Strange files in %WinDir% [Archive] - Safer-Networking Forums

View Full Version : Strange files in %WinDir%

Scarecrow

2012-08-20, 11:58

Hello,
I'm new here, I've been using Spybot for almost three years now though.:yes:
I noticed some strange files in my %windir% and I'm worried.
Some samples: dehidfjtpt, baxqskha.dat, ecisfvuhpa.ini, kragnbr.dat.
There are more of these in my windows directory. Spybot didn't find anything

DDS log
.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_33
Run by user at 11:41:55 on 2012-08-20
Microsoft Windows XP Home Edition 5.1.2600.3.1253.30.1032.18.2047.1397 [GMT 3:00]
.
AV: ESET Smart Security 5.2 *Enabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: ESET Personal firewall *Enabled*
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\WINDOWS\system32\ctfmon.exe
svchost.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\user\Επιφάνεια εργασίας\dds.scr
.
============== Pseudo HJT Report ===============
.
BHO: Java(tm) Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll
BHO: Βοηθός εισόδου του Windows Live: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
mRun: [egui] "c:\program files\eset\eset smart security\egui.exe" /hide /waitservice
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
TCP: DhcpNameServer = 192.168.2.1
TCP: Interfaces\{D480ADE7-937E-4F2C-82D2-A6D0E7FE1FE0} : DhcpNameServer = 192.168.2.1
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\user\application data\mozilla\firefox\profiles\7wgljsqd.default\
FF - prefs.js: keyword.URL - hxxp://www.google.com/search?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&q=
FF - plugin: c:\program files\adobe\reader 10.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\java\jre6\bin\plugin2\npjp2.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_3_300_271.dll
FF - plugin: c:\windows\system32\npdeployJava1.dll
FF - plugin: c:\windows\system32\npptools.dll
.
---- FIREFOX POLICIES ----
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
.
============= SERVICES / DRIVERS ===============
.
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [2011-8-4 120152]
R2 ekrn;ESET Service;c:\program files\eset\eset smart security\ekrn.exe [2012-3-7 913144]
R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\nvidia corporation\nvidia update core\daemonu.exe [2012-6-14 1262400]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32.sys [2011-6-23 123840]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 SkypeUpdate;Skype Updater;c:\program files\skype\updater\Updater.exe [2012-2-15 158856]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [2011-6-23 1691480]
S3 GGSAFERDriver;GGSAFER Driver;\??\c:\program files\garena plus\room\safedrv.sys --> c:\program files\garena plus\room\safedrv.sys [?]
S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\mozilla maintenance service\maintenanceservice.exe [2012-4-25 113120]
S3 npggsvc;nProtect GameGuard Service;c:\windows\system32\gamemon.des -service --> c:\windows\system32\GameMon.des -service [?]
S3 s1029bus;Sony Ericsson Device 1029 driver (WDM);c:\windows\system32\drivers\s1029bus.sys [2011-6-27 90280]
S3 s1029mdfl;Sony Ericsson Device 1029 USB WMC Modem Filter;c:\windows\system32\drivers\s1029mdfl.sys [2011-6-27 15016]
S3 s1029mdm;Sony Ericsson Device 1029 USB WMC Modem Driver;c:\windows\system32\drivers\s1029mdm.sys [2011-6-27 122280]
S3 s1029mgmt;Sony Ericsson Device 1029 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\s1029mgmt.sys [2011-6-27 115880]
S3 s1029nd5;Sony Ericsson Device 1029 USB Ethernet Emulation (NDIS);c:\windows\system32\drivers\s1029nd5.sys [2011-6-27 26024]
S3 s1029obex;Sony Ericsson Device 1029 USB WMC OBEX Interface;c:\windows\system32\drivers\s1029obex.sys [2011-6-27 111912]
S3 s1029unic;Sony Ericsson Device 1029 USB Ethernet Emulation (WDM);c:\windows\system32\drivers\s1029unic.sys [2011-6-27 116904]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\drivers\VBoxNetAdp.sys [2012-6-5 104792]
S3 VBoxNetFlt;VirtualBox Bridged Networking Service;c:\windows\system32\drivers\vboxnetflt.sys --> c:\windows\system32\drivers\VBoxNetFlt.sys [?]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
.
=============== Created Last 30 ================
.
2012-08-04 12:55:54 158552 ----a-w- c:\windows\system32\drivers\VBoxDrv.sys
2012-08-04 12:49:30 91992 ----a-w- c:\windows\system32\drivers\VBoxUSBMon.sys
.
==================== Find3M ====================
.
2012-08-18 19:18:37 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-08-18 19:18:37 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-07-06 13:58:54 78336 ----a-w- c:\windows\system32\browser.dll
2012-07-04 14:05:12 139784 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-07-03 18:26:49 1866368 ----a-w- c:\windows\system32\win32k.sys
2012-07-02 17:39:49 916992 ----a-w- c:\windows\system32\wininet.dll
2012-07-02 17:39:46 43520 ------w- c:\windows\system32\licmgr10.dll
2012-07-02 17:39:46 1469440 ------w- c:\windows\system32\inetcpl.cpl
2012-07-02 12:05:43 385024 ------w- c:\windows\system32\html.iec
2012-06-19 09:54:19 73728 ----a-w- c:\windows\system32\javacpl.cpl
2012-06-19 09:54:17 476936 ----a-w- c:\windows\system32\npdeployJava1.dll
2012-06-19 09:54:17 472840 ----a-w- c:\windows\system32\deployJava1.dll
2012-06-14 16:35:24 1074636 ----a-w- c:\windows\system32\nvdrsdb0.bin
2012-06-14 16:35:24 1 ----a-w- c:\windows\system32\nvdrssel.bin
2012-06-14 16:35:21 1074636 ----a-w- c:\windows\system32\nvdrsdb1.bin
2012-06-05 15:49:57 1372672 ----a-w- c:\windows\system32\msxml6.dll
2012-06-05 15:49:57 1172480 ----a-w- c:\windows\system32\msxml3.dll
2012-06-05 13:33:00 104792 ----a-w- c:\windows\system32\drivers\VBoxNetAdp.sys
2012-06-04 04:32:35 152576 ----a-w- c:\windows\system32\schannel.dll
2012-06-02 12:19:46 24088 ----a-w- c:\windows\system32\wucltui.dll.mui
2012-06-02 12:19:46 16408 ----a-w- c:\windows\system32\wuaucpl.cpl.mui
2012-06-02 12:19:44 16408 ----a-w- c:\windows\system32\wuapi.dll.mui
2012-06-02 12:19:38 219160 ----a-w- c:\windows\system32\wuaucpl.cpl
2012-06-02 12:19:24 19480 ----a-w- c:\windows\system32\wuaueng.dll.mui
2012-06-02 12:19:02 18672 ----a-w- c:\windows\system32\mucltui.dll.mui
2012-06-02 12:18:58 275696 ----a-w- c:\windows\system32\mucltui.dll
2012-06-02 12:18:58 214256 ----a-w- c:\windows\system32\muweb.dll
2012-05-31 13:21:59 604160 ----a-w- c:\windows\system32\crypt32.dll
.
============= FINISH: 11:42:14,71 ===============

aswMBR log
aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-08-20 11:21:34
-----------------------------
11:21:34.125 OS Version: Windows 5.1.2600 Service Pack 3
11:21:34.125 Number of processors: 2 586 0x170A
11:21:34.125 ComputerName: USER-0D3DA03F2E UserName: user
11:21:34.781 Initialize success
11:25:55.171 AVAST engine defs: 12081901
11:26:15.421 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP3T0L0-10
11:26:15.421 Disk 0 Vendor: WDC_WD1200JS-00MHB0 02.01C03 Size: 114473MB BusType: 3
11:26:15.437 Disk 0 MBR read successfully
11:26:15.437 Disk 0 MBR scan
11:26:15.484 Disk 0 Windows XP default MBR code
11:26:15.484 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 114463 MB offset 63
11:26:15.500 Disk 0 scanning sectors +234420480
11:26:15.562 Disk 0 scanning C:\WINDOWS\system32\drivers
11:26:28.734 Service scanning
11:26:49.859 Modules scanning
11:26:55.531 Disk 0 trace - called modules:
11:26:55.546 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys pciide.sys PCIIDEX.SYS
11:26:55.546 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x89b94ab8]
11:26:55.562 3 CLASSPNP.SYS[f7637fd7] -> nt!IofCallDriver -> \Device\00000067[0x89bb9d70]
11:26:55.562 5 ACPI.sys[f75ad620] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP3T0L0-10[0x89b97d98]
11:26:55.953 AVAST engine scan C:\WINDOWS
11:27:01.375 AVAST engine scan C:\WINDOWS\system32
11:30:06.046 AVAST engine scan C:\WINDOWS\system32\drivers
11:30:19.250 AVAST engine scan C:\Documents and Settings\user
11:38:16.609 AVAST engine scan C:\Documents and Settings\All Users
11:38:46.484 Scan finished successfully
11:39:44.046 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\user\Επιφάνεια εργασίας\MBR.dat"
11:39:44.046 The log file has been saved successfully to "C:\Documents and Settings\user\Επιφάνεια εργασίας\aswMBR.txt"

oldman960

2012-08-25, 17:31

Hi Scarecrow, welcome to the forum.

To make cleaning this machine easier
Please do not uninstall/install any programs unless asked to
It is more difficult when files/programs are appearing in/disappearing from the logs.
Please do not run any scans other than those requested
Please follow all instructions in the order posted
All logs/reports, etc.. must be posted in Notepad. Please ensure that word wrap is unchecked. In notepad click format, uncheck word wrap if it is checked.
Do not attach any logs/reports, etc.. unless specifically requested to do so.
If you have problems with or do not understand the instructions, Please ask before continuing.
Please stay with this thread until given the All Clear. A absence of symptoms does not mean a clean machine.

Download OTL (http://oldtimer.geekstogo.com/OTL.exe) to your desktop.

Double click on OTL.exe to run it. Make sure all other windows are closed and to let it run uninterrupted.
When the window appears, underneath Output at the top change it to Minimal Output
Under file age change it to 180 days
Check the boxes beside LOP Check and Purity Check.
In the window under Custom Scans/Fixes copy and paste the following

netsvcs
%SYSTEMDRIVE%\*.*
%systemroot%\Fonts\*.com
%systemroot%\Fonts\*.dll
%systemroot%\Fonts\*.ini
%systemroot%\Fonts\*.ini2
%systemroot%\Fonts\*.exe
%systemroot%\system32\spool\prtprocs\w32x86\*.*
%systemroot%\REPAIR\*.bak1
%systemroot%\REPAIR\*.ini
%systemroot%\system32\*.jpg
%systemroot%\*.jpg
%systemroot%\*.png
%systemroot%\*.scr
%systemroot%\*._sy
%APPDATA%\Adobe\Update\*.*
%ALLUSERSPROFILE%\Favorites\*.*
%APPDATA%\Microsoft\*.*
%PROGRAMFILES%\*.*
%APPDATA%\Update\*.*
%systemroot%\*. /mp /s
CREATERESTOREPOINT
%systemroot%\System32\config\*.sav
%PROGRAMFILES%\bak. /s
%systemroot%\system32\bak. /s
%ALLUSERSPROFILE%\Start Menu\*.lîk /x
%systemroot%\system32\config\systemprofile\*.dat /x
%systemroot%\*.config
%systemroot%\system32\*.db
%PROGRAMFILES%\Internet Explorer\*.dat
%APPDATA%\Mikzosoft\Internet Explorer\Quick Launch\*.lnk /x
%USERPROFILE%\Desktop\*.exe
%PROGRAMFILES%\Common Files\*.*
%systemroot%\*.src
%systemroot%\install\*.*
%systemroot%\system32\DLL\*.*
%systemroot%\system32\HelpFiles\*.*
%systemroot%\system32\rundll\*.*
%systemroot%\winn32\*.*
%systemroot%\Java\*.*
%systemroot%\system32\test\*.*
%systemroot%\system32\Rundll32\*.*
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs
%USERPROFILE%\..|smtmp;true;true;true /FP
%temp%\smtmp\*.* /s >
/md5start
iexplore.*
explorer.*
winlogon.*
dll
zx.dll
hlp.dat
consrv.dll
services.*
/md5stop

Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.

When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.

Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply. You may need two posts to fit them all in.

Scarecrow

2012-08-27, 00:39

Hello,
Thanks for answering.:)
I need two or three posts maybe for each log.
Should I proceed or attach them?

oldman960

2012-08-27, 06:41

Hi Scarecrow,

Split them up into s many post as you need to.

Scarecrow

2012-08-27, 21:52

Hello,
Sorry for being late.
Firstly, I want to mention that my brother installed jDownloader and this installed Babylon toolbar along. I made a system restore to yesterday's restore point created by OTL, uninstalled Babylon completely from Firefox and Control Panel (deleted its folders from AppData too) and reseted all of Firefox preferences containing the word 'babylon'. I guess it's completely removed now.

So, I made a new scan with OTL, I hope I didn't mess things up.
By the way, I can now see some files like .db, AlbumArt and some hidden system files (autoexec.bat, boot.ini etc).

(New) OTL.txt
OTL logfile created on: 27/8/2012 9:30:13 μμ - Run 1
OTL by OldTimer - Version 3.2.59.1 Folder = C:\Documents and Settings\user\Επιφάνεια εργασίας
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000408 | Country: Ελλάδα | Language: ELL | Date Format: d/M/yyyy

2,00 Gb Total Physical Memory | 1,43 Gb Available Physical Memory | 71,49% Memory free
3,85 Gb Paging File | 3,47 Gb Available in Paging File | 90,06% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 111,78 Gb Total Space | 13,19 Gb Free Space | 11,80% Space Free | Partition Type: NTFS

Computer Name: USER-0D3DA03F2E | User Name: user | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 180 Days

========== Processes (SafeList) ==========

PRC - C:\Documents and Settings\user\Επιφάνεια εργασίας\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation)
PRC - C:\Program Files\ESET\ESET Smart Security\ekrn.exe (ESET)
PRC - C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)

========== Modules (No Company Name) ==========

MOD - C:\Program Files\Mozilla Firefox\mozjs.dll ()
MOD - C:\Program Files\NVIDIA Corporation\nview\nvShell.dll ()
MOD - C:\Program Files\WinRAR\RarExt.dll ()

========== Services (SafeList) ==========

SRV - (AppMgmt) -- %SystemRoot%\System32\appmgmts.dll File not found
SRV - (Steam Client Service) -- C:\Program Files\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (MozillaMaintenance) -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (nvUpdatusService) -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation)
SRV - (ekrn) -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe (ESET)
SRV - (SkypeUpdate) -- C:\Program Files\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (npggsvc) -- C:\WINDOWS\system32\GameMon.des (INCA Internet Co., Ltd.)

========== Driver Services (SafeList) ==========

DRV - (WDICA) -- File not found
DRV - (VBoxNetFlt) -- system32\DRIVERS\VBoxNetFlt.sys File not found
DRV - (PDRFRAME) -- File not found
DRV - (PDRELI) -- File not found
DRV - (PDFRAME) -- File not found
DRV - (PDCOMP) -- File not found
DRV - (PCIDump) -- File not found
DRV - (lbrtfdc) -- File not found
DRV - (i2omgmt) -- File not found
DRV - (GGSAFERDriver) -- C:\Program Files\Garena Plus\Room\safedrv.sys File not found
DRV - (Changer) -- File not found
DRV - (VBoxNetAdp) -- C:\WINDOWS\system32\drivers\VBoxNetAdp.sys (Oracle Corporation)
DRV - (NVHDA) -- C:\WINDOWS\system32\drivers\nvhda32.sys (NVIDIA Corporation)
DRV - (epfw) -- C:\WINDOWS\system32\drivers\epfw.sys (ESET)
DRV - (epfwtdi) -- C:\WINDOWS\system32\drivers\epfwtdi.sys (ESET)
DRV - (Epfwndis) -- C:\WINDOWS\system32\drivers\epfwndis.sys (ESET)
DRV - (eamon) -- C:\WINDOWS\system32\drivers\eamon.sys (ESET)
DRV - (ehdrv) -- C:\WINDOWS\system32\drivers\ehdrv.sys (ESET)
DRV - (IntcAzAudAddService) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.)
DRV - (RTLE8023xp) -- C:\WINDOWS\system32\drivers\Rtenicxp.sys (Realtek Semiconductor Corporation )
DRV - (Monfilt) -- C:\WINDOWS\system32\drivers\Monfilt.sys (Creative Technology Ltd.)
DRV - (Ambfilt) -- C:\WINDOWS\system32\drivers\Ambfilt.sys (Creative)
DRV - (s1029unic) -- C:\WINDOWS\system32\drivers\s1029unic.sys (MCCI Corporation)
DRV - (s1029mdm) -- C:\WINDOWS\system32\drivers\s1029mdm.sys (MCCI Corporation)
DRV - (s1029bus) -- C:\WINDOWS\system32\drivers\s1029bus.sys (MCCI Corporation)
DRV - (s1029mdfl) -- C:\WINDOWS\system32\drivers\s1029mdfl.sys (MCCI Corporation)
DRV - (s1029mgmt) -- C:\WINDOWS\system32\drivers\s1029mgmt.sys (MCCI Corporation)
DRV - (s1029obex) -- C:\WINDOWS\system32\drivers\s1029obex.sys (MCCI Corporation)
DRV - (s1029nd5) -- C:\WINDOWS\system32\drivers\s1029nd5.sys (MCCI Corporation)
DRV - (USB_RNDIS) -- C:\WINDOWS\system32\drivers\usb8023k.sys (Microsoft Corporation)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}

IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "about:home"
FF - prefs.js..keyword.URL: "http://www.google.com/search?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&q="

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_3_300_271.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_33: C:\WINDOWS\system32\npdeployJava1.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/07/18 16:58:08 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2012/06/07 20:10:02 | 000,000,000 | ---D | M]

[2012/08/09 17:13:09 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\user\Application Data\Mozilla\Extensions
[2012/08/27 20:33:57 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\7wgljsqd.default\extensions
[2012/05/18 13:07:29 | 000,000,000 | ---D | M] (WOT) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\7wgljsqd.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
[2012/03/29 22:04:54 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\7wgljsqd.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2012/06/11 16:31:28 | 000,012,703 | ---- | M] () -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\7wgljsqd.default\searchplugins\imdb.xml
[2012/06/19 12:54:31 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2012/06/19 12:54:32 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
[2011/07/08 19:20:55 | 000,007,994 | ---- | M] () (No name found) -- C:\DOCUMENTS AND SETTINGS\USER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\7WGLJSQD.DEFAULT\EXTENSIONS\CONTEXTFONT@EASEL.ORG.XPI
[2011/06/25 12:10:37 | 000,001,703 | ---- | M] () (No name found) -- C:\DOCUMENTS AND SETTINGS\USER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\7WGLJSQD.DEFAULT\EXTENSIONS\F6@MERIKE.PRI.EE.XPI
[2012/04/04 15:05:28 | 000,140,964 | ---- | M] () (No name found) -- C:\DOCUMENTS AND SETTINGS\USER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\7WGLJSQD.DEFAULT\EXTENSIONS\FIREGESTURES@XULDEV.ORG.XPI
[2012/01/21 17:33:43 | 000,122,406 | ---- | M] () (No name found) -- C:\DOCUMENTS AND SETTINGS\USER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\7WGLJSQD.DEFAULT\EXTENSIONS\GIORGIO@GILESTRO.TK.XPI
[2011/06/29 11:50:13 | 000,006,626 | ---- | M] () (No name found) -- C:\DOCUMENTS AND SETTINGS\USER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\7WGLJSQD.DEFAULT\EXTENSIONS\URLALIAS@ZIBADA.XGM.RU.XPI
[2012/06/19 12:54:20 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2011/09/25 20:10:04 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION
[2012/07/18 16:58:08 | 000,136,672 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012/07/18 16:58:01 | 000,001,525 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazon-en-GB.xml
[2012/07/18 16:58:01 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2012/07/18 16:58:01 | 000,000,760 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-en-GB.xml
[2012/07/18 16:58:01 | 000,001,219 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-el.xml

O1 HOSTS File: ([2011/11/11 16:22:17 | 000,000,944 | R--- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab (Java Plug-in 1.6.0_33)
O16 - DPF: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab (Java Plug-in 1.6.0_33)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab (Java Plug-in 1.6.0_33)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D480ADE7-937E-4F2C-82D2-A6D0E7FE1FE0}: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Τρέχουσα αρχική σελίδα) - About:Home
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Ευτυχία.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Ευτυχία.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011/06/23 00:22:42 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{f44e0422-a0d7-11e0-8628-0025228dab40}\Shell - "" = AutoRun
O33 - MountPoints2\{f44e0422-a0d7-11e0-8628-0025228dab40}\Shell\AutoRun\command - "" = E:\Startme.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

NetSvcs: 6to4 - File not found
NetSvcs: AppMgmt - %SystemRoot%\System32\appmgmts.dll File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 180 Days ==========

[2012/08/27 21:28:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Επιφάνεια εργασίας\old
[2012/08/27 21:27:51 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\user\Recent
[2012/08/27 20:42:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Επιφάνεια εργασίας\The Avengers (2012)
[2012/08/27 20:20:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Application Data\Babylon
[2012/08/27 00:13:50 | 000,598,528 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\user\Επιφάνεια εργασίας\OTL.exe
[2012/08/24 21:27:33 | 000,352,936 | ---- | C] (Softonic) -- C:\Documents and Settings\user\Επιφάνεια εργασίας\SoftonicDownloader_for_cryptload.exe
[2012/08/22 01:13:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Local Settings\Application Data\WMTools Downloaded Files
[2012/08/20 10:53:02 | 000,000,000 | R--D | C] -- C:\Documents and Settings\user\Start Menu\Προγράμματα\Εργαλεία διαχείρισης
[2012/08/20 10:47:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Επιφάνεια εργασίας\erunt
[2012/08/04 15:55:54 | 000,158,552 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\drivers\VBoxDrv.sys
[2012/08/04 15:49:30 | 000,091,992 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\drivers\VBoxUSBMon.sys
[2012/07/21 00:49:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Local Settings\Application Data\SKIDROW
[2012/07/21 00:15:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Local Settings\Application Data\dxhr
[2012/07/21 00:15:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Local Settings\Application Data\28050
[2012/07/20 13:05:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Local Settings\Application Data\Adobe
[2012/07/20 13:05:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Adobe
[2012/07/20 13:05:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Application Data\Adobe
[2012/07/19 19:26:42 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2012/07/19 19:26:42 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe
[2012/07/06 20:24:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Επιφάνεια εργασίας\The Offspring - Days Go By
[2012/06/25 23:13:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Τα έγγραφά μου\KONAMI
[2012/06/25 23:10:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Προγράμματα\KONAMI
[2012/06/25 23:01:40 | 000,000,000 | ---D | C] -- C:\Program Files\KONAMI
[2012/06/25 23:01:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\KONAMI
[2012/06/20 15:34:03 | 000,000,000 | ---D | C] -- C:\WINDOWS\Minidump
[2012/06/19 12:54:30 | 000,476,936 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\npdeployJava1.dll
[2012/06/19 12:54:30 | 000,073,728 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl
[2012/06/19 12:54:29 | 000,157,448 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2012/06/19 12:54:29 | 000,149,256 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2012/06/19 12:54:29 | 000,149,256 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[2012/06/14 19:36:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\NVIDIA Corporation
[2012/06/14 19:36:04 | 000,335,872 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrshe.dll
[2012/06/14 19:36:04 | 000,335,872 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsar.dll
[2012/06/14 19:36:04 | 000,286,720 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsfr.dll
[2012/06/14 19:36:04 | 000,282,624 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsit.dll
[2012/06/14 19:36:04 | 000,282,624 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrses.dll
[2012/06/14 19:36:04 | 000,282,624 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsel.dll
[2012/06/14 19:36:04 | 000,278,528 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsde.dll
[2012/06/14 19:36:04 | 000,274,432 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrspt.dll
[2012/06/14 19:36:04 | 000,274,432 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsnl.dll
[2012/06/14 19:36:04 | 000,274,432 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsja.dll
[2012/06/14 19:36:04 | 000,274,432 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsesm.dll
[2012/06/14 19:36:04 | 000,270,336 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsru.dll
[2012/06/14 19:36:04 | 000,270,336 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsptb.dll
[2012/06/14 19:36:04 | 000,266,240 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsko.dll
[2012/06/14 19:36:04 | 000,262,144 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrshu.dll
[2012/06/14 19:36:04 | 000,258,048 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrstr.dll
[2012/06/14 19:36:04 | 000,258,048 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrssl.dll
[2012/06/14 19:36:04 | 000,258,048 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrssk.dll
[2012/06/14 19:36:04 | 000,258,048 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrspl.dll
[2012/06/14 19:36:04 | 000,253,952 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsth.dll
[2012/06/14 19:36:04 | 000,253,952 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrssv.dll
[2012/06/14 19:36:04 | 000,253,952 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsno.dll
[2012/06/14 19:36:04 | 000,253,952 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsda.dll
[2012/06/14 19:36:04 | 000,249,856 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsfi.dll
[2012/06/14 19:36:04 | 000,249,856 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrseng.dll
[2012/06/14 19:36:04 | 000,249,856 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrscs.dll
[2012/06/14 19:36:04 | 000,229,376 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrszhc.dll
[2012/06/14 19:36:04 | 000,143,680 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvcolor.exe
[2012/06/14 19:36:04 | 000,126,976 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrszht.dll
[2012/06/14 19:36:02 | 015,504,192 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvcpl.dll
[2012/06/14 19:36:02 | 000,108,352 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvmctray.dll
[2012/06/14 19:36:00 | 000,054,272 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwddi.dll
[2012/06/14 19:34:44 | 000,876,864 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvhdagenco3220103.dll
[2012/06/14 19:33:38 | 000,000,000 | ---D | C] -- C:\NVIDIA
[2012/06/14 19:21:41 | 000,000,000 | ---D | C] -- C:\Program Files\NVIDIA Corporation
[2012/06/13 12:41:50 | 000,521,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jsdbgui.dll
[2012/06/07 20:09:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Προγράμματα\ESET
[2012/06/07 20:09:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\ESET
[2012/06/05 16:33:00 | 000,104,792 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\drivers\VBoxNetAdp.sys
[2012/06/03 20:57:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Application Data\vlc
[2012/06/03 18:49:17 | 000,000,000 | ---D | C] -- C:\Program Files\MonitorDriver
[2012/06/03 18:49:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Application Data\InstallShield
[2012/05/29 13:35:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Προγράμματα\QuickTime
[2012/05/29 13:34:44 | 000,000,000 | ---D | C] -- C:\Program Files\QuickTime
[2012/05/29 13:34:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Apple Computer
[2012/05/23 14:52:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Τα έγγραφά μου\Downloads
[2012/05/06 22:14:08 | 004,140,192 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerInstaller.exe
[2012/04/25 22:54:26 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Maintenance Service
[2012/04/25 22:54:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Mozilla
[2012/04/18 20:56:30 | 000,094,208 | ---- | C] (Apple Inc.) -- C:\WINDOWS\System32\QuickTimeVR.qtx
[2012/04/18 20:56:30 | 000,069,632 | ---- | C] (Apple Inc.) -- C:\WINDOWS\System32\QuickTime.qts
[2012/04/16 20:49:45 | 003,804,120 | ---- | C] (INCA Internet Co., Ltd.) -- C:\WINDOWS\System32\GameMon.des
[2012/04/16 20:49:34 | 000,004,774 | ---- | C] (INCA Internet Co., Ltd.) -- C:\WINDOWS\System32\npptNT2.sys
[2012/04/16 20:49:21 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\INCA Shared
[2012/04/12 16:18:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Local Settings\Application Data\Unity
[2012/04/11 18:17:26 | 000,426,184 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2012/03/03 19:29:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Προγράμματα\Skype
[2012/03/03 19:29:24 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[6 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files - Modified Within 180 Days ==========

[2012/08/27 20:44:36 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012/08/27 20:15:56 | 000,022,636 | ---- | M] () -- C:\Documents and Settings\user\Επιφάνεια εργασίας\3365106_safe-2012-bluray-720p-ac3-x264-chd_45797.rar
[2012/08/27 00:13:54 | 000,598,528 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\user\Επιφάνεια εργασίας\OTL.exe
[2012/08/26 20:33:29 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012/08/24 23:35:40 | 000,116,224 | ---- | M] () -- C:\Documents and Settings\user\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/08/24 21:27:47 | 000,352,936 | ---- | M] (Softonic) -- C:\Documents and Settings\user\Επιφάνεια εργασίας\SoftonicDownloader_for_cryptload.exe
[2012/08/21 13:31:02 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2012/08/18 22:18:37 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2012/08/18 22:18:37 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2012/08/15 22:58:04 | 002,337,216 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012/07/18 19:33:07 | 000,000,731 | ---- | M] () -- C:\Documents and Settings\user\Επιφάνεια εργασίας\Speccy.lnk
[2012/07/16 15:21:46 | 000,045,194 | ---- | M] () -- C:\Documents and Settings\user\Application Data\room_v3.dat
[2012/07/16 13:19:36 | 000,002,269 | ---- | M] () -- C:\Documents and Settings\All Users\Επιφάνεια εργασίας\Skype.lnk
[2012/07/06 16:58:54 | 000,337,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\netapi32.dll
[2012/07/06 16:58:54 | 000,078,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\browser.dll
[2012/07/04 17:05:12 | 000,139,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rdpwd.sys
[2012/07/03 21:26:49 | 001,866,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\win32k.sys
[2012/07/03 21:26:49 | 001,866,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\win32k.sys
[2012/07/02 23:09:46 | 011,111,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieframe.dll
[2012/07/02 20:39:49 | 001,212,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\urlmon.dll
[2012/07/02 20:39:49 | 000,916,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wininet.dll
[2012/07/02 20:39:48 | 006,008,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mshtml.dll
[2012/07/02 20:39:48 | 000,611,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\mstime.dll
[2012/07/02 20:39:48 | 000,611,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstime.dll
[2012/07/02 20:39:48 | 000,206,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\occache.dll
[2012/07/02 20:39:48 | 000,105,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\url.dll
[2012/07/02 20:39:48 | 000,105,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\url.dll
[2012/07/02 20:39:48 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mshtmled.dll
[2012/07/02 20:39:46 | 001,469,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\inetcpl.cpl
[2012/07/02 20:39:46 | 001,469,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetcpl.cpl
[2012/07/02 20:39:46 | 000,629,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\msfeeds.dll
[2012/07/02 20:39:46 | 000,629,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeeds.dll
[2012/07/02 20:39:46 | 000,521,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jsdbgui.dll
[2012/07/02 20:39:46 | 000,055,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\msfeedsbs.dll
[2012/07/02 20:39:46 | 000,055,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeedsbs.dll
[2012/07/02 20:39:46 | 000,043,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\licmgr10.dll
[2012/07/02 20:39:46 | 000,043,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\licmgr10.dll
[2012/07/02 20:39:46 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\jsproxy.dll
[2012/07/02 20:39:46 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jsproxy.dll
[2012/07/02 20:39:45 | 002,000,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iertutil.dll
[2012/07/02 20:39:44 | 000,184,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\iepeers.dll
[2012/07/02 20:39:44 | 000,184,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iepeers.dll
[2012/07/02 20:39:42 | 000,743,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iedvtool.dll
[2012/07/02 20:39:42 | 000,387,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\iedkcs32.dll
[2012/07/02 20:39:42 | 000,387,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iedkcs32.dll
[2012/07/02 15:05:57 | 000,174,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\ie4uinit.exe
[2012/07/02 15:05:57 | 000,174,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ie4uinit.exe
[2012/07/02 15:05:43 | 000,385,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\html.iec
[2012/06/21 17:36:11 | 000,000,211 | -HS- | M] () -- C:\boot.ini
[2012/06/19 22:29:39 | 000,000,509 | ---- | M] () -- C:\Documents and Settings\user\Application Data\com.richardwang.FluffyApp.plist
[2012/06/19 12:54:19 | 000,157,448 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2012/06/19 12:54:19 | 000,149,256 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2012/06/19 12:54:19 | 000,073,728 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl
[2012/06/19 12:54:18 | 000,149,256 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[2012/06/19 12:54:17 | 000,476,936 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\npdeployJava1.dll
[2012/06/19 12:54:17 | 000,472,840 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll
[2012/06/18 15:18:28 | 000,011,262 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\Folder.jpg
[2012/06/18 15:18:28 | 000,011,262 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{D17BA72A-B84E-403F-8F2E-F61CC007D7F4}_Large.jpg
[2012/06/18 15:18:28 | 000,002,227 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArtSmall.jpg
[2012/06/18 15:18:28 | 000,002,227 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{D17BA72A-B84E-403F-8F2E-F61CC007D7F4}_Small.jpg
[2012/06/14 19:35:24 | 001,074,636 | ---- | M] () -- C:\WINDOWS\System32\nvdrsdb0.bin
[2012/06/14 19:35:24 | 000,000,001 | ---- | M] () -- C:\WINDOWS\System32\nvdrssel.bin
[2012/06/14 19:35:21 | 001,074,636 | ---- | M] () -- C:\WINDOWS\System32\nvdrsdb1.bin
[2012/06/14 19:21:52 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\nvdrswr.lk
[2012/06/14 19:20:06 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012/06/13 18:35:40 | 000,610,012 | ---- | M] () -- C:\WINDOWS\System32\perfh008.dat
[2012/06/13 18:35:40 | 000,492,614 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012/06/13 18:35:40 | 000,083,262 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012/06/13 18:35:39 | 000,111,316 | ---- | M] () -- C:\WINDOWS\System32\perfc008.dat
[2012/06/11 17:00:50 | 000,000,914 | ---- | M] () -- C:\Documents and Settings\user\Επιφάνεια εργασίας\VLC Media Player.lnk
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\mpr
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zyadeizbstq.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zxlhpcxet
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\zwjvhcytwbc
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zvybg
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zvxxfsps
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zufsomdnqb
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zprns
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zph
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\znubd
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zmpm.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zlvlgaoro.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zkvadtmlfi
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zgdzvuq
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zfxbo
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zerryde
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zdo
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zbu.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zayfbnltwb
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\yueiza
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\yrvdebxgrzt
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\yruogei.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\yqwnxmuqkr.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\yqjwaqwjrgn
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ypwgam
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ypn
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ypb
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ynbpico.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\yjbyky
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\yifbtom
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\yhvfljhx
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\yft.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\yfddtyco.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\yeubbz
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\yeqc.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ybnso
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\yajdu
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xxfxt
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xwolbkcl
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xuyoohmb
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xsdi
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xrjnqaxgslz
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xrjmwls.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xratz.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xnrwoffi.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xlaoaq
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xkiazoygsu.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xitroqxj.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xhliavnncf.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xhjvdk
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xhi.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xhepiahgu.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xei.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xdu.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xdnu
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xbwudob.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xabxrnwognq.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wztapis.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wvpmojcpagc.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wuienx.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wrfmrz
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wqnbogohpa
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wooq
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wnzrlwgymia
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wnwpuad
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wmsxmgb
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wmaeoulj.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wltgfaapaxg
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wlagsxpfnjc
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wkaig
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wjd.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wio
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wgfzxqxc.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vylysjgigsp
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vydky
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vxamvnvecd
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vwx.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vwvpxtf.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vutlo
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vtccpjjxhbl.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vrt
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vpymgh.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vlv
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vltbvctcek
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vlhw
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vky.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vhuya
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vhgdwwy.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vexcv.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\uuknvmo.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\usbsjhq
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\upwhfcfpq
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\upqsk.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\umblkiu
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ukqsipcp
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ujurc
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\uilhoi.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ugh.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\uaqqwmjt.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\tzhdw
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\txkpazbbtc
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\tvumtdvg
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\tviuuwtwvs
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\tubh.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\trpcwzo
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\trjhziwhqax
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\tqkrkktdw
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\tparier
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\togl
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\tmksiwyo.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\tmiduq
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\tmhmpisgrjb
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\tjerrruiu.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\tgysztaa.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\tgp.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\teatwcjgoq
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\szanch.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\swucw
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\swrosmstc.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\svh.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\surl.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\strlohjio
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\sthnpbr.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\srceeuuzog
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\slvwlpnaqo
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\skjqlknoa.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\sjfso
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\sghtkpu
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\sfxzlgg
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\sbm
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rzyxt
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rxlxmq
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rwwmb
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rwumiig
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rvitifkhda.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ruwy.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rtssxvscl
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rtsquze.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\rnni.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rnixg
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rnaxcorvnpm.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rmkgnn.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rlxrf
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rhrrf
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rfmfahwb
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rfbddh.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rckntimj.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rbw
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rbou.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rbc
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qzegqoobxiy.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qwdspx
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qvt
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\quqsl
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qswzofzltsi
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qqqewpfdl.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qqmnchoguw
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qpghwlpi.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qogqdj
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qnretzig.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qncintxhpbv
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qmlr
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qldlx
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qjhrojfdm
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qhyfrlwcpck
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qheefqe.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\qgqkumwr.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qebywplco
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qcyfwezkrw
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qcw
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qbt
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qbdvroefxtf.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pwalonerzam
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pvsbacopgo.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\puxozpwjj.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ptuhkoey
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ptfcgaof.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ptcwmepfq.xml
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\psxulyb.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\psuezqksw.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pqjjgvrcrr.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pplmagu.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\pnaphwmzlgp
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pgmxllhrgl
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pefaimbebk.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pctk
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\oylo
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\oxxpcqneqfk.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\otngpkqlgc
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\oqljnan
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\opnaypiuh
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\oocihv
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\onuhfaqdr.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\omgkwcqmzh
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\olhitsu
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\olcfhmx.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\okbzdweogsf.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ojlw
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ohfmfxmgnvd
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ogn.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ogknbwh.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\odklrkid
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\odieozehykz
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ocduhsoaeky.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\oaap
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\nybrohbe
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\nvolurg
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\noyqt
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\nlzvfpgxhuw.xml
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\nhs
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\netcd.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ndpxrjvfik.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mzquaye
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mxdvmytw.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mvxgdkyrjxt
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mvfhxic
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mrprxeehpe
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mpuqpwyjjoe.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mlfml.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mkyszmt
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mimsxzkfsba
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mhymnl.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mhefcltipun.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mftkul
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mcrrrdylbyb.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mbpbf.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lzjqvgauzfs
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\lyi
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lxjydaq.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lwohwwxa
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lvjfqnrfy.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ltm
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ltcbbxm
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lrwldsbcq
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\lqrbl
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lqpksm
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lptdlhqltgj
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lmti
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lmkwvtfa.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lljl
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lklnirnii
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\litvwn
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\liif.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lhlcj.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lervczxc
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ldypa
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ldna.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kykkyyjuomq
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kxfziwiehxe
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ktkvvqws.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kokjkgnayl.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\knkpjcuzkb
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kmgbr
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kkxlvn
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kjvgkvsar
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kjj
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\khzpcmbe
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kgqeevfnt.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kfzlj
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kfkegdfzsmf.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kdi
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kblu.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kagoeryt
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kaddzumq.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jxvemnjznu
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jxqxva.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\junn
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jtdznq
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jsslx
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jresfclof
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\jnpltjziixr
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jmpx
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jkne
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jfilvhux
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jclas
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ixrmyzmuf.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\iuzsgndntd
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\itshnv.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ipldozicq
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\iobspad
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ikugogpknz
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ikitzfwrlzd
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ihxkhtew
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\igy
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\igwyc
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ifwyys
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ifvbafbi.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ifh
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\iecx
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\idzfxu
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ibqvywo.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\iarssnndg
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hznd
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hxpuo.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\huiqk
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\htzs.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hsxps
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hqwxnfwmq.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hoboh.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hmzimwaq.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\hihw
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\higwf
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hhxjfatux.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hgu.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hgdxppghmnp.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hfbtzuzg
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hfaptb.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hbqnkzjqm.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gzswrdxw.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gxveh.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gxiglgpq.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gwcogj
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gswxesatox.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gswssvrjl
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\grgqrvb
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gksspjwk.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gjrxn.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gityrsbrb
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\giemuzl.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ghgeryzg
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ggjxmqh.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gecrm.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gck
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gbx.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gazeenlg
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fyvyvw.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fxhn
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fsjfcnvfjr
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fqat.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fnyj.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fnwncbqssp.xml
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fkuuzbgv.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fjpkjgod
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fhsongrcc
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fhg
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fcibhhrxsu
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\fas.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ezafudvoiyt.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\err.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\erauoi
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\epvvbcvej
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\eng
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\eiwxqfsa
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ehe.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\egskehx.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\egeegu
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\efwxeovrva
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\edsljcdivuy.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\edovnmlhmu.xml
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\ecisfvuhpa.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ebwmf

Scarecrow

2012-08-27, 21:59

OTL.txt
......

[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ebeblkboibi
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\eafryqglx
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dxrnzku.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dqeavzgp.xml
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dqajfj.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dpfrqyaznoo
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dmtlsnues.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dizbniz.xml
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\dehidfjtpt
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\daflhn
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\cwr
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ctsn
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\cqbt.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\cprceg
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\cntaml.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\cjsvjsn
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\civwzqm.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\cguaohd
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\cfclssx.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\cdntf.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\cbgvboorrjj.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\cakqt
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\bzyz.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\bsmobir.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\bmpedqmgmxo
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\blxcchdo.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\bloulzqvnrd
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\bfsdlrscmiv
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\azepwokxctz
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\auqopa
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\aso.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\arembuqqlhl.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\apluecjxljh.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\aotnjwxb.xml
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\alpzadzk
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ajfm.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\aihwg
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\agd
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\afocvlmwd
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\adpgegoatcl
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\aclcvmx.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\abqj
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\aaydghedumh
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zzmbkjttcv.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zyowns
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zxykwvw
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zxntsmpkns
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zvxuplfqaiv.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zmulmsalvp.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zkgl
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zhbezzk.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zgtn.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\yzvlitevcp
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\yztg.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ywjmsytb
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ywcotf.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\yfguqg.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ybcwdcj.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\yacxpunyz
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xwfjdkdtixu
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xogeiasqdx
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xnaaiqyn
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xivldzk
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\xibfo.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xhxj.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xbeumyws.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wvmaql.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wtkvqxla.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wriuwbh
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wpushbesv
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wpa
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wnwis
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wmcwjfwebcg.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wmcbsqz
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wjjkwjxof.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wgjy
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wgekhz
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wchut
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wbyqcoru
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vuzy.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vrb
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vqzkhuu
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vlzenqzgwi
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vgkauki
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vekhfmquvd.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vedcfvtun
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vcwbqe
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\uykjvcews
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\uvhkeoo.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\urupvqobgah
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\urfoeuqrrvx
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\umckcky
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ujupkolaxz.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ujmb
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ujemlvpjgb
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\uivgphjr
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\uhgxcxne.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\udixx.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ubomomrwsdk.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\tttpgilubhz.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\tplabizkfi
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\tnlcyha
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\tixbprzs.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\tcu.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\sxngztzr
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\swmx.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\srt.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\sqrvkkbktxz.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\sntlrnm.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\slfzi.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\skcx.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\sjzadmi.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\sfsz.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\sao
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rzuc.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rybqxma
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rumiqlhw.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rrbddpfknf
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rquw
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rpz.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rkdkyehqiv
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rjzxhrd
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rilkwzwyil.xml
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\riffaw.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rifbww.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rhw.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\refyhravcw.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qxbus.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qttwzyei.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qsopsnklrnj.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qrpcq.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qqqt.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qbvhrrhf
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qbqeurlah
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qayekwvmsh
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\pxluctu.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pwlwjlqf
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pwa
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pqognjycvt.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ppmurgqnqi
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pjtdqi.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pjjipw
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\phcioojd.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pgsh
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pffkxpns
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pepxq
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pedcjlq.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pdqrcouep
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pcpmvigyknw.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pcnbisr
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pclkwlz.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pbzcnzjjax
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pathdekgnl.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\oybbndhpat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\oxsta
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ousspnt.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ourtunrnnc
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\otvbczqzr.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\otorwgb.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\oqipw
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\opn
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\oofzxmm.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\oofsbkfk.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ooaomuyhvz.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\olwz
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\olvkvxg
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\olhdsirhbjm.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\oicryjbsxhd.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\odpeuveeirg
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\obfbsckxiuv
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\nysjggwyrz
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\nvdkhnrqwn
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ntpp.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\nreadmitf
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\nqxtrw
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\npx
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\npuailglpt.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\nnzey
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\narceunvfsr.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mwzhlh.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mwuwz.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mvhxlyyr.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\msbwl
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mpvauzxwdz
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\minowwpnhw.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mfpfkyzrxe
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mflohpswrxl.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mbufohzbd.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mbcuyqp
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\maynwlp.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\lzuovdq
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lwcnbd.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lvzw.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lrotxpqhol
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lqya.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lnuzijew
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lnm.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lffhqjpt.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lfdwrke
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lepkgvz
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lbial
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kza
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\kragnbr.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kppamcnflm.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\knk.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kkrk.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kjvzwobzke.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kffzqte
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kcd
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jvpytddxshm.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jvanbm.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jsgzsb
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jscxtijpp.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jhvyfmljeob
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jfuwpyqkkiu
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jes
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jeoc
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jecbuzopv.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jdlshte
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jazdltqdat.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\iyao
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ivz.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\iurduaasebj
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ithugwck.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\isnvgwxvzx.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ipdnxhip
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\iooy
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\imisiwl.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ilppyukvb.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ikvd.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ifhfyantlzc
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\iduxw.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ict.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hzooveshuhi
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hxokmtz.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hwsfdvw
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hvbzrysf
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hulemjbpzih.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\htubwk.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\htmhmor
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hrqwp
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hrfumedgw.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hqofa
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hiushfclfla.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hbduxvmv
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gwyphivwam
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gwegf.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gvsgjc
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gtkrjpla
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gsztiwpu
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gqr
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ghdvcccqxcv.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gfgr
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gdsbvd
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gcgii.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ganwg
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fzzu.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fxwpiwys
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fsopbrrnag
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\frznpwqgbxt
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fonbotjzdzr
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fnxe.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fmlgoxxnn.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fhagevihj.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\evpk
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\eswjlbv
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\eqartqwjeg
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\epuzw.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\ejxebk
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\eewo.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\eesejbzog.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\eebifxejokv
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ecqooiby
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dzna
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\dwbwxg
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dows
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dogequdlcho
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dmuuqmc.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dkfd.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\djzobvavx.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dgppwo.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dgckkqqq.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dfswulgomz.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dfdenbmhi
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\detwvkklv.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\defhdp.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dbsbm
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\daltzc
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\cxoab
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ctxnogspj.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\cpznhdhikek
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\cixpn
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\cbqynozbpo.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\bzkhikmncyf
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\byoqvakieh.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\bycuny
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\bxqecmpfn.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\bulcyfilrrd.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\bsxkwl.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\bpajjydv
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\betjex.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\baxqskha.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\bacdzugy
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\azuxhafgo.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ayyyufnvi.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\axxvniyw
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\auemdu.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\arsimaqa
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\aqluxxpvzxz
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\alswcpnkwg
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\akophcvl
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\akjgqsepny.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ajnzyssdz.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ahlkupje
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\aesvs.dat
[2012/06/08 17:25:47 | 008,526,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shell32.dll
[2012/06/05 18:49:57 | 001,372,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msxml6.dll
[2012/06/05 18:49:57 | 001,172,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msxml3.dll
[2012/06/05 16:33:00 | 000,158,552 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\drivers\VBoxDrv.sys
[2012/06/05 16:33:00 | 000,104,792 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\drivers\VBoxNetAdp.sys
[2012/06/05 16:33:00 | 000,091,992 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\drivers\VBoxUSBMon.sys
[2012/06/04 07:32:35 | 000,152,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\schannel.dll
[2012/06/02 15:19:46 | 000,024,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wucltui.dll.mui
[2012/06/02 15:19:44 | 000,016,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wuapi.dll.mui
[2012/06/02 15:19:38 | 000,329,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wucltui.dll
[2012/06/02 15:19:38 | 000,329,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wucltui.dll
[2012/06/02 15:19:38 | 000,219,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuaucpl.cpl
[2012/06/02 15:19:38 | 000,210,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuweb.dll
[2012/06/02 15:19:34 | 000,097,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cdm.dll
[2012/06/02 15:19:34 | 000,097,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\cdm.dll
[2012/06/02 15:19:34 | 000,053,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuauclt.exe
[2012/06/02 15:19:34 | 000,045,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wups2.dll
[2012/06/02 15:19:34 | 000,035,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wups.dll
[2012/06/02 15:19:34 | 000,035,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wups.dll
[2012/06/02 15:19:24 | 000,577,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wuapi.dll
[2012/06/02 15:19:24 | 000,577,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuapi.dll
[2012/06/02 15:19:18 | 001,933,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuaueng.dll
[2012/06/02 15:19:02 | 000,018,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\mucltui.dll.mui
[2012/06/02 15:18:58 | 000,275,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\mucltui.dll
[2012/05/31 16:21:59 | 000,604,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\crypt32.dll
[2012/05/28 21:17:05 | 000,536,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msado15.dll
[2012/05/18 15:23:34 | 000,002,287 | ---- | M] () -- C:\Documents and Settings\user\Application Data\Microsoft\Internet Explorer\Quick Launch\Skype.lnk
[2012/05/18 15:23:29 | 000,000,756 | ---- | M] () -- C:\Documents and Settings\user\Application Data\Microsoft\Internet Explorer\Quick Launch\Garena Plus.lnk
[2012/05/15 13:18:00 | 018,771,968 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvoglnt.dll
[2012/05/15 13:18:00 | 017,543,168 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvcompiler.dll
[2012/05/15 13:18:00 | 014,014,656 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\dllcache\nv4_mini.sys
[2012/05/15 13:18:00 | 006,012,928 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvcuda.dll
[2012/05/15 13:18:00 | 004,373,248 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nv4_disp.dll
[2012/05/15 13:18:00 | 002,807,708 | ---- | M] () -- C:\WINDOWS\System32\nvdata.data
[2012/05/15 13:18:00 | 002,530,624 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvcuvid.dll
[2012/05/15 13:18:00 | 002,445,120 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvcuvenc.dll
[2012/05/15 13:18:00 | 002,359,808 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvapi.dll
[2012/05/15 13:18:00 | 001,000,768 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvdispco32.dll
[2012/05/15 13:18:00 | 000,883,008 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvgenco32.dll
[2012/05/15 13:18:00 | 000,065,536 | ---- | M] (Khronos Group) -- C:\WINDOWS\System32\OpenCL.dll
[2012/05/15 13:18:00 | 000,010,264 | ---- | M] () -- C:\WINDOWS\System32\nvinfo.pb
[2012/05/15 12:43:36 | 000,229,376 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrszhc.dll
[2012/05/15 12:43:35 | 000,282,624 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsit.dll
[2012/05/15 12:43:35 | 000,253,952 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsth.dll
[2012/05/15 12:43:35 | 000,253,952 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrssv.dll
[2012/05/15 12:43:35 | 000,126,976 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrszht.dll
[2012/05/15 12:43:34 | 000,335,872 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsar.dll
[2012/05/15 12:43:34 | 000,282,624 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsel.dll
[2012/05/15 12:43:34 | 000,274,432 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsnl.dll
[2012/05/15 12:43:34 | 000,274,432 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsesm.dll
[2012/05/15 12:43:34 | 000,266,240 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsko.dll
[2012/05/15 12:43:34 | 000,249,856 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrseng.dll
[2012/05/15 12:43:33 | 000,335,872 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrshe.dll
[2012/05/15 12:43:33 | 000,286,720 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsfr.dll
[2012/05/15 12:43:33 | 000,274,432 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrspt.dll
[2012/05/15 12:43:33 | 000,258,048 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrssl.dll
[2012/05/15 12:43:33 | 000,253,952 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsno.dll
[2012/05/15 12:43:33 | 000,249,856 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsfi.dll
[2012/05/15 12:43:32 | 000,282,624 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrses.dll
[2012/05/15 12:43:31 | 000,270,336 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsru.dll
[2012/05/15 12:43:31 | 000,258,048 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrssk.dll
[2012/05/15 12:43:30 | 000,262,144 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrshu.dll
[2012/05/15 12:43:30 | 000,258,048 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrstr.dll
[2012/05/15 12:43:30 | 000,253,952 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsda.dll
[2012/05/15 12:43:29 | 000,274,432 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsja.dll
[2012/05/15 12:43:29 | 000,258,048 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrspl.dll
[2012/05/15 12:43:28 | 000,278,528 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsde.dll
[2012/05/15 12:43:28 | 000,270,336 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrsptb.dll
[2012/05/15 12:43:28 | 000,249,856 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvrscs.dll
[2012/05/15 12:40:26 | 000,054,272 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvwddi.dll
[2012/05/15 12:40:02 | 015,504,192 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvcpl.dll
[2012/05/15 12:40:02 | 000,143,680 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvcolor.exe
[2012/05/15 12:40:01 | 000,108,352 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvmctray.dll
[2012/05/14 12:22:34 | 000,348,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\localspl.dll
[2012/05/06 22:14:08 | 004,140,192 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerInstaller.exe
[2012/05/05 06:14:55 | 002,199,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntoskrnl.exe
[2012/05/05 06:14:55 | 002,076,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrnlpa.exe
[2012/05/05 06:14:52 | 002,155,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\ntoskrnl.exe
[2012/05/05 06:14:52 | 002,155,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrnlmp.exe
[2012/05/05 06:14:52 | 002,033,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrpamp.exe
[2012/05/05 06:14:52 | 002,033,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\ntkrnlpa.exe
[2012/04/20 21:00:25 | 000,000,664 | ---- | M] () -- C:\Documents and Settings\user\Application Data\Microsoft\Internet Explorer\Quick Launch\Steam.lnk
[2012/04/18 20:56:30 | 000,094,208 | ---- | M] (Apple Inc.) -- C:\WINDOWS\System32\QuickTimeVR.qtx
[2012/04/18 20:56:30 | 000,069,632 | ---- | M] (Apple Inc.) -- C:\WINDOWS\System32\QuickTime.qts
[2012/04/18 20:08:07 | 000,027,968 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvhdap32.dll
[2012/04/18 20:08:05 | 000,123,840 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\drivers\nvhda32.sys
[2012/04/18 20:08:02 | 000,876,864 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvhdagenco3220103.dll
[2012/04/16 22:21:59 | 000,028,177 | ---- | M] () -- C:\WINDOWS\System32\wbers.dat.dmp
[2012/04/16 22:21:59 | 000,003,641 | ---- | M] () -- C:\WINDOWS\System32\wbers.dat
[2012/04/15 01:08:45 | 000,005,817 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{86CF55C3-43E6-4BCD-AFC9-B0B86522CF8F}_Large.jpg
[2012/04/15 01:08:44 | 000,001,783 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{86CF55C3-43E6-4BCD-AFC9-B0B86522CF8F}_Small.jpg
[2012/04/15 01:08:39 | 000,010,527 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{1772EC26-248E-49FB-B3FB-20100E308811}_Large.jpg
[2012/04/15 01:08:30 | 000,002,461 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{1772EC26-248E-49FB-B3FB-20100E308811}_Small.jpg
[2012/04/15 01:07:58 | 000,009,927 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{8B5FB67F-4646-4FCC-AC4A-5D4E6DB83FD3}_Large.jpg
[2012/04/15 01:07:56 | 000,002,440 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{8B5FB67F-4646-4FCC-AC4A-5D4E6DB83FD3}_Small.jpg
[2012/04/06 18:10:44 | 000,013,329 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{8B2F44A4-B071-4FF1-A8B4-E45823B16E15}_Large.jpg
[2012/04/06 18:10:40 | 000,002,911 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{8B2F44A4-B071-4FF1-A8B4-E45823B16E15}_Small.jpg
[2012/04/06 18:09:35 | 000,010,425 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{A8C08D78-571B-4D63-BCB5-16E1FFCBD0A4}_Large.jpg
[2012/04/06 18:09:30 | 000,002,617 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{A8C08D78-571B-4D63-BCB5-16E1FFCBD0A4}_Small.jpg
[2012/04/06 18:06:43 | 000,009,118 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{40D6B709-FD06-4A8F-A155-4B1DD58A7596}_Large.jpg
[2012/04/06 18:06:43 | 000,002,234 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{40D6B709-FD06-4A8F-A155-4B1DD58A7596}_Small.jpg
[2012/03/31 14:18:47 | 000,013,371 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{3434182F-EB5E-4682-AA55-2B9718EFEED5}_Large.jpg
[2012/03/31 14:18:45 | 000,003,077 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{3434182F-EB5E-4682-AA55-2B9718EFEED5}_Small.jpg
[2012/03/31 14:17:30 | 000,008,929 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{5B874A76-5995-42C2-B12D-7A57BF67302B}_Large.jpg
[2012/03/31 14:17:13 | 000,002,381 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{5B874A76-5995-42C2-B12D-7A57BF67302B}_Small.jpg
[2012/03/31 14:17:04 | 000,014,105 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{DF2076AE-AF42-4645-B162-669509B2C487}_Large.jpg
[2012/03/31 14:17:04 | 000,003,072 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{DF2076AE-AF42-4645-B162-669509B2C487}_Small.jpg
[2012/03/31 13:40:58 | 000,014,679 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{D355EA7B-52B3-45CC-AF1B-818AB2E49F8E}_Large.jpg
[2012/03/31 13:40:54 | 000,003,338 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{D355EA7B-52B3-45CC-AF1B-818AB2E49F8E}_Small.jpg
[2012/03/31 13:39:50 | 000,016,470 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{F9A27B5B-ECF7-4E9F-982C-B58FF0134886}_Large.jpg
[2012/03/31 13:39:50 | 000,003,577 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{F9A27B5B-ECF7-4E9F-982C-B58FF0134886}_Small.jpg
[2012/03/31 13:06:04 | 000,014,104 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{BE8EDE0C-BDD8-4EC8-AEB3-030A75325FB9}_Large.jpg
[2012/03/31 13:05:59 | 000,003,218 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{BE8EDE0C-BDD8-4EC8-AEB3-030A75325FB9}_Small.jpg
[2012/03/31 13:05:42 | 000,009,514 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{2CE54D13-0EED-4EFE-B88A-F9245A53299E}_Large.jpg
[2012/03/31 13:05:41 | 000,002,438 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{2CE54D13-0EED-4EFE-B88A-F9245A53299E}_Small.jpg
[2012/03/22 13:51:49 | 000,000,682 | ---- | M] () -- C:\Documents and Settings\All Users\Επιφάνεια εργασίας\CCleaner.lnk
[2012/03/19 19:19:35 | 000,010,530 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{90F8F14B-B1C7-4D1C-B7AE-AC8014C0F755}_Large.jpg
[2012/03/19 19:19:35 | 000,002,609 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{90F8F14B-B1C7-4D1C-B7AE-AC8014C0F755}_Small.jpg
[2012/03/19 19:19:04 | 000,008,852 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{3154F5EF-F00E-45B1-BCAF-D3FB210A02E5}_Large.jpg
[2012/03/19 19:19:02 | 000,002,373 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{3154F5EF-F00E-45B1-BCAF-D3FB210A02E5}_Small.jpg
[2012/03/19 19:18:15 | 000,004,858 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{B9E174C9-2F36-442C-BE29-96B15CD31075}_Large.jpg
[2012/03/19 19:17:55 | 000,001,566 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{B9E174C9-2F36-442C-BE29-96B15CD31075}_Small.jpg
[2012/03/19 18:57:26 | 000,013,930 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{48FF47DE-966A-43CB-BE2C-20AC7657FEF3}_Large.jpg
[2012/03/19 18:57:15 | 000,002,520 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{48FF47DE-966A-43CB-BE2C-20AC7657FEF3}_Small.jpg
[2012/03/19 18:56:23 | 000,008,267 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{B7121C03-F84A-461F-B415-236233AC623D}_Large.jpg
[2012/03/19 18:56:06 | 000,002,131 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{B7121C03-F84A-461F-B415-236233AC623D}_Small.jpg
[2012/03/19 18:56:03 | 000,011,111 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{F6CB1BBD-1FF1-463A-82D3-19C84A85C85E}_Large.jpg
[2012/03/19 18:55:54 | 000,002,733 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{F6CB1BBD-1FF1-463A-82D3-19C84A85C85E}_Small.jpg
[2012/03/19 18:55:32 | 000,011,364 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{07C0637F-52F8-4024-BB34-A401A54AD80B}_Large.jpg
[2012/03/19 18:55:26 | 000,002,476 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{07C0637F-52F8-4024-BB34-A401A54AD80B}_Small.jpg
[2012/03/19 18:55:06 | 000,015,483 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{55B7CE8D-20DA-481E-A004-923D0BF10FDF}_Large.jpg
[2012/03/19 18:55:06 | 000,003,276 | -HS- | M] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{55B7CE8D-20DA-481E-A004-923D0BF10FDF}_Small.jpg
[2012/03/14 08:40:04 | 000,148,504 | ---- | M] (ESET) -- C:\WINDOWS\System32\drivers\epfw.sys
[2012/03/14 08:40:04 | 000,061,936 | ---- | M] (ESET) -- C:\WINDOWS\System32\drivers\epfwtdi.sys
[2012/03/14 08:40:04 | 000,040,336 | ---- | M] (ESET) -- C:\WINDOWS\System32\drivers\epfwndis.sys
[2012/03/14 08:40:02 | 000,160,816 | ---- | M] (ESET) -- C:\WINDOWS\System32\drivers\eamon.sys
[2012/03/14 08:40:02 | 000,120,152 | ---- | M] (ESET) -- C:\WINDOWS\System32\drivers\ehdrv.sys
[6 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012/08/27 20:15:55 | 000,022,636 | ---- | C] () -- C:\Documents and Settings\user\Επιφάνεια εργασίας\3365106_safe-2012-bluray-720p-ac3-x264-chd_45797.rar
[2012/07/19 19:27:11 | 000,001,804 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Προγράμματα\Adobe Reader X.lnk
[2012/07/18 19:32:39 | 000,000,731 | ---- | C] () -- C:\Documents and Settings\user\Επιφάνεια εργασίας\Speccy.lnk
[2012/06/18 15:18:29 | 000,011,262 | -HS- | C] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{D17BA72A-B84E-403F-8F2E-F61CC007D7F4}_Large.jpg
[2012/06/18 15:18:29 | 000,002,227 | -HS- | C] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{D17BA72A-B84E-403F-8F2E-F61CC007D7F4}_Small.jpg
[2012/06/14 19:21:52 | 001,074,636 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb1.bin
[2012/06/14 19:21:52 | 001,074,636 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb0.bin
[2012/06/14 19:21:52 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\nvdrssel.bin
[2012/06/14 19:21:52 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\nvdrswr.lk
[2012/06/14 19:18:40 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\zyadeizbstq.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\zxlhpcxet
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\zwjvhcytwbc
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\zvybg
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\zvxxfsps
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\zufsomdnqb
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\zprns
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\zph
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\znubd
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\zmpm.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\zlvlgaoro.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\zkvadtmlfi
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\zgdzvuq
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\zfxbo
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\zerryde
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\zdo
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\zbu.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\zayfbnltwb
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\yueiza
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\yrvdebxgrzt
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\yruogei.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\yqwnxmuqkr.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\yqjwaqwjrgn
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ypwgam
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ypn
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ypb
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ynbpico.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\yjbyky
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\yifbtom
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\yhvfljhx
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\yft.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\yfddtyco.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\yeubbz
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\yeqc.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ybnso
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\yajdu
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\xxfxt
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\xwolbkcl
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\xuyoohmb
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\xsdi
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\xrjnqaxgslz
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\xrjmwls.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\xratz.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\xnrwoffi.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\xlaoaq
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\xkiazoygsu.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\xitroqxj.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\xhliavnncf.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\xhjvdk
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\xhi.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\xhepiahgu.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\xei.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\xdu.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\xdnu
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\xbwudob.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\xabxrnwognq.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\wztapis.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\wvpmojcpagc.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\wuienx.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\wrfmrz
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\wqnbogohpa
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\wooq
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\wnzrlwgymia
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\wnwpuad
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\wmsxmgb
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\wmaeoulj.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\wltgfaapaxg
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\wlagsxpfnjc
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\wkaig
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\wjd.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\wio
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\wgfzxqxc.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\vylysjgigsp
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\vydky
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\vxamvnvecd
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\vwx.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\vwvpxtf.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\vutlo
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\vtccpjjxhbl.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\vrt
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\vpymgh.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\vlv
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\vltbvctcek
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\vlhw
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\vky.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\vhuya
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\vhgdwwy.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\vexcv.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\uuknvmo.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\usbsjhq
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\upwhfcfpq
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\upqsk.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\umblkiu
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ukqsipcp
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ujurc
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\uilhoi.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ugh.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\uaqqwmjt.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\tzhdw
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\txkpazbbtc
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\tvumtdvg
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\tviuuwtwvs
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\tubh.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\trpcwzo
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\trjhziwhqax
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\tqkrkktdw
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\tparier
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\togl
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\tmksiwyo.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\tmiduq
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\tmhmpisgrjb
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\tjerrruiu.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\tgysztaa.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\tgp.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\teatwcjgoq
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\szanch.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\swucw
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\swrosmstc.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\svh.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\surl.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\strlohjio
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\sthnpbr.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\srceeuuzog
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\slvwlpnaqo
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\skjqlknoa.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\sjfso
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\sghtkpu
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\sfxzlgg
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\sbm
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\rzyxt
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\rxlxmq
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\rwwmb
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\rwumiig
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\rvitifkhda.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ruwy.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\rtssxvscl
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\rtsquze.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\rnni.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\rnixg
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\rnaxcorvnpm.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\rmkgnn.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\rlxrf
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\rhrrf
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\rfmfahwb
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\rfbddh.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\rckntimj.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\rbw
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\rbou.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\rbc
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\qzegqoobxiy.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\qwdspx
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\qvt
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\quqsl
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\qswzofzltsi
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\qqqewpfdl.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\qqmnchoguw
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\qpghwlpi.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\qogqdj
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\qnretzig.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\qncintxhpbv
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\qmlr
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\qldlx
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\qjhrojfdm
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\qhyfrlwcpck
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\qheefqe.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\qgqkumwr.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\qebywplco
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\qcyfwezkrw
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\qcw
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\qbt
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\qbdvroefxtf.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\pwalonerzam
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\pvsbacopgo.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\puxozpwjj.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ptuhkoey
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ptfcgaof.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ptcwmepfq.xml
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\psxulyb.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\psuezqksw.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\pqjjgvrcrr.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\pplmagu.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\pnaphwmzlgp
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\pgmxllhrgl
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\pefaimbebk.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\pctk
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\oylo
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\oxxpcqneqfk.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\otngpkqlgc
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\oqljnan
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\opnaypiuh
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\oocihv
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\onuhfaqdr.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\omgkwcqmzh
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\olhitsu
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\olcfhmx.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\okbzdweogsf.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ojlw
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ohfmfxmgnvd
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ogn.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ogknbwh.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\odklrkid
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\odieozehykz
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ocduhsoaeky.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\oaap
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\nybrohbe
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\nvolurg
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\noyqt
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\nlzvfpgxhuw.xml
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\nhs
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\netcd.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ndpxrjvfik.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\mzquaye
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\mxdvmytw.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\mvxgdkyrjxt
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\mvfhxic
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\mrprxeehpe
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\mpuqpwyjjoe.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\mpr
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\mlfml.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\mkyszmt
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\mimsxzkfsba
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\mhymnl.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\mhefcltipun.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\mftkul
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\mcrrrdylbyb.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\mbpbf.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\lzjqvgauzfs

Scarecrow

2012-08-27, 22:01

OTL.txt
.....

[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\lyi
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\lxjydaq.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\lwohwwxa
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\lvjfqnrfy.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ltm
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ltcbbxm
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\lrwldsbcq
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\lqrbl
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\lqpksm
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\lptdlhqltgj
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\lmti
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\lmkwvtfa.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\lljl
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\lklnirnii
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\litvwn
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\liif.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\lhlcj.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\lervczxc
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ldypa
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ldna.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\kykkyyjuomq
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\kxfziwiehxe
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ktkvvqws.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\kokjkgnayl.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\knkpjcuzkb
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\kmgbr
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\kkxlvn
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\kjvgkvsar
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\kjj
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\khzpcmbe
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\kgqeevfnt.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\kfzlj
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\kfkegdfzsmf.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\kdi
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\kblu.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\kagoeryt
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\kaddzumq.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\jxvemnjznu
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\jxqxva.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\junn
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\jtdznq
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\jsslx
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\jresfclof
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\jnpltjziixr
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\jmpx
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\jkne
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\jfilvhux
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\jclas
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ixrmyzmuf.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\iuzsgndntd
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\itshnv.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ipldozicq
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\iobspad
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ikugogpknz
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ikitzfwrlzd
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ihxkhtew
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\igy
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\igwyc
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ifwyys
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ifvbafbi.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ifh
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\iecx
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\idzfxu
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ibqvywo.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\iarssnndg
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\hznd
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\hxpuo.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\huiqk
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\htzs.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\hsxps
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\hqwxnfwmq.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\hoboh.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\hmzimwaq.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\hihw
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\higwf
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\hhxjfatux.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\hgu.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\hgdxppghmnp.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\hfbtzuzg
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\hfaptb.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\hbqnkzjqm.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\gzswrdxw.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\gxveh.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\gxiglgpq.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\gwcogj
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\gswxesatox.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\gswssvrjl
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\grgqrvb
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\gksspjwk.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\gjrxn.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\gityrsbrb
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\giemuzl.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ghgeryzg
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ggjxmqh.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\gecrm.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\gck
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\gbx.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\gazeenlg
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\fyvyvw.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\fxhn
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\fsjfcnvfjr
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\fqat.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\fnyj.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\fnwncbqssp.xml
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\fkuuzbgv.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\fjpkjgod
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\fhsongrcc
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\fhg
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\fcibhhrxsu
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\fas.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ezafudvoiyt.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\err.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\erauoi
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\epvvbcvej
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\eng
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\eiwxqfsa
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ehe.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\egskehx.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\egeegu
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\efwxeovrva
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\edsljcdivuy.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\edovnmlhmu.xml
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\ecisfvuhpa.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ebwmf
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ebeblkboibi
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\eafryqglx
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\dxrnzku.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\dqeavzgp.xml
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\dqajfj.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\dpfrqyaznoo
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\dmtlsnues.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\dizbniz.xml
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\dehidfjtpt
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\daflhn
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\cwr
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ctsn
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\cqbt.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\cprceg
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\cntaml.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\cjsvjsn
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\civwzqm.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\cguaohd
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\cfclssx.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\cdntf.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\cbgvboorrjj.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\cakqt
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\bzyz.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\bsmobir.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\bmpedqmgmxo
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\blxcchdo.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\bloulzqvnrd
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\bfsdlrscmiv
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\azepwokxctz
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\auqopa
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\aso.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\arembuqqlhl.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\apluecjxljh.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\aotnjwxb.xml
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\alpzadzk
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ajfm.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\aihwg
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\agd
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\afocvlmwd
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\adpgegoatcl
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\aclcvmx.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\abqj
[2012/06/11 12:40:16 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\aaydghedumh
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\zzmbkjttcv.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\zyowns
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\zxykwvw
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\zxntsmpkns
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\zvxuplfqaiv.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\zmulmsalvp.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\zkgl
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\zhbezzk.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\zgtn.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\yzvlitevcp
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\yztg.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ywjmsytb
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ywcotf.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\yfguqg.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ybcwdcj.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\yacxpunyz
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\xwfjdkdtixu
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\xogeiasqdx
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\xnaaiqyn
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\xivldzk
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\xibfo.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\xhxj.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\xbeumyws.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\wvmaql.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\wtkvqxla.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\wriuwbh
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\wpushbesv
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\wpa
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\wnwis
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\wmcwjfwebcg.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\wmcbsqz
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\wjjkwjxof.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\wgjy
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\wgekhz
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\wchut
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\wbyqcoru
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\vuzy.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\vrb
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\vqzkhuu
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\vlzenqzgwi
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\vgkauki
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\vekhfmquvd.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\vedcfvtun
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\vcwbqe
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\uykjvcews
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\uvhkeoo.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\urupvqobgah
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\urfoeuqrrvx
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\umckcky
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ujupkolaxz.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ujmb
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ujemlvpjgb
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\uivgphjr
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\uhgxcxne.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\udixx.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ubomomrwsdk.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\tttpgilubhz.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\tplabizkfi
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\tnlcyha
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\tixbprzs.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\tcu.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\sxngztzr
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\swmx.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\srt.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\sqrvkkbktxz.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\sntlrnm.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\slfzi.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\skcx.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\sjzadmi.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\sfsz.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\sao
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\rzuc.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\rybqxma
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\rumiqlhw.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\rrbddpfknf
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\rquw
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\rpz.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\rkdkyehqiv
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\rjzxhrd
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\rilkwzwyil.xml
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\riffaw.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\rifbww.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\rhw.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\refyhravcw.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\qxbus.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\qttwzyei.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\qsopsnklrnj.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\qrpcq.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\qqqt.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\qbvhrrhf
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\qbqeurlah
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\qayekwvmsh
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\pxluctu.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\pwlwjlqf
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\pwa
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\pqognjycvt.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ppmurgqnqi
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\pjtdqi.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\pjjipw
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\phcioojd.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\pgsh
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\pffkxpns
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\pepxq
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\pedcjlq.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\pdqrcouep
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\pcpmvigyknw.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\pcnbisr
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\pclkwlz.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\pbzcnzjjax
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\pathdekgnl.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\oybbndhpat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\oxsta
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ousspnt.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ourtunrnnc
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\otvbczqzr.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\otorwgb.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\oqipw
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\opn
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\oofzxmm.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\oofsbkfk.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ooaomuyhvz.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\olwz
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\olvkvxg
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\olhdsirhbjm.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\oicryjbsxhd.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\odpeuveeirg
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\obfbsckxiuv
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\nysjggwyrz
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\nvdkhnrqwn
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ntpp.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\nreadmitf
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\nqxtrw
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\npx
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\npuailglpt.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\nnzey
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\narceunvfsr.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\mwzhlh.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\mwuwz.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\mvhxlyyr.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\msbwl
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\mpvauzxwdz
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\minowwpnhw.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\mfpfkyzrxe
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\mflohpswrxl.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\mbufohzbd.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\mbcuyqp
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\maynwlp.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\lzuovdq
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\lwcnbd.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\lvzw.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\lrotxpqhol
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\lqya.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\lnuzijew
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\lnm.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\lffhqjpt.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\lfdwrke
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\lepkgvz
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\lbial
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\kza
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\kragnbr.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\kppamcnflm.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\knk.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\kkrk.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\kjvzwobzke.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\kffzqte
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\kcd
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\jvpytddxshm.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\jvanbm.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\jsgzsb
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\jscxtijpp.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\jhvyfmljeob
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\jfuwpyqkkiu
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\jes
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\jeoc
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\jecbuzopv.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\jdlshte
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\jazdltqdat.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\iyao
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ivz.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\iurduaasebj
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ithugwck.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\isnvgwxvzx.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ipdnxhip
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\iooy
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\imisiwl.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ilppyukvb.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ikvd.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ifhfyantlzc
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\iduxw.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ict.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\hzooveshuhi
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\hxokmtz.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\hwsfdvw
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\hvbzrysf
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\hulemjbpzih.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\htubwk.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\htmhmor
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\hrqwp
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\hrfumedgw.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\hqofa
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\hiushfclfla.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\hbduxvmv
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\gwyphivwam
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\gwegf.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\gvsgjc
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\gtkrjpla
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\gsztiwpu
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\gqr
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ghdvcccqxcv.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\gfgr
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\gdsbvd
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\gcgii.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ganwg
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\fzzu.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\fxwpiwys
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\fsopbrrnag
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\frznpwqgbxt
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\fonbotjzdzr
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\fnxe.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\fmlgoxxnn.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\fhagevihj.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\evpk
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\eswjlbv
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\eqartqwjeg
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\epuzw.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\ejxebk
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\eewo.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\eesejbzog.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\eebifxejokv
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ecqooiby
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\dzna
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\dwbwxg
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\dows
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\dogequdlcho
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\dmuuqmc.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\dkfd.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\djzobvavx.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\dgppwo.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\dgckkqqq.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\dfswulgomz.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\dfdenbmhi
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\detwvkklv.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\defhdp.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\dbsbm
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\daltzc
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\cxoab
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ctxnogspj.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\cpznhdhikek
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\cixpn
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\cbqynozbpo.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\bzkhikmncyf
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\byoqvakieh.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\bycuny
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\bxqecmpfn.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\bulcyfilrrd.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\bsxkwl.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\bpajjydv
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\betjex.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\baxqskha.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\bacdzugy
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\azuxhafgo.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ayyyufnvi.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\axxvniyw
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\auemdu.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\arsimaqa
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\aqluxxpvzxz
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\alswcpnkwg
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\akophcvl
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\akjgqsepny.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ajnzyssdz.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ahlkupje
[2012/06/11 12:40:15 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\aesvs.dat
[2012/05/23 15:07:19 | 000,000,914 | ---- | C] () -- C:\Documents and Settings\user\Επιφάνεια εργασίας\VLC Media Player.lnk
[2012/05/18 15:23:29 | 000,000,756 | ---- | C] () -- C:\Documents and Settings\user\Application Data\Microsoft\Internet Explorer\Quick Launch\Garena Plus.lnk
[2012/04/20 21:00:25 | 000,000,664 | ---- | C] () -- C:\Documents and Settings\user\Application Data\Microsoft\Internet Explorer\Quick Launch\Steam.lnk
[2012/04/16 22:21:59 | 000,003,641 | ---- | C] () -- C:\WINDOWS\System32\wbers.dat
[2012/04/16 22:21:54 | 000,028,177 | ---- | C] () -- C:\WINDOWS\System32\wbers.dat.dmp
[2012/04/16 20:49:33 | 000,005,265 | ---- | C] () -- C:\WINDOWS\System32\nppt9x.vxd
[2012/04/15 01:08:49 | 000,005,817 | -HS- | C] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{86CF55C3-43E6-4BCD-AFC9-B0B86522CF8F}_Large.jpg
[2012/04/15 01:08:49 | 000,001,783 | -HS- | C] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{86CF55C3-43E6-4BCD-AFC9-B0B86522CF8F}_Small.jpg
[2012/04/15 01:08:46 | 000,010,527 | -HS- | C] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{1772EC26-248E-49FB-B3FB-20100E308811}_Large.jpg
[2012/04/15 01:08:46 | 000,002,461 | -HS- | C] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{1772EC26-248E-49FB-B3FB-20100E308811}_Small.jpg
[2012/04/15 01:07:59 | 000,009,927 | -HS- | C] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{8B5FB67F-4646-4FCC-AC4A-5D4E6DB83FD3}_Large.jpg
[2012/04/15 01:07:59 | 000,002,440 | -HS- | C] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{8B5FB67F-4646-4FCC-AC4A-5D4E6DB83FD3}_Small.jpg
[2012/04/06 18:10:45 | 000,013,329 | -HS- | C] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{8B2F44A4-B071-4FF1-A8B4-E45823B16E15}_Large.jpg
[2012/04/06 18:10:45 | 000,002,911 | -HS- | C] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{8B2F44A4-B071-4FF1-A8B4-E45823B16E15}_Small.jpg
[2012/04/06 18:10:20 | 000,010,425 | -HS- | C] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{A8C08D78-571B-4D63-BCB5-16E1FFCBD0A4}_Large.jpg
[2012/04/06 18:10:20 | 000,002,617 | -HS- | C] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{A8C08D78-571B-4D63-BCB5-16E1FFCBD0A4}_Small.jpg
[2012/04/06 18:06:47 | 000,009,118 | -HS- | C] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{40D6B709-FD06-4A8F-A155-4B1DD58A7596}_Large.jpg
[2012/04/06 18:06:47 | 000,002,234 | -HS- | C] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{40D6B709-FD06-4A8F-A155-4B1DD58A7596}_Small.jpg
[2012/03/31 14:18:48 | 000,013,371 | -HS- | C] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{3434182F-EB5E-4682-AA55-2B9718EFEED5}_Large.jpg
[2012/03/31 14:18:48 | 000,003,077 | -HS- | C] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{3434182F-EB5E-4682-AA55-2B9718EFEED5}_Small.jpg
[2012/03/31 14:17:49 | 000,008,929 | -HS- | C] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{5B874A76-5995-42C2-B12D-7A57BF67302B}_Large.jpg
[2012/03/31 14:17:49 | 000,002,381 | -HS- | C] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{5B874A76-5995-42C2-B12D-7A57BF67302B}_Small.jpg
[2012/03/31 14:17:04 | 000,014,105 | -HS- | C] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{DF2076AE-AF42-4645-B162-669509B2C487}_Large.jpg
[2012/03/31 14:17:04 | 000,003,072 | -HS- | C] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{DF2076AE-AF42-4645-B162-669509B2C487}_Small.jpg
[2012/03/31 13:41:02 | 000,014,679 | -HS- | C] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{D355EA7B-52B3-45CC-AF1B-818AB2E49F8E}_Large.jpg
[2012/03/31 13:41:02 | 000,003,338 | -HS- | C] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{D355EA7B-52B3-45CC-AF1B-818AB2E49F8E}_Small.jpg
[2012/03/31 13:40:11 | 000,016,470 | -HS- | C] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{F9A27B5B-ECF7-4E9F-982C-B58FF0134886}_Large.jpg
[2012/03/31 13:40:11 | 000,003,577 | -HS- | C] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{F9A27B5B-ECF7-4E9F-982C-B58FF0134886}_Small.jpg
[2012/03/31 13:06:22 | 000,014,104 | -HS- | C] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{BE8EDE0C-BDD8-4EC8-AEB3-030A75325FB9}_Large.jpg
[2012/03/31 13:06:22 | 000,003,218 | -HS- | C] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{BE8EDE0C-BDD8-4EC8-AEB3-030A75325FB9}_Small.jpg
[2012/03/31 13:06:02 | 000,009,514 | -HS- | C] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{2CE54D13-0EED-4EFE-B88A-F9245A53299E}_Large.jpg
[2012/03/31 13:06:02 | 000,002,438 | -HS- | C] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{2CE54D13-0EED-4EFE-B88A-F9245A53299E}_Small.jpg
[2012/03/29 12:37:46 | 000,002,287 | ---- | C] () -- C:\Documents and Settings\user\Application Data\Microsoft\Internet Explorer\Quick Launch\Skype.lnk
[2012/03/19 19:19:38 | 000,010,530 | -HS- | C] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{90F8F14B-B1C7-4D1C-B7AE-AC8014C0F755}_Large.jpg
[2012/03/19 19:19:38 | 000,002,609 | -HS- | C] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{90F8F14B-B1C7-4D1C-B7AE-AC8014C0F755}_Small.jpg
[2012/03/19 19:19:07 | 000,008,852 | -HS- | C] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{3154F5EF-F00E-45B1-BCAF-D3FB210A02E5}_Large.jpg
[2012/03/19 19:19:07 | 000,002,373 | -HS- | C] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{3154F5EF-F00E-45B1-BCAF-D3FB210A02E5}_Small.jpg
[2012/03/19 19:18:35 | 000,004,858 | -HS- | C] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{B9E174C9-2F36-442C-BE29-96B15CD31075}_Large.jpg
[2012/03/19 19:18:35 | 000,001,566 | -HS- | C] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{B9E174C9-2F36-442C-BE29-96B15CD31075}_Small.jpg
[2012/03/19 18:57:37 | 000,013,930 | -HS- | C] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{48FF47DE-966A-43CB-BE2C-20AC7657FEF3}_Large.jpg
[2012/03/19 18:57:37 | 000,002,520 | -HS- | C] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{48FF47DE-966A-43CB-BE2C-20AC7657FEF3}_Small.jpg
[2012/03/19 18:57:11 | 000,008,267 | -HS- | C] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{B7121C03-F84A-461F-B415-236233AC623D}_Large.jpg
[2012/03/19 18:57:11 | 000,002,131 | -HS- | C] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{B7121C03-F84A-461F-B415-236233AC623D}_Small.jpg
[2012/03/19 18:56:20 | 000,011,111 | -HS- | C] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{F6CB1BBD-1FF1-463A-82D3-19C84A85C85E}_Large.jpg
[2012/03/19 18:56:20 | 000,002,733 | -HS- | C] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{F6CB1BBD-1FF1-463A-82D3-19C84A85C85E}_Small.jpg
[2012/03/19 18:55:33 | 000,011,364 | -HS- | C] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{07C0637F-52F8-4024-BB34-A401A54AD80B}_Large.jpg
[2012/03/19 18:55:33 | 000,002,476 | -HS- | C] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{07C0637F-52F8-4024-BB34-A401A54AD80B}_Small.jpg
[2012/03/19 18:55:14 | 000,015,483 | -HS- | C] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{55B7CE8D-20DA-481E-A004-923D0BF10FDF}_Large.jpg
[2012/03/19 18:55:14 | 000,003,276 | -HS- | C] () -- C:\Documents and Settings\user\Τα έγγραφά μου\AlbumArt_{55B7CE8D-20DA-481E-A004-923D0BF10FDF}_Small.jpg
[2012/02/16 11:13:46 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2012/02/09 22:40:00 | 002,807,708 | ---- | C] () -- C:\WINDOWS\System32\nvdata.data
[2011/11/11 18:30:36 | 000,468,282 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-System.dat
[2011/11/11 18:30:36 | 000,468,282 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-S-1-5-21-842925246-1563985344-1417001333-1004-0.dat
[2011/11/08 15:03:23 | 000,000,509 | ---- | C] () -- C:\Documents and Settings\user\Application Data\com.richardwang.FluffyApp.plist
[2011/06/25 20:56:16 | 000,005,120 | ---- | C] () -- C:\WINDOWS\System32\tcusbdrv.dll
[2011/06/25 20:05:04 | 000,045,194 | ---- | C] () -- C:\Documents and Settings\user\Application Data\room_v3.dat
[2011/06/25 17:08:15 | 000,175,616 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2011/06/25 12:01:33 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2011/06/23 03:14:58 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2011/06/23 03:13:52 | 002,337,216 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011/06/23 00:44:29 | 000,116,224 | ---- | C] () -- C:\Documents and Settings\user\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/06/23 00:28:46 | 000,081,936 | ---- | C] () -- C:\WINDOWS\System32\RtNicProp32.dll
[2011/06/23 00:24:17 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2011/06/23 00:20:13 | 000,022,812 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat

========== LOP Check ==========

[2012/06/07 20:09:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ESET
[2012/07/16 13:19:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\GarenaMessenger
[2012/06/25 23:01:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\KONAMI
[2012/08/07 15:53:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2012/01/31 17:40:01 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Application Data\{32364CEA-7855-4A3C-B674-53D8E9B97936}
[2012/08/27 20:20:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Application Data\Babylon
[2011/10/14 16:03:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Application Data\ESET
[2012/07/16 13:19:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Application Data\GarenaPlus
[2011/11/29 13:55:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Application Data\SystemRequirementsLab

========== Purity Check ==========

========== Custom Scans ==========

< %SYSTEMDRIVE%\*.* >
[2011/06/23 00:22:42 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
[2012/06/21 17:36:11 | 000,000,211 | -HS- | M] () -- C:\boot.ini
[2008/04/15 15:00:00 | 000,004,952 | RHS- | M] () -- C:\Bootfont.bin
[2011/06/23 00:22:42 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2011/06/23 00:22:42 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2011/06/23 00:22:42 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2008/04/15 15:00:00 | 000,047,564 | RHS- | M] () -- C:\NTDETECT.COM
[2008/04/15 15:00:00 | 000,252,256 | RHS- | M] () -- C:\ntldr
[2012/08/27 20:44:31 | 2145,386,496 | -HS- | M] () -- C:\pagefile.sys

< %systemroot%\Fonts\*.com >
[2006/04/18 15:39:28 | 000,026,040 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalMonospace.CompositeFont
[2006/06/29 14:53:56 | 000,026,489 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalSansSerif.CompositeFont
[2006/04/18 15:39:28 | 000,029,779 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalSerif.CompositeFont
[2006/06/29 14:58:52 | 000,030,808 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2011/06/23 00:22:19 | 000,000,067 | -HS- | M] () -- C:\WINDOWS\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2008/07/06 15:06:10 | 000,089,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
[2008/07/06 13:50:03 | 000,597,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >
[2011/07/20 12:44:31 | 000,001,690 | -H-- | M] () -- C:\Documents and Settings\user\Application Data\Microsoft\LastFlashConfig.WFC

< %PROGRAMFILES%\*.* >

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >
[2011/06/23 03:12:57 | 000,094,208 | ---- | M] () -- C:\WINDOWS\System32\config\default.sav
[2011/06/23 03:12:57 | 001,073,152 | ---- | M] () -- C:\WINDOWS\System32\config\software.sav
[2011/06/23 03:12:57 | 000,458,752 | ---- | M] () -- C:\WINDOWS\System32\config\system.sav

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lik /x >
[2011/06/23 00:22:47 | 000,000,323 | -HS- | M] () -- C:\Documents and Settings\All Users\Start Menu\desktop.ini
[2011/06/23 00:22:47 | 000,001,507 | ---- | M] () -- C:\Documents and Settings\All Users\Start Menu\Windows Update.lnk
[2011/06/23 00:22:47 | 000,000,398 | ---- | M] () -- C:\Documents and Settings\All Users\Start Menu\Κατάλογος των Windows.lnk
[2011/06/23 00:22:47 | 000,001,607 | ---- | M] () -- C:\Documents and Settings\All Users\Start Menu\Ορισμός πρόσβασης και προεπιλογών προγραμμάτων.lnk

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Mikzosoft\Internet Explorer\Quick Launch\*.lnk /x >

< %USERPROFILE%\Desktop\*.exe >

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2012-08-15 18:43:50

< %USERPROFILE%\..|smtmp;true;true;true /FP >

< %temp%\smtmp\*.* /s > >

< MD5 for: EXPLORER.EXE >
[2008/04/15 15:00:00 | 001,038,336 | ---- | M] (Microsoft Corporation) MD5=8B93A11CDA30DD8AD9902B59BB401411 -- C:\WINDOWS\explorer.exe
[2008/04/15 15:00:00 | 001,038,336 | ---- | M] (Microsoft Corporation) MD5=8B93A11CDA30DD8AD9902B59BB401411 -- C:\WINDOWS\system32\dllcache\explorer.exe

< MD5 for: EXPLORER.SCF >
[2008/04/15 15:00:00 | 000,000,080 | ---- | M] () MD5=A3975A7D2C98B30A2AE010754FFB9392 -- C:\WINDOWS\explorer.scf

< MD5 for: IEXPLORE.CHM >
[2008/04/15 15:00:00 | 000,251,428 | ---- | M] () MD5=2CD1E8253AEB45D86C4F5A12C05F44CC -- C:\WINDOWS\ie8\iexplore.chm
[2009/02/25 02:48:52 | 000,666,120 | ---- | M] () MD5=E9A96B220C197CAAFC953761ED1F436E -- C:\WINDOWS\Help\iexplore.chm

< MD5 for: IEXPLORE.EXE >
[2009/03/08 14:09:26 | 000,638,816 | ---- | M] (Microsoft Corporation) MD5=B60DDDD2D63CE41CB8C487FCFBB6419E -- C:\Program Files\Internet Explorer\iexplore.exe
[2009/03/08 14:09:26 | 000,638,816 | ---- | M] (Microsoft Corporation) MD5=B60DDDD2D63CE41CB8C487FCFBB6419E -- C:\WINDOWS\system32\dllcache\iexplore.exe
[2008/04/15 15:00:00 | 000,093,184 | ---- | M] (Microsoft Corporation) MD5=C8E65A26D4485C1D954BFE2720FC5C27 -- C:\WINDOWS\ie8\iexplore.exe

< MD5 for: IEXPLORE.EXE.MUI >
[2009/03/08 14:13:38 | 000,016,384 | ---- | M] (Microsoft Corporation) MD5=C435241E43EA063F37D03B50CD807FA4 -- C:\Program Files\Internet Explorer\el-GR\iexplore.exe.mui
[2009/03/08 14:13:38 | 000,016,384 | ---- | M] (Microsoft Corporation) MD5=C435241E43EA063F37D03B50CD807FA4 -- C:\Program Files\Internet Explorer\iexplore.exe.mui

< MD5 for: IEXPLORE.HLP >
[2008/04/15 15:00:00 | 000,104,249 | ---- | M] () MD5=539858D333531C6998F64C34090FC725 -- C:\WINDOWS\Help\iexplore.hlp

< MD5 for: SERVICES >
[2008/04/15 15:00:00 | 000,007,549 | ---- | M] () MD5=29724D143E2065B59A42E16ECB2B9939 -- C:\WINDOWS\system32\drivers\etc\services

< MD5 for: SERVICES.CFG >
[2012/04/04 08:53:54 | 000,585,987 | ---- | M] () MD5=7BAB089A4F862C6BC86E0201D5BF1779 -- C:\Program Files\Adobe\Reader 10.0\Reader\Services\Services.cfg
[2011/06/06 12:55:30 | 000,584,045 | R--- | M] () MD5=B82DD53FA8C260DDD7FDC42182DB816E -- C:\WINDOWS\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\services.cfg

< MD5 for: SERVICES.EXE >
[2009/02/09 14:16:08 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=1AE2E5CE9EEE92C125D2B95B1B85268C -- C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\services.exe
[2008/04/15 15:00:00 | 000,109,056 | ---- | M] (Microsoft Corporation) MD5=207AB7A1A36004BB6F33E58E71C1C90E -- C:\WINDOWS\$NtUninstallKB956572$\services.exe
[2009/02/09 14:23:04 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=2A0BB5C67281C423F8D7D6B7D79699AC -- C:\WINDOWS\system32\dllcache\services.exe
[2009/02/09 14:23:04 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=2A0BB5C67281C423F8D7D6B7D79699AC -- C:\WINDOWS\system32\services.exe

< MD5 for: SERVICES.MSC >
[2008/04/15 15:00:00 | 000,033,120 | ---- | M] () MD5=FEDE86A04D236690CCF03B38DC130963 -- C:\WINDOWS\system32\services.msc

< MD5 for: SERVICES.SBS >
[2011/03/01 09:58:46 | 000,034,818 | ---- | M] () MD5=62AFD4B2025CE6D4706B36F4C4808F9B -- C:\Documents and Settings\user\Τα έγγραφά μου\Kosmas\Programs\SpybotPortable\App\Spybot\Includes\Services.sbs

< MD5 for: WINLOGON.EXE >
[2008/04/15 15:00:00 | 000,513,536 | ---- | M] (Microsoft Corporation) MD5=5C928CB57C89F8623608DBF5467379EE -- C:\WINDOWS\system32\dllcache\winlogon.exe
[2008/04/15 15:00:00 | 000,513,536 | ---- | M] (Microsoft Corporation) MD5=5C928CB57C89F8623608DBF5467379EE -- C:\WINDOWS\system32\winlogon.exe

========== Alternate Data Streams ==========

@Alternate Data Stream - 167 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:8CE646EE
@Alternate Data Stream - 155 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:07BF512B

< End of report >

Scarecrow

2012-08-27, 22:04

Extras.txt

OTL Extras logfile created on: 27/8/2012 9:30:13 μμ - Run 1
OTL by OldTimer - Version 3.2.59.1 Folder = C:\Documents and Settings\user\Επιφάνεια εργασίας
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000408 | Country: Ελλάδα | Language: ELL | Date Format: d/M/yyyy

2,00 Gb Total Physical Memory | 1,43 Gb Available Physical Memory | 71,49% Memory free
3,85 Gb Paging File | 3,47 Gb Available in Paging File | 90,06% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 111,78 Gb Total Space | 13,19 Gb Free Space | 11,80% Space Free | Partition Type: NTFS

Computer Name: USER-0D3DA03F2E | User Name: user | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 180 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"UpdatesDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22002

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Garena\Garena.exe" = C:\Program Files\Garena\Garena.exe:*:Enabled:Garena -- (Garena Online PTE LTD)
"C:\Program Files\Steam\Steam.exe" = C:\Program Files\Steam\Steam.exe:*:Enabled:Steam -- (Valve Corporation)
"C:\Documents and Settings\user\Επιφάνεια εργασίας\uTorrentPortable\App\uTorrent\uTorrent.exe" = C:\Documents and Settings\user\Επιφάνεια εργασίας\uTorrentPortable\App\uTorrent\uTorrent.exe:*:Enabled:µTorrent
"C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe" = C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe:*:Enabled:WebKit -- (Apple Inc.)
"C:\Documents and Settings\user\Επιφάνεια εργασίας\Programs\uTorrentPortable\App\uTorrent\uTorrent.exe" = C:\Documents and Settings\user\Επιφάνεια εργασίας\Programs\uTorrentPortable\App\uTorrent\uTorrent.exe:*:Enabled:µTorrent -- (BitTorrent, Inc.)
"C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe" = C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe:*:Enabled:Daemonu.exe -- (NVIDIA Corporation)
"C:\Program Files\KONAMI\Pro Evolution Soccer 2012\pes2012.exe" = C:\Program Files\KONAMI\Pro Evolution Soccer 2012\pes2012.exe:*:Enabled:Pro Evolution Soccer 2012 -- (Konami Digital Entertainment Co., Ltd.)
"C:\Program Files\Steam\steamapps\common\dota 2 test\dota.exe" = C:\Program Files\Steam\steamapps\common\dota 2 test\dota.exe:*:Enabled:Dota 2 Test -- ()
"C:\Program Files\Steam\steamapps\common\call of duty modern warfare 3\iw5sp.exe" = C:\Program Files\Steam\steamapps\common\call of duty modern warfare 3\iw5sp.exe:*:Enabled:Call of Duty: Modern Warfare 3 -- ()
"C:\Program Files\Steam\steamapps\common\call of duty modern warfare 3\iw5mp.exe" = C:\Program Files\Steam\steamapps\common\call of duty modern warfare 3\iw5mp.exe:*:Enabled:Call of Duty: Modern Warfare 3 - Multiplayer -- ()
"C:\Program Files\Steam\steamapps\common\call of duty modern warfare 3\iw5mp_server.exe" = C:\Program Files\Steam\steamapps\common\call of duty modern warfare 3\iw5mp_server.exe:*:Enabled:Call of Duty: Modern Warfare 3 - Dedicated Server -- ()
"C:\Program Files\Steam\steamapps\common\dota 2 beta\dota.exe" = C:\Program Files\Steam\steamapps\common\dota 2 beta\dota.exe:*:Enabled:Dota 2 -- ()

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{01501EBA-EC35-4F9F-8889-3BE346E5DA13}" = MSXML4 Parser
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0E64B098-8018-4256-BA23-C316A43AD9B0}" = QuickTime
"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
"{1A08F24B-CA66-4BA9-9933-A9D20A66E8D8}" = Βοηθός εισόδου του Windows Live
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Εργαλείο αποστολής του Windows Live
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{22C3D78F-6678-3D40-BC87-AB8715A56F7D}" = Microsoft .NET Framework 4 Extended ELL Language Pack
"{26A24AE4-039D-4CA4-87B4-2F83216033FF}" = Java(TM) 6 Update 33
"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
"{350C9408-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3ABC7CFA-A6F5-3870-A59C-B856DA1DA4F4}" = Microsoft .NET Framework 4 Client Profile ELL Language Pack
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{5BE3BF62-D432-4D47-A712-CD4DF91CABFB}" = TrendChip USB ADSL Modem
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7195E0FF-0027-4C94-A600-3F16255C5B4A}" = Windows Live Essentials
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{8EA79DBF-D637-448A-89D6-410A087A4493}" = Samsung_MonSetup
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9C9A08CD-D16C-4CC1-8115-634461BF6E0D}" = Windows Live Messenger
"{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.3)
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Πίνακας Ελέγχου NVIDIA 301.42
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Πρόγραμμα οδήγησης γραφικών 301.42
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NView" = NVIDIA nView 136.27
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA Λογισμικό σύστημα PhysX 9.12.0213
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = Ενημερώσεις NVIDIA 1.8.15
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA Πρόγραμμα οδήγησης ήχου HD 1.3.16.0
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{BAF78226-3200-4DB4-BE33-4D922A799840}" = Windows Presentation Foundation
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C9E4932C-8417-4E4C-A0E3-EE534810AB4D}" = ClearType Tuning Control Panel Applet
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D1725D54-279A-40C5-A70D-23C1785DB920}_is1" = AoA Audio Extractor
"{DA909E62-3B45-4BA1-8B58-FCAEBA4BCEC9}" = NVIDIA PhysX
"{E737A098-F161-4B6F-AF22-86AAE34F6FBD}" = Pro Evolution Soccer 2012
"{EB879750-CCBD-4013-BFD5-0294D4DA5BD0}" = Apple Application Support
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.8
"{EF181DC1-0ECB-4546-9772-C3C3F58E5747}" = ESET Smart Security
"{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}" = Sony Ericsson PC Companion 1.60.13
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"CCleaner" = CCleaner
"Garena" = Garena 2010
"ie8" = Windows Internet Explorer 8
"im" = Garena Plus
"KLiteCodecPack_is1" = K-Lite Codec Pack 7.2.0 (Standard)
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile ELL Language Pack" = Πακέτο γλωσσών για τα Ελληνικά του Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended ELL Language Pack" = Πακέτο γλωσσών για τα Ελληνικά του Microsoft .NET Framework 4 Extended
"Mozilla Firefox 14.0.1 (x86 el)" = Mozilla Firefox 14.0.1 (x86 el)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"Steam App 42680" = Call of Duty: Modern Warfare 3
"Steam App 42690" = Call of Duty: Modern Warfare 3 - Multiplayer
"Steam App 42750" = Call of Duty: Modern Warfare 3 - Dedicated Server
"Steam App 570" = Dota 2
"SystemRequirementsLab" = System Requirements Lab
"TNod" = TNod User & Password Finder
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinRAR archiver" = WinRAR 4.00 (32-bit)
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"XpsEPSC" = XML Paper Specification Shared Components Pack 1.0

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Uploadinator" = FluffyApp

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 2/3/2012 10:41:38 πμ | Computer Name = USER-0D3DA03F2E | Source = Application Error | ID = 1000
Description = Ελαττωματική εφαρμογή steam.exe, έκδοση 1.0.1065.11, ελαττωματική
λειτουργική μονάδα unknown, έκδοση 0.0.0.0, ελαττωματική διεύθυνση 0x00000118.

Error - 11/4/2012 11:16:59 πμ | Computer Name = USER-0D3DA03F2E | Source = .NET Runtime Optimization Service | ID = 1103
Description = .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32)
- Tried to start a service that wasn't the latest version of CLR Optimization service.
Will shutdown

Error - 12/4/2012 6:35:16 πμ | Computer Name = USER-0D3DA03F2E | Source = Application Error | ID = 1000
Description = Ελαττωματική εφαρμογή photoshop.exe, έκδοση 11.0.0.0, ελαττωματική
λειτουργική μονάδα unknown, έκδοση 0.0.0.0, ελαττωματική διεύθυνση 0x2ebe40bf.

Error - 2/5/2012 7:15:26 πμ | Computer Name = USER-0D3DA03F2E | Source = SecurityCenter | ID = 1802
Description = Η υπηρεσία του Κέντρου ασφάλειας των Windows δεν μπόρεσε να δημιουργήσει
τα ερωτήματα συμβάντων μέσω WMI που είναι απαραίτητα για την παρακολούθηση λογισμικού
προστασίας από ιούς και τείχους προστασίας άλλων κατασκευαστών.

Error - 11/5/2012 4:03:03 πμ | Computer Name = USER-0D3DA03F2E | Source = .NET Runtime Optimization Service | ID = 1103
Description = .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32)
- Tried to start a service that wasn't the latest version of CLR Optimization service.
Will shutdown

Error - 14/5/2012 12:21:36 μμ | Computer Name = USER-0D3DA03F2E | Source = PerfNet | ID = 2005
Description = Δεν είναι δυνατή η ανάγνωση των δεδομένων για τις επιδόσεις της υπηρεσίας
διακομιστή. Δεν θα επιστραφούν δεδομένα για τις επιδόσεις διακομιστή σε αυτό το
δείγμα. Ο κωδικός σφάλματος που επιστράφηκε βρίσκεται στα δεδομένα DWORD 0, η IOSB.Status
έχει την τιμή DWORD 1 και η IOSB.Information έχει την τιμή DWORD 2.

Error - 14/5/2012 12:21:36 μμ | Computer Name = USER-0D3DA03F2E | Source = PerfNet | ID = 2006
Description = Δεν είναι δυνατή η ανάγνωση των δεδομένων για τις επιδόσεις ουράς
διακομιστή από την υπηρεσία διακομιστή. Δεν θα επιστραφούν δεδομένα για τις επιδόσεις
της ουράς διακομιστή σε αυτό το δείγμα. Ο κωδικός σφάλματος που επιστράφηκε βρίσκεται
στα δεδομένα DWORD 0, η IOSB.Status έχει την τιμή DWORD 1 και η IOSB.Information
έχει την τιμή DWORD 2.

Error - 18/5/2012 9:12:24 πμ | Computer Name = USER-0D3DA03F2E | Source = Application Hang | ID = 1002
Description = Κρεμασμένη εφαρμογή WarKey.exe, έκδοση 6.5.0.0, στοιχείο ελέγχου κρεμάσματος
hungapp, έκδοση 0.0.0.0, διεύθυνση κρεμάσματος 0x00000000.

Error - 7/6/2012 1:08:55 μμ | Computer Name = USER-0D3DA03F2E | Source = crypt32 | ID = 131083
Description = Αποτυχημένη εξαγωγή από το αρχείο cab αυτόματης ενημέρωσης, της ριζικής
λίστας άλλου κατασκευαστή: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>
με σφάλμα: Ένα απαιτούμενο πιστοποιητικό δεν είναι εντός της περιόδου ισχύος του,
κατά την επαλήθευση με βάση το τρέχον ρολόι συστήματος ή τη χρονική σήμανση στο
υπογεγραμμένο αρχείο.

Error - 7/6/2012 1:08:55 μμ | Computer Name = USER-0D3DA03F2E | Source = crypt32 | ID = 131083
Description = Αποτυχημένη εξαγωγή από το αρχείο cab αυτόματης ενημέρωσης, της ριζικής
λίστας άλλου κατασκευαστή: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>
με σφάλμα: Ένα απαιτούμενο πιστοποιητικό δεν είναι εντός της περιόδου ισχύος του,
κατά την επαλήθευση με βάση το τρέχον ρολόι συστήματος ή τη χρονική σήμανση στο
υπογεγραμμένο αρχείο.

[ System Events ]
Error - 11/8/2012 8:56:03 πμ | Computer Name = USER-0D3DA03F2E | Source = Dhcp | ID = 1002
Description = Η εκμίσθωση της διεύθυνσης IP 192.168.2.3 για την κάρτα δικτύου της
οποίας η διεύθυνση στο δίκτυο είναι 0025228DAB40 δεν έγινε αποδεκτή από το διακομιστή
DHCP 192.168.2.1 (Ο διακομιστής DHCP απέστειλε ένα μήνυμα DHCPNACK).

Error - 12/8/2012 5:27:42 πμ | Computer Name = USER-0D3DA03F2E | Source = Dhcp | ID = 1002
Description = Η εκμίσθωση της διεύθυνσης IP 192.168.2.3 για την κάρτα δικτύου της
οποίας η διεύθυνση στο δίκτυο είναι 0025228DAB40 δεν έγινε αποδεκτή από το διακομιστή
DHCP 192.168.2.1 (Ο διακομιστής DHCP απέστειλε ένα μήνυμα DHCPNACK).

Error - 13/8/2012 8:45:49 πμ | Computer Name = USER-0D3DA03F2E | Source = Dhcp | ID = 1002
Description = Η εκμίσθωση της διεύθυνσης IP 192.168.2.2 για την κάρτα δικτύου της
οποίας η διεύθυνση στο δίκτυο είναι 0025228DAB40 δεν έγινε αποδεκτή από το διακομιστή
DHCP 192.168.2.1 (Ο διακομιστής DHCP απέστειλε ένα μήνυμα DHCPNACK).

Error - 14/8/2012 5:22:55 πμ | Computer Name = USER-0D3DA03F2E | Source = Dhcp | ID = 1002
Description = Η εκμίσθωση της διεύθυνσης IP 192.168.2.4 για την κάρτα δικτύου της
οποίας η διεύθυνση στο δίκτυο είναι 0025228DAB40 δεν έγινε αποδεκτή από το διακομιστή
DHCP 192.168.2.1 (Ο διακομιστής DHCP απέστειλε ένα μήνυμα DHCPNACK).

Error - 14/8/2012 5:23:41 μμ | Computer Name = USER-0D3DA03F2E | Source = Dhcp | ID = 1002
Description = Η εκμίσθωση της διεύθυνσης IP 192.168.2.3 για την κάρτα δικτύου της
οποίας η διεύθυνση στο δίκτυο είναι 0025228DAB40 δεν έγινε αποδεκτή από το διακομιστή
DHCP 192.168.2.1 (Ο διακομιστής DHCP απέστειλε ένα μήνυμα DHCPNACK).

Error - 15/8/2012 4:56:47 πμ | Computer Name = USER-0D3DA03F2E | Source = Dhcp | ID = 1002
Description = Η εκμίσθωση της διεύθυνσης IP 192.168.2.3 για την κάρτα δικτύου της
οποίας η διεύθυνση στο δίκτυο είναι 0025228DAB40 δεν έγινε αποδεκτή από το διακομιστή
DHCP 192.168.2.1 (Ο διακομιστής DHCP απέστειλε ένα μήνυμα DHCPNACK).

Error - 16/8/2012 8:46:46 πμ | Computer Name = USER-0D3DA03F2E | Source = Dhcp | ID = 1002
Description = Η εκμίσθωση της διεύθυνσης IP 192.168.2.3 για την κάρτα δικτύου της
οποίας η διεύθυνση στο δίκτυο είναι 0025228DAB40 δεν έγινε αποδεκτή από το διακομιστή
DHCP 192.168.2.1 (Ο διακομιστής DHCP απέστειλε ένα μήνυμα DHCPNACK).

Error - 17/8/2012 3:17:42 πμ | Computer Name = USER-0D3DA03F2E | Source = Dhcp | ID = 1002
Description = Η εκμίσθωση της διεύθυνσης IP 192.168.2.3 για την κάρτα δικτύου της
οποίας η διεύθυνση στο δίκτυο είναι 0025228DAB40 δεν έγινε αποδεκτή από το διακομιστή
DHCP 192.168.2.1 (Ο διακομιστής DHCP απέστειλε ένα μήνυμα DHCPNACK).

Error - 17/8/2012 5:32:40 μμ | Computer Name = USER-0D3DA03F2E | Source = Dhcp | ID = 1002
Description = Η εκμίσθωση της διεύθυνσης IP 192.168.2.3 για την κάρτα δικτύου της
οποίας η διεύθυνση στο δίκτυο είναι 0025228DAB40 δεν έγινε αποδεκτή από το διακομιστή
DHCP 192.168.2.1 (Ο διακομιστής DHCP απέστειλε ένα μήνυμα DHCPNACK).

Error - 18/8/2012 1:39:18 μμ | Computer Name = USER-0D3DA03F2E | Source = Dhcp | ID = 1002
Description = Η εκμίσθωση της διεύθυνσης IP 192.168.2.3 για την κάρτα δικτύου της
οποίας η διεύθυνση στο δίκτυο είναι 0025228DAB40 δεν έγινε αποδεκτή από το διακομιστή
DHCP 192.168.2.1 (Ο διακομιστής DHCP απέστειλε ένα μήνυμα DHCPNACK).

< End of report >

oldman960

2012-08-28, 07:23

Hi Scarecrow,

Any problems besides the files?

We may need to do this in couple of fixes. Run the OTL fix, post the log and I'll post the second part.

By the way, I can now see some files like .db, AlbumArt and some hidden system files (autoexec.bat, boot.ini etc).
That was OTL's doing, we'll rehide them.

Open windows explorer (right click the Start button and click Explore)

At the top of windows explorer, click tools, folder options, click the view tab

uncheck Display the contents of system folders
uncheck Show hidden files and folders
check "Hide extensions for known file types" box
check "Hide protecting operating system files" box
Click apply, click ok

Next, Double click on OTL.exe
Under the Custom Scans/Fixes box at the bottom, paste in the following
Do Not copy the word CODE
please note the fix starts with the :

:Services

:OTL
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\mpr
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zyadeizbstq.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zxlhpcxet
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\zwjvhcytwbc
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zvybg
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zvxxfsps
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zufsomdnqb
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zprns
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zph
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\znubd
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zmpm.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zlvlgaoro.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zkvadtmlfi
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zgdzvuq
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zfxbo
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zerryde
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zdo
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zbu.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zayfbnltwb
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\yueiza
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\yrvdebxgrzt
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\yruogei.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\yqwnxmuqkr.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\yqjwaqwjrgn
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ypwgam
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ypn
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ypb
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ynbpico.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\yjbyky
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\yifbtom
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\yhvfljhx
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\yft.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\yfddtyco.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\yeubbz
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\yeqc.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ybnso
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\yajdu
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xxfxt
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xwolbkcl
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xuyoohmb
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xsdi
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xrjnqaxgslz
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xrjmwls.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xratz.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xnrwoffi.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xlaoaq
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xkiazoygsu.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xitroqxj.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xhliavnncf.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xhjvdk
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xhi.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xhepiahgu.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xei.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xdu.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xdnu
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xbwudob.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xabxrnwognq.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wztapis.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wvpmojcpagc.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wuienx.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wrfmrz
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wqnbogohpa
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wooq
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wnzrlwgymia
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wnwpuad
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wmsxmgb
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wmaeoulj.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wltgfaapaxg
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wlagsxpfnjc
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wkaig
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wjd.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wio
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wgfzxqxc.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vylysjgigsp
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vydky
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vxamvnvecd
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vwx.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vwvpxtf.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vutlo
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vtccpjjxhbl.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vrt
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vpymgh.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vlv
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vltbvctcek
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vlhw
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vky.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vhuya
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vhgdwwy.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vexcv.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\uuknvmo.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\usbsjhq
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\upwhfcfpq
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\upqsk.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\umblkiu
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ukqsipcp
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ujurc
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\uilhoi.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ugh.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\uaqqwmjt.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\tzhdw
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\txkpazbbtc
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\tvumtdvg
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\tviuuwtwvs
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\tubh.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\trpcwzo
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\trjhziwhqax
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\tqkrkktdw
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\tparier
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\togl
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\tmksiwyo.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\tmiduq
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\tmhmpisgrjb
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\tjerrruiu.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\tgysztaa.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\tgp.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\teatwcjgoq
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\szanch.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\swucw
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\swrosmstc.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\svh.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\surl.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\strlohjio
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\sthnpbr.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\srceeuuzog
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\slvwlpnaqo
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\skjqlknoa.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\sjfso
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\sghtkpu
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\sfxzlgg
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\sbm
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rzyxt
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rxlxmq
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rwwmb
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rwumiig
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rvitifkhda.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ruwy.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rtssxvscl
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rtsquze.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\rnni.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rnixg
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rnaxcorvnpm.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rmkgnn.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rlxrf
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rhrrf
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rfmfahwb
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rfbddh.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rckntimj.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rbw
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rbou.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rbc
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qzegqoobxiy.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qwdspx
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qvt
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\quqsl
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qswzofzltsi
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qqqewpfdl.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qqmnchoguw
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qpghwlpi.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qogqdj
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qnretzig.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qncintxhpbv
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qmlr
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qldlx
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qjhrojfdm
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qhyfrlwcpck
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qheefqe.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\qgqkumwr.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qebywplco
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qcyfwezkrw
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qcw
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qbt
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qbdvroefxtf.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pwalonerzam
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pvsbacopgo.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\puxozpwjj.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ptuhkoey
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ptfcgaof.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ptcwmepfq.xml
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\psxulyb.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\psuezqksw.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pqjjgvrcrr.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pplmagu.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\pnaphwmzlgp
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pgmxllhrgl
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pefaimbebk.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pctk
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\oylo
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\oxxpcqneqfk.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\otngpkqlgc
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\oqljnan
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\opnaypiuh
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\oocihv
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\onuhfaqdr.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\omgkwcqmzh
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\olhitsu
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\olcfhmx.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\okbzdweogsf.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ojlw
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ohfmfxmgnvd
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ogn.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ogknbwh.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\odklrkid
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\odieozehykz
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ocduhsoaeky.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\oaap
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\nybrohbe
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\nvolurg
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\noyqt
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\nlzvfpgxhuw.xml
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\nhs
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\netcd.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ndpxrjvfik.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mzquaye
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mxdvmytw.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mvxgdkyrjxt
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mvfhxic
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mrprxeehpe
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mpuqpwyjjoe.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mlfml.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mkyszmt
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mimsxzkfsba
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mhymnl.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mhefcltipun.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mftkul
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mcrrrdylbyb.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mbpbf.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lzjqvgauzfs
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\lyi
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lxjydaq.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lwohwwxa
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lvjfqnrfy.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ltm
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ltcbbxm
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lrwldsbcq
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\lqrbl
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lqpksm
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lptdlhqltgj
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lmti
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lmkwvtfa.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lljl
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lklnirnii
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\litvwn
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\liif.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lhlcj.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lervczxc
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ldypa
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ldna.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kykkyyjuomq
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kxfziwiehxe
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ktkvvqws.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kokjkgnayl.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\knkpjcuzkb
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kmgbr
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kkxlvn
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kjvgkvsar
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kjj
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\khzpcmbe
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kgqeevfnt.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kfzlj
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kfkegdfzsmf.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kdi
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kblu.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kagoeryt
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kaddzumq.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jxvemnjznu
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jxqxva.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\junn
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jtdznq
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jsslx
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jresfclof
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\jnpltjziixr
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jmpx
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jkne
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jfilvhux
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jclas
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ixrmyzmuf.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\iuzsgndntd
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\itshnv.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ipldozicq
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\iobspad
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ikugogpknz
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ikitzfwrlzd
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ihxkhtew
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\igy
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\igwyc
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ifwyys
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ifvbafbi.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ifh
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\iecx
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\idzfxu
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ibqvywo.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\iarssnndg
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hznd
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hxpuo.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\huiqk
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\htzs.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hsxps
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hqwxnfwmq.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hoboh.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hmzimwaq.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\hihw
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\higwf
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hhxjfatux.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hgu.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hgdxppghmnp.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hfbtzuzg
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hfaptb.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hbqnkzjqm.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gzswrdxw.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gxveh.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gxiglgpq.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gwcogj
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gswxesatox.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gswssvrjl
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\grgqrvb
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gksspjwk.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gjrxn.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gityrsbrb
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\giemuzl.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ghgeryzg
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ggjxmqh.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gecrm.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gck
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gbx.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gazeenlg
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fyvyvw.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fxhn
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fsjfcnvfjr
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fqat.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fnyj.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fnwncbqssp.xml
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fkuuzbgv.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fjpkjgod
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fhsongrcc
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fhg
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fcibhhrxsu
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\fas.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ezafudvoiyt.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\err.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\erauoi
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\epvvbcvej
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\eng
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\eiwxqfsa
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ehe.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\egskehx.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\egeegu
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\efwxeovrva
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\edsljcdivuy.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\edovnmlhmu.xml
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\ecisfvuhpa.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ebwmf
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ebeblkboibi
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\eafryqglx
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dxrnzku.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dqeavzgp.xml
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dqajfj.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dpfrqyaznoo
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dmtlsnues.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dizbniz.xml
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\dehidfjtpt
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\daflhn
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\cwr
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ctsn
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\cqbt.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\cprceg
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\cntaml.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\cjsvjsn
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\civwzqm.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\cguaohd
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\cfclssx.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\cdntf.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\cbgvboorrjj.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\cakqt
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\bzyz.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\bsmobir.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\bmpedqmgmxo
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\blxcchdo.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\bloulzqvnrd
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\bfsdlrscmiv
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\azepwokxctz
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\auqopa
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\aso.dat
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\arembuqqlhl.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\apluecjxljh.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\aotnjwxb.xml
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\alpzadzk
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ajfm.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\aihwg
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\agd
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\afocvlmwd
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\adpgegoatcl
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\aclcvmx.ini
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\abqj
[2012/06/11 12:40:16 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\aaydghedumh
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zzmbkjttcv.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zyowns
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zxykwvw
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zxntsmpkns
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zvxuplfqaiv.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zmulmsalvp.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zkgl
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zhbezzk.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\zgtn.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\yzvlitevcp
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\yztg.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ywjmsytb
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ywcotf.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\yfguqg.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ybcwdcj.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\yacxpunyz
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xwfjdkdtixu
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xogeiasqdx
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xnaaiqyn
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xivldzk
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\xibfo.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xhxj.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\xbeumyws.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wvmaql.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wtkvqxla.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wriuwbh
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wpushbesv
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wpa
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wnwis
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wmcwjfwebcg.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wmcbsqz
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wjjkwjxof.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wgjy
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wgekhz
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wchut
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\wbyqcoru
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vuzy.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vrb
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vqzkhuu
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vlzenqzgwi
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vgkauki
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vekhfmquvd.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vedcfvtun
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\vcwbqe
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\uykjvcews
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\uvhkeoo.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\urupvqobgah
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\urfoeuqrrvx
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\umckcky
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ujupkolaxz.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ujmb
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ujemlvpjgb
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\uivgphjr
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\uhgxcxne.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\udixx.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ubomomrwsdk.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\tttpgilubhz.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\tplabizkfi
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\tnlcyha
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\tixbprzs.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\tcu.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\sxngztzr
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\swmx.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\srt.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\sqrvkkbktxz.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\sntlrnm.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\slfzi.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\skcx.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\sjzadmi.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\sfsz.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\sao
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rzuc.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rybqxma
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rumiqlhw.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rrbddpfknf
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rquw
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rpz.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rkdkyehqiv
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rjzxhrd
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rilkwzwyil.xml
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\riffaw.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rifbww.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\rhw.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\refyhravcw.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qxbus.dat

:Commands
[createrestorepoint]

Then click the Run Fix button at the top
Let the program run unhindered
Please save the resulting log to be posted in your next reply.

Please post the OTL log.

Scarecrow

2012-08-28, 12:01

I checked/unchecked all the needed options for the hidden files, they were invisible at first but after running the fix they became visible again. I noticed that the options I applied were no longer checked. Should I redo the check/uncheck part again?

Here's the requested log:

========== SERVICES/DRIVERS ==========
========== OTL ==========
C:\WINDOWS\system32\mpr moved successfully.
C:\WINDOWS\system32\zyadeizbstq.ini moved successfully.
C:\WINDOWS\system32\zxlhpcxet moved successfully.
C:\WINDOWS\zwjvhcytwbc moved successfully.
C:\WINDOWS\system32\zvybg moved successfully.
C:\WINDOWS\system32\zvxxfsps moved successfully.
C:\WINDOWS\system32\zufsomdnqb moved successfully.
C:\WINDOWS\system32\zprns moved successfully.
C:\WINDOWS\system32\zph moved successfully.
C:\WINDOWS\system32\znubd moved successfully.
C:\WINDOWS\system32\zmpm.dat moved successfully.
C:\WINDOWS\system32\zlvlgaoro.dat moved successfully.
C:\WINDOWS\system32\zkvadtmlfi moved successfully.
C:\WINDOWS\system32\zgdzvuq moved successfully.
C:\WINDOWS\system32\zfxbo moved successfully.
C:\WINDOWS\system32\zerryde moved successfully.
C:\WINDOWS\system32\zdo moved successfully.
C:\WINDOWS\system32\zbu.ini moved successfully.
C:\WINDOWS\system32\zayfbnltwb moved successfully.
C:\WINDOWS\system32\yueiza moved successfully.
C:\WINDOWS\system32\yrvdebxgrzt moved successfully.
C:\WINDOWS\system32\yruogei.ini moved successfully.
C:\WINDOWS\system32\yqwnxmuqkr.ini moved successfully.
C:\WINDOWS\system32\yqjwaqwjrgn moved successfully.
C:\WINDOWS\system32\ypwgam moved successfully.
C:\WINDOWS\system32\ypn moved successfully.
C:\WINDOWS\system32\ypb moved successfully.
C:\WINDOWS\system32\ynbpico.ini moved successfully.
C:\WINDOWS\system32\yjbyky moved successfully.
C:\WINDOWS\system32\yifbtom moved successfully.
C:\WINDOWS\system32\yhvfljhx moved successfully.
C:\WINDOWS\system32\yft.ini moved successfully.
C:\WINDOWS\system32\yfddtyco.ini moved successfully.
C:\WINDOWS\system32\yeubbz moved successfully.
C:\WINDOWS\system32\yeqc.ini moved successfully.
C:\WINDOWS\system32\ybnso moved successfully.
C:\WINDOWS\system32\yajdu moved successfully.
C:\WINDOWS\system32\xxfxt moved successfully.
C:\WINDOWS\system32\xwolbkcl moved successfully.
C:\WINDOWS\system32\xuyoohmb moved successfully.
C:\WINDOWS\system32\xsdi moved successfully.
C:\WINDOWS\system32\xrjnqaxgslz moved successfully.
C:\WINDOWS\system32\xrjmwls.ini moved successfully.
C:\WINDOWS\system32\xratz.ini moved successfully.
C:\WINDOWS\system32\xnrwoffi.ini moved successfully.
C:\WINDOWS\system32\xlaoaq moved successfully.
C:\WINDOWS\system32\xkiazoygsu.dat moved successfully.
C:\WINDOWS\system32\xitroqxj.dat moved successfully.
C:\WINDOWS\system32\xhliavnncf.ini moved successfully.
C:\WINDOWS\system32\xhjvdk moved successfully.
C:\WINDOWS\system32\xhi.dat moved successfully.
C:\WINDOWS\system32\xhepiahgu.ini moved successfully.
C:\WINDOWS\system32\xei.ini moved successfully.
C:\WINDOWS\system32\xdu.dat moved successfully.
C:\WINDOWS\system32\xdnu moved successfully.
C:\WINDOWS\system32\xbwudob.ini moved successfully.
C:\WINDOWS\system32\xabxrnwognq.ini moved successfully.
C:\WINDOWS\system32\wztapis.ini moved successfully.
C:\WINDOWS\system32\wvpmojcpagc.ini moved successfully.
C:\WINDOWS\system32\wuienx.ini moved successfully.
C:\WINDOWS\system32\wrfmrz moved successfully.
C:\WINDOWS\system32\wqnbogohpa moved successfully.
C:\WINDOWS\system32\wooq moved successfully.
C:\WINDOWS\system32\wnzrlwgymia moved successfully.
C:\WINDOWS\system32\wnwpuad moved successfully.
C:\WINDOWS\system32\wmsxmgb moved successfully.
C:\WINDOWS\system32\wmaeoulj.ini moved successfully.
C:\WINDOWS\system32\wltgfaapaxg moved successfully.
C:\WINDOWS\system32\wlagsxpfnjc moved successfully.
C:\WINDOWS\system32\wkaig moved successfully.
C:\WINDOWS\system32\wjd.ini moved successfully.
C:\WINDOWS\system32\wio moved successfully.
C:\WINDOWS\system32\wgfzxqxc.dat moved successfully.
C:\WINDOWS\system32\vylysjgigsp moved successfully.
C:\WINDOWS\system32\vydky moved successfully.
C:\WINDOWS\system32\vxamvnvecd moved successfully.
C:\WINDOWS\system32\vwx.ini moved successfully.
C:\WINDOWS\system32\vwvpxtf.dat moved successfully.
C:\WINDOWS\system32\vutlo moved successfully.
C:\WINDOWS\system32\vtccpjjxhbl.ini moved successfully.
C:\WINDOWS\system32\vrt moved successfully.
C:\WINDOWS\system32\vpymgh.ini moved successfully.
C:\WINDOWS\system32\vlv moved successfully.
C:\WINDOWS\system32\vltbvctcek moved successfully.
C:\WINDOWS\system32\vlhw moved successfully.
C:\WINDOWS\system32\vky.dat moved successfully.
C:\WINDOWS\system32\vhuya moved successfully.
C:\WINDOWS\system32\vhgdwwy.ini moved successfully.
C:\WINDOWS\system32\vexcv.ini moved successfully.
C:\WINDOWS\system32\uuknvmo.ini moved successfully.
C:\WINDOWS\system32\usbsjhq moved successfully.
C:\WINDOWS\system32\upwhfcfpq moved successfully.
C:\WINDOWS\system32\upqsk.dat moved successfully.
C:\WINDOWS\system32\umblkiu moved successfully.
C:\WINDOWS\system32\ukqsipcp moved successfully.
C:\WINDOWS\system32\ujurc moved successfully.
C:\WINDOWS\system32\uilhoi.dat moved successfully.
C:\WINDOWS\system32\ugh.ini moved successfully.
C:\WINDOWS\system32\uaqqwmjt.ini moved successfully.
C:\WINDOWS\tzhdw moved successfully.
C:\WINDOWS\system32\txkpazbbtc moved successfully.
C:\WINDOWS\system32\tvumtdvg moved successfully.
C:\WINDOWS\system32\tviuuwtwvs moved successfully.
C:\WINDOWS\system32\tubh.ini moved successfully.
C:\WINDOWS\system32\trpcwzo moved successfully.
C:\WINDOWS\system32\trjhziwhqax moved successfully.
C:\WINDOWS\system32\tqkrkktdw moved successfully.
C:\WINDOWS\system32\tparier moved successfully.
C:\WINDOWS\togl moved successfully.
C:\WINDOWS\system32\tmksiwyo.ini moved successfully.
C:\WINDOWS\system32\tmiduq moved successfully.
C:\WINDOWS\system32\tmhmpisgrjb moved successfully.
C:\WINDOWS\system32\tjerrruiu.ini moved successfully.
C:\WINDOWS\system32\tgysztaa.ini moved successfully.
C:\WINDOWS\system32\tgp.dat moved successfully.
C:\WINDOWS\system32\teatwcjgoq moved successfully.
C:\WINDOWS\system32\szanch.dat moved successfully.
C:\WINDOWS\system32\swucw moved successfully.
C:\WINDOWS\system32\swrosmstc.ini moved successfully.
C:\WINDOWS\system32\svh.dat moved successfully.
C:\WINDOWS\system32\surl.ini moved successfully.
C:\WINDOWS\system32\strlohjio moved successfully.
C:\WINDOWS\system32\sthnpbr.ini moved successfully.
C:\WINDOWS\system32\srceeuuzog moved successfully.
C:\WINDOWS\system32\slvwlpnaqo moved successfully.
C:\WINDOWS\system32\skjqlknoa.ini moved successfully.
C:\WINDOWS\system32\sjfso moved successfully.
C:\WINDOWS\system32\sghtkpu moved successfully.
C:\WINDOWS\system32\sfxzlgg moved successfully.
C:\WINDOWS\system32\sbm moved successfully.
C:\WINDOWS\system32\rzyxt moved successfully.
C:\WINDOWS\system32\rxlxmq moved successfully.
C:\WINDOWS\system32\rwwmb moved successfully.
C:\WINDOWS\system32\rwumiig moved successfully.
C:\WINDOWS\system32\rvitifkhda.ini moved successfully.
C:\WINDOWS\system32\ruwy.dat moved successfully.
C:\WINDOWS\system32\rtssxvscl moved successfully.
C:\WINDOWS\system32\rtsquze.dat moved successfully.
C:\WINDOWS\rnni.ini moved successfully.
C:\WINDOWS\system32\rnixg moved successfully.
C:\WINDOWS\system32\rnaxcorvnpm.ini moved successfully.
C:\WINDOWS\system32\rmkgnn.ini moved successfully.
C:\WINDOWS\system32\rlxrf moved successfully.
C:\WINDOWS\system32\rhrrf moved successfully.
C:\WINDOWS\system32\rfmfahwb moved successfully.
C:\WINDOWS\system32\rfbddh.dat moved successfully.
C:\WINDOWS\system32\rckntimj.dat moved successfully.
C:\WINDOWS\system32\rbw moved successfully.
C:\WINDOWS\system32\rbou.dat moved successfully.
C:\WINDOWS\system32\rbc moved successfully.
C:\WINDOWS\system32\qzegqoobxiy.ini moved successfully.
C:\WINDOWS\system32\qwdspx moved successfully.
C:\WINDOWS\system32\qvt moved successfully.
C:\WINDOWS\system32\quqsl moved successfully.
C:\WINDOWS\system32\qswzofzltsi moved successfully.
C:\WINDOWS\system32\qqqewpfdl.ini moved successfully.
C:\WINDOWS\system32\qqmnchoguw moved successfully.
C:\WINDOWS\system32\qpghwlpi.ini moved successfully.
C:\WINDOWS\system32\qogqdj moved successfully.
C:\WINDOWS\system32\qnretzig.ini moved successfully.
C:\WINDOWS\system32\qncintxhpbv moved successfully.
C:\WINDOWS\system32\qmlr moved successfully.
C:\WINDOWS\system32\qldlx moved successfully.
C:\WINDOWS\system32\qjhrojfdm moved successfully.
C:\WINDOWS\system32\qhyfrlwcpck moved successfully.
C:\WINDOWS\system32\qheefqe.dat moved successfully.
C:\WINDOWS\qgqkumwr.ini moved successfully.
C:\WINDOWS\system32\qebywplco moved successfully.
C:\WINDOWS\system32\qcyfwezkrw moved successfully.
C:\WINDOWS\system32\qcw moved successfully.
C:\WINDOWS\system32\qbt moved successfully.
C:\WINDOWS\system32\qbdvroefxtf.ini moved successfully.
C:\WINDOWS\system32\pwalonerzam moved successfully.
C:\WINDOWS\system32\pvsbacopgo.ini moved successfully.
C:\WINDOWS\system32\puxozpwjj.dat moved successfully.
C:\WINDOWS\system32\ptuhkoey moved successfully.
C:\WINDOWS\system32\ptfcgaof.dat moved successfully.
C:\WINDOWS\system32\ptcwmepfq.xml moved successfully.
C:\WINDOWS\system32\psxulyb.ini moved successfully.
C:\WINDOWS\system32\psuezqksw.dat moved successfully.
C:\WINDOWS\system32\pqjjgvrcrr.ini moved successfully.
C:\WINDOWS\system32\pplmagu.ini moved successfully.
C:\WINDOWS\pnaphwmzlgp moved successfully.
C:\WINDOWS\system32\pgmxllhrgl moved successfully.
C:\WINDOWS\system32\pefaimbebk.ini moved successfully.
C:\WINDOWS\system32\pctk moved successfully.
C:\WINDOWS\system32\oylo moved successfully.
C:\WINDOWS\system32\oxxpcqneqfk.dat moved successfully.
C:\WINDOWS\system32\otngpkqlgc moved successfully.
C:\WINDOWS\system32\oqljnan moved successfully.
C:\WINDOWS\system32\opnaypiuh moved successfully.
C:\WINDOWS\system32\oocihv moved successfully.
C:\WINDOWS\system32\onuhfaqdr.dat moved successfully.
C:\WINDOWS\system32\omgkwcqmzh moved successfully.
C:\WINDOWS\system32\olhitsu moved successfully.
C:\WINDOWS\system32\olcfhmx.ini moved successfully.
C:\WINDOWS\system32\okbzdweogsf.ini moved successfully.
C:\WINDOWS\system32\ojlw moved successfully.
C:\WINDOWS\system32\ohfmfxmgnvd moved successfully.
C:\WINDOWS\system32\ogn.ini moved successfully.
C:\WINDOWS\system32\ogknbwh.ini moved successfully.
C:\WINDOWS\system32\odklrkid moved successfully.
C:\WINDOWS\system32\odieozehykz moved successfully.
C:\WINDOWS\system32\ocduhsoaeky.ini moved successfully.
C:\WINDOWS\oaap moved successfully.
C:\WINDOWS\system32\nybrohbe moved successfully.
C:\WINDOWS\system32\nvolurg moved successfully.
C:\WINDOWS\system32\noyqt moved successfully.
C:\WINDOWS\system32\nlzvfpgxhuw.xml moved successfully.
C:\WINDOWS\nhs moved successfully.
C:\WINDOWS\system32\netcd.ini moved successfully.
C:\WINDOWS\system32\ndpxrjvfik.dat moved successfully.
C:\WINDOWS\system32\mzquaye moved successfully.
C:\WINDOWS\system32\mxdvmytw.ini moved successfully.
C:\WINDOWS\system32\mvxgdkyrjxt moved successfully.
C:\WINDOWS\system32\mvfhxic moved successfully.
C:\WINDOWS\system32\mrprxeehpe moved successfully.
C:\WINDOWS\system32\mpuqpwyjjoe.ini moved successfully.
C:\WINDOWS\system32\mlfml.ini moved successfully.
C:\WINDOWS\system32\mkyszmt moved successfully.
C:\WINDOWS\system32\mimsxzkfsba moved successfully.
C:\WINDOWS\system32\mhymnl.ini moved successfully.
C:\WINDOWS\system32\mhefcltipun.ini moved successfully.
C:\WINDOWS\system32\mftkul moved successfully.
C:\WINDOWS\system32\mcrrrdylbyb.dat moved successfully.
C:\WINDOWS\system32\mbpbf.ini moved successfully.
C:\WINDOWS\system32\lzjqvgauzfs moved successfully.
C:\WINDOWS\lyi moved successfully.
C:\WINDOWS\system32\lxjydaq.dat moved successfully.
C:\WINDOWS\system32\lwohwwxa moved successfully.
C:\WINDOWS\system32\lvjfqnrfy.dat moved successfully.
C:\WINDOWS\system32\ltm moved successfully.
C:\WINDOWS\system32\ltcbbxm moved successfully.
C:\WINDOWS\system32\lrwldsbcq moved successfully.
C:\WINDOWS\lqrbl moved successfully.
C:\WINDOWS\system32\lqpksm moved successfully.
C:\WINDOWS\system32\lptdlhqltgj moved successfully.
C:\WINDOWS\system32\lmti moved successfully.
C:\WINDOWS\system32\lmkwvtfa.ini moved successfully.
C:\WINDOWS\system32\lljl moved successfully.
C:\WINDOWS\system32\lklnirnii moved successfully.
C:\WINDOWS\system32\litvwn moved successfully.
C:\WINDOWS\system32\liif.ini moved successfully.
C:\WINDOWS\system32\lhlcj.ini moved successfully.
C:\WINDOWS\system32\lervczxc moved successfully.
C:\WINDOWS\system32\ldypa moved successfully.
C:\WINDOWS\system32\ldna.ini moved successfully.
C:\WINDOWS\system32\kykkyyjuomq moved successfully.
C:\WINDOWS\system32\kxfziwiehxe moved successfully.
C:\WINDOWS\system32\ktkvvqws.dat moved successfully.
C:\WINDOWS\system32\kokjkgnayl.dat moved successfully.
C:\WINDOWS\system32\knkpjcuzkb moved successfully.
C:\WINDOWS\system32\kmgbr moved successfully.
C:\WINDOWS\system32\kkxlvn moved successfully.
C:\WINDOWS\system32\kjvgkvsar moved successfully.
C:\WINDOWS\system32\kjj moved successfully.
C:\WINDOWS\system32\khzpcmbe moved successfully.
C:\WINDOWS\system32\kgqeevfnt.dat moved successfully.
C:\WINDOWS\system32\kfzlj moved successfully.
C:\WINDOWS\system32\kfkegdfzsmf.dat moved successfully.
C:\WINDOWS\system32\kdi moved successfully.
C:\WINDOWS\system32\kblu.ini moved successfully.
C:\WINDOWS\system32\kagoeryt moved successfully.
C:\WINDOWS\system32\kaddzumq.ini moved successfully.
C:\WINDOWS\system32\jxvemnjznu moved successfully.
C:\WINDOWS\system32\jxqxva.ini moved successfully.
C:\WINDOWS\system32\junn moved successfully.
C:\WINDOWS\system32\jtdznq moved successfully.
C:\WINDOWS\system32\jsslx moved successfully.
C:\WINDOWS\system32\jresfclof moved successfully.
C:\WINDOWS\jnpltjziixr moved successfully.
C:\WINDOWS\system32\jmpx moved successfully.
C:\WINDOWS\system32\jkne moved successfully.
C:\WINDOWS\system32\jfilvhux moved successfully.
C:\WINDOWS\system32\jclas moved successfully.
C:\WINDOWS\system32\ixrmyzmuf.ini moved successfully.
C:\WINDOWS\system32\iuzsgndntd moved successfully.
C:\WINDOWS\system32\itshnv.ini moved successfully.
C:\WINDOWS\system32\ipldozicq moved successfully.
C:\WINDOWS\system32\iobspad moved successfully.
C:\WINDOWS\system32\ikugogpknz moved successfully.
C:\WINDOWS\system32\ikitzfwrlzd moved successfully.
C:\WINDOWS\system32\ihxkhtew moved successfully.
C:\WINDOWS\system32\igy moved successfully.
C:\WINDOWS\system32\igwyc moved successfully.
C:\WINDOWS\system32\ifwyys moved successfully.
C:\WINDOWS\system32\ifvbafbi.dat moved successfully.
C:\WINDOWS\system32\ifh moved successfully.
C:\WINDOWS\system32\iecx moved successfully.
C:\WINDOWS\system32\idzfxu moved successfully.
C:\WINDOWS\system32\ibqvywo.ini moved successfully.
C:\WINDOWS\system32\iarssnndg moved successfully.
C:\WINDOWS\system32\hznd moved successfully.
C:\WINDOWS\system32\hxpuo.dat moved successfully.
C:\WINDOWS\system32\huiqk moved successfully.
C:\WINDOWS\system32\htzs.dat moved successfully.
C:\WINDOWS\system32\hsxps moved successfully.
C:\WINDOWS\system32\hqwxnfwmq.ini moved successfully.
C:\WINDOWS\system32\hoboh.dat moved successfully.
C:\WINDOWS\system32\hmzimwaq.dat moved successfully.
C:\WINDOWS\hihw moved successfully.
C:\WINDOWS\system32\higwf moved successfully.
C:\WINDOWS\system32\hhxjfatux.dat moved successfully.
C:\WINDOWS\system32\hgu.ini moved successfully.
C:\WINDOWS\system32\hgdxppghmnp.dat moved successfully.
C:\WINDOWS\system32\hfbtzuzg moved successfully.
C:\WINDOWS\system32\hfaptb.dat moved successfully.
C:\WINDOWS\system32\hbqnkzjqm.dat moved successfully.
C:\WINDOWS\system32\gzswrdxw.ini moved successfully.
C:\WINDOWS\system32\gxveh.dat moved successfully.
C:\WINDOWS\system32\gxiglgpq.ini moved successfully.
C:\WINDOWS\system32\gwcogj moved successfully.
C:\WINDOWS\system32\gswxesatox.ini moved successfully.
C:\WINDOWS\system32\gswssvrjl moved successfully.
C:\WINDOWS\grgqrvb moved successfully.
C:\WINDOWS\system32\gksspjwk.dat moved successfully.
C:\WINDOWS\system32\gjrxn.dat moved successfully.
C:\WINDOWS\system32\gityrsbrb moved successfully.
C:\WINDOWS\system32\giemuzl.ini moved successfully.
C:\WINDOWS\system32\ghgeryzg moved successfully.
C:\WINDOWS\system32\ggjxmqh.ini moved successfully.
C:\WINDOWS\system32\gecrm.ini moved successfully.
C:\WINDOWS\system32\gck moved successfully.
C:\WINDOWS\system32\gbx.ini moved successfully.
C:\WINDOWS\system32\gazeenlg moved successfully.
C:\WINDOWS\system32\fyvyvw.ini moved successfully.
C:\WINDOWS\system32\fxhn moved successfully.
C:\WINDOWS\system32\fsjfcnvfjr moved successfully.
C:\WINDOWS\system32\fqat.dat moved successfully.
C:\WINDOWS\system32\fnyj.ini moved successfully.
C:\WINDOWS\system32\fnwncbqssp.xml moved successfully.
C:\WINDOWS\system32\fkuuzbgv.dat moved successfully.
C:\WINDOWS\system32\fjpkjgod moved successfully.
C:\WINDOWS\system32\fhsongrcc moved successfully.
C:\WINDOWS\system32\fhg moved successfully.
C:\WINDOWS\system32\fcibhhrxsu moved successfully.
C:\WINDOWS\fas.ini moved successfully.
C:\WINDOWS\system32\ezafudvoiyt.ini moved successfully.
C:\WINDOWS\err.ini moved successfully.
C:\WINDOWS\system32\erauoi moved successfully.
C:\WINDOWS\system32\epvvbcvej moved successfully.
C:\WINDOWS\system32\eng moved successfully.
C:\WINDOWS\system32\eiwxqfsa moved successfully.
C:\WINDOWS\system32\ehe.dat moved successfully.
C:\WINDOWS\system32\egskehx.ini moved successfully.
C:\WINDOWS\system32\egeegu moved successfully.
C:\WINDOWS\system32\efwxeovrva moved successfully.
C:\WINDOWS\system32\edsljcdivuy.ini moved successfully.
C:\WINDOWS\system32\edovnmlhmu.xml moved successfully.
C:\WINDOWS\ecisfvuhpa.ini moved successfully.
C:\WINDOWS\system32\ebwmf moved successfully.
C:\WINDOWS\system32\ebeblkboibi moved successfully.
C:\WINDOWS\system32\eafryqglx moved successfully.
C:\WINDOWS\system32\dxrnzku.ini moved successfully.
C:\WINDOWS\system32\dqeavzgp.xml moved successfully.
C:\WINDOWS\system32\dqajfj.ini moved successfully.
C:\WINDOWS\system32\dpfrqyaznoo moved successfully.
C:\WINDOWS\system32\dmtlsnues.dat moved successfully.
C:\WINDOWS\system32\dizbniz.xml moved successfully.
C:\WINDOWS\dehidfjtpt moved successfully.
C:\WINDOWS\system32\daflhn moved successfully.
C:\WINDOWS\system32\cwr moved successfully.
C:\WINDOWS\system32\ctsn moved successfully.
C:\WINDOWS\system32\cqbt.ini moved successfully.
C:\WINDOWS\system32\cprceg moved successfully.
C:\WINDOWS\system32\cntaml.ini moved successfully.
C:\WINDOWS\system32\cjsvjsn moved successfully.
C:\WINDOWS\system32\civwzqm.ini moved successfully.
C:\WINDOWS\system32\cguaohd moved successfully.
C:\WINDOWS\system32\cfclssx.ini moved successfully.
C:\WINDOWS\system32\cdntf.dat moved successfully.
C:\WINDOWS\system32\cbgvboorrjj.dat moved successfully.
C:\WINDOWS\system32\cakqt moved successfully.
C:\WINDOWS\system32\bzyz.dat moved successfully.
C:\WINDOWS\system32\bsmobir.dat moved successfully.
C:\WINDOWS\system32\bmpedqmgmxo moved successfully.
C:\WINDOWS\system32\blxcchdo.dat moved successfully.
C:\WINDOWS\system32\bloulzqvnrd moved successfully.
C:\WINDOWS\system32\bfsdlrscmiv moved successfully.
C:\WINDOWS\system32\azepwokxctz moved successfully.
C:\WINDOWS\system32\auqopa moved successfully.
C:\WINDOWS\system32\aso.dat moved successfully.
C:\WINDOWS\system32\arembuqqlhl.ini moved successfully.
C:\WINDOWS\system32\apluecjxljh.ini moved successfully.
C:\WINDOWS\system32\aotnjwxb.xml moved successfully.
C:\WINDOWS\system32\alpzadzk moved successfully.
C:\WINDOWS\system32\ajfm.ini moved successfully.
C:\WINDOWS\system32\aihwg moved successfully.
C:\WINDOWS\system32\agd moved successfully.
C:\WINDOWS\system32\afocvlmwd moved successfully.
C:\WINDOWS\system32\adpgegoatcl moved successfully.
C:\WINDOWS\system32\aclcvmx.ini moved successfully.
C:\WINDOWS\system32\abqj moved successfully.
C:\WINDOWS\system32\aaydghedumh moved successfully.
C:\WINDOWS\system32\zzmbkjttcv.ini moved successfully.
C:\WINDOWS\system32\zyowns moved successfully.
C:\WINDOWS\system32\zxykwvw moved successfully.
C:\WINDOWS\system32\zxntsmpkns moved successfully.
C:\WINDOWS\system32\zvxuplfqaiv.dat moved successfully.
C:\WINDOWS\system32\zmulmsalvp.ini moved successfully.
C:\WINDOWS\system32\zkgl moved successfully.
C:\WINDOWS\system32\zhbezzk.ini moved successfully.
C:\WINDOWS\system32\zgtn.dat moved successfully.
C:\WINDOWS\system32\yzvlitevcp moved successfully.
C:\WINDOWS\system32\yztg.dat moved successfully.
C:\WINDOWS\system32\ywjmsytb moved successfully.
C:\WINDOWS\system32\ywcotf.ini moved successfully.
C:\WINDOWS\system32\yfguqg.dat moved successfully.
C:\WINDOWS\system32\ybcwdcj.ini moved successfully.
C:\WINDOWS\system32\yacxpunyz moved successfully.
C:\WINDOWS\system32\xwfjdkdtixu moved successfully.
C:\WINDOWS\system32\xogeiasqdx moved successfully.
C:\WINDOWS\system32\xnaaiqyn moved successfully.
C:\WINDOWS\system32\xivldzk moved successfully.
C:\WINDOWS\xibfo.dat moved successfully.
C:\WINDOWS\system32\xhxj.ini moved successfully.
C:\WINDOWS\system32\xbeumyws.ini moved successfully.
C:\WINDOWS\system32\wvmaql.ini moved successfully.
C:\WINDOWS\system32\wtkvqxla.ini moved successfully.
C:\WINDOWS\system32\wriuwbh moved successfully.
C:\WINDOWS\system32\wpushbesv moved successfully.
C:\WINDOWS\system32\wpa moved successfully.
C:\WINDOWS\system32\wnwis moved successfully.
C:\WINDOWS\system32\wmcwjfwebcg.dat moved successfully.
C:\WINDOWS\system32\wmcbsqz moved successfully.
C:\WINDOWS\system32\wjjkwjxof.dat moved successfully.
C:\WINDOWS\system32\wgjy moved successfully.
C:\WINDOWS\system32\wgekhz moved successfully.
C:\WINDOWS\system32\wchut moved successfully.
C:\WINDOWS\system32\wbyqcoru moved successfully.
C:\WINDOWS\system32\vuzy.ini moved successfully.
C:\WINDOWS\system32\vrb moved successfully.
C:\WINDOWS\system32\vqzkhuu moved successfully.
C:\WINDOWS\system32\vlzenqzgwi moved successfully.
C:\WINDOWS\system32\vgkauki moved successfully.
C:\WINDOWS\system32\vekhfmquvd.dat moved successfully.
C:\WINDOWS\system32\vedcfvtun moved successfully.
C:\WINDOWS\system32\vcwbqe moved successfully.
C:\WINDOWS\system32\uykjvcews moved successfully.
C:\WINDOWS\system32\uvhkeoo.dat moved successfully.
C:\WINDOWS\system32\urupvqobgah moved successfully.
C:\WINDOWS\system32\urfoeuqrrvx moved successfully.
C:\WINDOWS\system32\umckcky moved successfully.
C:\WINDOWS\system32\ujupkolaxz.ini moved successfully.
C:\WINDOWS\system32\ujmb moved successfully.
C:\WINDOWS\system32\ujemlvpjgb moved successfully.
C:\WINDOWS\uivgphjr moved successfully.
C:\WINDOWS\system32\uhgxcxne.ini moved successfully.
C:\WINDOWS\system32\udixx.ini moved successfully.
C:\WINDOWS\system32\ubomomrwsdk.dat moved successfully.
C:\WINDOWS\system32\tttpgilubhz.ini moved successfully.
C:\WINDOWS\system32\tplabizkfi moved successfully.
C:\WINDOWS\tnlcyha moved successfully.
C:\WINDOWS\system32\tixbprzs.dat moved successfully.
C:\WINDOWS\system32\tcu.ini moved successfully.
C:\WINDOWS\system32\sxngztzr moved successfully.
C:\WINDOWS\system32\swmx.dat moved successfully.
C:\WINDOWS\system32\srt.ini moved successfully.
C:\WINDOWS\system32\sqrvkkbktxz.dat moved successfully.
C:\WINDOWS\system32\sntlrnm.dat moved successfully.
C:\WINDOWS\system32\slfzi.ini moved successfully.
C:\WINDOWS\system32\skcx.dat moved successfully.
C:\WINDOWS\system32\sjzadmi.ini moved successfully.
C:\WINDOWS\system32\sfsz.dat moved successfully.
C:\WINDOWS\system32\sao moved successfully.
C:\WINDOWS\system32\rzuc.ini moved successfully.
C:\WINDOWS\system32\rybqxma moved successfully.
C:\WINDOWS\system32\rumiqlhw.dat moved successfully.
C:\WINDOWS\system32\rrbddpfknf moved successfully.
C:\WINDOWS\system32\rquw moved successfully.
C:\WINDOWS\system32\rpz.ini moved successfully.
C:\WINDOWS\system32\rkdkyehqiv moved successfully.
C:\WINDOWS\system32\rjzxhrd moved successfully.
C:\WINDOWS\system32\rilkwzwyil.xml moved successfully.
C:\WINDOWS\system32\riffaw.ini moved successfully.
C:\WINDOWS\system32\rifbww.ini moved successfully.
C:\WINDOWS\system32\rhw.dat moved successfully.
C:\WINDOWS\refyhravcw.dat moved successfully.
C:\WINDOWS\system32\qxbus.dat moved successfully.
========== COMMANDS ==========
Restore point Set: OTL Restore Point

OTL by OldTimer - Version 3.2.59.1 log created on 08282012_115352

oldman960

2012-08-28, 15:44

Hi Scarecrow,

You can rehide them now or when we are finished.

Use OTL like you did before but with this pasted in the Custom Scan/Fix window.

[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qttwzyei.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qsopsnklrnj.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qrpcq.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qqqt.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qbvhrrhf
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qbqeurlah
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qayekwvmsh
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\pxluctu.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pwlwjlqf
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pwa
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pqognjycvt.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ppmurgqnqi
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pjtdqi.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pjjipw
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\phcioojd.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pgsh
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pffkxpns
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pepxq
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pedcjlq.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pdqrcouep
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pcpmvigyknw.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pcnbisr
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pclkwlz.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pbzcnzjjax
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pathdekgnl.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\oybbndhpat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\oxsta
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ousspnt.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ourtunrnnc
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\otvbczqzr.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\otorwgb.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\oqipw
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\opn
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\oofzxmm.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\oofsbkfk.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ooaomuyhvz.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\olwz
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\olvkvxg
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\olhdsirhbjm.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\oicryjbsxhd.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\odpeuveeirg
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\obfbsckxiuv
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\nysjggwyrz
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\nvdkhnrqwn
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ntpp.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\nreadmitf
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\nqxtrw
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\npx
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\npuailglpt.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\nnzey
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\narceunvfsr.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mwzhlh.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mwuwz.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mvhxlyyr.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\msbwl
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mpvauzxwdz
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\minowwpnhw.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mfpfkyzrxe
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mflohpswrxl.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mbufohzbd.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mbcuyqp
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\maynwlp.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\lzuovdq
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lwcnbd.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lvzw.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lrotxpqhol
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lqya.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lnuzijew
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lnm.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lffhqjpt.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lfdwrke
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lepkgvz
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lbial
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kza
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\kragnbr.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kppamcnflm.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\knk.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kkrk.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kjvzwobzke.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kffzqte
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kcd
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jvpytddxshm.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jvanbm.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jsgzsb
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jscxtijpp.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jhvyfmljeob
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jfuwpyqkkiu
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jes
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jeoc
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jecbuzopv.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jdlshte
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jazdltqdat.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\iyao
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ivz.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\iurduaasebj
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ithugwck.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\isnvgwxvzx.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ipdnxhip
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\iooy
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\imisiwl.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ilppyukvb.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ikvd.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ifhfyantlzc
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\iduxw.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ict.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hzooveshuhi
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hxokmtz.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hwsfdvw
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hvbzrysf
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hulemjbpzih.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\htubwk.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\htmhmor
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hrqwp
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hrfumedgw.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hqofa
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hiushfclfla.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hbduxvmv
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gwyphivwam
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gwegf.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gvsgjc
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gtkrjpla
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gsztiwpu
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gqr
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ghdvcccqxcv.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gfgr
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gdsbvd
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gcgii.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ganwg
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fzzu.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fxwpiwys
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fsopbrrnag
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\frznpwqgbxt
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fonbotjzdzr
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fnxe.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fmlgoxxnn.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fhagevihj.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\evpk
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\eswjlbv
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\eqartqwjeg
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\epuzw.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\ejxebk
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\eewo.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\eesejbzog.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\eebifxejokv
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ecqooiby
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dzna
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\dwbwxg
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dows
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dogequdlcho
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dmuuqmc.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dkfd.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\djzobvavx.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dgppwo.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dgckkqqq.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dfswulgomz.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dfdenbmhi
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\detwvkklv.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\defhdp.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dbsbm
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\daltzc
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\cxoab
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ctxnogspj.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\cpznhdhikek
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\cixpn
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\cbqynozbpo.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\bzkhikmncyf
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\byoqvakieh.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\bycuny
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\bxqecmpfn.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\bulcyfilrrd.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\bsxkwl.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\bpajjydv
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\betjex.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\baxqskha.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\bacdzugy
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\azuxhafgo.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ayyyufnvi.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\axxvniyw
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\auemdu.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\arsimaqa
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\aqluxxpvzxz
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\alswcpnkwg
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\akophcvl
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\akjgqsepny.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ajnzyssdz.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ahlkupje
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\aesvs.dat

Please post the log.

Scarecrow

2012-08-28, 15:54

So, I did something wrong I guess.
I pasted the above code, selected Run Fix but I got an error.
My current OTL settings are: Minimal Output, 30 Days
Purity check and LOP check are not checked.

Log:

Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qttwzyei.dat> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qsopsnklrnj.dat> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qrpcq.dat> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qqqt.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qbvhrrhf> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qbqeurlah> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qayekwvmsh> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\pxluctu.dat> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pwlwjlqf> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pwa> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pqognjycvt.dat> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ppmurgqnqi> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pjtdqi.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pjjipw> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\phcioojd.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pgsh> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pffkxpns> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pepxq> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pedcjlq.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pdqrcouep> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pcpmvigyknw.dat> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pcnbisr> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pclkwlz.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pbzcnzjjax> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pathdekgnl.dat> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\oybbndhpat> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\oxsta> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ousspnt.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ourtunrnnc> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\otvbczqzr.dat> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\otorwgb.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\oqipw> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\opn> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\oofzxmm.dat> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\oofsbkfk.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ooaomuyhvz.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\olwz> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\olvkvxg> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\olhdsirhbjm.dat> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\oicryjbsxhd.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\odpeuveeirg> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\obfbsckxiuv> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\nysjggwyrz> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\nvdkhnrqwn> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ntpp.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\nreadmitf> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\nqxtrw> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\npx> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\npuailglpt.dat> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\nnzey> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\narceunvfsr.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mwzhlh.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mwuwz.dat> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mvhxlyyr.dat> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\msbwl> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mpvauzxwdz> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\minowwpnhw.dat> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mfpfkyzrxe> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mflohpswrxl.dat> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mbufohzbd.dat> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mbcuyqp> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\maynwlp.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\lzuovdq> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lwcnbd.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lvzw.dat> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lrotxpqhol> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lqya.dat> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lnuzijew> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lnm.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lffhqjpt.dat> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lfdwrke> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lepkgvz> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lbial> