.job
[2010/06/10 06:02:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At679.job
[2010/06/10 06:02:47 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At655.job
[2010/06/10 06:02:46 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At631.job
[2010/06/10 06:02:46 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At607.job
[2010/06/10 06:02:45 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At583.job
[2010/06/10 06:02:44 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At559.job
[2010/06/10 06:02:43 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At55.job
[2010/06/10 06:02:43 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At535.job
[2010/06/10 06:02:42 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At511.job
[2010/06/10 06:02:42 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At487.job
[2010/06/10 06:02:41 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At463.job
[2010/06/10 06:02:39 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At439.job
[2010/06/10 06:02:39 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At415.job
[2010/06/10 06:02:23 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At391.job
[2010/06/10 06:02:15 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At367.job
[2010/06/10 06:02:12 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At343.job
[2010/06/10 06:02:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At319.job
[2010/06/10 06:02:10 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At31.job
[2010/06/10 06:02:09 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At295.job
[2010/06/10 06:02:05 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At271.job
[2010/06/10 06:02:04 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At247.job
[2010/06/10 06:02:03 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At223.job
[2010/06/10 06:02:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At199.job
[2010/06/10 06:02:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At175.job
[2010/06/10 06:01:36 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At151.job
[2010/06/10 06:01:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At127.job
[2010/06/10 06:00:21 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At103.job
[2010/06/10 05:21:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At6.job
[2010/06/10 05:03:45 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At942.job
[2010/06/10 05:03:44 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At918.job
[2010/06/10 05:03:44 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At894.job
[2010/06/10 05:03:44 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At870.job
[2010/06/10 05:03:44 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At846.job
[2010/06/10 05:03:44 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At822.job
[2010/06/10 05:03:44 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At798.job
[2010/06/10 05:03:38 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At78.job
[2010/06/10 05:03:38 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At774.job
[2010/06/10 05:03:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At750.job
[2010/06/10 05:03:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At726.job
[2010/06/10 05:03:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At702.job
[2010/06/10 05:03:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At678.job
[2010/06/10 05:03:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At654.job
[2010/06/10 05:03:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At630.job
[2010/06/10 05:03:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At606.job
[2010/06/10 05:03:36 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At582.job
[2010/06/10 05:03:36 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At558.job
[2010/06/10 05:03:36 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At54.job
[2010/06/10 05:03:36 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At534.job
[2010/06/10 05:03:36 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At510.job
[2010/06/10 05:03:35 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At486.job
[2010/06/10 05:03:35 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At462.job
[2010/06/10 05:03:35 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At438.job
[2010/06/10 05:03:35 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At414.job
[2010/06/10 05:03:34 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At390.job
[2010/06/10 05:03:34 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At366.job
[2010/06/10 05:03:33 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At342.job
[2010/06/10 05:03:32 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At318.job
[2010/06/10 05:03:32 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At30.job
[2010/06/10 05:03:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At294.job
[2010/06/10 05:03:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At270.job
[2010/06/10 05:03:30 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At246.job
[2010/06/10 05:03:30 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At222.job
[2010/06/10 05:03:30 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At198.job
[2010/06/10 05:03:30 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At174.job
[2010/06/10 05:03:29 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At150.job
[2010/06/10 05:03:29 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At126.job
[2010/06/10 05:03:28 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At102.job
[2010/06/10 04:21:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At5.job
[2010/06/10 04:06:32 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At917.job
[2010/06/10 04:06:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At869.job
[2010/06/10 04:06:30 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At845.job
[2010/06/10 04:06:30 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At821.job
[2010/06/10 04:06:29 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At773.job
[2010/06/10 04:06:28 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At749.job
[2010/06/10 04:06:27 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At677.job
[2010/06/10 04:06:27 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At653.job
[2010/06/10 04:06:26 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At581.job
[2010/06/10 04:06:26 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At53.job
[2010/06/10 04:06:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At485.job
[2010/06/10 04:06:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At341.job
[2010/06/10 04:06:24 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At317.job
[2010/06/10 04:06:24 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At269.job
[2010/06/10 04:06:23 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At173.job
[2010/06/10 04:06:21 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At149.job
[2010/06/10 04:06:10 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At77.job
[2010/06/10 04:06:09 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At629.job
[2010/06/10 04:06:08 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At557.job
[2010/06/10 04:06:07 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At437.job
[2010/06/10 04:06:05 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At221.job
[2010/06/10 04:05:56 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At365.job
[2010/06/10 04:05:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At101.job
[2010/06/10 04:05:47 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At893.job
[2010/06/10 04:05:44 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At797.job
[2010/06/10 04:05:42 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At725.job
[2010/06/10 04:05:39 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At701.job
[2010/06/10 04:05:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At509.job
[2010/06/10 04:05:35 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At413.job
[2010/06/10 04:05:33 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At245.job
[2010/06/10 04:05:27 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At197.job
[2010/06/10 04:05:19 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At461.job
[2010/06/10 04:05:14 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At941.job
[2010/06/10 04:03:38 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At605.job
[2010/06/10 04:03:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At389.job
[2010/06/10 04:03:35 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At293.job
[2010/06/10 04:03:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At29.job
[2010/06/10 04:03:29 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At533.job
[2010/06/10 04:03:20 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At125.job
[2010/06/10 03:36:42 | 000,000,112 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\x0D1am.dat
[2010/06/10 03:36:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At960.job
[2010/06/10 03:36:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At958.job
[2010/06/10 03:36:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At957.job
[2010/06/10 03:36:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At956.job
[2010/06/10 03:36:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At955.job
[2010/06/10 03:36:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At954.job
[2010/06/10 03:36:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At953.job
[2010/06/10 03:36:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At951.job
[2010/06/10 03:36:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At947.job
[2010/06/10 03:36:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At940.job
[2010/06/10 03:36:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At939.job
[2010/06/10 03:36:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At938.job
[2010/06/10 03:36:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At937.job
[2010/06/10 03:36:27 | 000,070,154 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\6c1pd0d8.exe
[2010/06/10 03:21:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At4.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At936.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At934.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At933.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At932.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At931.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At930.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At929.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At927.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At923.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At916.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At915.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At914.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At913.job
[2010/06/10 03:03:18 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At892.job
[2010/06/10 03:03:16 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At868.job
[2010/06/10 03:03:16 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At844.job
[2010/06/10 03:03:16 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At796.job
[2010/06/10 03:03:15 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At724.job
[2010/06/10 03:03:14 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At700.job
[2010/06/10 03:03:14 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At676.job
[2010/06/10 03:03:14 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At628.job
[2010/06/10 03:03:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At580.job
[2010/06/10 03:03:12 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At820.job
[2010/06/10 03:03:12 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At76.job
[2010/06/10 03:03:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At748.job
[2010/06/10 03:03:10 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At652.job
[2010/06/10 03:03:09 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At604.job
[2010/06/10 03:03:08 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At772.job
[2010/06/10 03:03:05 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At556.job
[2010/06/10 03:03:03 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At532.job
[2010/06/10 03:03:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At52.job
[2010/06/10 03:03:01 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At508.job
[2010/06/10 03:02:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At484.job
[2010/06/10 03:02:57 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At460.job
[2010/06/10 03:02:55 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At436.job
[2010/06/10 03:02:54 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At412.job
[2010/06/10 03:02:51 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At388.job
[2010/06/10 03:02:50 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At364.job
[2010/06/10 03:02:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At340.job
[2010/06/10 03:02:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At316.job
[2010/06/10 03:02:46 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At292.job
[2010/06/10 03:02:43 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At28.job
[2010/06/10 03:02:42 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At268.job
[2010/06/10 03:02:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At244.job
[2010/06/10 03:02:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At220.job
[2010/06/10 03:02:34 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At196.job
[2010/06/10 03:02:16 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At172.job
[2010/06/10 03:01:51 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At148.job
[2010/06/10 03:01:43 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At124.job
[2010/06/10 03:01:38 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At100.job
[2010/06/10 02:30:54 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At912.job
[2010/06/10 02:30:54 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At910.job
[2010/06/10 02:30:54 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At909.job
[2010/06/10 02:30:54 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At908.job
[2010/06/10 02:30:54 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At907.job
[2010/06/10 02:30:54 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At906.job
[2010/06/10 02:30:54 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At905.job
[2010/06/10 02:30:54 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At903.job
[2010/06/10 02:30:53 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At899.job
[2010/06/10 02:30:53 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At891.job
[2010/06/10 02:30:53 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At890.job
[2010/06/10 02:30:53 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At889.job
[2010/06/10 02:03:34 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At99.job
[2010/06/10 02:03:34 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At867.job
[2010/06/10 02:03:33 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At843.job
[2010/06/10 02:03:33 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At819.job
[2010/06/10 02:03:33 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At795.job
[2010/06/10 02:03:32 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At771.job
[2010/06/10 02:03:32 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At75.job
[2010/06/10 02:03:32 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At723.job
[2010/06/10 02:03:32 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At699.job
[2010/06/10 02:03:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At675.job
[2010/06/10 02:03:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At651.job
[2010/06/10 02:03:30 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At627.job
[2010/06/10 02:03:30 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At603.job
[2010/06/10 02:03:30 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At579.job
[2010/06/10 02:03:30 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At555.job
[2010/06/10 02:03:29 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At531.job
[2010/06/10 02:03:29 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At51.job
[2010/06/10 02:03:29 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At507.job
[2010/06/10 02:03:28 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At435.job
[2010/06/10 02:03:28 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At411.job
[2010/06/10 02:03:27 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At483.job
[2010/06/10 02:03:27 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At339.job
[2010/06/10 02:03:26 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At459.job
[2010/06/10 02:03:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At387.job
[2010/06/10 02:03:23 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At363.job
[2010/06/10 02:03:19 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At747.job
[2010/06/10 02:01:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At315.job
[2010/06/10 02:01:05 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At291.job
[2010/06/10 02:01:04 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At27.job
[2010/06/10 02:01:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At267.job
[2010/06/10 02:01:01 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At243.job
[2010/06/10 02:00:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At219.job
[2010/06/10 02:00:50 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At195.job
[2010/06/10 02:00:44 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At171.job
[2010/06/10 02:00:28 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At147.job
[2010/06/10 02:00:21 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At123.job
[2010/06/10 01:46:39 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At888.job
[2010/06/10 01:46:39 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At886.job
[2010/06/10 01:46:39 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At885.job
[2010/06/10 01:46:39 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At884.job
[2010/06/10 01:46:39 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At883.job
[2010/06/10 01:46:39 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At882.job
[2010/06/10 01:46:39 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At881.job
[2010/06/10 01:46:39 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At879.job
[2010/06/10 01:46:39 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At875.job
[2010/06/10 01:46:39 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At866.job
[2010/06/10 01:46:39 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At865.job
[2010/06/10 01:01:41 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At842.job
[2010/06/10 01:01:41 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At818.job
[2010/06/10 01:01:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At98.job
[2010/06/10 01:01:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At770.job
[2010/06/10 01:01:39 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At746.job
[2010/06/10 01:01:38 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At74.job
[2010/06/10 01:01:38 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At722.job
[2010/06/10 01:01:36 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At794.job
[2010/06/10 01:01:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At698.job
[2010/06/10 01:01:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At674.job
[2010/06/10 01:01:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At650.job
[2010/06/10 01:01:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At626.job
[2010/06/10 01:01:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At602.job
[2010/06/10 01:01:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At578.job
[2010/06/10 01:00:57 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At554.job
[2010/06/10 01:00:56 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At530.job
[2010/06/10 01:00:56 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At506.job
[2010/06/10 01:00:56 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At50.job
[2010/06/10 01:00:55 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At482.job
[2010/06/10 01:00:55 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At458.job
[2010/06/10 01:00:55 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At434.job
[2010/06/10 01:00:54 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At410.job
[2010/06/10 01:00:54 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At386.job
[2010/06/10 01:00:54 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At362.job
[2010/06/10 01:00:53 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At338.job
[2010/06/10 01:00:53 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At314.job
[2010/06/10 01:00:53 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At290.job
[2010/06/10 01:00:53 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At266.job
[2010/06/10 01:00:53 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At26.job
[2010/06/10 01:00:52 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At242.job
[2010/06/10 01:00:52 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At218.job
[2010/06/10 01:00:51 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At194.job
[2010/06/10 01:00:51 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At170.job
[2010/06/10 01:00:50 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At146.job
[2010/06/10 01:00:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At122.job
[2010/06/10 00:57:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At73.job
[2010/06/10 00:57:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At313.job
[2010/06/10 00:57:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At217.job
[2010/06/10 00:56:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At553.job
[2010/06/10 00:52:05 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At97.job
[2010/06/10 00:52:05 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At841.job
[2010/06/10 00:52:05 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At481.job
[2010/06/10 00:52:05 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At145.job
[2010/06/10 00:51:01 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At673.job
[2010/06/10 00:50:01 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At193.job
[2010/06/10 00:49:03 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At601.job
[2010/06/10 00:49:03 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At265.job
[2010/06/10 00:48:01 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At433.job
[2010/06/10 00:47:01 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At385.job
[2010/06/10 00:46:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At721.job
[2010/06/10 00:45:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At649.job
[2010/06/10 00:44:01 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At817.job
[2010/06/10 00:42:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At625.job
[2010/06/10 00:41:03 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At769.job
[2010/06/10 00:39:01 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At745.job
[2010/06/10 00:39:01 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At409.job
[2010/06/10 00:39:01 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At25.job
[2010/06/10 00:38:03 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At697.job
[2010/06/10 00:38:03 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At289.job
[2010/06/10 00:32:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At529.job
[2010/06/10 00:25:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At793.job
[2010/06/10 00:24:01 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At361.job
[2010/06/10 00:23:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At457.job
[2010/06/10 00:15:01 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At505.job
[2010/06/10 00:15:01 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At241.job
[2010/06/10 00:13:05 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At49.job
[2010/06/10 00:13:03 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At121.job
[2010/06/10 00:10:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At577.job
[2010/06/10 00:08:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At337.job
[2010/06/10 00:08:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At169.job
fullbug
Regular Member
 
Posts: 31
Joined: June 10th, 2010, 7:51 am

Re: Stubborn Malware

Unread postby fullbug » June 12th, 2010, 1:46 pm

C:\WINDOWS\tasks\At24.job
[2010/06/09 21:44:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At864.job
[2010/06/09 21:44:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At862.job
[2010/06/09 21:44:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At861.job
[2010/06/09 21:44:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At860.job
[2010/06/09 21:44:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At859.job
[2010/06/09 21:44:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At858.job
[2010/06/09 21:44:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At857.job
[2010/06/09 21:44:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At855.job
[2010/06/09 21:44:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At851.job
[2010/06/09 21:21:02 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At22.job
[2010/06/09 21:01:26 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At94.job
[2010/06/09 21:01:26 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At838.job
[2010/06/09 21:01:26 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At814.job
[2010/06/09 21:01:26 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At790.job
[2010/06/09 21:01:26 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At766.job
[2010/06/09 21:01:26 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At742.job
[2010/06/09 21:01:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At718.job
[2010/06/09 21:01:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At70.job
[2010/06/09 21:01:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At694.job
[2010/06/09 21:01:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At670.job
[2010/06/09 21:01:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At646.job
[2010/06/09 21:01:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At622.job
[2010/06/09 21:01:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At598.job
[2010/06/09 21:01:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At574.job
[2010/06/09 21:01:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At550.job
[2010/06/09 21:01:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At526.job
[2010/06/09 21:01:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At502.job
[2010/06/09 21:01:24 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At478.job
[2010/06/09 21:01:24 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At46.job
[2010/06/09 21:01:24 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At454.job
[2010/06/09 21:01:23 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At430.job
[2010/06/09 21:01:23 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At406.job
[2010/06/09 21:01:23 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At382.job
[2010/06/09 21:01:21 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At358.job
[2010/06/09 21:01:20 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At334.job
[2010/06/09 21:01:19 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At310.job
[2010/06/09 21:01:19 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At286.job
[2010/06/09 21:01:19 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At262.job
[2010/06/09 21:01:18 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At238.job
[2010/06/09 21:01:18 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At214.job
[2010/06/09 21:01:18 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At190.job
[2010/06/09 21:01:16 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At166.job
[2010/06/09 21:01:16 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At142.job
[2010/06/09 21:01:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At118.job
[2010/06/09 20:21:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At21.job
[2010/06/09 20:04:17 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At813.job
[2010/06/09 20:04:17 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At789.job
[2010/06/09 20:04:16 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At645.job
[2010/06/09 20:04:16 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At597.job
[2010/06/09 20:04:16 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At573.job
[2010/06/09 20:04:15 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At549.job
[2010/06/09 20:04:15 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At525.job
[2010/06/09 20:04:15 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At45.job
[2010/06/09 20:04:14 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At381.job
[2010/06/09 20:04:14 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At357.job
[2010/06/09 20:04:14 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At285.job
[2010/06/09 20:04:14 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At261.job
[2010/06/09 20:04:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At621.job
[2010/06/09 20:04:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At213.job
[2010/06/09 20:04:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At189.job
[2010/06/09 20:04:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At117.job
[2010/06/09 20:04:09 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At669.job
[2010/06/09 20:04:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At93.job
[2010/06/09 20:04:01 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At837.job
[2010/06/09 20:04:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At765.job
[2010/06/09 20:03:56 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At141.job
[2010/06/09 20:03:52 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At717.job
[2010/06/09 20:03:47 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At333.job
[2010/06/09 20:03:45 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At741.job
[2010/06/09 20:03:44 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At693.job
[2010/06/09 20:03:42 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At69.job
[2010/06/09 20:03:41 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At477.job
[2010/06/09 20:03:41 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At309.job
[2010/06/09 20:03:38 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At501.job
[2010/06/09 20:03:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At453.job
[2010/06/09 20:03:36 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At429.job
[2010/06/09 20:03:35 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At405.job
[2010/06/09 20:03:28 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At165.job
[2010/06/09 20:03:01 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At237.job
[2010/06/09 19:41:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At840.job
[2010/06/09 19:41:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At836.job
[2010/06/09 19:41:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At835.job
[2010/06/09 19:41:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At834.job
[2010/06/09 19:41:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At833.job
[2010/06/09 19:41:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At831.job
[2010/06/09 19:41:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At827.job
[2010/06/09 14:02:34 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At87.job
[2010/06/09 14:02:34 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At807.job
[2010/06/09 14:02:33 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At783.job
[2010/06/09 14:02:33 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At759.job
[2010/06/09 14:02:32 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At615.job
[2010/06/09 14:02:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At639.job
[2010/06/09 14:02:30 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At735.job
[2010/06/09 14:02:30 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At711.job
[2010/06/09 14:02:29 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At687.job
[2010/06/09 14:02:28 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At663.job
[2010/06/09 14:02:26 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At63.job
[2010/06/09 14:02:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At591.job
[2010/06/09 14:02:24 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At567.job
[2010/06/09 14:02:21 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At543.job
[2010/06/09 14:02:15 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At519.job
[2010/06/09 14:02:09 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At495.job
[2010/06/09 14:02:07 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At471.job
[2010/06/09 13:11:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At816.job
[2010/06/09 13:11:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At812.job
[2010/06/09 13:11:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At811.job
[2010/06/09 13:11:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At810.job
[2010/06/09 13:11:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At809.job
[2010/06/09 11:10:26 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Administrator\Ÿ;Ÿ;
[2010/06/09 10:05:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At83.job
[2010/06/09 09:45:28 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At792.job
[2010/06/09 09:45:28 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At788.job
[2010/06/09 09:45:28 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At787.job
[2010/06/09 09:45:28 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At786.job
[2010/06/09 09:45:28 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At785.job
[2010/06/09 07:40:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At768.job
[2010/06/09 07:40:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At764.job
[2010/06/09 07:40:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At763.job
[2010/06/09 07:40:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At762.job
[2010/06/09 07:40:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At761.job
[2010/06/09 05:33:23 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At744.job
[2010/06/09 05:33:23 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At740.job
[2010/06/09 05:33:23 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At739.job
[2010/06/09 05:33:23 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At738.job
[2010/06/09 05:33:23 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At737.job
[2010/06/09 03:26:53 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At720.job
[2010/06/09 03:26:53 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At716.job
[2010/06/09 03:26:53 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At715.job
[2010/06/09 03:26:53 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At714.job
[2010/06/09 03:26:53 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At713.job
[2010/06/09 02:58:18 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At696.job
[2010/06/09 02:58:18 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At692.job
[2010/06/09 02:58:18 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At691.job
[2010/06/09 02:58:18 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At690.job
[2010/06/09 02:58:18 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At689.job
[2010/06/09 02:38:41 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At672.job
[2010/06/09 02:38:41 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At668.job
[2010/06/09 02:38:41 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At667.job
[2010/06/09 02:38:41 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At666.job
[2010/06/09 02:38:41 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At665.job
[2010/06/09 02:26:17 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At648.job
[2010/06/09 02:26:17 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At644.job
[2010/06/09 02:26:17 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At643.job
[2010/06/09 02:26:17 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At642.job
[2010/06/09 02:26:17 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At641.job
[2010/06/09 00:19:18 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At624.job
[2010/06/09 00:19:18 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At620.job
[2010/06/09 00:19:18 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At619.job
[2010/06/09 00:19:18 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At618.job
[2010/06/09 00:19:18 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At617.job
[2010/06/08 23:03:56 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At96.job
[2010/06/08 23:03:54 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At600.job
[2010/06/08 23:03:53 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At576.job
[2010/06/08 23:03:52 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At312.job
[2010/06/08 23:03:51 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At528.job
[2010/06/08 23:03:50 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At48.job
[2010/06/08 23:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At432.job
[2010/06/08 23:03:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At480.job
[2010/06/08 23:03:38 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At504.job
[2010/06/08 23:03:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At456.job
[2010/06/08 23:03:34 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At408.job
[2010/06/08 23:03:32 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At336.job
[2010/06/08 23:03:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At288.job
[2010/06/08 23:03:29 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At552.job
[2010/06/08 23:03:27 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At360.job
[2010/06/08 23:03:04 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At384.job
[2010/06/08 23:02:16 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At72.job
[2010/06/08 23:00:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At264.job
[2010/06/08 23:00:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At240.job
[2010/06/08 23:00:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At216.job
[2010/06/08 23:00:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At192.job
[2010/06/08 23:00:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At168.job
[2010/06/08 23:00:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At144.job
[2010/06/08 23:00:57 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At120.job
[2010/06/08 22:15:08 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At596.job
[2010/06/08 22:15:08 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At595.job
[2010/06/08 22:15:08 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At594.job
[2010/06/08 22:15:08 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At593.job
[2010/06/08 20:04:53 | 000,002,503 | ---- | M] () -- C:\Documents and Settings\Administrator\Desktop\Scrapbook Factory.lnk
[2010/06/08 19:21:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At20.job
[2010/06/08 19:05:35 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At572.job
[2010/06/08 19:05:35 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At571.job
[2010/06/08 19:05:35 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At570.job
[2010/06/08 19:05:35 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At569.job
[2010/06/08 19:00:15 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At524.job
[2010/06/08 19:00:14 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At92.job
[2010/06/08 19:00:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At68.job
[2010/06/08 19:00:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At548.job
[2010/06/08 19:00:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At500.job
[2010/06/08 19:00:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At476.job
[2010/06/08 19:00:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At452.job
[2010/06/08 19:00:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At44.job
[2010/06/08 19:00:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At428.job
[2010/06/08 19:00:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At404.job
[2010/06/08 19:00:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At380.job
[2010/06/08 19:00:12 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At356.job
[2010/06/08 19:00:12 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At332.job
[2010/06/08 19:00:12 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At308.job
[2010/06/08 19:00:12 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At284.job
[2010/06/08 19:00:12 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At260.job
[2010/06/08 19:00:12 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At236.job
[2010/06/08 19:00:12 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At212.job
[2010/06/08 19:00:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At188.job
[2010/06/08 19:00:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At164.job
[2010/06/08 19:00:10 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At140.job
[2010/06/08 19:00:10 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At116.job
[2010/06/08 18:56:01 | 000,001,837 | ---- | M] () -- C:\Documents and Settings\Administrator\My Documents\notes.nth
[2010/06/08 18:21:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At19.job
[2010/06/08 18:00:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At91.job
[2010/06/08 18:00:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At67.job
[2010/06/08 18:00:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At547.job
[2010/06/08 18:00:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At523.job
[2010/06/08 18:00:36 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At499.job
[2010/06/08 18:00:36 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At475.job
[2010/06/08 18:00:36 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At451.job
[2010/06/08 18:00:34 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At427.job
[2010/06/08 18:00:33 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At43.job
[2010/06/08 18:00:33 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At403.job
[2010/06/08 18:00:27 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At379.job
[2010/06/08 18:00:26 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At355.job
[2010/06/08 18:00:26 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At331.job
[2010/06/08 18:00:26 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At307.job
[2010/06/08 18:00:26 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At283.job
[2010/06/08 18:00:26 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At259.job
[2010/06/08 18:00:26 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At235.job
[2010/06/08 18:00:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At211.job
[2010/06/08 18:00:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At187.job
[2010/06/08 18:00:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At163.job
[2010/06/08 18:00:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At139.job
[2010/06/08 18:00:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At115.job
[2010/06/08 17:21:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At18.job
[2010/06/08 17:02:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At66.job
[2010/06/08 17:02:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At474.job
[2010/06/08 17:01:57 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At90.job
[2010/06/08 17:01:57 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At546.job
[2010/06/08 17:01:56 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At522.job
[2010/06/08 17:01:55 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At498.job
[2010/06/08 17:01:55 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At450.job
[2010/06/08 17:01:54 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At426.job
[2010/06/08 17:01:53 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At42.job
[2010/06/08 17:01:53 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At402.job
[2010/06/08 17:01:52 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At378.job
[2010/06/08 17:01:51 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At354.job
[2010/06/08 17:01:50 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At330.job
[2010/06/08 17:01:50 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At306.job
[2010/06/08 17:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At282.job
[2010/06/08 17:01:38 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At258.job
[2010/06/08 17:01:30 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At234.job
[2010/06/08 17:01:29 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At210.job
[2010/06/08 17:01:28 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At186.job
[2010/06/08 17:01:27 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At162.job
[2010/06/08 17:01:27 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At138.job
[2010/06/08 17:01:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At114.job
[2010/06/08 16:21:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At17.job
[2010/06/08 16:03:16 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At89.job
[2010/06/08 16:03:16 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At65.job
[2010/06/08 16:03:15 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At545.job
[2010/06/08 16:03:15 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At521.job
[2010/06/08 16:03:14 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At497.job
[2010/06/08 16:03:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At473.job
[2010/06/08 16:03:06 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At449.job
[2010/06/08 16:03:05 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At425.job
[2010/06/07 07:06:42 | 000,000,000 | ---- | M] () -- C:\debug
[2010/06/05 17:17:08 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2010/06/02 17:39:23 | 000,000,986 | ---- | M] () -- C:\ZB20100602173913001.xml
[2010/06/02 16:56:38 | 000,334,518 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2010/05/31 20:28:48 | 000,000,052 | ---- | M] () -- C:\WINDOWS\System32\ashttpstats.csv
[2010/05/31 20:10:13 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\pcwords2.dat
[2010/05/31 20:10:13 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\pcwords.dat
[2010/05/31 20:10:13 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\pc_sign.slf
[2010/05/31 20:10:12 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\pc_webproxy.dat
[2010/05/31 20:10:12 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\pc_video.dat
[2010/05/31 20:10:12 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\pc_tabloids.dat
[2010/05/31 20:10:12 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\pc_socialnetworks.dat
[2010/05/31 20:10:12 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\pc_searchengines.dat
[2010/05/31 20:10:12 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\pc_regionaltlds.dat
[2010/05/31 20:10:12 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\pc_pornography.dat
[2010/05/31 20:10:12 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\pc_onlineshop.dat
[2010/05/31 20:10:12 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\pc_onlinepay.dat
[2010/05/31 20:10:12 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\pc_onlinedating.dat
[2010/05/31 20:10:12 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\pc_news.dat
[2010/05/31 20:10:12 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\pc_im.dat
[2010/05/31 20:10:12 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\pc_illegal.dat
[2010/05/31 20:10:12 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\pc_hate.dat
[2010/05/31 20:10:12 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\pc_games.dat
[2010/05/31 20:10:12 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\pc_gambling.dat
[2010/05/31 20:10:12 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\pc_drugs.dat
[2010/05/31 20:05:57 | 000,000,385 | ---- | M] () -- C:\Documents and Settings\Administrator\Application Datauser_gensett.xml
[2010/05/31 20:05:52 | 000,000,376 | ---- | M] () -- C:\Documents and Settings\Administrator\Application Dataprivacy.xml
[2010/05/29 14:42:50 | 000,104,448 | ---- | M] () -- C:\Documents and Settings\Administrator\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/05/25 21:15:40 | 000,000,609 | ---- | M] () -- C:\Documents and Settings\Administrator\Desktop\Shortcut to snes9x.lnk
[2010/05/23 14:27:06 | 000,001,091 | ---- | M] () -- C:\ZB20100523142654001.xml
[2010/05/22 09:35:50 | 000,002,515 | ---- | M] () -- C:\Documents and Settings\Administrator\Desktop\Microsoft Office Word 2007.lnk
[2010/05/19 22:15:03 | 000,711,168 | ---- | M] () -- C:\WINDOWS\is-DOGNN.exe
[2010/05/19 22:15:03 | 000,010,562 | ---- | M] () -- C:\WINDOWS\is-DOGNN.msg
[2010/05/19 22:15:03 | 000,000,399 | ---- | M] () -- C:\WINDOWS\is-DOGNN.lst
[2010/05/18 13:30:03 | 000,000,404 | ---- | M] () -- C:\Documents and Settings\Administrator\Desktop\Shortcut to Sean's Stuff.lnk
[2010/05/16 21:54:27 | 000,000,670 | ---- | M] () -- C:\Documents and Settings\Administrator\Desktop\Pizza Chef 2.lnk
[2010/05/13 13:07:08 | 016,509,622 | ---- | M] (Loaris, Inc. ) -- C:\Documents and Settings\Administrator\Application Data\loaristrojanremover.exe
[2010/05/09 20:41:29 | 000,000,787 | ---- | M] () -- C:\ZB20100509204121001.xml
[2010/05/06 18:45:27 | 000,000,367 | ---- | M] () -- C:\ZB20100506184524001.xml
[2010/05/03 13:49:16 | 000,003,716 | ---- | M] () -- C:\ZB20100503134647001.xml
[2010/05/02 20:04:33 | 000,003,611 | ---- | M] () -- C:\ZB20100502200204001.xml
[2010/04/29 15:39:38 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010/04/29 15:39:26 | 000,020,952 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010/04/28 18:47:38 | 000,000,508 | ---- | M] () -- C:\Documents and Settings\Administrator\Desktop\PegSol.lnk
[2010/04/24 23:44:49 | 000,000,732 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Atlantis Quest.lnk
[2010/04/16 15:58:04 | 000,000,574 | ---- | M] () -- C:\Documents and Settings\Administrator\Desktop\Folderico.lnk
[2010/04/08 12:10:55 | 000,000,636 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\FastStone Image Viewer.lnk
[2010/03/27 18:24:29 | 000,000,986 | ---- | M] () -- C:\ZB20100327182417001.xml
[2010/03/27 18:18:28 | 000,333,072 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010/03/25 16:35:17 | 000,117,640 | ---- | M] () -- C:\Documents and Settings\Administrator\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2010/03/19 16:22:06 | 000,696,832 | ---- | M] () -- C:\WINDOWS\is-OIGL0.exe
[2010/03/19 16:22:06 | 000,010,498 | ---- | M] () -- C:\WINDOWS\is-OIGL0.msg
[2010/03/19 16:22:06 | 000,000,399 | ---- | M] () -- C:\WINDOWS\is-OIGL0.lst
[2010/03/18 11:55:31 | 000,000,020 | ---- | M] () -- C:\WINDOWS\mafosav.INI
[2010/03/18 11:47:20 | 000,000,608 | ---- | M] () -- C:\Documents and Settings\Administrator\Desktop\Mario Forever.lnk
[2010/03/17 19:31:47 | 000,000,690 | ---- | M] () -- C:\ZB20100317193137001.xml
[2010/03/17 19:31:25 | 000,000,690 | ---- | M] () -- C:\ZB20100317193119001.xml
[2010/03/17 19:30:59 | 000,000,682 | ---- | M] () -- C:\ZB20100317193051001.xml
[2010/03/16 17:50:00 | 000,074,692 | -H-- | M] () -- C:\WINDOWS\System32\mlfcache.dat
[2010/03/15 14:37:24 | 000,030,280 | ---- | M] () -- C:\Documents and Settings\Administrator\My Documents\CurrentSettings March 2010 Tracey.speeddial
[2010/03/15 14:37:01 | 000,027,775 | ---- | M] () -- C:\Documents and Settings\Administrator\My Documents\CurrentSettings March 2010-2Tracey.speeddial
[2010/03/14 12:48:33 | 000,435,260 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010/03/14 12:48:33 | 000,068,156 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010/03/14 12:48:32 | 000,512,960 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010/06/11 22:15:14 | 000,017,525 | ---- | C] () -- C:\Documents and Settings\Administrator\Desktop\corrupt.jpg
[2010/06/11 21:53:15 | 003,513,237 | ---- | C] () -- C:\Documents and Settings\Administrator\Desktop\WVCheck.exe
[2010/06/10 14:50:21 | 000,001,553 | ---- | C] () -- C:\Documents and Settings\Administrator\Desktop\Tibor - Tale of a Kind Vampire.lnk
[2010/06/10 14:15:30 | 000,000,000 | ---- | C] () -- C:\pcwords2.dat
[2010/06/10 14:15:30 | 000,000,000 | ---- | C] () -- C:\pcwords.dat
[2010/06/10 14:15:30 | 000,000,000 | ---- | C] () -- C:\pc_sign.slf
[2010/06/10 14:15:21 | 000,000,000 | ---- | C] () -- C:\pcconf.ini
[2010/06/10 14:05:18 | 000,000,751 | ---- | C] () -- C:\Documents and Settings\Administrator\Start Menu\Programs\Startup\Kill Process.lnk
[2010/06/10 13:17:52 | 000,001,869 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\BitDefender Antivirus 2010.lnk
[2010/06/10 08:11:56 | 000,002,463 | ---- | C] () -- C:\Documents and Settings\Administrator\Desktop\HiJackThis.lnk
[2010/06/10 03:36:30 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At960.job
[2010/06/10 03:36:30 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At959.job
[2010/06/10 03:36:30 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At958.job
[2010/06/10 03:36:30 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At957.job
[2010/06/10 03:36:30 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At956.job
[2010/06/10 03:36:30 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At955.job
[2010/06/10 03:36:30 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At954.job
[2010/06/10 03:36:30 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At953.job
[2010/06/10 03:36:30 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At952.job
[2010/06/10 03:36:30 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At951.job
[2010/06/10 03:36:30 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At950.job
[2010/06/10 03:36:30 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At949.job
[2010/06/10 03:36:30 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At948.job
[2010/06/10 03:36:30 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At947.job
[2010/06/10 03:36:30 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At946.job
[2010/06/10 03:36:30 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At945.job
[2010/06/10 03:36:30 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At944.job
[2010/06/10 03:36:30 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At943.job
[2010/06/10 03:36:30 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At942.job
[2010/06/10 03:36:30 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At941.job
[2010/06/10 03:36:30 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At940.job
[2010/06/10 03:36:30 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At939.job
[2010/06/10 03:36:30 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At938.job
[2010/06/10 03:36:30 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At937.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At936.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At935.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At934.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At933.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At932.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At931.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At930.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At929.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At928.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At927.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At926.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At925.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At924.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At923.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At922.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At921.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At920.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At919.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At918.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At917.job
[2010/06/10 03:04:57 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At916.job
[2010/06/10 03:04:57 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At915.job
[2010/06/10 03:04:57 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At914.job
[2010/06/10 03:04:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At913.job
[2010/06/10 02:30:53 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At912.job
[2010/06/10 02:30:53 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At911.job
[2010/06/10 02:30:53 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At910.job
[2010/06/10 02:30:53 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At909.job
[2010/06/10 02:30:53 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At908.job
[2010/06/10 02:30:53 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At907.job
[2010/06/10 02:30:53 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At906.job
[2010/06/10 02:30:53 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At905.job
[2010/06/10 02:30:53 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At904.job
[2010/06/10 02:30:53 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At903.job
[2010/06/10 02:30:53 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At902.job
[2010/06/10 02:30:53 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At901.job
[2010/06/10 02:30:53 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At900.job
[2010/06/10 02:30:53 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At899.job
[2010/06/10 02:30:53 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At898.job
[2010/06/10 02:30:53 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At897.job
[2010/06/10 02:30:53 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At896.job
[2010/06/10 02:30:53 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At895.job
[2010/06/10 02:30:53 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At894.job
[2010/06/10 02:30:53 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At893.job
[2010/06/10 02:30:53 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At892.job
[2010/06/10 02:30:53 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At891.job
[2010/06/10 02:30:53 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At890.job
[2010/06/10 02:30:51 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At889.job
[2010/06/10 01:46:37 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At888.job
[2010/06/10 01:46:37 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At887.job
[2010/06/10 01:46:37 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At886.job
[2010/06/10 01:46:37 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At885.job
[2010/06/10 01:46:37 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At884.job
[2010/06/10 01:46:37 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At883.job
[2010/06/10 01:46:37 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At882.job
[2010/06/10 01:46:37 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At881.job
[2010/06/10 01:46:37 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At880.job
[2010/06/10 01:46:37 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At879.job
[2010/06/10 01:46:36 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At878.job
[2010/06/10 01:46:36 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At877.job
[2010/06/10 01:46:36 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At876.job
[2010/06/10 01:46:36 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At875.job
[2010/06/10 01:46:36 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At874.job
[2010/06/10 01:46:36 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At873.job
[2010/06/10 01:46:36 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At872.job
[2010/06/10 01:46:36 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At871.job
[2010/06/10 01:46:36 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At870.job
[2010/06/10 01:46:36 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At869.job
[2010/06/10 01:46:36 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At868.job
[2010/06/10 01:46:36 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At867.job
[2010/06/10 01:46:36 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At866.job
[2010/06/10 01:46:34 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At865.job
[2010/06/09 21:44:17 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At864.job
[2010/06/09 21:44:17 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At863.job
[2010/06/09 21:44:17 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At862.job
[2010/06/09 21:44:17 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At861.job
[2010/06/09 21:44:17 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At860.job
[2010/06/09 21:44:17 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At859.job
[2010/06/09 21:44:17 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At858.job
[2010/06/09 21:44:17 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At857.job
[2010/06/09 21:44:16 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At856.job
[2010/06/09 21:44:16 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At855.job
[2010/06/09 21:44:16 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At854.job
[2010/06/09 21:44:16 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At853.job
[2010/06/09 21:44:16 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At852.job
[2010/06/09 21:44:16 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At851.job
[2010/06/09 21:44:16 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At850.job
[2010/06/09 21:44:16 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At849.job
[2010/06/09 21:44:16 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At848.job
[2010/06/09 21:44:16 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At847.job
[2010/06/09 21:44:16 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At846.job
[2010/06/09 21:44:16 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At845.job
[2010/06/09 21:44:16 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At844.job
[2010/06/09 21:44:16 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At843.job
[2010/06/09 21:44:16 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At842.job
[2010/06/09 21:44:16 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At841.job
[2010/06/09 19:41:02 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At840.job
[2010/06/09 19:41:02 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At839.job
[2010/06/09 19:41:02 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At838.job
[2010/06/09 19:41:02 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At837.job
[2010/06/09 19:41:02 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At836.job
[2010/06/09 19:41:02 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At835.job
[2010/06/09 19:41:02 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At834.job
[2010/06/09 19:41:02 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At833.job
[2010/06/09 19:41:02 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At832.job
[2010/06/09 19:41:02 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At831.job
[2010/06/09 19:41:02 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At830.job
[2010/06/09 19:41:02 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At829.job
[2010/06/09 19:41:02 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At828.job
[2010/06/09 19:41:02 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At827.job
[2010/06/09 19:41:02 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At826.job
[2010/06/09 19:41:02 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At825.job
[2010/06/09 19:41:02 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At824.job
[2010/06/09 19:41:02 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At823.job
[2010/06/09 19:41:02 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At822.job
[2010/06/09 19:41:02 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At821.job
[2010/06/09 19:41:02 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At820.job
[2010/06/09 19:41:02 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At819.job
[2010/06/09 19:41:02 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At818.job
[2010/06/09 19:41:02 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At817.job
[2010/06/09 13:11:10 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At816.job
[2010/06/09 13:11:10 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At815.job
[2010/06/09 13:11:10 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At814.job
[2010/06/09 13:11:10 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At813.job
[2010/06/09 13:11:10 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At812.job
[2010/06/09 13:11:10 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At811.job
[2010/06/09 13:11:10 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At810.job
[2010/06/09 13:11:10 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At809.job
[2010/06/09 13:11:10 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At808.job
[2010/06/09 13:11:10 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At807.job
[2010/06/09 13:11:10 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At806.job
[2010/06/09 13:11:10 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At805.job
[2010/06/09 13:11:10 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At804.job
[2010/06/09 13:11:10 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At803.job
[2010/06/09 13:11:10 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At802.job
[2010/06/09 13:11:10 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At801.job
[2010/06/09 13:11:10 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At800.job
fullbug
Regular Member
 
Posts: 31
Joined: June 10th, 2010, 7:51 am

Re: Stubborn Malware

Unread postby fullbug » June 12th, 2010, 1:47 pm

[2010/06/09 13:11:10 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At799.job
[2010/06/09 13:11:10 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At798.job
[2010/06/09 13:11:10 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At797.job
[2010/06/09 13:11:10 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At796.job
[2010/06/09 13:11:10 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At795.job
[2010/06/09 13:11:10 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At794.job
[2010/06/09 13:11:10 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At793.job
[2010/06/09 09:45:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At792.job
[2010/06/09 09:45:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At791.job
[2010/06/09 09:45:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At790.job
[2010/06/09 09:45:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At789.job
[2010/06/09 09:45:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At788.job
[2010/06/09 09:45:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At787.job
[2010/06/09 09:45:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At786.job
[2010/06/09 09:45:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At785.job
[2010/06/09 09:45:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At784.job
[2010/06/09 09:45:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At783.job
[2010/06/09 09:45:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At782.job
[2010/06/09 09:45:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At781.job
[2010/06/09 09:45:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At780.job
[2010/06/09 09:45:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At779.job
[2010/06/09 09:45:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At778.job
[2010/06/09 09:45:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At777.job
[2010/06/09 09:45:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At776.job
[2010/06/09 09:45:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At775.job
[2010/06/09 09:45:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At774.job
[2010/06/09 09:45:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At773.job
[2010/06/09 09:45:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At772.job
[2010/06/09 09:45:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At771.job
[2010/06/09 09:45:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At770.job
[2010/06/09 09:45:27 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At769.job
[2010/06/09 07:39:47 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At768.job
[2010/06/09 07:39:47 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At767.job
[2010/06/09 07:39:47 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At766.job
[2010/06/09 07:39:47 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At765.job
[2010/06/09 07:39:47 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At764.job
[2010/06/09 07:39:47 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At763.job
[2010/06/09 07:39:47 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At762.job
[2010/06/09 07:39:47 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At761.job
[2010/06/09 07:39:47 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At760.job
[2010/06/09 07:39:47 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At759.job
[2010/06/09 07:39:47 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At758.job
[2010/06/09 07:39:47 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At757.job
[2010/06/09 07:39:47 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At756.job
[2010/06/09 07:39:47 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At755.job
[2010/06/09 07:39:47 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At754.job
[2010/06/09 07:39:47 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At753.job
[2010/06/09 07:39:47 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At752.job
[2010/06/09 07:39:47 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At751.job
[2010/06/09 07:39:47 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At750.job
[2010/06/09 07:39:47 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At749.job
[2010/06/09 07:39:47 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At748.job
[2010/06/09 07:39:47 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At747.job
[2010/06/09 07:39:47 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At746.job
[2010/06/09 07:39:47 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At745.job
[2010/06/09 05:33:23 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At744.job
[2010/06/09 05:33:23 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At743.job
[2010/06/09 05:33:23 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At742.job
[2010/06/09 05:33:23 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At741.job
[2010/06/09 05:33:23 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At740.job
[2010/06/09 05:33:23 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At739.job
[2010/06/09 05:33:23 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At738.job
[2010/06/09 05:33:23 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At737.job
[2010/06/09 05:33:23 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At736.job
[2010/06/09 05:33:23 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At735.job
[2010/06/09 05:33:23 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At734.job
[2010/06/09 05:33:23 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At733.job
[2010/06/09 05:33:22 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At732.job
[2010/06/09 05:33:22 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At731.job
[2010/06/09 05:33:22 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At730.job
[2010/06/09 05:33:22 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At729.job
[2010/06/09 05:33:22 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At728.job
[2010/06/09 05:33:22 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At727.job
[2010/06/09 05:33:22 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At726.job
[2010/06/09 05:33:22 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At725.job
[2010/06/09 05:33:22 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At724.job
[2010/06/09 05:33:22 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At723.job
[2010/06/09 05:33:22 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At722.job
[2010/06/09 05:33:22 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At721.job
[2010/06/09 03:26:36 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At720.job
[2010/06/09 03:26:36 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At719.job
[2010/06/09 03:26:36 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At718.job
[2010/06/09 03:26:36 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At717.job
[2010/06/09 03:26:36 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At716.job
[2010/06/09 03:26:36 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At715.job
[2010/06/09 03:26:36 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At714.job
[2010/06/09 03:26:36 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At713.job
[2010/06/09 03:26:36 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At712.job
[2010/06/09 03:26:36 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At711.job
[2010/06/09 03:26:36 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At710.job
[2010/06/09 03:26:36 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At709.job
[2010/06/09 03:26:36 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At708.job
[2010/06/09 03:26:36 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At707.job
[2010/06/09 03:26:36 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At706.job
[2010/06/09 03:26:36 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At705.job
[2010/06/09 03:26:36 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At704.job
[2010/06/09 03:26:36 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At703.job
[2010/06/09 03:26:36 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At702.job
[2010/06/09 03:26:36 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At701.job
[2010/06/09 03:26:36 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At700.job
[2010/06/09 03:26:36 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At699.job
[2010/06/09 03:26:36 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At698.job
[2010/06/09 03:26:36 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At697.job
[2010/06/09 02:58:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At696.job
[2010/06/09 02:58:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At695.job
[2010/06/09 02:58:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At694.job
[2010/06/09 02:58:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At693.job
[2010/06/09 02:58:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At692.job
[2010/06/09 02:58:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At691.job
[2010/06/09 02:58:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At690.job
[2010/06/09 02:58:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At689.job
[2010/06/09 02:58:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At688.job
[2010/06/09 02:58:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At687.job
[2010/06/09 02:58:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At686.job
[2010/06/09 02:58:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At685.job
[2010/06/09 02:58:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At684.job
[2010/06/09 02:58:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At683.job
[2010/06/09 02:58:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At682.job
[2010/06/09 02:58:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At681.job
[2010/06/09 02:58:17 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At680.job
[2010/06/09 02:58:17 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At679.job
[2010/06/09 02:58:17 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At678.job
[2010/06/09 02:58:17 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At677.job
[2010/06/09 02:58:17 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At676.job
[2010/06/09 02:58:17 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At675.job
[2010/06/09 02:58:17 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At674.job
[2010/06/09 02:58:17 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At673.job
[2010/06/09 02:38:41 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At672.job
[2010/06/09 02:38:41 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At671.job
[2010/06/09 02:38:41 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At670.job
[2010/06/09 02:38:41 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At669.job
[2010/06/09 02:38:41 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At668.job
[2010/06/09 02:38:41 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At667.job
[2010/06/09 02:38:41 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At666.job
[2010/06/09 02:38:41 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At665.job
[2010/06/09 02:38:41 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At664.job
[2010/06/09 02:38:41 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At663.job
[2010/06/09 02:38:41 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At662.job
[2010/06/09 02:38:41 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At661.job
[2010/06/09 02:38:41 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At660.job
[2010/06/09 02:38:41 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At659.job
[2010/06/09 02:38:41 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At658.job
[2010/06/09 02:38:41 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At657.job
[2010/06/09 02:38:41 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At656.job
[2010/06/09 02:38:41 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At655.job
[2010/06/09 02:38:41 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At654.job
[2010/06/09 02:38:41 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At653.job
[2010/06/09 02:38:41 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At652.job
[2010/06/09 02:38:41 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At651.job
[2010/06/09 02:38:41 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At650.job
[2010/06/09 02:38:41 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At649.job
[2010/06/09 02:26:16 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At648.job
[2010/06/09 02:26:16 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At647.job
[2010/06/09 02:26:16 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At646.job
[2010/06/09 02:26:16 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At645.job
[2010/06/09 02:26:16 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At644.job
[2010/06/09 02:26:16 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At643.job
[2010/06/09 02:26:16 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At642.job
[2010/06/09 02:26:16 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At641.job
[2010/06/09 02:26:16 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At640.job
[2010/06/09 02:26:16 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At639.job
[2010/06/09 02:26:16 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At638.job
[2010/06/09 02:26:16 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At637.job
[2010/06/09 02:26:16 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At636.job
[2010/06/09 02:26:16 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At635.job
[2010/06/09 02:26:16 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At634.job
[2010/06/09 02:26:16 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At633.job
[2010/06/09 02:26:16 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At632.job
[2010/06/09 02:26:16 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At631.job
[2010/06/09 02:26:16 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At630.job
[2010/06/09 02:26:16 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At629.job
[2010/06/09 02:26:16 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At628.job
[2010/06/09 02:26:16 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At627.job
[2010/06/09 02:26:16 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At626.job
[2010/06/09 02:26:16 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At625.job
[2010/06/09 00:19:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At624.job
[2010/06/09 00:19:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At623.job
[2010/06/09 00:19:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At622.job
[2010/06/09 00:19:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At621.job
[2010/06/09 00:19:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At620.job
[2010/06/09 00:19:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At619.job
[2010/06/09 00:19:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At618.job
[2010/06/09 00:19:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At617.job
[2010/06/09 00:19:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At616.job
[2010/06/09 00:19:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At615.job
[2010/06/09 00:19:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At614.job
[2010/06/09 00:19:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At613.job
[2010/06/09 00:19:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At612.job
[2010/06/09 00:19:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At611.job
[2010/06/09 00:19:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At610.job
[2010/06/09 00:19:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At609.job
[2010/06/09 00:19:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At608.job
[2010/06/09 00:19:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At607.job
[2010/06/09 00:19:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At606.job
[2010/06/09 00:19:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At605.job
[2010/06/09 00:19:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At604.job
[2010/06/09 00:19:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At603.job
[2010/06/09 00:19:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At602.job
[2010/06/09 00:19:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At601.job
[2010/06/08 22:15:08 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At600.job
[2010/06/08 22:15:08 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At599.job
[2010/06/08 22:15:08 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At598.job
[2010/06/08 22:15:08 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At597.job
[2010/06/08 22:15:08 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At596.job
[2010/06/08 22:15:08 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At595.job
[2010/06/08 22:15:08 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At594.job
[2010/06/08 22:15:08 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At593.job
[2010/06/08 22:15:08 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At592.job
[2010/06/08 22:15:08 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At591.job
[2010/06/08 22:15:08 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At590.job
[2010/06/08 22:15:08 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At589.job
[2010/06/08 22:15:08 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At588.job
[2010/06/08 22:15:08 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At587.job
[2010/06/08 22:15:08 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At586.job
[2010/06/08 22:15:08 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At585.job
[2010/06/08 22:15:08 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At584.job
[2010/06/08 22:15:08 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At583.job
[2010/06/08 22:15:08 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At582.job
[2010/06/08 22:15:08 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At581.job
[2010/06/08 22:15:08 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At580.job
[2010/06/08 22:15:08 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At579.job
[2010/06/08 22:15:08 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At578.job
[2010/06/08 22:15:08 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At577.job
[2010/06/08 19:05:32 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At576.job
[2010/06/08 19:05:32 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At575.job
[2010/06/08 19:05:32 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At574.job
[2010/06/08 19:05:32 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At573.job
[2010/06/08 19:05:32 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At572.job
[2010/06/08 19:05:32 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At571.job
[2010/06/08 19:05:32 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At570.job
[2010/06/08 19:05:32 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At569.job
[2010/06/08 19:05:32 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At568.job
[2010/06/08 19:05:32 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At567.job
[2010/06/08 19:05:32 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At566.job
[2010/06/08 19:05:32 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At565.job
[2010/06/08 19:05:31 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At564.job
[2010/06/08 19:05:31 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At563.job
[2010/06/08 19:05:31 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At562.job
[2010/06/08 19:05:31 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At561.job
[2010/06/08 19:05:31 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At560.job
[2010/06/08 19:05:31 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At559.job
[2010/06/08 19:05:31 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At558.job
[2010/06/08 19:05:31 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At557.job
[2010/06/08 19:05:31 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At556.job
[2010/06/08 19:05:31 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At555.job
[2010/06/08 19:05:31 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At554.job
[2010/06/08 19:05:31 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At553.job
[2010/06/08 18:56:01 | 000,001,837 | ---- | C] () -- C:\Documents and Settings\Administrator\My Documents\notes.nth
[2010/06/08 14:58:15 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At552.job
[2010/06/08 14:58:15 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At551.job
[2010/06/08 14:58:15 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At550.job
[2010/06/08 14:58:15 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At549.job
[2010/06/08 14:58:15 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At548.job
[2010/06/08 14:58:15 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At547.job
[2010/06/08 14:58:15 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At546.job
[2010/06/08 14:58:15 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At545.job
[2010/06/08 14:58:15 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At544.job
[2010/06/08 14:58:15 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At543.job
[2010/06/08 14:58:15 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At542.job
[2010/06/08 14:58:15 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At541.job
[2010/06/08 14:58:15 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At540.job
[2010/06/08 14:58:15 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At539.job
[2010/06/08 14:58:15 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At538.job
[2010/06/08 14:58:15 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At537.job
[2010/06/08 14:58:15 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At536.job
[2010/06/08 14:58:15 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At535.job
[2010/06/08 14:58:15 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At534.job
[2010/06/08 14:58:15 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At533.job
[2010/06/08 14:58:15 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At532.job
[2010/06/08 14:58:15 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At531.job
[2010/06/08 14:58:15 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At530.job
[2010/06/08 14:58:15 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At529.job
[2010/06/08 12:54:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At528.job
[2010/06/08 12:54:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At527.job
[2010/06/08 12:54:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At526.job
[2010/06/08 12:54:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At525.job
[2010/06/08 12:54:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At524.job
[2010/06/08 12:54:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At523.job
[2010/06/08 12:54:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At522.job
[2010/06/08 12:54:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At521.job
[2010/06/08 12:54:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At520.job
[2010/06/08 12:54:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At519.job
[2010/06/08 12:54:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At518.job
[2010/06/08 12:54:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At517.job
[2010/06/08 12:54:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At516.job
[2010/06/08 12:54:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At515.job
[2010/06/08 12:54:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At514.job
[2010/06/08 12:54:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At513.job
[2010/06/08 12:54:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At512.job
[2010/06/08 12:54:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At511.job
[2010/06/08 12:54:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At510.job
[2010/06/08 12:54:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At509.job
[2010/06/08 12:54:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At508.job
[2010/06/08 12:54:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At507.job
[2010/06/08 12:54:27 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At506.job
[2010/06/08 12:54:27 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At505.job
[2010/06/08 10:46:34 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At504.job
[2010/06/08 10:46:34 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At503.job
[2010/06/08 10:46:34 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At502.job
[2010/06/08 10:46:34 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At501.job
[2010/06/08 10:46:34 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At500.job
[2010/06/08 10:46:33 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At499.job
[2010/06/08 10:46:33 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At498.job
[2010/06/08 10:46:33 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At497.job
[2010/06/08 10:46:33 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At496.job
[2010/06/08 10:46:33 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At495.job
[2010/06/08 10:46:33 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At494.job
[2010/06/08 10:46:33 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At493.job
[2010/06/08 10:46:33 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At492.job
[2010/06/08 10:46:33 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At491.job
[2010/06/08 10:46:33 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At490.job
[2010/06/08 10:46:33 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At489.job
[2010/06/08 10:46:33 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At488.job
[2010/06/08 10:46:33 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At487.job
[2010/06/08 10:46:33 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At486.job
[2010/06/08 10:46:33 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At485.job
[2010/06/08 10:46:33 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At484.job
[2010/06/08 10:46:33 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At483.job
[2010/06/08 10:46:33 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At482.job
[2010/06/08 10:46:33 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At481.job
[2010/06/08 08:26:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At480.job
[2010/06/08 08:26:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At479.job
[2010/06/08 08:26:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At478.job
[2010/06/08 08:26:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At477.job
[2010/06/08 08:26:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At476.job
[2010/06/08 08:26:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At475.job
[2010/06/08 08:26:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At474.job
[2010/06/08 08:26:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At473.job
[2010/06/08 08:26:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At472.job
[2010/06/08 08:26:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At471.job
[2010/06/08 08:26:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At470.job
[2010/06/08 08:26:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At469.job
[2010/06/08 08:26:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At468.job
[2010/06/08 08:26:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At467.job
[2010/06/08 08:26:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At466.job
[2010/06/08 08:26:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At465.job
[2010/06/08 08:26:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At464.job
[2010/06/08 08:26:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At463.job
[2010/06/08 08:26:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At462.job
[2010/06/08 08:26:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At461.job
[2010/06/08 08:26:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At460.job
[2010/06/08 08:26:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At459.job
[2010/06/08 08:26:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At458.job
[2010/06/08 08:26:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At457.job
[2010/06/08 08:25:42 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At456.job
[2010/06/08 08:25:42 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At455.job
[2010/06/08 08:25:42 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At454.job
[2010/06/08 08:25:42 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At453.job
[2010/06/08 08:25:42 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At452.job
[2010/06/08 08:25:42 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At451.job
[2010/06/08 08:25:42 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At450.job
[2010/06/08 08:25:42 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At449.job
[2010/06/08 08:25:42 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At448.job
[2010/06/08 08:25:42 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At447.job
[2010/06/08 08:25:42 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At446.job
[2010/06/08 08:25:42 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At445.job
[2010/06/08 08:25:42 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At444.job
[2010/06/08 08:25:42 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At443.job
[2010/06/08 08:25:42 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At442.job
[2010/06/08 08:25:42 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At441.job
[2010/06/08 08:25:42 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At440.job
[2010/06/08 08:25:42 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At439.job
[2010/06/08 08:25:42 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At438.job
[2010/06/08 08:25:42 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At437.job
[2010/06/08 08:25:42 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At436.job
[2010/06/08 08:25:42 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At435.job
[2010/06/08 08:25:42 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At434.job
[2010/06/08 08:25:42 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At433.job
[2010/06/08 06:24:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At432.job
[2010/06/08 06:24:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At431.job
[2010/06/08 06:24:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At430.job
[2010/06/08 06:24:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At429.job
[2010/06/08 06:24:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At428.job
[2010/06/08 06:24:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At427.job
[2010/06/08 06:24:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At426.job
[2010/06/08 06:24:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At425.job
[2010/06/08 06:24:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At424.job
[2010/06/08 06:24:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At423.job
[2010/06/08 06:24:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At422.job
[2010/06/08 06:24:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At421.job
[2010/06/08 06:24:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At420.job
[2010/06/08 06:24:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At419.job
[2010/06/08 06:24:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At418.job
[2010/06/08 06:24:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At417.job
[2010/06/08 06:24:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At416.job
[2010/06/08 06:24:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At415.job
[2010/06/08 06:24:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At414.job
[2010/06/08 06:24:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At413.job
[2010/06/08 06:24:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At412.job
[2010/06/08 06:24:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At411.job
[2010/06/08 06:24:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At410.job
[2010/06/08 06:24:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At409.job
[2010/06/08 04:22:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At408.job
[2010/06/08 04:22:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At407.job
[2010/06/08 04:22:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At406.job
[2010/06/08 04:22:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At405.job
[2010/06/08 04:22:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At404.job
[2010/06/08 04:22:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At403.job
[2010/06/08 04:22:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At402.job
[2010/06/08 04:22:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At401.job
[2010/06/08 04:22:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At400.job
[2010/06/08 04:22:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At399.job
[2010/06/08 04:22:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At398.job
[2010/06/08 04:22:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At397.job
[2010/06/08 04:22:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At396.job
[2010/06/08 04:22:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At395.job
[2010/06/08 04:22:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At394.job
[2010/06/08 04:22:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At393.job
[2010/06/08 04:22:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At392.job
[2010/06/08 04:22:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At391.job
[2010/06/08 04:22:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At390.job
[2010/06/08 04:22:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At389.job
[2010/06/08 04:22:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At388.job
[2010/06/08 04:22:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At387.job
[2010/06/08 04:22:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At386.job
[2010/06/08 04:22:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At385.job
[2010/06/08 02:21:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At384.job
[2010/06/08 02:21:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At383.job
[2010/06/08 02:21:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At382.job
[2010/06/08 02:21:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At381.job
[2010/06/08 02:21:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At380.job
[2010/06/08 02:21:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At379.job
[2010/06/08 02:21:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At378.job
[2010/06/08 02:21:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At377.job
[2010/06/08 02:21:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At376.job
[2010/06/08 02:21:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At375.job
[2010/06/08 02:21:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At374.job
[2010/06/08 02:21:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At373.job
[2010/06/08 02:21:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At372.job
[2010/06/08 02:21:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At371.job
[2010/06/08 02:21:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At370.job
[2010/06/08 02:21:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At369.job
[2010/06/08 02:21:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At368.job
[2010/06/08 02:21:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At367.job
[2010/06/08 02:21:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At366.job
[2010/06/08 02:21:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At365.job
[2010/06/08 02:21:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At364.job
[2010/06/08 02:21:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At363.job
[2010/06/08 02:21:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At362.job
[2010/06/08 02:21:56 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At361.job
[2010/06/08 00:20:52 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At360.job
[2010/06/08 00:20:52 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At359.job
[2010/06/08 00:20:52 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At358.job
[2010/06/08 00:20:52 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At357.job
[2010/06/08 00:20:52 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At356.job
[2010/06/08 00:20:52 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At355.job
[2010/06/08 00:20:52 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At354.job
[2010/06/08 00:20:52 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At353.job
[2010/06/08 00:20:52 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At352.job
[2010/06/08 00:20:52 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At351.job
[2010/06/08 00:20:52 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At350.job
[2010/06/08 00:20:52 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At349.job
[2010/06/08 00:20:52 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At348.job
[2010/06/08 00:20:52 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At347.job
[2010/06/08 00:20:52 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At346.job
[2010/06/08 00:20:52 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At345.job
[2010/06/08 00:20:52 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At344.job
[2010/06/08 00:20:52 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At343.job
[2010/06/08 00:20:52 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At342.job
[2010/06/08 00:20:52 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At341.job
[2010/06/08 00:20:52 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At340.job
[2010/06/08 00:20:52 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At339.job
[2010/06/08 00:20:52 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At338.job
[2010/06/08 00:20:52 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At337.job
[2010/06/07 18:28:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At336.job
[2010/06/07 18:28:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At335.job
[2010/06/07 18:28:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At334.job
[2010/06/07 18:28:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At333.job
[2010/06/07 18:28:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At332.job
[2010/06/07 18:28:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At331.job
[2010/06/07 18:28:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At330.job
[2010/06/07 18:28:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At329.job
[2010/06/07 18:28:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At328.job
[2010/06/07 18:28:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At327.job
[2010/06/07 18:28:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At326.job
[2010/06/07 18:28:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At325.job
[2010/06/07 18:28:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At324.job
[2010/06/07 18:28:42 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At323.job
[2010/06/07 18:28:42 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At322.job
[2010/06/07 18:28:42 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At321.job
[2010/06/07 18:28:42 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At320.job
[2010/06/07 18:28:42 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At319.job
[2010/06/07 18:28:42 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At318.job
[2010/06/07 18:28:42 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At317.job
[2010/06/07 18:28:42 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At316.job
[2010/06/07 18:28:42 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At315.job
[2010/06/07 18:28:42 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At314.job
[2010/06/07 18:28:42 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At313.job
[2010/06/07 18:26:59 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At312.job
[2010/06/07 18:26:59 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At311.job
[2010/06/07 18:26:59 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At310.job
[2010/06/07 18:26:59 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At309.job
[2010/06/07 18:26:59 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At308.job
[2010/06/07 18:26:59 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At307.job
[2010/06/07 18:26:59 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At306.job
[2010/06/07 18:26:59 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At305.job
[2010/06/07 18:26:59 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At304.job
[2010/06/07 18:26:59 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At303.job
[2010/06/07 18:26:59 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At302.job
[2010/06/07 18:26:59 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At301.job
[2010/06/07 18:26:59 | 000,000,416 | ---- | C] () --
fullbug
Regular Member
 
Posts: 31
Joined: June 10th, 2010, 7:51 am

Re: Stubborn Malware

Unread postby fullbug » June 12th, 2010, 1:48 pm

C:\WINDOWS\tasks\At300.job
[2010/06/07 18:26:59 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At299.job
[2010/06/07 18:26:58 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At298.job
[2010/06/07 18:26:58 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At297.job
[2010/06/07 18:26:58 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At296.job
[2010/06/07 18:26:58 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At295.job
[2010/06/07 18:26:58 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At294.job
[2010/06/07 18:26:58 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At293.job
[2010/06/07 18:26:58 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At292.job
[2010/06/07 18:26:58 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At291.job
[2010/06/07 18:26:58 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At290.job
[2010/06/07 18:26:58 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At289.job
[2010/06/07 16:29:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At288.job
[2010/06/07 16:29:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At287.job
[2010/06/07 16:29:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At286.job
[2010/06/07 16:29:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At285.job
[2010/06/07 16:29:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At284.job
[2010/06/07 16:29:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At283.job
[2010/06/07 16:29:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At282.job
[2010/06/07 16:29:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At281.job
[2010/06/07 16:29:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At280.job
[2010/06/07 16:29:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At279.job
[2010/06/07 16:29:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At278.job
[2010/06/07 16:29:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At277.job
[2010/06/07 16:29:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At276.job
[2010/06/07 16:29:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At275.job
[2010/06/07 16:29:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At274.job
[2010/06/07 16:29:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At273.job
[2010/06/07 16:29:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At272.job
[2010/06/07 16:29:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At271.job
[2010/06/07 16:29:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At270.job
[2010/06/07 16:29:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At269.job
[2010/06/07 16:29:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At268.job
[2010/06/07 16:29:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At267.job
[2010/06/07 16:29:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At266.job
[2010/06/07 16:29:06 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At265.job
[2010/06/07 16:27:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At264.job
[2010/06/07 16:27:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At263.job
[2010/06/07 16:27:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At262.job
[2010/06/07 16:27:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At261.job
[2010/06/07 16:27:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At260.job
[2010/06/07 16:27:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At259.job
[2010/06/07 16:27:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At258.job
[2010/06/07 16:27:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At257.job
[2010/06/07 16:27:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At256.job
[2010/06/07 16:27:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At255.job
[2010/06/07 16:27:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At254.job
[2010/06/07 16:27:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At253.job
[2010/06/07 16:27:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At252.job
[2010/06/07 16:27:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At251.job
[2010/06/07 16:27:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At250.job
[2010/06/07 16:27:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At249.job
[2010/06/07 16:27:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At248.job
[2010/06/07 16:27:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At247.job
[2010/06/07 16:27:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At246.job
[2010/06/07 16:27:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At245.job
[2010/06/07 16:27:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At244.job
[2010/06/07 16:27:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At243.job
[2010/06/07 16:27:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At242.job
[2010/06/07 16:27:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At241.job
[2010/06/07 16:25:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At240.job
[2010/06/07 16:25:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At239.job
[2010/06/07 16:25:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At238.job
[2010/06/07 16:25:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At237.job
[2010/06/07 16:25:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At236.job
[2010/06/07 16:25:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At235.job
[2010/06/07 16:25:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At234.job
[2010/06/07 16:25:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At233.job
[2010/06/07 16:25:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At232.job
[2010/06/07 16:25:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At231.job
[2010/06/07 16:25:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At230.job
[2010/06/07 16:25:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At229.job
[2010/06/07 16:25:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At228.job
[2010/06/07 16:25:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At227.job
[2010/06/07 16:25:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At226.job
[2010/06/07 16:25:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At225.job
[2010/06/07 16:25:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At224.job
[2010/06/07 16:25:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At223.job
[2010/06/07 16:25:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At222.job
[2010/06/07 16:25:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At221.job
[2010/06/07 16:25:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At220.job
[2010/06/07 16:25:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At219.job
[2010/06/07 16:25:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At218.job
[2010/06/07 16:25:18 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At217.job
[2010/06/07 14:30:38 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At216.job
[2010/06/07 14:30:37 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At215.job
[2010/06/07 14:30:37 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At214.job
[2010/06/07 14:30:37 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At213.job
[2010/06/07 14:30:37 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At212.job
[2010/06/07 14:30:37 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At211.job
[2010/06/07 14:30:37 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At210.job
[2010/06/07 14:30:37 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At209.job
[2010/06/07 14:30:37 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At208.job
[2010/06/07 14:30:37 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At207.job
[2010/06/07 14:30:37 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At206.job
[2010/06/07 14:30:37 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At205.job
[2010/06/07 14:30:37 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At204.job
[2010/06/07 14:30:37 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At203.job
[2010/06/07 14:30:37 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At202.job
[2010/06/07 14:30:37 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At201.job
[2010/06/07 14:30:37 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At200.job
[2010/06/07 14:30:37 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At199.job
[2010/06/07 14:30:37 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At198.job
[2010/06/07 14:30:36 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At197.job
[2010/06/07 14:30:36 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At196.job
[2010/06/07 14:30:36 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At195.job
[2010/06/07 14:30:36 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At194.job
[2010/06/07 14:30:36 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At193.job
[2010/06/07 14:27:23 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At192.job
[2010/06/07 14:27:23 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At191.job
[2010/06/07 14:27:23 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At190.job
[2010/06/07 14:27:23 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At189.job
[2010/06/07 14:27:23 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At188.job
[2010/06/07 14:27:23 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At187.job
[2010/06/07 14:27:23 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At186.job
[2010/06/07 14:27:23 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At185.job
[2010/06/07 14:27:22 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At184.job
[2010/06/07 14:27:22 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At183.job
[2010/06/07 14:27:22 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At182.job
[2010/06/07 14:27:22 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At181.job
[2010/06/07 14:27:22 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At180.job
[2010/06/07 14:27:22 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At179.job
[2010/06/07 14:27:22 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At178.job
[2010/06/07 14:27:22 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At177.job
[2010/06/07 14:27:22 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At176.job
[2010/06/07 14:27:22 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At175.job
[2010/06/07 14:27:22 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At174.job
[2010/06/07 14:27:22 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At173.job
[2010/06/07 14:27:22 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At172.job
[2010/06/07 14:27:22 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At171.job
[2010/06/07 14:27:22 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At170.job
[2010/06/07 14:27:21 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At169.job
[2010/06/07 12:28:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At168.job
[2010/06/07 12:28:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At167.job
[2010/06/07 12:28:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At166.job
[2010/06/07 12:28:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At165.job
[2010/06/07 12:28:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At164.job
[2010/06/07 12:28:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At163.job
[2010/06/07 12:28:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At162.job
[2010/06/07 12:28:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At161.job
[2010/06/07 12:28:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At160.job
[2010/06/07 12:28:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At159.job
[2010/06/07 12:28:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At158.job
[2010/06/07 12:28:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At157.job
[2010/06/07 12:28:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At156.job
[2010/06/07 12:28:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At155.job
[2010/06/07 12:28:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At154.job
[2010/06/07 12:28:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At153.job
[2010/06/07 12:28:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At152.job
[2010/06/07 12:28:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At151.job
[2010/06/07 12:28:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At150.job
[2010/06/07 12:28:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At149.job
[2010/06/07 12:28:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At148.job
[2010/06/07 12:28:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At147.job
[2010/06/07 12:28:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At146.job
[2010/06/07 12:28:01 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At145.job
[2010/06/07 12:26:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At144.job
[2010/06/07 12:26:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At143.job
[2010/06/07 12:26:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At142.job
[2010/06/07 12:26:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At141.job
[2010/06/07 12:26:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At140.job
[2010/06/07 12:26:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At139.job
[2010/06/07 12:26:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At138.job
[2010/06/07 12:26:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At137.job
[2010/06/07 12:26:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At136.job
[2010/06/07 12:26:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At135.job
[2010/06/07 12:26:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At134.job
[2010/06/07 12:26:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At133.job
[2010/06/07 12:26:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At132.job
[2010/06/07 12:26:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At131.job
[2010/06/07 12:26:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At130.job
[2010/06/07 12:26:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At129.job
[2010/06/07 12:26:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At128.job
[2010/06/07 12:26:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At127.job
[2010/06/07 12:26:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At126.job
[2010/06/07 12:26:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At125.job
[2010/06/07 12:26:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At124.job
[2010/06/07 12:26:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At123.job
[2010/06/07 12:26:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At122.job
[2010/06/07 12:26:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At121.job
[2010/06/07 12:24:26 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At99.job
[2010/06/07 12:24:26 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At98.job
[2010/06/07 12:24:26 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At97.job
[2010/06/07 12:24:26 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At120.job
[2010/06/07 12:24:26 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At119.job
[2010/06/07 12:24:26 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At118.job
[2010/06/07 12:24:26 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At117.job
[2010/06/07 12:24:26 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At116.job
[2010/06/07 12:24:26 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At115.job
[2010/06/07 12:24:26 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At114.job
[2010/06/07 12:24:26 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At113.job
[2010/06/07 12:24:26 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At112.job
[2010/06/07 12:24:26 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At111.job
[2010/06/07 12:24:26 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At110.job
[2010/06/07 12:24:26 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At109.job
[2010/06/07 12:24:26 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At108.job
[2010/06/07 12:24:26 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At107.job
[2010/06/07 12:24:26 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At106.job
[2010/06/07 12:24:26 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At105.job
[2010/06/07 12:24:26 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At104.job
[2010/06/07 12:24:26 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At103.job
[2010/06/07 12:24:26 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At102.job
[2010/06/07 12:24:26 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At101.job
[2010/06/07 12:24:26 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At100.job
[2010/06/07 10:24:54 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At96.job
[2010/06/07 10:24:54 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At95.job
[2010/06/07 10:24:54 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At94.job
[2010/06/07 10:24:54 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At93.job
[2010/06/07 10:24:54 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At92.job
[2010/06/07 10:24:54 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At91.job
[2010/06/07 10:24:54 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At90.job
[2010/06/07 10:24:54 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At89.job
[2010/06/07 10:24:54 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At88.job
[2010/06/07 10:24:54 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At87.job
[2010/06/07 10:24:54 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At86.job
[2010/06/07 10:24:54 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At85.job
[2010/06/07 10:24:54 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At84.job
[2010/06/07 10:24:54 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At83.job
[2010/06/07 10:24:54 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At82.job
[2010/06/07 10:24:54 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At81.job
[2010/06/07 10:24:54 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At80.job
[2010/06/07 10:24:54 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At79.job
[2010/06/07 10:24:54 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At78.job
[2010/06/07 10:24:54 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At77.job
[2010/06/07 10:24:54 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At76.job
[2010/06/07 10:24:54 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At75.job
[2010/06/07 10:24:54 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At74.job
[2010/06/07 10:24:54 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At73.job
[2010/06/07 07:06:42 | 000,000,000 | ---- | C] () -- C:\debug
[2010/06/07 07:05:29 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At72.job
[2010/06/07 07:05:29 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At71.job
[2010/06/07 07:05:29 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At70.job
[2010/06/07 07:05:29 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At69.job
[2010/06/07 07:05:29 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At68.job
[2010/06/07 07:05:29 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At67.job
[2010/06/07 07:05:29 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At66.job
[2010/06/07 07:05:29 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At65.job
[2010/06/07 07:05:29 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At64.job
[2010/06/07 07:05:29 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At63.job
[2010/06/07 07:05:29 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At62.job
[2010/06/07 07:05:29 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At61.job
[2010/06/07 07:05:29 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At60.job
[2010/06/07 07:05:29 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At59.job
[2010/06/07 07:05:29 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At58.job
[2010/06/07 07:05:29 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At57.job
[2010/06/07 07:05:29 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At56.job
[2010/06/07 07:05:29 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At55.job
[2010/06/07 07:05:29 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At54.job
[2010/06/07 07:05:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At53.job
[2010/06/07 07:05:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At52.job
[2010/06/07 07:05:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At51.job
[2010/06/07 07:05:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At50.job
[2010/06/07 07:05:28 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At49.job
[2010/06/07 07:03:21 | 000,000,112 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\x0D1am.dat
[2010/06/07 07:03:07 | 000,070,154 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\6c1pd0d8.exe
[2010/06/07 07:03:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At48.job
[2010/06/07 07:03:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At47.job
[2010/06/07 07:03:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At46.job
[2010/06/07 07:03:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At45.job
[2010/06/07 07:03:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At44.job
[2010/06/07 07:03:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At43.job
[2010/06/07 07:03:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At42.job
[2010/06/07 07:03:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At41.job
[2010/06/07 07:03:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At40.job
[2010/06/07 07:03:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At39.job
[2010/06/07 07:03:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At38.job
[2010/06/07 07:03:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At37.job
[2010/06/07 07:03:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At36.job
[2010/06/07 07:03:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At35.job
[2010/06/07 07:03:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At34.job
[2010/06/07 07:03:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At33.job
[2010/06/07 07:03:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At32.job
[2010/06/07 07:03:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At31.job
[2010/06/07 07:03:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At30.job
[2010/06/07 07:03:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At29.job
[2010/06/07 07:03:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At28.job
[2010/06/07 07:03:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At27.job
[2010/06/07 07:03:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At26.job
[2010/06/07 07:03:07 | 000,000,416 | ---- | C] () -- C:\WINDOWS\tasks\At25.job
[2010/06/07 07:00:01 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At9.job
[2010/06/07 07:00:01 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At8.job
[2010/06/07 07:00:01 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At7.job
[2010/06/07 07:00:01 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At6.job
[2010/06/07 07:00:01 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At5.job
[2010/06/07 07:00:01 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At4.job
[2010/06/07 07:00:01 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At24.job
[2010/06/07 07:00:01 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At23.job
[2010/06/07 07:00:01 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At22.job
[2010/06/07 07:00:01 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At21.job
[2010/06/07 07:00:01 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At20.job
[2010/06/07 07:00:01 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At19.job
[2010/06/07 07:00:01 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At18.job
[2010/06/07 07:00:01 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At17.job
[2010/06/07 07:00:01 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At16.job
[2010/06/07 07:00:01 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At15.job
[2010/06/07 07:00:01 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At14.job
[2010/06/07 07:00:01 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At13.job
[2010/06/07 07:00:01 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At12.job
[2010/06/07 07:00:01 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At11.job
[2010/06/07 07:00:01 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At10.job
[2010/06/02 17:39:23 | 000,000,986 | ---- | C] () -- C:\ZB20100602173913001.xml
[2010/06/01 21:33:12 | 014,942,208 | ---- | C] () -- C:\Documents and Settings\Administrator\ntuser.dat
[2010/05/31 20:28:47 | 000,000,052 | ---- | C] () -- C:\WINDOWS\System32\ashttpstats.csv
[2010/05/31 20:10:13 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\pcwords2.dat
[2010/05/31 20:10:13 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\pcwords.dat
[2010/05/31 20:10:13 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\pc_sign.slf
[2010/05/31 20:10:12 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\pc_webproxy.dat
[2010/05/31 20:10:12 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\pc_video.dat
[2010/05/31 20:10:12 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\pc_tabloids.dat
[2010/05/31 20:10:12 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\pc_socialnetworks.dat
[2010/05/31 20:10:12 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\pc_searchengines.dat
[2010/05/31 20:10:12 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\pc_regionaltlds.dat
[2010/05/31 20:10:12 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\pc_pornography.dat
[2010/05/31 20:10:12 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\pc_onlineshop.dat
[2010/05/31 20:10:12 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\pc_onlinepay.dat
[2010/05/31 20:10:12 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\pc_onlinedating.dat
[2010/05/31 20:10:12 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\pc_news.dat
[2010/05/31 20:10:12 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\pc_im.dat
[2010/05/31 20:10:12 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\pc_illegal.dat
[2010/05/31 20:10:12 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\pc_hate.dat
[2010/05/31 20:10:12 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\pc_games.dat
[2010/05/31 20:10:12 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\pc_gambling.dat
[2010/05/31 20:10:12 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\pc_drugs.dat
[2010/05/31 20:05:57 | 000,000,385 | ---- | C] () -- C:\Documents and Settings\Administrator\Application Datauser_gensett.xml
[2010/05/31 20:05:52 | 000,000,376 | ---- | C] () -- C:\Documents and Settings\Administrator\Application Dataprivacy.xml
[2010/05/31 19:53:11 | 000,000,132 | ---- | C] () -- C:\WINDOWS\System32\rezumatenoi.dat
[2010/05/25 21:15:44 | 000,000,609 | ---- | C] () -- C:\Documents and Settings\Administrator\Desktop\Shortcut to snes9x.lnk
[2010/05/23 14:27:06 | 000,001,091 | ---- | C] () -- C:\ZB20100523142654001.xml
[2010/05/22 09:34:17 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Administrator\Ÿ;Ÿ;
[2010/05/19 22:15:03 | 000,711,168 | ---- | C] () -- C:\WINDOWS\is-DOGNN.exe
[2010/05/19 22:15:03 | 000,010,562 | ---- | C] () -- C:\WINDOWS\is-DOGNN.msg
[2010/05/19 22:15:03 | 000,000,399 | ---- | C] () -- C:\WINDOWS\is-DOGNN.lst
[2010/05/18 13:30:07 | 000,000,404 | ---- | C] () -- C:\Documents and Settings\Administrator\Desktop\Shortcut to Sean's Stuff.lnk
[2010/05/16 21:54:26 | 000,000,670 | ---- | C] () -- C:\Documents and Settings\Administrator\Desktop\Pizza Chef 2.lnk
[2010/05/09 20:41:29 | 000,000,787 | ---- | C] () -- C:\ZB20100509204121001.xml
[2010/05/06 18:45:27 | 000,000,367 | ---- | C] () -- C:\ZB20100506184524001.xml
[2010/05/03 13:49:17 | 000,003,716 | ---- | C] () -- C:\ZB20100503134647001.xml
[2010/05/02 20:04:33 | 000,003,611 | ---- | C] () -- C:\ZB20100502200204001.xml
[2010/04/28 18:47:37 | 000,000,508 | ---- | C] () -- C:\Documents and Settings\Administrator\Desktop\PegSol.lnk
[2010/04/24 23:44:49 | 000,000,732 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Atlantis Quest.lnk
[2010/04/16 15:58:04 | 000,000,574 | ---- | C] () -- C:\Documents and Settings\Administrator\Desktop\Folderico.lnk
[2010/04/07 18:49:55 | 000,000,636 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\FastStone Image Viewer.lnk
[2010/03/27 18:24:29 | 000,000,986 | ---- | C] () -- C:\ZB20100327182417001.xml
[2010/03/19 16:22:06 | 000,696,832 | ---- | C] () -- C:\WINDOWS\is-OIGL0.exe
[2010/03/19 16:22:06 | 000,010,498 | ---- | C] () -- C:\WINDOWS\is-OIGL0.msg
[2010/03/19 16:22:06 | 000,000,399 | ---- | C] () -- C:\WINDOWS\is-OIGL0.lst
[2010/03/18 11:55:31 | 000,000,020 | ---- | C] () -- C:\WINDOWS\mafosav.INI
[2010/03/18 11:47:20 | 000,000,608 | ---- | C] () -- C:\Documents and Settings\Administrator\Desktop\Mario Forever.lnk
[2010/03/17 19:31:47 | 000,000,690 | ---- | C] () -- C:\ZB20100317193137001.xml
[2010/03/17 19:31:25 | 000,000,690 | ---- | C] () -- C:\ZB20100317193119001.xml
[2010/03/17 19:30:59 | 000,000,682 | ---- | C] () -- C:\ZB20100317193051001.xml
[2010/03/16 17:50:00 | 000,074,692 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2010/02/20 11:09:22 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2009/10/28 13:08:26 | 000,000,405 | ---- | C] () -- C:\WINDOWS\cncscore.ini
[2009/09/29 21:20:05 | 000,000,004 | ---- | C] () -- C:\WINDOWS\win32t4.dll
[2009/01/15 12:45:34 | 000,181,248 | ---- | C] () -- C:\WINDOWS\System32\txmlutil.dll
[2008/12/16 14:13:32 | 000,000,679 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2008/11/19 11:54:26 | 000,000,488 | ---- | C] () -- C:\WINDOWS\cmousecc.ini
[2008/11/02 08:20:09 | 000,185,856 | ---- | C] () -- C:\WINDOWS\System32\Bmp2Jpeg.dll
[2008/08/23 23:58:09 | 000,162,304 | ---- | C] () -- C:\WINDOWS\System32\ztvunrar36.dll
[2008/08/23 23:58:09 | 000,153,088 | ---- | C] () -- C:\WINDOWS\System32\UNRAR3.dll
[2008/08/23 23:58:09 | 000,077,312 | ---- | C] () -- C:\WINDOWS\System32\ztvunace26.dll
[2008/08/23 23:58:09 | 000,075,264 | ---- | C] () -- C:\WINDOWS\System32\unacev2.dll
[2008/08/22 19:24:31 | 000,000,097 | ---- | C] () -- C:\WINDOWS\System32\PICSDK.ini
[2008/08/22 19:22:36 | 000,000,044 | ---- | C] () -- C:\WINDOWS\EPCX3800.ini
[2008/08/22 19:07:39 | 000,015,498 | ---- | C] () -- C:\WINDOWS\snpstd3.ini
[2008/08/22 19:07:37 | 000,788,480 | ---- | C] () -- C:\WINDOWS\System32\drivers\snpstd3.sys
[2008/08/22 16:22:40 | 000,717,296 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys
[2008/08/22 15:51:59 | 000,126,976 | R--- | C] () -- C:\WINDOWS\System32\e1000msg.dll
[2007/07/23 12:03:32 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelTraditionalChinese.dll
[2007/07/23 12:03:32 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSwedish.dll
[2007/07/23 12:03:32 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSpanish.dll
[2007/07/23 12:03:30 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll
[2007/07/23 12:03:30 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelPortugese.dll
[2007/07/23 12:03:30 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelKorean.dll
[2007/07/23 12:03:30 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelJapanese.dll
[2007/07/23 12:03:30 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelGerman.dll
[2007/07/23 12:03:30 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelFrench.dll
[2007/01/31 13:50:32 | 000,913,408 | ---- | C] () -- C:\WINDOWS\System32\xreglib.dll
[2004/10/26 18:39:05 | 003,375,104 | ---- | C] () -- C:\WINDOWS\System32\qt-mt331.dll

========== LOP Check ==========

[2009/03/11 13:00:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Auslogics
[2008/11/05 10:52:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Bassic Technologies
[2010/06/10 13:17:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\BitDefender
[2009/05/02 14:56:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Canon
[2008/08/22 16:22:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\DAEMON Tools
[2009/06/11 15:06:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Darwin
[2010/02/20 20:50:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Dropbox
[2008/12/26 17:47:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Foxit
[2010/04/24 23:44:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\GameHouse
[2009/10/16 12:22:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\GamesCafe
[2010/06/02 17:51:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Gmail Notifier
[2009/04/05 16:47:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Gold Casual Games
[2010/02/19 11:33:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\ICAClient
[2008/08/22 17:56:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\KillProcess
[2008/08/22 19:25:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Leadertech
[2008/08/24 14:45:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\mojosoft
[2009/01/15 16:19:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\MP3Rocket
[2009/07/20 09:21:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\NotesHolder
[2010/02/20 21:23:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\OpenOffice.org
[2008/08/23 00:42:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Orca Profiles
[2009/09/20 09:25:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Red Kawa
[2009/01/07 21:33:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Sahmon Games
[2008/08/23 23:58:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Simply Super Software
[2008/08/26 19:52:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Super-Cow
[2008/08/22 22:08:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\TimeQuest
[2010/06/11 13:32:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\uTorrent
[2008/09/27 22:14:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Visual Styler
[2010/01/09 18:31:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\VitySoft
[2009/04/18 19:37:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Vogat Interactive
[2008/09/11 12:05:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\WinWay
[2009/07/22 10:23:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\zapr
[2009/10/30 12:01:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Alawar Stargaze
[2009/05/25 21:42:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AlawarWrapper
[2008/11/05 10:52:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Bassic Technologies
[2009/02/21 11:19:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Big Fish Games Vancouver
[2010/06/10 13:16:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\BitDefender
[2009/01/20 19:43:15 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\CanonIJEPPEX
[2009/07/16 14:17:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\CanonIJPLM
[2009/01/20 20:11:02 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\CanonIJSolutionMenu
[2009/09/12 19:53:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\CraftEdge
[2009/04/05 16:47:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Gold Casual Games
[2008/12/11 15:42:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\InterAction studios
[2008/11/02 19:03:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\MumboJumbo
[2009/12/27 23:35:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\n7-89-o9-3r-4t-r9
[2009/09/06 14:06:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Seagate
[2008/08/23 23:58:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Simply Super Software
[2010/06/11 19:26:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2009/03/26 09:49:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Visual Styler
[2009/04/10 12:52:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Zylom
[2010/04/03 18:11:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2009/09/18 21:16:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2009/09/04 19:27:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[2008/08/22 16:49:31 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\{A25FEDC1-F6D7-440C-BCE2-B71F595F6646}
[2010/06/11 09:21:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At10.job
[2010/06/10 03:01:38 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At100.job
[2010/06/10 04:05:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At101.job
[2010/06/10 05:03:28 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At102.job
[2010/06/10 06:00:21 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At103.job
[2010/06/10 07:00:32 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At104.job
[2010/06/10 08:01:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At105.job
[2010/06/11 09:13:04 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At106.job
[2010/06/11 10:03:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At107.job
[2010/06/11 11:10:22 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At108.job
[2010/06/11 12:00:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At109.job
[2010/06/11 10:21:06 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At11.job
[2010/06/11 13:00:15 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At110.job
[2010/06/11 14:03:43 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At111.job
[2010/06/11 15:01:47 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At112.job
[2010/06/11 21:58:04 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At113.job
[2010/06/08 17:01:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At114.job
[2010/06/08 18:00:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At115.job
[2010/06/08 19:00:10 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At116.job
[2010/06/09 20:04:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At117.job
[2010/06/09 21:01:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At118.job
[2010/06/11 22:01:30 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At119.job
[2010/06/11 11:21:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At12.job
[2010/06/08 23:00:57 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At120.job
[2010/06/10 00:13:03 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At121.job
[2010/06/10 01:00:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At122.job
[2010/06/10 02:00:21 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At123.job
[2010/06/10 03:01:43 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At124.job
[2010/06/10 04:03:20 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At125.job
[2010/06/10 05:03:29 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At126.job
[2010/06/10 06:01:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At127.job
[2010/06/10 07:01:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At128.job
[2010/06/10 08:02:29 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At129.job
[2010/06/11 12:21:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At13.job
[2010/06/11 09:13:04 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At130.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At131.job
[2010/06/11 11:10:24 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At132.job
[2010/06/11 12:00:59 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At133.job
[2010/06/11 13:00:16 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At134.job
[2010/06/11 14:03:43 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At135.job
[2010/06/11 15:01:47 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At136.job
[2010/06/11 21:58:04 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At137.job
[2010/06/08 17:01:27 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At138.job
[2010/06/08 18:00:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At139.job
[2010/06/11 13:21:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At14.job
[2010/06/08 19:00:10 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At140.job
[2010/06/09 20:03:56 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At141.job
[2010/06/09 21:01:16 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At142.job
[2010/06/11 22:01:32 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At143.job
[2010/06/08 23:00:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At144.job
[2010/06/10 00:52:05 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At145.job
[2010/06/10 01:00:50 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At146.job
[2010/06/10 02:00:28 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At147.job
[2010/06/10 03:01:51 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At148.job
[2010/06/10 04:06:21 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At149.job
[2010/06/11 14:21:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At15.job
[2010/06/10 05:03:29 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At150.job
[2010/06/10 06:01:36 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At151.job
[2010/06/10 07:01:43 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At152.job
[2010/06/10 08:02:32 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At153.job
[2010/06/11 09:13:04 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At154.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At155.job
[2010/06/11 11:10:26 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At156.job
[2010/06/11 12:00:59 | 000,000,416 | ---- | M] () --
fullbug
Regular Member
 
Posts: 31
Joined: June 10th, 2010, 7:51 am

Re: Stubborn Malware

Unread postby fullbug » June 12th, 2010, 1:50 pm

C:\WINDOWS\Tasks\At157.job
[2010/06/11 13:00:16 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At158.job
[2010/06/11 14:03:43 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At159.job
[2010/06/11 15:21:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At16.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At160.job
[2010/06/11 21:58:04 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At161.job
[2010/06/08 17:01:27 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At162.job
[2010/06/08 18:00:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At163.job
[2010/06/08 19:00:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At164.job
[2010/06/09 20:03:28 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At165.job
[2010/06/09 21:01:16 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At166.job
[2010/06/11 22:01:33 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At167.job
[2010/06/08 23:00:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At168.job
[2010/06/10 00:08:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At169.job
[2010/06/08 16:21:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At17.job
[2010/06/10 01:00:51 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At170.job
[2010/06/10 02:00:44 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At171.job
[2010/06/10 03:02:16 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At172.job
[2010/06/10 04:06:23 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At173.job
[2010/06/10 05:03:30 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At174.job
[2010/06/10 06:02:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At175.job
[2010/06/10 07:01:47 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At176.job
[2010/06/10 08:02:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At177.job
[2010/06/11 09:13:04 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At178.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At179.job
[2010/06/08 17:21:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At18.job
[2010/06/11 11:04:33 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At180.job
[2010/06/11 12:00:59 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At181.job
[2010/06/11 13:00:19 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At182.job
[2010/06/11 14:03:43 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At183.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At184.job
[2010/06/11 21:58:04 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At185.job
[2010/06/08 17:01:28 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At186.job
[2010/06/08 18:00:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At187.job
[2010/06/08 19:00:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At188.job
[2010/06/09 20:04:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At189.job
[2010/06/08 18:21:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At19.job
[2010/06/09 21:01:18 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At190.job
[2010/06/11 22:01:33 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At191.job
[2010/06/08 23:00:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At192.job
[2010/06/10 00:50:01 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At193.job
[2010/06/10 01:00:51 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At194.job
[2010/06/10 02:00:50 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At195.job
[2010/06/10 03:02:34 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At196.job
[2010/06/10 04:05:27 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At197.job
[2010/06/10 05:03:30 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At198.job
[2010/06/10 06:02:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At199.job
[2010/06/08 19:21:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At20.job
[2010/06/10 07:01:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At200.job
[2010/06/10 08:02:53 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At201.job
[2010/06/11 09:13:04 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At202.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At203.job
[2010/06/11 11:13:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At204.job
[2010/06/11 12:01:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At205.job
[2010/06/11 13:01:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At206.job
[2010/06/11 14:03:44 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At207.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At208.job
[2010/06/11 21:58:05 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At209.job
[2010/06/09 20:21:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At21.job
[2010/06/08 17:01:29 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At210.job
[2010/06/08 18:00:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At211.job
[2010/06/08 19:00:12 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At212.job
[2010/06/09 20:04:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At213.job
[2010/06/09 21:01:18 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At214.job
[2010/06/11 22:01:34 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At215.job
[2010/06/08 23:00:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At216.job
[2010/06/10 00:57:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At217.job
[2010/06/10 01:00:52 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At218.job
[2010/06/10 02:00:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At219.job
[2010/06/09 21:21:02 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At22.job
[2010/06/10 03:02:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At220.job
[2010/06/10 04:06:05 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At221.job
[2010/06/10 05:03:30 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At222.job
[2010/06/10 06:02:03 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At223.job
[2010/06/10 07:01:51 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At224.job
[2010/06/10 08:03:06 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At225.job
[2010/06/11 09:13:05 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At226.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At227.job
[2010/06/11 11:13:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At228.job
[2010/06/11 12:01:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At229.job
[2010/06/11 22:21:01 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At23.job
[2010/06/11 13:02:34 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At230.job
[2010/06/11 14:03:44 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At231.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At232.job
[2010/06/11 21:58:07 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At233.job
[2010/06/08 17:01:30 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At234.job
[2010/06/08 18:00:26 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At235.job
[2010/06/08 19:00:12 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At236.job
[2010/06/09 20:03:01 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At237.job
[2010/06/09 21:01:18 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At238.job
[2010/06/11 22:01:35 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At239.job
[2010/06/09 23:21:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At24.job
[2010/06/08 23:00:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At240.job
[2010/06/10 00:15:01 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At241.job
[2010/06/10 01:00:52 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At242.job
[2010/06/10 02:01:01 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At243.job
[2010/06/10 03:02:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At244.job
[2010/06/10 04:05:33 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At245.job
[2010/06/10 05:03:30 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At246.job
[2010/06/10 06:02:04 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At247.job
[2010/06/10 07:01:52 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At248.job
[2010/06/10 08:03:08 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At249.job
[2010/06/10 00:39:01 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At25.job
[2010/06/11 09:13:05 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At250.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At251.job
[2010/06/11 11:13:55 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At252.job
[2010/06/11 12:01:01 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At253.job
[2010/06/11 13:02:39 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At254.job
[2010/06/11 14:03:44 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At255.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At256.job
[2010/06/11 21:58:08 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At257.job
[2010/06/08 17:01:38 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At258.job
[2010/06/08 18:00:26 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At259.job
[2010/06/10 01:00:53 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At26.job
[2010/06/08 19:00:12 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At260.job
[2010/06/09 20:04:14 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At261.job
[2010/06/09 21:01:19 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At262.job
[2010/06/11 22:01:36 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At263.job
[2010/06/08 23:00:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At264.job
[2010/06/10 00:49:03 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At265.job
[2010/06/10 01:00:53 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At266.job
[2010/06/10 02:01:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At267.job
[2010/06/10 03:02:42 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At268.job
[2010/06/10 04:06:24 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At269.job
[2010/06/10 02:01:04 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At27.job
[2010/06/10 05:03:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At270.job
[2010/06/10 06:02:05 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At271.job
[2010/06/10 07:01:54 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At272.job
[2010/06/10 08:03:10 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At273.job
[2010/06/11 09:13:05 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At274.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At275.job
[2010/06/11 11:13:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At276.job
[2010/06/11 12:01:01 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At277.job
[2010/06/11 13:02:53 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At278.job
[2010/06/11 14:03:44 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At279.job
[2010/06/10 03:02:43 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At28.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At280.job
[2010/06/11 21:58:08 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At281.job
[2010/06/08 17:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At282.job
[2010/06/08 18:00:26 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At283.job
[2010/06/08 19:00:12 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At284.job
[2010/06/09 20:04:14 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At285.job
[2010/06/09 21:01:19 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At286.job
[2010/06/11 22:01:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At287.job
[2010/06/08 23:03:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At288.job
[2010/06/10 00:38:03 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At289.job
[2010/06/10 04:03:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At29.job
[2010/06/10 01:00:53 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At290.job
[2010/06/10 02:01:05 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At291.job
[2010/06/10 03:02:46 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At292.job
[2010/06/10 04:03:35 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At293.job
[2010/06/10 05:03:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At294.job
[2010/06/10 06:02:09 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At295.job
[2010/06/10 07:01:55 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At296.job
[2010/06/10 08:03:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At297.job
[2010/06/11 09:13:05 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At298.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At299.job
[2010/06/10 05:03:32 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At30.job
[2010/06/11 11:14:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At300.job
[2010/06/11 12:01:01 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At301.job
[2010/06/11 13:03:06 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At302.job
[2010/06/11 14:03:45 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At303.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At304.job
[2010/06/11 21:58:09 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At305.job
[2010/06/08 17:01:50 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At306.job
[2010/06/08 18:00:26 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At307.job
[2010/06/08 19:00:12 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At308.job
[2010/06/09 20:03:41 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At309.job
[2010/06/10 06:02:10 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At31.job
[2010/06/09 21:01:19 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At310.job
[2010/06/11 22:01:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At311.job
[2010/06/08 23:03:52 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At312.job
[2010/06/10 00:57:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At313.job
[2010/06/10 01:00:53 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At314.job
[2010/06/10 02:01:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At315.job
[2010/06/10 03:02:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At316.job
[2010/06/10 04:06:24 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At317.job
[2010/06/10 05:03:32 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At318.job
[2010/06/10 06:02:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At319.job
[2010/06/10 07:01:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At32.job
[2010/06/10 07:02:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At320.job
[2010/06/10 08:03:15 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At321.job
[2010/06/11 09:13:05 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At322.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At323.job
[2010/06/11 11:10:14 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At324.job
[2010/06/11 12:01:01 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At325.job
[2010/06/11 13:03:08 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At326.job
[2010/06/11 14:03:46 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At327.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At328.job
[2010/06/11 21:58:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At329.job
[2010/06/10 08:03:17 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At33.job
[2010/06/08 17:01:50 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At330.job
[2010/06/08 18:00:26 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At331.job
[2010/06/08 19:00:12 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At332.job
[2010/06/09 20:03:47 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At333.job
[2010/06/09 21:01:20 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At334.job
[2010/06/11 22:01:38 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At335.job
[2010/06/08 23:03:32 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At336.job
[2010/06/10 00:08:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At337.job
[2010/06/10 01:00:53 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At338.job
[2010/06/10 02:03:27 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At339.job
[2010/06/11 09:13:06 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At34.job
[2010/06/10 03:02:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At340.job
[2010/06/10 04:06:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At341.job
[2010/06/10 05:03:33 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At342.job
[2010/06/10 06:02:12 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At343.job
[2010/06/10 07:02:03 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At344.job
[2010/06/10 08:03:19 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At345.job
[2010/06/11 09:13:06 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At346.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At347.job
[2010/06/11 11:14:05 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At348.job
[2010/06/11 12:01:01 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At349.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At35.job
[2010/06/11 13:03:10 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At350.job
[2010/06/11 14:03:47 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At351.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At352.job
[2010/06/11 21:58:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At353.job
[2010/06/08 17:01:51 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At354.job
[2010/06/08 18:00:26 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At355.job
[2010/06/08 19:00:12 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At356.job
[2010/06/09 20:04:14 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At357.job
[2010/06/09 21:01:21 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At358.job
[2010/06/11 22:01:39 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At359.job
[2010/06/11 11:14:10 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At36.job
[2010/06/08 23:03:27 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At360.job
[2010/06/10 00:24:01 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At361.job
[2010/06/10 01:00:54 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At362.job
[2010/06/10 02:03:23 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At363.job
[2010/06/10 03:02:50 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At364.job
[2010/06/10 04:05:56 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At365.job
[2010/06/10 05:03:34 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At366.job
[2010/06/10 06:02:15 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At367.job
[2010/06/10 07:02:04 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At368.job
[2010/06/10 08:03:20 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At369.job
[2010/06/11 12:01:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At37.job
[2010/06/11 09:13:06 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At370.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At371.job
[2010/06/11 11:14:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At372.job
[2010/06/11 12:01:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At373.job
[2010/06/11 13:03:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At374.job
[2010/06/11 14:03:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At375.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At376.job
[2010/06/11 21:58:12 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At377.job
[2010/06/08 17:01:52 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At378.job
[2010/06/08 18:00:27 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At379.job
[2010/06/11 13:03:19 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At38.job
[2010/06/08 19:00:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At380.job
[2010/06/09 20:04:14 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At381.job
[2010/06/09 21:01:23 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At382.job
[2010/06/11 22:01:39 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At383.job
[2010/06/08 23:03:04 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At384.job
[2010/06/10 00:47:01 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At385.job
[2010/06/10 01:00:54 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At386.job
[2010/06/10 02:03:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At387.job
[2010/06/10 03:02:51 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At388.job
[2010/06/10 04:03:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At389.job
[2010/06/11 14:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At39.job
[2010/06/10 05:03:34 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At390.job
[2010/06/10 06:02:23 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At391.job
[2010/06/10 07:02:06 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At392.job
[2010/06/10 08:03:21 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At393.job
[2010/06/11 09:13:08 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At394.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At395.job
[2010/06/11 11:14:14 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At396.job
[2010/06/11 12:01:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At397.job
[2010/06/11 13:03:19 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At398.job
[2010/06/11 14:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At399.job
[2010/06/10 03:21:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At4.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At40.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At400.job
[2010/06/11 21:58:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At401.job
[2010/06/08 17:01:53 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At402.job
[2010/06/08 18:00:33 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At403.job
[2010/06/08 19:00:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At404.job
[2010/06/09 20:03:35 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At405.job
[2010/06/09 21:01:23 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At406.job
[2010/06/11 22:01:39 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At407.job
[2010/06/08 23:03:34 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At408.job
[2010/06/10 00:39:01 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At409.job
[2010/06/11 21:58:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At41.job
[2010/06/10 01:00:54 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At410.job
[2010/06/10 02:03:28 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At411.job
[2010/06/10 03:02:54 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At412.job
[2010/06/10 04:05:35 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At413.job
[2010/06/10 05:03:35 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At414.job
[2010/06/10 06:02:39 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At415.job
[2010/06/10 07:02:08 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At416.job
[2010/06/10 08:03:27 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At417.job
[2010/06/11 09:13:08 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At418.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At419.job
[2010/06/08 17:01:53 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At42.job
[2010/06/11 11:14:15 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At420.job
[2010/06/11 12:01:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At421.job
[2010/06/11 13:03:20 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At422.job
[2010/06/11 14:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At423.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At424.job
[2010/06/08 16:03:05 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At425.job
[2010/06/08 17:01:54 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At426.job
[2010/06/08 18:00:34 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At427.job
[2010/06/08 19:00:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At428.job
[2010/06/09 20:03:36 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At429.job
[2010/06/08 18:00:33 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At43.job
[2010/06/09 21:01:23 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At430.job
[2010/06/11 22:01:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At431.job
[2010/06/08 23:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At432.job
[2010/06/10 00:48:01 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At433.job
[2010/06/10 01:00:55 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At434.job
[2010/06/10 02:03:28 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At435.job
[2010/06/10 03:02:55 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At436.job
[2010/06/10 04:06:07 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At437.job
[2010/06/10 05:03:35 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At438.job
[2010/06/10 06:02:39 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At439.job
[2010/06/08 19:00:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At44.job
[2010/06/10 07:02:09 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At440.job
[2010/06/10 08:03:28 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At441.job
[2010/06/11 09:13:08 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At442.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At443.job
[2010/06/11 11:14:16 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At444.job
[2010/06/11 12:01:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At445.job
[2010/06/11 13:03:20 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At446.job
[2010/06/11 14:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At447.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At448.job
[2010/06/08 16:03:06 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At449.job
[2010/06/09 20:04:15 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At45.job
[2010/06/08 17:01:55 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At450.job
[2010/06/08 18:00:36 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At451.job
[2010/06/08 19:00:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At452.job
[2010/06/09 20:03:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At453.job
[2010/06/09 21:01:24 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At454.job
[2010/06/11 22:01:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At455.job
[2010/06/08 23:03:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At456.job
[2010/06/10 00:23:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At457.job
[2010/06/10 01:00:55 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At458.job
[2010/06/10 02:03:26 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At459.job
[2010/06/09 21:01:24 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At46.job
[2010/06/10 03:02:57 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At460.job
[2010/06/10 04:05:19 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At461.job
[2010/06/10 05:03:35 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At462.job
[2010/06/10 06:02:41 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At463.job
[2010/06/10 07:02:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At464.job
[2010/06/10 08:03:24 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At465.job
[2010/06/11 09:13:10 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At466.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At467.job
[2010/06/11 11:14:18 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At468.job
[2010/06/11 12:01:03 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At469.job
[2010/06/11 22:01:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At47.job
[2010/06/11 13:03:21 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At470.job
[2010/06/09 14:02:07 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At471.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At472.job
[2010/06/08 16:03:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At473.job
[2010/06/08 17:02:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At474.job
[2010/06/08 18:00:36 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At475.job
[2010/06/08 19:00:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At476.job
[2010/06/09 20:03:41 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At477.job
[2010/06/09 21:01:24 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At478.job
[2010/06/11 22:01:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At479.job
[2010/06/08 23:03:50 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At48.job
[2010/06/08 23:03:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At480.job
[2010/06/10 00:52:05 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At481.job
[2010/06/10 01:00:55 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At482.job
[2010/06/10 02:03:27 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At483.job
[2010/06/10 03:02:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At484.job
[2010/06/10 04:06:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At485.job
[2010/06/10 05:03:35 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At486.job
[2010/06/10 06:02:42 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At487.job
[2010/06/10 07:02:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At488.job
[2010/06/10 08:03:29 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At489.job
[2010/06/10 00:13:05 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At49.job
[2010/06/11 09:13:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At490.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At491.job
[2010/06/11 11:14:19 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At492.job
[2010/06/11 12:01:14 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At493.job
[2010/06/11 13:03:22 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At494.job
[2010/06/09 14:02:09 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At495.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At496.job
[2010/06/08 16:03:14 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At497.job
[2010/06/08 17:01:55 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At498.job
[2010/06/08 18:00:36 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At499.job
[2010/06/10 04:21:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At5.job
[2010/06/10 01:00:56 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At50.job
[2010/06/08 19:00:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At500.job
[2010/06/09 20:03:38 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At501.job
[2010/06/09 21:01:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At502.job
[2010/06/11 22:01:41 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At503.job
[2010/06/08 23:03:38 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At504.job
[2010/06/10 00:15:01 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At505.job
[2010/06/10 01:00:56 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At506.job
[2010/06/10 02:03:29 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At507.job
[2010/06/10 03:03:01 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At508.job
[2010/06/10 04:05:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At509.job
[2010/06/10 02:03:29 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At51.job
[2010/06/10 05:03:36 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At510.job
[2010/06/10 06:02:42 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At511.job
[2010/06/10 07:03:16 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At512.job
[2010/06/10 08:03:29 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At513.job
[2010/06/11 09:13:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At514.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At515.job
[2010/06/11 11:14:20 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At516.job
[2010/06/11 12:01:24 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At517.job
[2010/06/11 13:03:22 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At518.job
[2010/06/09 14:02:15 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At519.job
[2010/06/10 03:03:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At52.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At520.job
[2010/06/08 16:03:15 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At521.job
[2010/06/08 17:01:56 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At522.job
[2010/06/08 18:00:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At523.job
[2010/06/08 19:00:15 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At524.job
[2010/06/09 20:04:15 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At525.job
[2010/06/09 21:01:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At526.job
[2010/06/11 22:03:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At527.job
[2010/06/08 23:03:51 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At528.job
[2010/06/10 00:32:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At529.job
[2010/06/10 04:06:26 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At53.job
[2010/06/10 01:00:56 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At530.job
[2010/06/10 02:03:29 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At531.job
[2010/06/10 03:03:03 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At532.job
[2010/06/10 04:03:29 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At533.job
[2010/06/10 05:03:36 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At534.job
[2010/06/10 06:02:43 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At535.job
[2010/06/10 07:02:14 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At536.job
[2010/06/10 08:03:26 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At537.job
[2010/06/11 09:13:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At538.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At539.job
[2010/06/10 05:03:36 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At54.job
[2010/06/11 11:14:23 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At540.job
[2010/06/11 12:04:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At541.job
[2010/06/11 13:03:24 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At542.job
[2010/06/09 14:02:21 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At543.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At544.job
[2010/06/08 16:03:15 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At545.job
[2010/06/08 17:01:57 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At546.job
[2010/06/08 18:00:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At547.job
[2010/06/08 19:00:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At548.job
[2010/06/09 20:04:15 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At549.job
[2010/06/10 06:02:43 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At55.job
[2010/06/09 21:01:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At550.job
[2010/06/11 22:03:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At551.job
[2010/06/08 23:03:29 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At552.job
[2010/06/10 00:56:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At553.job
[2010/06/10 01:00:57 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At554.job
[2010/06/10 02:03:30 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At555.job
[2010/06/10 03:03:05 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At556.job
[2010/06/10 04:06:08 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At557.job
[2010/06/10 05:03:36 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At558.job
[2010/06/10 06:02:44 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At559.job
[2010/06/10 07:03:16 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At56.job
[2010/06/10 07:03:17 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At560.job
[2010/06/10 08:03:30 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At561.job
[2010/06/11 09:13:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At562.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At563.job
[2010/06/11 11:14:24 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At564.job
[2010/06/11 12:04:38 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At565.job
[2010/06/11 13:03:24 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At566.job
[2010/06/09 14:02:24 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At567.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At568.job
[2010/06/08 19:05:35 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At569.job
[2010/06/10 08:03:30 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At57.job
[2010/06/08 19:05:35 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At570.job
[2010/06/08 19:05:35 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At571.job
[2010/06/08 19:05:35 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At572.job
[2010/06/09 20:04:16 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At573.job
[2010/06/09 21:01:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At574.job
[2010/06/11 22:03:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At575.job
[2010/06/08 23:03:53 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At576.job
[2010/06/10 00:10:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At577.job
[2010/06/10 01:01:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At578.job
[2010/06/10 02:03:30 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At579.job
[2010/06/11 09:13:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At58.job
[2010/06/10 03:03:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At580.job
[2010/06/10 04:06:26 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At581.job
[2010/06/10 05:03:36 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At582.job
[2010/06/10 06:02:45 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At583.job
[2010/06/10 07:02:15 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At584.job
[2010/06/10 08:03:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At585.job
[2010/06/11 09:13:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At586.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At587.job
[2010/06/11 11:14:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At588.job
[2010/06/11 12:04:39 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At589.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At59.job
[2010/06/11 13:03:24 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At590.job
[2010/06/09 14:02:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At591.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At592.job
[2010/06/08 22:15:08 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At593.job
[2010/06/08 22:15:08 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At594.job
[2010/06/08 22:15:08 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At595.job
[2010/06/08 22:15:08 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At596.job
[2010/06/09 20:04:16 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At597.job
[2010/06/09 21:01:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At598.job
[2010/06/11 22:03:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At599.job
[2010/06/10 05:21:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At6.job
[2010/06/11 11:14:27 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At60.job
[2010/06/08 23:03:54 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At600.job
[2010/06/10 00:49:03 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At601.job
[2010/06/10 01:01:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At602.job
[2010/06/10 02:03:30 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At603.job
[2010/06/10 03:03:09 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At604.job
[2010/06/10 04:03:38 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At605.job
[2010/06/10 05:03:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At606.job
[2010/06/10 06:02:46 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At607.job
[2010/06/10 07:02:16 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At608.job
[2010/06/10 08:03:31 | 000,000,416 | ---- | M] () --
fullbug
Regular Member
 
Posts: 31
Joined: June 10th, 2010, 7:51 am

Re: Stubborn Malware

Unread postby fullbug » June 12th, 2010, 1:51 pm

C:\WINDOWS\Tasks\At609.job
[2010/06/11 12:04:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At61.job
[2010/06/11 09:13:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At610.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At611.job
[2010/06/11 11:14:28 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At612.job
[2010/06/11 12:04:41 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At613.job
[2010/06/11 13:03:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At614.job
[2010/06/09 14:02:32 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At615.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At616.job
[2010/06/09 00:19:18 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At617.job
[2010/06/09 00:19:18 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At618.job
[2010/06/09 00:19:18 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At619.job
[2010/06/11 13:03:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At62.job
[2010/06/09 00:19:18 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At620.job
[2010/06/09 20:04:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At621.job
[2010/06/09 21:01:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At622.job
[2010/06/11 22:03:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At623.job
[2010/06/09 00:19:18 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At624.job
[2010/06/10 00:42:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At625.job
[2010/06/10 01:01:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At626.job
[2010/06/10 02:03:30 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At627.job
[2010/06/10 03:03:14 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At628.job
[2010/06/10 04:06:09 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At629.job
[2010/06/09 14:02:26 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At63.job
[2010/06/10 05:03:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At630.job
[2010/06/10 06:02:46 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At631.job
[2010/06/10 07:03:17 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At632.job
[2010/06/10 08:03:33 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At633.job
[2010/06/11 09:13:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At634.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At635.job
[2010/06/11 11:14:30 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At636.job
[2010/06/11 12:04:42 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At637.job
[2010/06/11 13:03:26 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At638.job
[2010/06/09 14:02:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At639.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At64.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At640.job
[2010/06/09 02:26:17 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At641.job
[2010/06/09 02:26:17 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At642.job
[2010/06/09 02:26:17 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At643.job
[2010/06/09 02:26:17 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At644.job
[2010/06/09 20:04:16 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At645.job
[2010/06/09 21:01:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At646.job
[2010/06/11 22:03:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At647.job
[2010/06/09 02:26:17 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At648.job
[2010/06/10 00:45:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At649.job
[2010/06/08 16:03:16 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At65.job
[2010/06/10 01:01:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At650.job
[2010/06/10 02:03:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At651.job
[2010/06/10 03:03:10 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At652.job
[2010/06/10 04:06:27 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At653.job
[2010/06/10 05:03:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At654.job
[2010/06/10 06:02:47 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At655.job
[2010/06/10 07:03:18 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At656.job
[2010/06/10 08:03:33 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At657.job
[2010/06/11 09:13:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At658.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At659.job
[2010/06/08 17:02:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At66.job
[2010/06/11 11:14:39 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At660.job
[2010/06/11 12:04:42 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At661.job
[2010/06/11 13:03:26 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At662.job
[2010/06/09 14:02:28 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At663.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At664.job
[2010/06/09 02:38:41 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At665.job
[2010/06/09 02:38:41 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At666.job
[2010/06/09 02:38:41 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At667.job
[2010/06/09 02:38:41 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At668.job
[2010/06/09 20:04:09 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At669.job
[2010/06/08 18:00:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At67.job
[2010/06/09 21:01:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At670.job
[2010/06/11 22:03:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At671.job
[2010/06/09 02:38:41 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At672.job
[2010/06/10 00:51:01 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At673.job
[2010/06/10 01:01:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At674.job
[2010/06/10 02:03:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At675.job
[2010/06/10 03:03:14 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At676.job
[2010/06/10 04:06:27 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At677.job
[2010/06/10 05:03:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At678.job
[2010/06/10 06:02:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At679.job
[2010/06/08 19:00:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At68.job
[2010/06/10 07:03:19 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At680.job
[2010/06/10 08:03:33 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At681.job
[2010/06/11 09:13:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At682.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At683.job
[2010/06/11 11:14:32 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At684.job
[2010/06/11 12:04:43 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At685.job
[2010/06/11 13:03:27 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At686.job
[2010/06/09 14:02:29 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At687.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At688.job
[2010/06/09 02:58:18 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At689.job
[2010/06/09 20:03:42 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At69.job
[2010/06/09 02:58:18 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At690.job
[2010/06/09 02:58:18 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At691.job
[2010/06/09 02:58:18 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At692.job
[2010/06/09 20:03:44 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At693.job
[2010/06/09 21:01:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At694.job
[2010/06/11 22:03:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At695.job
[2010/06/09 02:58:18 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At696.job
[2010/06/10 00:38:03 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At697.job
[2010/06/10 01:01:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At698.job
[2010/06/10 02:03:32 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At699.job
[2010/06/10 06:21:01 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At7.job
[2010/06/09 21:01:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At70.job
[2010/06/10 03:03:14 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At700.job
[2010/06/10 04:05:39 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At701.job
[2010/06/10 05:03:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At702.job
[2010/06/10 06:02:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At703.job
[2010/06/10 07:03:19 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At704.job
[2010/06/10 08:03:34 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At705.job
[2010/06/11 09:13:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At706.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At707.job
[2010/06/11 11:14:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At708.job
[2010/06/11 12:04:44 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At709.job
[2010/06/11 22:03:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At71.job
[2010/06/11 13:03:28 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At710.job
[2010/06/09 14:02:30 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At711.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At712.job
[2010/06/09 03:26:53 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At713.job
[2010/06/09 03:26:53 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At714.job
[2010/06/09 03:26:53 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At715.job
[2010/06/09 03:26:53 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At716.job
[2010/06/09 20:03:52 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At717.job
[2010/06/09 21:01:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At718.job
[2010/06/11 22:03:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At719.job
[2010/06/08 23:02:16 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At72.job
[2010/06/09 03:26:53 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At720.job
[2010/06/10 00:46:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At721.job
[2010/06/10 01:01:38 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At722.job
[2010/06/10 02:03:32 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At723.job
[2010/06/10 03:03:15 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At724.job
[2010/06/10 04:05:42 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At725.job
[2010/06/10 05:03:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At726.job
[2010/06/10 06:02:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At727.job
[2010/06/10 07:03:20 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At728.job
[2010/06/10 08:03:35 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At729.job
[2010/06/10 00:57:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At73.job
[2010/06/11 09:13:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At730.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At731.job
[2010/06/11 11:14:46 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At732.job
[2010/06/11 12:04:45 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At733.job
[2010/06/11 13:03:28 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At734.job
[2010/06/09 14:02:30 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At735.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At736.job
[2010/06/09 05:33:23 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At737.job
[2010/06/09 05:33:23 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At738.job
[2010/06/09 05:33:23 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At739.job
[2010/06/10 01:01:38 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At74.job
[2010/06/09 05:33:23 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At740.job
[2010/06/09 20:03:45 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At741.job
[2010/06/09 21:01:26 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At742.job
[2010/06/11 22:03:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At743.job
[2010/06/09 05:33:23 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At744.job
[2010/06/10 00:39:01 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At745.job
[2010/06/10 01:01:39 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At746.job
[2010/06/10 02:03:19 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At747.job
[2010/06/10 03:03:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At748.job
[2010/06/10 04:06:28 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At749.job
[2010/06/10 02:03:32 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At75.job
[2010/06/10 05:03:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At750.job
[2010/06/10 06:02:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At751.job
[2010/06/10 07:03:20 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At752.job
[2010/06/10 08:03:35 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At753.job
[2010/06/11 09:13:12 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At754.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At755.job
[2010/06/11 11:14:42 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At756.job
[2010/06/11 12:04:45 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At757.job
[2010/06/11 13:03:28 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At758.job
[2010/06/09 14:02:33 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At759.job
[2010/06/10 03:03:12 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At76.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At760.job
[2010/06/09 07:40:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At761.job
[2010/06/09 07:40:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At762.job
[2010/06/09 07:40:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At763.job
[2010/06/09 07:40:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At764.job
[2010/06/09 20:04:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At765.job
[2010/06/09 21:01:26 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At766.job
[2010/06/11 22:03:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At767.job
[2010/06/09 07:40:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At768.job
[2010/06/10 00:41:03 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At769.job
[2010/06/10 04:06:10 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At77.job
[2010/06/10 01:01:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At770.job
[2010/06/10 02:03:32 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At771.job
[2010/06/10 03:03:08 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At772.job
[2010/06/10 04:06:29 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At773.job
[2010/06/10 05:03:38 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At774.job
[2010/06/10 06:02:50 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At775.job
[2010/06/10 07:03:20 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At776.job
[2010/06/10 08:03:36 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At777.job
[2010/06/11 09:13:12 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At778.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At779.job
[2010/06/10 05:03:38 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At78.job
[2010/06/11 11:14:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At780.job
[2010/06/11 12:04:46 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At781.job
[2010/06/11 13:03:29 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At782.job
[2010/06/09 14:02:33 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At783.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At784.job
[2010/06/09 09:45:28 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At785.job
[2010/06/09 09:45:28 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At786.job
[2010/06/09 09:45:28 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At787.job
[2010/06/09 09:45:28 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At788.job
[2010/06/09 20:04:17 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At789.job
[2010/06/10 06:02:50 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At79.job
[2010/06/09 21:01:26 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At790.job
[2010/06/11 22:03:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At791.job
[2010/06/09 09:45:28 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At792.job
[2010/06/10 00:25:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At793.job
[2010/06/10 01:01:36 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At794.job
[2010/06/10 02:03:33 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At795.job
[2010/06/10 03:03:16 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At796.job
[2010/06/10 04:05:44 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At797.job
[2010/06/10 05:03:44 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At798.job
[2010/06/10 06:02:50 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At799.job
[2010/06/10 07:21:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At8.job
[2010/06/10 07:03:21 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At80.job
[2010/06/10 07:03:21 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At800.job
[2010/06/10 08:03:36 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At801.job
[2010/06/11 09:13:12 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At802.job
[2010/06/11 10:03:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At803.job
[2010/06/11 11:14:43 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At804.job
[2010/06/11 12:04:46 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At805.job
[2010/06/11 13:03:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At806.job
[2010/06/09 14:02:34 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At807.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At808.job
[2010/06/09 13:11:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At809.job
[2010/06/10 08:03:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At81.job
[2010/06/09 13:11:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At810.job
[2010/06/09 13:11:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At811.job
[2010/06/09 13:11:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At812.job
[2010/06/09 20:04:17 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At813.job
[2010/06/09 21:01:26 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At814.job
[2010/06/11 22:03:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At815.job
[2010/06/09 13:11:11 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At816.job
[2010/06/10 00:44:01 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At817.job
[2010/06/10 01:01:41 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At818.job
[2010/06/10 02:03:33 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At819.job
[2010/06/11 09:13:12 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At82.job
[2010/06/10 03:03:12 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At820.job
[2010/06/10 04:06:30 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At821.job
[2010/06/10 05:03:44 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At822.job
[2010/06/10 06:02:50 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At823.job
[2010/06/10 07:03:22 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At824.job
[2010/06/10 08:03:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At825.job
[2010/06/11 09:13:12 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At826.job
[2010/06/09 19:41:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At827.job
[2010/06/11 11:14:43 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At828.job
[2010/06/11 12:04:47 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At829.job
[2010/06/09 10:05:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At83.job
[2010/06/11 13:03:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At830.job
[2010/06/09 19:41:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At831.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At832.job
[2010/06/09 19:41:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At833.job
[2010/06/09 19:41:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At834.job
[2010/06/09 19:41:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At835.job
[2010/06/09 19:41:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At836.job
[2010/06/09 20:04:01 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At837.job
[2010/06/09 21:01:26 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At838.job
[2010/06/11 22:03:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At839.job
[2010/06/11 11:14:38 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At84.job
[2010/06/09 19:41:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At840.job
[2010/06/10 00:52:05 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At841.job
[2010/06/10 01:01:41 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At842.job
[2010/06/10 02:03:33 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At843.job
[2010/06/10 03:03:16 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At844.job
[2010/06/10 04:06:30 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At845.job
[2010/06/10 05:03:44 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At846.job
[2010/06/10 06:02:50 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At847.job
[2010/06/10 07:03:22 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At848.job
[2010/06/10 08:03:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At849.job
[2010/06/11 12:04:30 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At85.job
[2010/06/11 09:13:12 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At850.job
[2010/06/09 21:44:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At851.job
[2010/06/11 11:14:33 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At852.job
[2010/06/11 12:04:47 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At853.job
[2010/06/11 13:03:32 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At854.job
[2010/06/09 21:44:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At855.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At856.job
[2010/06/09 21:44:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At857.job
[2010/06/09 21:44:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At858.job
[2010/06/09 21:44:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At859.job
[2010/06/11 13:03:32 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At86.job
[2010/06/09 21:44:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At860.job
[2010/06/09 21:44:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At861.job
[2010/06/09 21:44:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At862.job
[2010/06/11 22:03:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At863.job
[2010/06/09 21:44:25 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At864.job
[2010/06/10 01:46:39 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At865.job
[2010/06/10 01:46:39 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At866.job
[2010/06/10 02:03:34 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At867.job
[2010/06/10 03:03:16 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At868.job
[2010/06/10 04:06:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At869.job
[2010/06/09 14:02:34 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At87.job
[2010/06/10 05:03:44 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At870.job
[2010/06/10 06:02:51 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At871.job
[2010/06/10 07:03:23 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At872.job
[2010/06/10 08:03:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At873.job
[2010/06/11 09:13:12 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At874.job
[2010/06/10 01:46:39 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At875.job
[2010/06/11 11:14:34 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At876.job
[2010/06/11 12:04:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At877.job
[2010/06/11 13:03:32 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At878.job
[2010/06/10 01:46:39 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At879.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At88.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At880.job
[2010/06/10 01:46:39 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At881.job
[2010/06/10 01:46:39 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At882.job
[2010/06/10 01:46:39 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At883.job
[2010/06/10 01:46:39 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At884.job
[2010/06/10 01:46:39 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At885.job
[2010/06/10 01:46:39 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At886.job
[2010/06/11 22:03:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At887.job
[2010/06/10 01:46:39 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At888.job
[2010/06/10 02:30:53 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At889.job
[2010/06/08 16:03:16 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At89.job
[2010/06/10 02:30:53 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At890.job
[2010/06/10 02:30:53 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At891.job
[2010/06/10 03:03:18 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At892.job
[2010/06/10 04:05:47 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At893.job
[2010/06/10 05:03:44 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At894.job
[2010/06/10 06:02:51 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At895.job
[2010/06/10 07:03:23 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At896.job
[2010/06/10 08:03:38 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At897.job
[2010/06/11 09:13:12 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At898.job
[2010/06/10 02:30:53 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At899.job
[2010/06/10 08:21:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\At9.job
[2010/06/08 17:01:57 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At90.job
[2010/06/11 11:14:44 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At900.job
[2010/06/11 12:04:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At901.job
[2010/06/11 13:03:33 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At902.job
[2010/06/10 02:30:54 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At903.job
[2010/06/11 15:01:48 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At904.job
[2010/06/10 02:30:54 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At905.job
[2010/06/10 02:30:54 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At906.job
[2010/06/10 02:30:54 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At907.job
[2010/06/10 02:30:54 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At908.job
[2010/06/10 02:30:54 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At909.job
[2010/06/08 18:00:37 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At91.job
[2010/06/10 02:30:54 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At910.job
[2010/06/11 22:03:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At911.job
[2010/06/10 02:30:54 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At912.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At913.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At914.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At915.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At916.job
[2010/06/10 04:06:32 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At917.job
[2010/06/10 05:03:44 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At918.job
[2010/06/10 06:02:51 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At919.job
[2010/06/08 19:00:14 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At92.job
[2010/06/10 07:03:23 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At920.job
[2010/06/10 08:03:38 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At921.job
[2010/06/11 09:13:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At922.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At923.job
[2010/06/11 11:14:35 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At924.job
[2010/06/11 12:04:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At925.job
[2010/06/11 13:03:33 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At926.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At927.job
[2010/06/11 15:01:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At928.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At929.job
[2010/06/09 20:04:02 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At93.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At930.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At931.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At932.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At933.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At934.job
[2010/06/11 22:03:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At935.job
[2010/06/10 03:04:58 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At936.job
[2010/06/10 03:36:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At937.job
[2010/06/10 03:36:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At938.job
[2010/06/10 03:36:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At939.job
[2010/06/09 21:01:26 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At94.job
[2010/06/10 03:36:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At940.job
[2010/06/10 04:05:14 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At941.job
[2010/06/10 05:03:45 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At942.job
[2010/06/10 06:02:51 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At943.job
[2010/06/10 07:03:14 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At944.job
[2010/06/10 08:03:39 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At945.job
[2010/06/11 09:13:13 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At946.job
[2010/06/10 03:36:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At947.job
[2010/06/11 11:14:41 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At948.job
[2010/06/11 12:04:49 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At949.job
[2010/06/11 22:03:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At95.job
[2010/06/11 13:03:33 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At950.job
[2010/06/10 03:36:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At951.job
[2010/06/11 15:01:51 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At952.job
[2010/06/10 03:36:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At953.job
[2010/06/10 03:36:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At954.job
[2010/06/10 03:36:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At955.job
[2010/06/10 03:36:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At956.job
[2010/06/10 03:36:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At957.job
[2010/06/10 03:36:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At958.job
[2010/06/11 22:03:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At959.job
[2010/06/08 23:03:56 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At96.job
[2010/06/10 03:36:31 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At960.job
[2010/06/10 00:52:05 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At97.job
[2010/06/10 01:01:40 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At98.job
[2010/06/10 02:03:34 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\At99.job

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2010/06/09 12:38:47 | 000,004,443 | ---- | M] () -- C:\1.log
[2008/08/22 14:57:03 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
[2010/06/10 13:38:59 | 000,006,708 | ---- | M] () -- C:\bdlog.txt
[2009/03/26 10:05:33 | 000,000,233 | ---- | M] () -- C:\Boot.bak
[2009/05/15 11:12:46 | 000,000,302 | RHS- | M] () -- C:\boot.ini
[2004/08/03 23:00:00 | 000,260,272 | ---- | M] () -- C:\cmldr
[2009/05/15 11:23:35 | 000,011,383 | ---- | M] () -- C:\ComboFix.txt
[2008/08/22 14:57:03 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2010/06/07 07:06:42 | 000,000,000 | ---- | M] () -- C:\debug
[2008/08/22 14:57:03 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2009/10/14 15:19:04 | 000,049,267 | ---- | M] () -- C:\MP4debug.log
[2008/08/22 14:57:03 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2006/02/28 08:00:00 | 000,047,564 | RHS- | M] () -- C:\NTDETECT.COM
[2006/02/28 08:00:00 | 000,250,032 | RHS- | M] () -- C:\ntldr
[2010/06/11 22:03:28 | 805,306,368 | -HS- | M] () -- C:\pagefile.sys
[2010/06/10 14:15:21 | 000,000,000 | ---- | M] () -- C:\pcconf.ini
[2010/05/31 20:10:13 | 000,000,000 | ---- | M] () -- C:\pcversion.txt
[2010/06/10 14:15:30 | 000,000,000 | ---- | M] () -- C:\pcwords.dat
[2010/06/10 14:15:30 | 000,000,000 | ---- | M] () -- C:\pcwords2.dat
[2010/06/10 14:15:30 | 000,000,000 | ---- | M] () -- C:\pc_sign.slf
[2009/12/27 14:29:12 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\psapi.dll
[2009/05/07 15:52:55 | 000,000,268 | -H-- | M] () -- C:\sqmdata00.sqm
[2009/05/23 20:25:24 | 000,000,268 | -H-- | M] () -- C:\sqmdata01.sqm
[2009/06/08 17:48:50 | 000,000,268 | -H-- | M] () -- C:\sqmdata02.sqm
[2009/07/09 17:32:42 | 000,000,232 | -H-- | M] () -- C:\sqmdata03.sqm
[2009/07/12 10:01:43 | 000,000,232 | -H-- | M] () -- C:\sqmdata04.sqm
[2009/08/25 19:37:10 | 000,000,232 | -H-- | M] () -- C:\sqmdata05.sqm
[2009/03/06 19:33:45 | 000,000,232 | -H-- | M] () -- C:\sqmdata06.sqm
[2009/03/06 21:22:45 | 000,000,232 | -H-- | M] () -- C:\sqmdata07.sqm
[2009/03/07 11:44:42 | 000,000,232 | -H-- | M] () -- C:\sqmdata08.sqm
[2009/03/07 16:17:37 | 000,000,232 | -H-- | M] () -- C:\sqmdata09.sqm
[2009/03/07 17:11:07 | 000,000,232 | -H-- | M] () -- C:\sqmdata10.sqm
[2009/03/07 18:40:44 | 000,000,232 | -H-- | M] () -- C:\sqmdata11.sqm
[2009/03/07 19:29:18 | 000,000,232 | -H-- | M] () -- C:\sqmdata12.sqm
[2009/03/07 19:29:39 | 000,000,232 | -H-- | M] () -- C:\sqmdata13.sqm
[2009/03/07 22:16:52 | 000,000,232 | -H-- | M] () -- C:\sqmdata14.sqm
[2009/04/07 17:52:01 | 000,000,268 | -H-- | M] () -- C:\sqmdata15.sqm
[2009/04/21 18:31:31 | 000,000,232 | -H-- | M] () -- C:\sqmdata16.sqm
[2009/04/21 18:46:06 | 000,000,232 | -H-- | M] () -- C:\sqmdata17.sqm
[2009/04/22 16:59:47 | 000,000,232 | -H-- | M] () -- C:\sqmdata18.sqm
[2009/04/22 18:07:44 | 000,000,268 | -H-- | M] () -- C:\sqmdata19.sqm
[2009/05/07 15:52:55 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt00.sqm
[2009/05/23 20:25:23 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt01.sqm
[2009/06/08 17:48:49 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt02.sqm
[2009/07/09 17:32:42 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt03.sqm
[2009/07/12 10:01:42 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt04.sqm
[2009/08/25 19:37:10 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt05.sqm
[2009/03/06 19:33:45 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt06.sqm
[2009/03/06 21:22:45 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt07.sqm
[2009/03/07 11:44:42 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt08.sqm
[2009/03/07 16:17:37 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt09.sqm
[2009/03/07 17:11:07 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt10.sqm
[2009/03/07 18:40:44 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt11.sqm
[2009/03/07 19:29:18 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt12.sqm
[2009/03/07 19:29:39 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt13.sqm
[2009/03/07 22:16:52 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt14.sqm
[2009/04/07 17:52:00 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt15.sqm
[2009/04/21 18:31:30 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt16.sqm
[2009/04/21 18:46:06 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt17.sqm
[2009/04/22 16:59:46 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt18.sqm
[2009/04/22 18:07:44 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt19.sqm
[2009/09/26 17:21:32 | 000,000,923 | ---- | M] () -- C:\updatedatfix.log
[2010/03/12 13:51:02 | 000,000,566 | ---- | M] () -- C:\ZB20100312125055001.xml
[2010/03/17 19:30:59 | 000,000,682 | ---- | M] () -- C:\ZB20100317193051001.xml
[2010/03/17 19:31:25 | 000,000,690 | ---- | M] () -- C:\ZB20100317193119001.xml
[2010/03/17 19:31:47 | 000,000,690 | ---- | M] () -- C:\ZB20100317193137001.xml
[2010/03/27 18:24:29 | 000,000,986 | ---- | M] () -- C:\ZB20100327182417001.xml
[2010/05/02 20:04:33 | 000,003,611 | ---- | M] () -- C:\ZB20100502200204001.xml
[2010/05/03 13:49:16 | 000,003,716 | ---- | M] () -- C:\ZB20100503134647001.xml
[2010/05/06 18:45:27 | 000,000,367 | ---- | M] () -- C:\ZB20100506184524001.xml
[2010/05/09 20:41:29 | 000,000,787 | ---- | M] () -- C:\ZB20100509204121001.xml
[2010/05/23 14:27:06 | 000,001,091 | ---- | M] () -- C:\ZB20100523142654001.xml
[2010/06/02 17:39:23 | 000,000,986 | ---- | M] () -- C:\ZB20100602173913001.xml

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\System32\config\*.sav >
[2008/08/22 07:37:48 | 000,094,208 | ---- | M] () -- C:\WINDOWS\system32\config\default.sav
[2008/08/22 07:37:48 | 000,659,456 | ---- | M] () -- C:\WINDOWS\system32\config\software.sav
[2008/08/22 07:37:47 | 000,888,832 | ---- | M] () -- C:\WINDOWS\system32\config\system.sav

< %systemroot%\system32\user32.dll /md5 >
[2007/03/08 11:36:28 | 000,577,536 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\WINDOWS\system32\user32.dll
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\system32\ws2_32.dll /md5 >
[2006/02/28 08:00:00 | 000,082,944 | ---- | M] (Microsoft Corporation) MD5=2ED0B7F12A60F90092081C50FA0EC2B2 -- C:\WINDOWS\system32\ws2_32.dll
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

========== Alternate Data Streams ==========

@Alternate Data Stream - 96 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D02FBAEC
@Alternate Data Stream - 157 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:CB0AACC9
@Alternate Data Stream - 122 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:760DD869
@Alternate Data Stream - 122 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:119BAB3D
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E81D9502
@Alternate Data Stream - 113 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:1E8BA99C
@Alternate Data Stream - 112 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:B90C7652
@Alternate Data Stream - 112 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:84CFEE62
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E07EA07E
@Alternate Data Stream - 106 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:AF54CFFD
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:4DAE29C6
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:01BEC24A
@Alternate Data Stream - 100 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:ADF211B1
< End of report >
fullbug
Regular Member
 
Posts: 31
Joined: June 10th, 2010, 7:51 am

Re: Stubborn Malware

Unread postby fullbug » June 12th, 2010, 1:52 pm

Should I keep doing it this way with the # Extras.txt
# GMER log files? Doesnt seem very practical.....
fullbug
Regular Member
 
Posts: 31
Joined: June 10th, 2010, 7:51 am

Re: Stubborn Malware

Unread postby melboy » June 12th, 2010, 1:58 pm

Yes, post all.
User avatar
melboy
MRU Expert
MRU Expert
 
Posts: 3670
Joined: July 25th, 2008, 4:25 pm
Location: UK

Re: Stubborn Malware

Unread postby fullbug » June 12th, 2010, 3:13 pm

OTL Extras logfile created on: 11/06/2010 10:18:07 PM - Run 1
OTL by OldTimer - Version 3.2.6.0 Folder = C:\Documents and Settings\Administrator\Desktop
Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00001009 | Country: Canada | Language: ENC | Date Format: dd/MM/yyyy

510.00 Mb Total Physical Memory | 59.00 Mb Available Physical Memory | 11.00% Memory free
1.00 Gb Paging File | 1.00 Gb Available in Paging File | 59.00% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 37.24 Gb Total Space | 20.62 Gb Free Space | 55.37% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
Drive H: | 465.76 Gb Total Space | 367.85 Gb Free Space | 78.98% Space Free | Partition Type: NTFS
I: Drive not present or media not loaded

Computer Name: TRACEY
Current User Name: Administrator
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 90 Days
Output = Standard
Quick Scan

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" /p %1 (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- C:\Program Files\VLC\vlc.exe --started-from-file --playlist-enqueue "%1" ()
Directory [Browse with FastStone] -- "H:\Programs\FastStone Image Viewer\FSViewer.exe" "%1" ()
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~1\MICROS~2\Office12\ONENOTE.EXE "%L" (Microsoft Corporation)
Directory [PlayWithVLC] -- C:\Program Files\VLC\vlc.exe --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"20999:TCP" = 20999:TCP:*:Enabled:spport
"20601:TCP" = 20601:TCP:*:Enabled:spport
"15519:TCP" = 15519:TCP:*:Enabled:spport
"16289:TCP" = 16289:TCP:*:Enabled:spport
"6942:TCP" = 6942:TCP:*:Enabled:spport
"20022:TCP" = 20022:TCP:*:Enabled:spport

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Program Files\MSN Messenger\livecall.exe" = C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone) -- File not found
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" = C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe" = C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe -- (Hewlett-Packard)
"C:\Program Files\Common Files\HP\Digital Imaging\bin\hpqPhotoCrm.exe" = C:\Program Files\Common Files\HP\Digital Imaging\bin\hpqPhotoCrm.exe:*:Enabled:hpqphotocrm.exe -- (Hewlett-Packard Development Co. L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpqpsapp.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqpsapp.exe:*:Enabled:hpqpsapp.exe -- (Hewlett-Packard Development Co. L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe:*:Enabled:hpqpse.exe -- (Hewlett-Packard Development Co. L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpqsudi.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqsudi.exe:*:Enabled:hpqsudi.exe -- (Hewlett-Packard Development Co. L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe -- (Hewlett-Packard Co.)
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe" = C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call -- (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\uTorrent\uTorrent.exe" = C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent -- (BitTorrent, Inc.)
"C:\Program Files\MSN Messenger\livecall.exe" = C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone) -- File not found
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE" = C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook -- (Microsoft Corporation)
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE" = C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove -- (Microsoft Corporation)
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE" = C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote -- (Microsoft Corporation)
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" = C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe" = C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe -- (Hewlett-Packard)
"C:\Program Files\Common Files\HP\Digital Imaging\bin\hpqPhotoCrm.exe" = C:\Program Files\Common Files\HP\Digital Imaging\bin\hpqPhotoCrm.exe:*:Enabled:hpqphotocrm.exe -- (Hewlett-Packard Development Co. L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpqpsapp.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqpsapp.exe:*:Enabled:hpqpsapp.exe -- (Hewlett-Packard Development Co. L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe:*:Enabled:hpqpse.exe -- (Hewlett-Packard Development Co. L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpqsudi.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqsudi.exe:*:Enabled:hpqsudi.exe -- (Hewlett-Packard Development Co. L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe -- (Hewlett-Packard Co.)
"C:\WINDOWS\pchealth\helpctr\binaries\HelpCtr.exe" = C:\WINDOWS\pchealth\helpctr\binaries\HelpCtr.exe:*:Enabled:Remote Assistance - Windows Messenger and Voice -- (Microsoft Corporation)
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe" = C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call -- (Microsoft Corporation)
"C:\Program Files\ITUNES\iTunes.exe" = C:\Program Files\ITUNES\iTunes.exe:*:Enabled:iTunes -- (Apple Inc.)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0289B35E-DC07-4c7a-9710-BBD686EA4B7D}" = Status
"{09633A5E-3089-41A8-9FF1-382171423C5D}" = PSSWCORE
"{114AA4D3-A577-400E-A1B2-3CF75CF8D2E2}" = C5500_Help
"{15B8AFD9-92E9-4E86-96D9-83FAC510B82E}" = HPPhotoSmartPhotobookWebPack1
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{1A0667AB-BC3F-4ADA-AB4E-C1C65730F189}_is1" = AusLogics Visual Styler
"{1CB92574-96F2-467B-B793-5CEB35C40C29}" = Image Resizer Powertoy for Windows XP
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live Upload Tool
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{22F761D1-8063-4170-ADF7-2D2F47834CA9}" = VideoToolkit01
"{231A1A09-FDF2-45F2-B3D1-964CECE372BC}" = Seagate Manager Installer
"{2614F54E-A828-49FA-93BA-45A3F756BFAA}" = 32 Bit HP CIO Components Installer
"{26A24AE4-039D-4CA4-87B4-2F83216011FF}" = Java(TM) 6 Update 18
"{26BEE28E-C285-4532-82D3-7CE3C5F805D4}" = HPPhotoSmartDiscLabel_PrintOnDisc
"{27197499-7680-4208-8FD8-5439CDB0FDC1}" = HPProductAssistant
"{28BE306E-5DA6-4F9C-BDB0-DBA3C8C6FFFD}" = QuickTime
"{29988DC6-9C4A-49B2-AC86-5C380B29ADB9}_is1" = Loaris Trojan Remover 1.2
"{3248F0A8-6813-11D6-A77B-00B0D0160040}" = Java(TM) 6 Update 4
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java(TM) 6 Update 7
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}" = McAfee SiteAdvisor
"{3B4E636E-9D65-4D67-BA61-189800823F52}" = Windows Live Communications Platform
"{417780C7-B10D-4EFA-BD57-21AE30022A47}" = TouchCopy 09
"{45338B07-A236-4270-9A77-EBB4115517B5}" = Windows Live Sign-in Assistant
"{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A3D0CF8-60FF-4CEF-91A4-A1F001424602}" = DocProc
"{4E7C28C7-D5DA-4E9F-A1CA-60490B54AE35}" = UnloadSupport
"{553255F3-78FD-40F1-A6F8-6882140265FE}" = Apple Application Support
"{5721000D-6D4F-45E7-AA18-AF0D990666C0}" = NickelsAndMore
"{593A6CAF-E114-4e31-884F-74FF349E8E36}" = SolutionCenter
"{5B45350C-36B7-41C6-BF80-3E4B1B760171}" = BitDefender Antivirus 2010
"{5B8B9664-21C8-4A1C-AEE4-EF7B1EEB6BD3}" = PS_AIO_04_C5500_Software
"{6412CECE-8172-4BE5-935B-6CECACD2CA87}" = Windows Live Mail
"{6421F085-1FAA-DE13-D02A-CFB412C522A4}" = Acrobat.com
"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6CC1EE94-B426-478B-AE83-F83EBB4EF66A}" = HPPhotoSmartDiscLabel_PaperLabel
"{70E1E357-E57C-4284-B04E-58196DC27BC1}" = PanoStandAlone
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{76BC2442-0002-47FA-9617-43BAD82BEF4C}" = Bonjour
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX
"{7ED180E1-ADE9-4C69-8845-BDF518D763B8}" = hpphotosmartdisclabelplugin
"{81128EE8-8EAD-4DB0-85C6-17C2CE50FF71}" = Windows Live Essentials
"{818ABC3C-635C-4651-8183-D0E9640B7DD1}" = HP Update
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{87E2B986-07E8-477a-93DC-AF0B6758B192}" = DocProcQFolder
"{8A558B0C-541D-47e0-A177-8635CE723B07}" = HP Photosmart C5500 All-In-One Driver Software 11.0 Rel .4
"{8A708DD8-A5E6-11D4-A706-000629E95E20}" = Intel(R) Extreme Graphics 2 Driver
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{8C5FAD77-F678-4758-A296-C12F08D179E0}" = Microsoft IntelliPoint 6.2
"{8E37A0C8-C0E7-4E7A-8739-ACF20D02E70C}" = PS_AIO_04_C5500_Software_Min
"{90120000-0010-0409-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (English) 12
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISE_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{926CC8AE-8414-43DF-8EB4-CF26D9C3C663}" =
"{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2007
"{90120000-00BA-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0114-0409-0000-0000000FF1CE}" = Microsoft Office Groove Setup Metadata MUI (English) 2007
"{90120000-0114-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{95FC26FB-19FD-4A96-BBB1-B1062E8648F5}" = AGEIA PhysX v7.11.13
"{996A2FAA-7514-4628-9D12-A8FC34A0016E}" = iTunes
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9A9310B0-FAD0-440E-97B1-5EE14568EF78}" = PS_AIO_04_C5500_ProductContext
"{9C2D4047-0E40-499a-AC7A-C4B9BB12FE03}" = TrayApp
"{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A62892A7-9D90-4A58-8FFF-78FC5A2BC3C5}" = OpenOffice.org 3.2
"{A85FD55B-891B-4314-97A5-EA96C0BD80B5}" = Windows Live Messenger
"{AA2E8A46-B45E-4aea-8A23-88AB57D04523}" = WebReg
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{AC76BA86-7AD7-1033-7B44-A93000000001}" = Adobe Reader 9.3
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B5C3B892-0849-476C-9F46-B12F84819D57}" = Apple Mobile Device Support
"{B6BCCB80-B3FC-4E97-8513-A7BEE73A5C5A}" = Inpaint
"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player
"{BCC09E9C-3340-473D-A4FE-8580992CA77A}" = HPPhotoSmartDiscLabelContent1
"{BF08AB1C-3357-4f20-A200-8EBB8EF27C59}" = BufferChm
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C77A7F57-0BA5-4A17-B1C4-28E1D5F5A6EC}" = C5500
"{C89B5E3A-690F-4CEE-909A-BF869E198B0A}" = Scan
"{CBE0FCA1-4E95-11D4-9875-00105ACE7734}" = Logitech User's Guide
"{CC0E1AE3-091D-4969-B151-7AC142062C28}" = SmartWebPrinting
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware Free Edition
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CFADE4AF-C0CF-4A04-A776-741318F1658F}" = Content Transfer
"{D0DDF5F9-11AF-402B-AB57-5DC919199708}" = Online Radio Tuner Standard Edition
"{D16B4BE6-8B10-422f-8034-96D1CA9483B5}" = GPBaseService
"{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}" = HP Photosmart Essential 2.5
"{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1" = AusLogics Disk Defrag
"{E2DFE069-083E-4631-9B6C-43C48E991DE5}" = Junk Mail filter update
"{E432C362-6A71-4E8A-A68A-AE5246520656}" = Art Explosion Scrapbook Factory
"{E535C94A-B87F-4182-BEA8-1E9322078D3E}" = Cards_Calendar_OrderGift_DoMorePlugout
"{E96B0085-6659-486b-A221-5042A042728D}" = Toolbox
"{ECD03DA7-5952-406A-8156-5F0C93618D1F}" = USB PC Camera-168
"{EF1ADA5A-0B1A-4662-8C55-7475A61D8B65}" = DeviceDiscovery
"{EF9E56EE-0243-4BAD-88F4-5E7508AA7D96}" = Destination Component
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F6BD194C-4190-4D73-B1B1-C48C99921BFE}" = Windows Live Call
"{F850707C-B6A0-4B56-8709-F89CF8F9AC6D}" = Eraser
"7 Wonders II 1.00" = 7 Wonders II 1.00
"7-Zip" = 7-Zip 4.57
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Atlantis Quest" = Atlantis Quest
"Atomic Alarm Clock_is1" = Atomic Alarm Clock 5.81
"AviSynth" = AviSynth 2.5
"BurnAware Professional 2.0.1_is1" = BurnAware Professional 2.0.1.700
"CAL" = Canon Camera Access Library
"CameraWindowDVC5" = Canon Camera Window DC_DV 5 for ZoomBrowser EX
"CameraWindowDVC6" = Canon Camera Window DC_DV 6 for ZoomBrowser EX
"CameraWindowMC" = Canon Camera Window MC 6 for ZoomBrowser EX
"Canon G.726 WMP-Decoder" = Canon G.726 WMP-Decoder
"CANONIJPLM100" = Inkjet Printer/Scanner Extended Survey Program
"CanonSolutionMenu" = Canon Utilities Solution Menu
"CCleaner" = CCleaner (remove only)
"ClipX" = ClipX
"CodeStuff Starter" = CodeStuff Starter
"com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Acrobat.com
"Cricut DesignStudio" = Cricut DesignStudio
"CSCLIB" = Canon Camera Support Core Library
"Easy-PhotoPrint EX" = Canon Utilities Easy-PhotoPrint EX
"ENTERPRISE" = Microsoft Office Enterprise 2007
"EOS Utility" = Canon Utilities EOS Utility
"Eraser" = Eraser
"FastStone Image Viewer" = FastStone Image Viewer 4.0
"FastStone MaxView" = FastStone MaxView 2.1
"Folder Guide" = Folder Guide
"Folderico" = Folderico 3.7.2
"Foxit Reader" = Foxit Reader
"Gmail Notifier" = Gmail Notifier
"HD Tune Pro_is1" = HD Tune Pro 3.50
"Heroes of Hellas 2 1.00" = Heroes of Hellas 2 1.00
"HP Imaging Device Functions" = HP Imaging Device Functions 11.0
"HP Photosmart Essential" = HP Photosmart Essential 3.0
"HP Smart Web Printing" = HP Smart Web Printing
"HP Solution Center & Imaging Support Tools" = HP Solution Center 11.0
"HPOCR" = OCR Software by I.R.I.S. 11.0
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie8" = Windows Internet Explorer 8
"InstallShield_{231A1A09-FDF2-45F2-B3D1-964CECE372BC}" = Seagate Manager Installer
"KillProcess" = KillProcess 2.42
"Magic ISO Maker v5.5 (build 0265)" = Magic ISO Maker v5.5 (build 0265)
"Make The Cut!" = Make The Cut! 1.3.0
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"MovieEditTask" = Canon MovieEdit Task for ZoomBrowser EX
"Mozilla Firefox (3.6.3)" = Mozilla Firefox (3.6.3)
"MP3 Rocket" = MP3 Rocket
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"NotesHolder_is1" = NotesHolder 2.2
"OpenAL" = OpenAL
"PegSol_is1" = PegSol 1.2
"PhotoStitch" = Canon Utilities PhotoStitch
"Pizza Chef 2 1.00" = Pizza Chef 2 1.00
"PROSet" = Intel(R) PRO Network Adapters and Drivers
"Rainlendar2" = Rainlendar2 (remove only)
"RAW Image Task" = Canon RAW Image Task for ZoomBrowser EX
"RegSupreme Pro_is1" = RegSupreme Pro
"RemoteCaptureTask" = Canon RemoteCapture Task for ZoomBrowser EX
"Revo Uninstaller" = Revo Uninstaller 1.75
"Slots from Bally Gaming" = Slots from Bally Gaming
"Snaky Jake" = Snaky Jake (remove only)
"Super Mario 3 : Mario Forever" = Super Mario 3 : Mario Forever
"Sure Cuts A Lot_is1" = Sure Cuts A Lot 1.016
"The Da Vinci Code 1.00" = The Da Vinci Code 1.00
"The Treasures of Montezuma 2 1.00" = The Treasures of Montezuma 2 1.00
"Tibor - Tale of a Kind Vampire 1.00" = Tibor - Tale of a Kind Vampire 1.00
"Trojan Remover_is1" = Trojan Remover 6.7.5
"Turtle Odyssey 2_is1" = Turtle Odyssey 2
"Universal Extractor_is1" = Universal Extractor 1.6
"Unlocker" = Unlocker 1.8.7
"Unwell Mel1.01" = Unwell Mel
"VLC media player" = VLC media player 0.9.2
"WIC" = Windows Imaging Component
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"WinLiveSuite_Wave3" = Windows Live Essentials
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Word Zen 1.00" = Word Zen 1.00
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"YInstHelper" = Yahoo! Install Manager
"Zuma's Revenge!1.0" = Zuma's Revenge!

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"uTorrent" = µTorrent

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 22/03/2010 6:52:22 PM | Computer Name = TRACEY | Source = Application Error | ID = 1000
Description = Faulting application atlantisquest.exe, version 1.0.1.0, faulting
module kernel32.dll, version 5.1.2600.3541, fault address 0x00012a6b.

Error - 22/03/2010 7:31:20 PM | Computer Name = TRACEY | Source = Application Error | ID = 1000
Description = Faulting application atlantisquest.exe, version 1.0.1.0, faulting
module atlantisquest.exe, version 1.0.1.0, fault address 0x0009ef07.

Error - 23/03/2010 12:39:53 PM | Computer Name = TRACEY | Source = Application Error | ID = 1000
Description = Faulting application atlantisquest.exe, version 1.0.1.0, faulting
module atlantisquest.exe, version 1.0.1.0, fault address 0x0009ef07.

Error - 23/03/2010 1:03:56 PM | Computer Name = TRACEY | Source = Application Error | ID = 1000
Description = Faulting application marioforever v4.4.exe, version 2.5.119.0, faulting
module bass.dll, version 0.0.0.0, fault address 0x000018b5.

Error - 23/03/2010 7:29:46 PM | Computer Name = TRACEY | Source = Application Hang | ID = 1002
Description = Hanging application soffice.bin, version 3.2.9476.500, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 24/03/2010 1:18:01 PM | Computer Name = TRACEY | Source = Application Hang | ID = 1002
Description = Hanging application MarioForever V4.4.exe, version 2.5.119.0, hang
module hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 24/03/2010 1:22:01 PM | Computer Name = TRACEY | Source = Application Error | ID = 1000
Description = Faulting application explorer.exe, version 6.0.2900.3156, faulting
module shlxthdl.dll, version 3.2.9472.500, fault address 0x000012fc.

Error - 24/03/2010 8:28:49 PM | Computer Name = TRACEY | Source = Application Error | ID = 1000
Description = Faulting application atlantisquest.exe, version 1.0.1.0, faulting
module kernel32.dll, version 5.1.2600.3541, fault address 0x00012a6b.

Error - 25/03/2010 11:17:54 AM | Computer Name = TRACEY | Source = Application Error | ID = 1000
Description = Faulting application explorer.exe, version 6.0.2900.3156, faulting
module shlxthdl.dll, version 3.2.9472.500, fault address 0x000012fc.

Error - 25/03/2010 5:28:46 PM | Computer Name = TRACEY | Source = Application Error | ID = 1000
Description = Faulting application atlantisquest.exe, version 1.0.1.0, faulting
module atlantisquest.exe, version 1.0.1.0, fault address 0x0009ef07.

[ OSession Events ]
Error - 04/10/2009 2:29:38 PM | Computer Name = TRACEY | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6504.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 57
seconds with 0 seconds of active time. This session ended with a crash.

Error - 05/12/2009 12:35:04 PM | Computer Name = TRACEY | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 16, Application Name: Microsoft Office Groove, Application Version:
12.0.6421.1000, Microsoft Office Version: 12.0.6425.1000. This session lasted 22
seconds with 0 seconds of active time. This session ended with a crash.

[ System Events ]
Error - 11/06/2010 9:59:52 PM | Computer Name = TRACEY | Source = Service Control Manager | ID = 7022
Description = The HP CUE DeviceDiscovery Service service hung on starting.

Error - 11/06/2010 10:03:47 PM | Computer Name = TRACEY | Source = Server | ID = 2505
Description = The server could not bind to the transport \Device\NetBT_Tcpip_{C8A7970F-A2E0-4ABE-B8B6-8D1A9BF5363D}
because another computer on the network has the same name. The server could not
start.

Error - 11/06/2010 10:03:49 PM | Computer Name = TRACEY | Source = Service Control Manager | ID = 7000
Description = The GeneLink File Transfer Driver service failed to start due to the
following error: %%2

Error - 11/06/2010 10:03:59 PM | Computer Name = TRACEY | Source = Ftdisk | ID = 262189
Description = The system could not sucessfully load the crash dump driver.

Error - 11/06/2010 10:03:59 PM | Computer Name = TRACEY | Source = Ftdisk | ID = 262193
Description = Configuring the Page file for crash dump failed. Make sure there is
a page file on the boot partition and that is large enough to contain all physical
memory.

Error - 11/06/2010 10:03:59 PM | Computer Name = TRACEY | Source = NetBT | ID = 4321
Description = The name "TRACEY :0" could not be registered on the Interface
with IP address 192.168.2.12. The machine with the IP address 192.168.2.10 did not
allow the name to be claimed by this machine.

Error - 11/06/2010 10:03:59 PM | Computer Name = TRACEY | Source = NetBT | ID = 4321
Description = The name "TRACEY :20" could not be registered on the Interface
with IP address 192.168.2.12. The machine with the IP address 192.168.2.10 did not
allow the name to be claimed by this machine.

Error - 11/06/2010 10:05:21 PM | Computer Name = TRACEY | Source = Service Control Manager | ID = 7022
Description = The HP CUE DeviceDiscovery Service service hung on starting.

Error - 11/06/2010 10:09:08 PM | Computer Name = TRACEY | Source = Ntfs | ID = 262199
Description = The file system structure on the disk is corrupt and unusable. Please
run the chkdsk utility on the volume C:.

Error - 11/06/2010 10:21:01 PM | Computer Name = TRACEY | Source = Schedule | ID = 7901
Description = The At23.job command failed to start due to the following error: %%2147942402


< End of report >
fullbug
Regular Member
 
Posts: 31
Joined: June 10th, 2010, 7:51 am

Re: Stubborn Malware

Unread postby fullbug » June 12th, 2010, 3:14 pm

GMER 1.0.15.15281 - http://www.gmer.net
Rootkit scan 2010-06-12 07:33:12
Windows 5.1.2600 Service Pack 2
Running: buixbrig.exe; Driver: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\uxtdipog.sys


---- System - GMER 1.0.15 ----

SSDT spsv.sys ZwCreateKey [0xF84180E0]
SSDT spsv.sys ZwEnumerateKey [0xF8436CA2]
SSDT spsv.sys ZwEnumerateValueKey [0xF8437030]
SSDT spsv.sys ZwOpenKey [0xF84180C0]
SSDT spsv.sys ZwQueryKey [0xF8437108]
SSDT spsv.sys ZwQueryValueKey [0xF8436F88]
SSDT spsv.sys ZwSetValueKey [0xF843719A]

INT 0x62 ? 823DEBF8
INT 0x73 ? 820C8F00
INT 0x73 ? 820C8F00
INT 0x82 ? 823DEBF8
INT 0x83 ? 820C8F00
INT 0xA4 ? 820C8F00
INT 0xB4 ? 820C8F00

---- Kernel code sections - GMER 1.0.15 ----

.text NTOSKVS1.EXE!_abnormal_termination + 24C 804E28A8 4 Bytes CALL DF01761D
? spsv.sys The system cannot find the file specified. !
.text USBPORT.SYS!DllUnload F785F62C 5 Bytes JMP 820C84E0
.text acpxhu6n.SYS F71C2386 35 Bytes [00, 00, 00, 00, 00, 00, 20, ...]
.text acpxhu6n.SYS F71C23AA 24 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text acpxhu6n.SYS F71C23C4 3 Bytes [00, 70, 02] {ADD [EAX+0x2], DH}
.text acpxhu6n.SYS F71C23C9 1 Byte [2E]
.text acpxhu6n.SYS F71C23C9 11 Bytes [2E, 00, 00, 00, 5A, 02, 00, ...]
.text ...
? C:\WINDOWS\system32\Drivers\mchInjDrv.sys The system cannot find the file specified. !

---- User code sections - GMER 1.0.15 ----

.text C:\WINDOWS\system32\ctfmon.exe[444] kernel32.dll!LoadLibraryExW 7C801AF1 6 Bytes JMP 5F070F5A
.text C:\WINDOWS\system32\ctfmon.exe[444] kernel32.dll!LoadLibraryExA 7C801D4F 6 Bytes JMP 5F0D0F5A
.text C:\WINDOWS\system32\ctfmon.exe[444] kernel32.dll!LoadLibraryA 7C801D77 6 Bytes JMP 5F040F5A
.text C:\WINDOWS\system32\ctfmon.exe[444] kernel32.dll!FreeLibrary + 15 7C80AC03 4 Bytes CALL 7170003D
.text C:\WINDOWS\system32\ctfmon.exe[444] kernel32.dll!LoadLibraryW 7C80AE5B 6 Bytes JMP 5F0A0F5A
.text C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE[456] kernel32.dll!LoadLibraryExW 7C801AF1 6 Bytes JMP 5F070F5A
.text C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE[456] kernel32.dll!LoadLibraryExA 7C801D4F 6 Bytes JMP 5F0D0F5A
.text C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE[456] kernel32.dll!LoadLibraryA 7C801D77 6 Bytes JMP 5F040F5A
.text C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE[456] kernel32.dll!FreeLibrary + 15 7C80AC03 4 Bytes CALL 7170003D
.text C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE[456] kernel32.dll!LoadLibraryW 7C80AE5B 6 Bytes JMP 5F0A0F5A
.text C:\Program Files\Java\jre6\bin\jqs.exe[604] kernel32.dll!LoadLibraryExW 7C801AF1 6 Bytes JMP 5F070F5A
.text C:\Program Files\Java\jre6\bin\jqs.exe[604] kernel32.dll!LoadLibraryExA 7C801D4F 6 Bytes JMP 5F0D0F5A
.text C:\Program Files\Java\jre6\bin\jqs.exe[604] kernel32.dll!LoadLibraryA 7C801D77 6 Bytes JMP 5F040F5A
.text C:\Program Files\Java\jre6\bin\jqs.exe[604] kernel32.dll!FreeLibrary + 15 7C80AC03 4 Bytes CALL 7170003D
.text C:\Program Files\Java\jre6\bin\jqs.exe[604] kernel32.dll!LoadLibraryW 7C80AE5B 6 Bytes JMP 5F0A0F5A
.text C:\WINDOWS\System32\smss.exe[624] ntdll.dll!NtTestAlert 7C90DE8E 8 Bytes JMP 71700029
.text C:\WINDOWS\system32\csrss.exe[692] ntdll.dll!NtTestAlert 7C90DE8E 8 Bytes JMP 71700029
.text C:\WINDOWS\system32\csrss.exe[692] KERNEL32.dll!LoadLibraryExW 7C801AF1 6 Bytes JMP 5F070F5A
.text C:\WINDOWS\system32\csrss.exe[692] KERNEL32.dll!LoadLibraryExA 7C801D4F 6 Bytes JMP 5F0D0F5A
.text C:\WINDOWS\system32\csrss.exe[692] KERNEL32.dll!LoadLibraryA 7C801D77 6 Bytes JMP 5F040F5A
.text C:\WINDOWS\system32\csrss.exe[692] KERNEL32.dll!LoadLibraryW 7C80AE5B 6 Bytes JMP 5F0A0F5A
.text C:\Program Files\McAfee\SiteAdvisor\McSACore.exe[696] kernel32.dll!LoadLibraryExW 7C801AF1 6 Bytes JMP 5F070F5A
.text C:\Program Files\McAfee\SiteAdvisor\McSACore.exe[696] kernel32.dll!LoadLibraryExA 7C801D4F 6 Bytes JMP 5F0D0F5A
.text C:\Program Files\McAfee\SiteAdvisor\McSACore.exe[696] kernel32.dll!LoadLibraryA 7C801D77 6 Bytes JMP 5F040F5A
.text C:\Program Files\McAfee\SiteAdvisor\McSACore.exe[696] kernel32.dll!FreeLibrary + 15 7C80AC03 4 Bytes CALL 7170003D
.text C:\Program Files\McAfee\SiteAdvisor\McSACore.exe[696] kernel32.dll!LoadLibraryW 7C80AE5B 6 Bytes JMP 5F0A0F5A
.text C:\Program Files\AusLogics Visual Styler\themehelpersvc.exe[992] ntdll.dll!NtTestAlert 7C90DE8E 8 Bytes JMP 71700029
.text C:\WINDOWS\System32\svchost.exe[1040] kernel32.dll!LoadLibraryExW 7C801AF1 6 Bytes JMP 5F070F5A
.text C:\WINDOWS\System32\svchost.exe[1040] kernel32.dll!LoadLibraryExA 7C801D4F 6 Bytes JMP 5F0D0F5A
.text C:\WINDOWS\System32\svchost.exe[1040] kernel32.dll!LoadLibraryA 7C801D77 6 Bytes JMP 5F040F5A
.text C:\WINDOWS\System32\svchost.exe[1040] kernel32.dll!FreeLibrary + 15 7C80AC03 4 Bytes CALL 7170003D
.text C:\WINDOWS\System32\svchost.exe[1040] kernel32.dll!LoadLibraryW 7C80AE5B 6 Bytes JMP 5F0A0F5A
.text C:\WINDOWS\system32\svchost.exe[1044] kernel32.dll!LoadLibraryExW 7C801AF1 6 Bytes JMP 5F070F5A
.text C:\WINDOWS\system32\svchost.exe[1044] kernel32.dll!LoadLibraryExA 7C801D4F 6 Bytes JMP 5F0D0F5A
.text C:\WINDOWS\system32\svchost.exe[1044] kernel32.dll!LoadLibraryA 7C801D77 6 Bytes JMP 5F040F5A
.text C:\WINDOWS\system32\svchost.exe[1044] kernel32.dll!FreeLibrary + 15 7C80AC03 4 Bytes CALL 7170003D
.text C:\WINDOWS\system32\svchost.exe[1044] kernel32.dll!LoadLibraryW 7C80AE5B 6 Bytes JMP 5F0A0F5A
.text C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe[1144] kernel32.dll!LoadLibraryExW 7C801AF1 6 Bytes JMP 5F08001E
.text C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe[1144] kernel32.dll!LoadLibraryExA 7C801D4F 6 Bytes JMP 5F0E001E
.text C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe[1144] kernel32.dll!LoadLibraryA 7C801D77 6 Bytes JMP 5F05001E
.text C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe[1144] kernel32.dll!FreeLibrary + 15 7C80AC03 4 Bytes CALL 7170003D
.text C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe[1144] kernel32.dll!LoadLibraryW 7C80AE5B 6 Bytes JMP 5F0B001E
.text C:\WINDOWS\System32\svchost.exe[1196] ntdll.dll!NtProtectVirtualMemory 7C90D6EE 5 Bytes JMP 00A3000A
.text C:\WINDOWS\System32\svchost.exe[1196] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 5 Bytes JMP 00A4000A
.text C:\WINDOWS\System32\svchost.exe[1196] ntdll.dll!KiUserExceptionDispatcher 7C90E47C 5 Bytes JMP 00A2000C
.text C:\WINDOWS\System32\svchost.exe[1196] ole32.dll!CoCreateInstance 774FFAC3 5 Bytes JMP 00A7000A
.text C:\WINDOWS\system32\svchost.exe[1344] kernel32.dll!LoadLibraryExW 7C801AF1 6 Bytes JMP 5F070F5A
.text C:\WINDOWS\system32\svchost.exe[1344] kernel32.dll!LoadLibraryExA 7C801D4F 6 Bytes JMP 5F0D0F5A
.text C:\WINDOWS\system32\svchost.exe[1344] kernel32.dll!LoadLibraryA 7C801D77 6 Bytes JMP 5F040F5A
.text C:\WINDOWS\system32\svchost.exe[1344] kernel32.dll!FreeLibrary + 15 7C80AC03 4 Bytes CALL 7170003D
.text C:\WINDOWS\system32\svchost.exe[1344] kernel32.dll!LoadLibraryW 7C80AE5B 6 Bytes JMP 5F0A0F5A
.text C:\WINDOWS\System32\svchost.exe[1388] kernel32.dll!LoadLibraryExW 7C801AF1 6 Bytes JMP 5F070F5A
.text C:\WINDOWS\System32\svchost.exe[1388] kernel32.dll!LoadLibraryExA 7C801D4F 6 Bytes JMP 5F0D0F5A
.text C:\WINDOWS\System32\svchost.exe[1388] kernel32.dll!LoadLibraryA 7C801D77 6 Bytes JMP 5F040F5A
.text C:\WINDOWS\System32\svchost.exe[1388] kernel32.dll!FreeLibrary + 15 7C80AC03 4 Bytes CALL 7170003D
.text C:\WINDOWS\System32\svchost.exe[1388] kernel32.dll!LoadLibraryW 7C80AE5B 6 Bytes JMP 5F0A0F5A
.text C:\WINDOWS\system32\WgaTray.exe[1476] kernel32.dll!LoadLibraryExW 7C801AF1 6 Bytes JMP 5F070F5A
.text C:\WINDOWS\system32\WgaTray.exe[1476] kernel32.dll!LoadLibraryExA 7C801D4F 6 Bytes JMP 5F0D0F5A
.text C:\WINDOWS\system32\WgaTray.exe[1476] kernel32.dll!LoadLibraryA 7C801D77 6 Bytes JMP 5F040F5A
.text C:\WINDOWS\system32\WgaTray.exe[1476] kernel32.dll!FreeLibrary + 15 7C80AC03 4 Bytes CALL 7170003D
.text C:\WINDOWS\system32\WgaTray.exe[1476] kernel32.dll!LoadLibraryW 7C80AE5B 6 Bytes JMP 5F0A0F5A
.text C:\WINDOWS\system32\svchost.exe[1540] kernel32.dll!LoadLibraryExW 7C801AF1 6 Bytes JMP 5F070F5A
.text C:\WINDOWS\system32\svchost.exe[1540] kernel32.dll!LoadLibraryExA 7C801D4F 6 Bytes JMP 5F0D0F5A
.text C:\WINDOWS\system32\svchost.exe[1540] kernel32.dll!LoadLibraryA 7C801D77 6 Bytes JMP 5F040F5A
.text C:\WINDOWS\system32\svchost.exe[1540] kernel32.dll!FreeLibrary + 15 7C80AC03 4 Bytes CALL 7170003D
.text C:\WINDOWS\system32\svchost.exe[1540] kernel32.dll!LoadLibraryW 7C80AE5B 6 Bytes JMP 5F0A0F5A
.text C:\WINDOWS\Explorer.EXE[1576] ntdll.dll!NtProtectVirtualMemory 7C90D6EE 5 Bytes JMP 00B6000A
.text C:\WINDOWS\Explorer.EXE[1576] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 5 Bytes JMP 00B8000A
.text C:\WINDOWS\Explorer.EXE[1576] ntdll.dll!KiUserExceptionDispatcher 7C90E47C 5 Bytes JMP 00B5000C
.text C:\WINDOWS\system32\svchost.exe[1596] kernel32.dll!LoadLibraryExW 7C801AF1 6 Bytes JMP 5F070F5A
.text C:\WINDOWS\system32\svchost.exe[1596] kernel32.dll!LoadLibraryExA 7C801D4F 6 Bytes JMP 5F0D0F5A
.text C:\WINDOWS\system32\svchost.exe[1596] kernel32.dll!LoadLibraryA 7C801D77 6 Bytes JMP 5F040F5A
.text C:\WINDOWS\system32\svchost.exe[1596] kernel32.dll!FreeLibrary + 15 7C80AC03 4 Bytes CALL 7170003D
.text C:\WINDOWS\system32\svchost.exe[1596] kernel32.dll!LoadLibraryW 7C80AE5B 6 Bytes JMP 5F0A0F5A
.text C:\WINDOWS\system32\svchost.exe[1672] kernel32.dll!LoadLibraryExW 7C801AF1 6 Bytes JMP 5F070F5A
.text C:\WINDOWS\system32\svchost.exe[1672] kernel32.dll!LoadLibraryExA 7C801D4F 6 Bytes JMP 5F0D0F5A
.text C:\WINDOWS\system32\svchost.exe[1672] kernel32.dll!LoadLibraryA 7C801D77 6 Bytes JMP 5F040F5A
.text C:\WINDOWS\system32\svchost.exe[1672] kernel32.dll!FreeLibrary + 15 7C80AC03 4 Bytes CALL 7170003D
.text C:\WINDOWS\system32\svchost.exe[1672] kernel32.dll!LoadLibraryW 7C80AE5B 6 Bytes JMP 5F0A0F5A
.text C:\WINDOWS\system32\spoolsv.exe[1792] kernel32.dll!LoadLibraryExW 7C801AF1 6 Bytes JMP 5F070F5A
.text C:\WINDOWS\system32\spoolsv.exe[1792] kernel32.dll!LoadLibraryExA 7C801D4F 6 Bytes JMP 5F0D0F5A
.text C:\WINDOWS\system32\spoolsv.exe[1792] kernel32.dll!LoadLibraryA 7C801D77 6 Bytes JMP 5F040F5A
.text C:\WINDOWS\system32\spoolsv.exe[1792] kernel32.dll!FreeLibrary + 15 7C80AC03 4 Bytes CALL 7170003D
.text C:\WINDOWS\system32\spoolsv.exe[1792] kernel32.dll!LoadLibraryW 7C80AE5B 6 Bytes JMP 5F0A0F5A
.text C:\WINDOWS\system32\svchost.exe[1868] kernel32.dll!LoadLibraryExW 7C801AF1 6 Bytes JMP 5F070F5A
.text C:\WINDOWS\system32\svchost.exe[1868] kernel32.dll!LoadLibraryExA 7C801D4F 6 Bytes JMP 5F0D0F5A
.text C:\WINDOWS\system32\svchost.exe[1868] kernel32.dll!LoadLibraryA 7C801D77 6 Bytes JMP 5F040F5A
.text C:\WINDOWS\system32\svchost.exe[1868] kernel32.dll!FreeLibrary + 15 7C80AC03 4 Bytes CALL 7170003D
.text C:\WINDOWS\system32\svchost.exe[1868] kernel32.dll!LoadLibraryW 7C80AE5B 6 Bytes JMP 5F0A0F5A
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[1912] kernel32.dll!LoadLibraryExW 7C801AF1 6 Bytes JMP 5F070F5A
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[1912] kernel32.dll!LoadLibraryExA 7C801D4F 6 Bytes JMP 5F0D0F5A
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[1912] kernel32.dll!LoadLibraryA 7C801D77 6 Bytes JMP 5F040F5A
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[1912] kernel32.dll!FreeLibrary + 15 7C80AC03 4 Bytes CALL 7170003D
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[1912] kernel32.dll!LoadLibraryW 7C80AE5B 6 Bytes JMP 5F0A0F5A
.text C:\WINDOWS\system32\svchost.exe[1924] kernel32.dll!LoadLibraryExW 7C801AF1 6 Bytes JMP 5F070F5A
.text C:\WINDOWS\system32\svchost.exe[1924] kernel32.dll!LoadLibraryExA 7C801D4F 6 Bytes JMP 5F0D0F5A
.text C:\WINDOWS\system32\svchost.exe[1924] kernel32.dll!LoadLibraryA 7C801D77 6 Bytes JMP 5F040F5A
.text C:\WINDOWS\system32\svchost.exe[1924] kernel32.dll!FreeLibrary + 15 7C80AC03 4 Bytes CALL 7170003D
.text C:\WINDOWS\system32\svchost.exe[1924] kernel32.dll!LoadLibraryW 7C80AE5B 6 Bytes JMP 5F0A0F5A
.text C:\Program Files\Bonjour\mDNSResponder.exe[1932] kernel32.dll!LoadLibraryExW 7C801AF1 6 Bytes JMP 5F070F5A
.text C:\Program Files\Bonjour\mDNSResponder.exe[1932] kernel32.dll!LoadLibraryExA 7C801D4F 6 Bytes JMP 5F0D0F5A
.text C:\Program Files\Bonjour\mDNSResponder.exe[1932] kernel32.dll!LoadLibraryA 7C801D77 6 Bytes JMP 5F040F5A
.text C:\Program Files\Bonjour\mDNSResponder.exe[1932] kernel32.dll!FreeLibrary + 15 7C80AC03 4 Bytes CALL 7170003D
.text C:\Program Files\Bonjour\mDNSResponder.exe[1932] kernel32.dll!LoadLibraryW 7C80AE5B 6 Bytes JMP 5F0A0F5A
.text C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe[1996] kernel32.dll!LoadLibraryExW 7C801AF1 6 Bytes JMP 5F070F5A
.text C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe[1996] kernel32.dll!LoadLibraryExA 7C801D4F 6 Bytes JMP 5F0D0F5A
.text C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe[1996] kernel32.dll!LoadLibraryA 7C801D77 6 Bytes JMP 5F040F5A
.text C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe[1996] kernel32.dll!FreeLibrary + 15 7C80AC03 4 Bytes CALL 7170003D
.text C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe[1996] kernel32.dll!LoadLibraryW 7C80AE5B 6 Bytes JMP 5F0A0F5A
.text C:\Program Files\Canon\CAL\CALMAIN.exe[2084] kernel32.dll!LoadLibraryExW 7C801AF1 6 Bytes JMP 5F070F5A
.text C:\Program Files\Canon\CAL\CALMAIN.exe[2084] kernel32.dll!LoadLibraryExA 7C801D4F 6 Bytes JMP 5F0D0F5A
.text C:\Program Files\Canon\CAL\CALMAIN.exe[2084] kernel32.dll!LoadLibraryA 7C801D77 6 Bytes JMP 5F040F5A
.text C:\Program Files\Canon\CAL\CALMAIN.exe[2084] kernel32.dll!FreeLibrary + 15 7C80AC03 4 Bytes CALL 7170003D
.text C:\Program Files\Canon\CAL\CALMAIN.exe[2084] kernel32.dll!LoadLibraryW 7C80AE5B 6 Bytes JMP 5F0A0F5A
.text C:\WINDOWS\system32\wuauclt.exe[2204] ntdll.dll!NtProtectVirtualMemory 7C90D6EE 5 Bytes JMP 00CB000A
.text C:\WINDOWS\system32\wuauclt.exe[2204] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 5 Bytes JMP 00CC000A
.text C:\WINDOWS\system32\wuauclt.exe[2204] ntdll.dll!KiUserExceptionDispatcher 7C90E47C 5 Bytes JMP 00CA000C
.text C:\Program Files\BitDefender\BitDefender 2010\seccenter.exe[2320] kernel32.dll!LoadLibraryExW 7C801AF1 6 Bytes JMP 5F070F5A
.text C:\Program Files\BitDefender\BitDefender 2010\seccenter.exe[2320] kernel32.dll!LoadLibraryExA 7C801D4F 6 Bytes JMP 5F0D0F5A
.text C:\Program Files\BitDefender\BitDefender 2010\seccenter.exe[2320] kernel32.dll!LoadLibraryA 7C801D77 6 Bytes JMP 5F040F5A
.text C:\Program Files\BitDefender\BitDefender 2010\seccenter.exe[2320] kernel32.dll!FreeLibrary + 15 7C80AC03 4 Bytes CALL 7170003D
.text C:\Program Files\BitDefender\BitDefender 2010\seccenter.exe[2320] kernel32.dll!LoadLibraryW 7C80AE5B 6 Bytes JMP 5F0A0F5A
.text C:\Documents and Settings\Administrator\Desktop\buixbrig.exe[2500] kernel32.dll!LoadLibraryExW 7C801AF1 6 Bytes JMP 5F070F5A
.text C:\Documents and Settings\Administrator\Desktop\buixbrig.exe[2500] kernel32.dll!LoadLibraryExA 7C801D4F 6 Bytes JMP 5F0D0F5A
.text C:\Documents and Settings\Administrator\Desktop\buixbrig.exe[2500] kernel32.dll!LoadLibraryA 7C801D77 6 Bytes JMP 5F040F5A
.text C:\Documents and Settings\Administrator\Desktop\buixbrig.exe[2500] kernel32.dll!FreeLibrary + 15 7C80AC03 4 Bytes CALL 7170003D
.text C:\Documents and Settings\Administrator\Desktop\buixbrig.exe[2500] kernel32.dll!LoadLibraryW 7C80AE5B 6 Bytes JMP 5F0A0F5A
.text C:\WINDOWS\system32\imapi.exe[2592] kernel32.dll!LoadLibraryExW 7C801AF1 6 Bytes JMP 5F070F5A
.text C:\WINDOWS\system32\imapi.exe[2592] kernel32.dll!LoadLibraryExA 7C801D4F 6 Bytes JMP 5F0D0F5A
.text C:\WINDOWS\system32\imapi.exe[2592] kernel32.dll!LoadLibraryA 7C801D77 6 Bytes JMP 5F040F5A
.text C:\WINDOWS\system32\imapi.exe[2592] kernel32.dll!FreeLibrary + 15 7C80AC03 4 Bytes CALL 7170003D
.text C:\WINDOWS\system32\imapi.exe[2592] kernel32.dll!LoadLibraryW 7C80AE5B 6 Bytes JMP 5F0A0F5A

---- Devices - GMER 1.0.15 ----

Device \FileSystem\Ntfs \Ntfs 823DD1F8
Device \FileSystem\Fastfat \FatCdrom 81768500
Device \Driver\sptd \Device\902230246 spsv.sys

AttachedDevice \Driver\Tcpip \Device\Ip bdftdif.sys (BitDefender Firewall TDI Filter Driver/BitDefender LLC)

Device \Driver\usbuhci \Device\USBPDO-0 820C61F8
Device \Driver\dmio \Device\DmControl\DmIoDaemon 823711F8
Device \Driver\dmio \Device\DmControl\DmConfig 823711F8
Device \Driver\dmio \Device\DmControl\DmPnP 823711F8
Device \Driver\dmio \Device\DmControl\DmInfo 823711F8
Device \Driver\usbuhci \Device\USBPDO-1 820C61F8
Device \Driver\NetBT \Device\NetBT_Tcpip_{C8A7970F-A2E0-4ABE-B8B6-8D1A9BF5363D} 81DC6500
Device \Driver\usbuhci \Device\USBPDO-2 820C61F8
Device \Driver\usbuhci \Device\USBPDO-3 820C61F8
Device \Driver\usbehci \Device\USBPDO-4 82030500
Device \Driver\PCI_PNP1496 \Device\00000048 spsv.sys

AttachedDevice \Driver\Tcpip \Device\Tcp bdftdif.sys (BitDefender Firewall TDI Filter Driver/BitDefender LLC)

Device \Driver\Ftdisk \Device\HarddiskVolume1 823DF1F8
Device \Driver\USBSTOR \Device\00000071 81E12500
Device \Driver\Ftdisk \Device\HarddiskVolume2 823DF1F8
Device \Driver\Cdrom \Device\CdRom0 81D45500
Device \Driver\USBSTOR \Device\00000065 81E12500
Device \Driver\Cdrom \Device\CdRom1 81D45500
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 823DE1F8
Device \Driver\atapi \Device\Ide\IdePort0 823DE1F8
Device \Driver\atapi \Device\Ide\IdePort1 823DE1F8
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-f 823DE1F8
Device \Driver\Cdrom \Device\CdRom2 81D45500
Device \Driver\USBSTOR \Device\00000068 81E12500
Device \Driver\BDSelfPr \Device\BitDefenderDice B34D856E
Device \Driver\NetBT \Device\NetBt_Wins_Export 81DC6500
Device \Driver\NetBT \Device\NetbiosSmb 81DC6500

AttachedDevice \Driver\Tcpip \Device\Udp bdftdif.sys (BitDefender Firewall TDI Filter Driver/BitDefender LLC)
AttachedDevice \Driver\Tcpip \Device\RawIp bdftdif.sys (BitDefender Firewall TDI Filter Driver/BitDefender LLC)

Device \Driver\usbuhci \Device\USBFDO-0 820C61F8
Device \Driver\usbuhci \Device\USBFDO-1 820C61F8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver 81DC41F8
Device \Driver\USBSTOR \Device\0000006e 81E12500
Device \Driver\usbuhci \Device\USBFDO-2 820C61F8
Device \FileSystem\MRxSmb \Device\LanmanRedirector 81DC41F8
Device \Driver\usbuhci \Device\USBFDO-3 820C61F8
Device \Driver\usbehci \Device\USBFDO-4 82030500
Device \Driver\Ftdisk \Device\FtControl 823DF1F8
Device \Driver\acpxhu6n \Device\Scsi\acpxhu6n1Port2Path0Target0Lun0 81D3D1F8
Device \Driver\acpxhu6n \Device\Scsi\acpxhu6n1 81D3D1F8
Device \FileSystem\Fastfat \Fat 81768500

AttachedDevice \FileSystem\Fastfat \Fat fltMgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)

Device \FileSystem\Cdfs \Cdfs 817FC500

---- Registry - GMER 1.0.15 ----

Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s1 771343423
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s2 285507792
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@h0 1
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 C:\Program Files\DAEMON Tools Lite\
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0x4F 0xF4 0x15 0x67 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0x36 0xC6 0x98 0x75 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0x36 0x76 0x72 0x25 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 C:\Program Files\DAEMON Tools Lite\
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0x4F 0xF4 0x15 0x67 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0x36 0xC6 0x98 0x75 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0x36 0x76 0x72 0x25 ...

---- EOF - GMER 1.0.15 ----
fullbug
Regular Member
 
Posts: 31
Joined: June 10th, 2010, 7:51 am

Re: Stubborn Malware

Unread postby melboy » June 12th, 2010, 3:25 pm

Hi

With reference to Malware Removal's P2P Programs Policy, please uninstall the following programs before we continue:
uTorrent
When you use them you are downloading software from an unknown source directly onto your computer, bypassing your Firewall and Anti-Virus software. Hardly surprising then that many of these Downloads are being targeted to carry infections.
We see no purpose in cleaning your machine if you use P2P programmes, as it is pretty much certain that if you continue to use them then you will get infected again.


CKScanner
Download CKScanner from here
  • Important - Save it to your desktop.
  • Doubleclick CKScanner.exe and click Search For Files.
  • After a very short time, when the cursor hourglass disappears, click Save List To File.
  • A message box will verify the file saved.
  • Double-click the CKFiles.txt icon on your desktop and copy/paste the contents in your next reply.
User avatar
melboy
MRU Expert
MRU Expert
 
Posts: 3670
Joined: July 25th, 2008, 4:25 pm
Location: UK
Advertisement
Register to Remove

Next

  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 283 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware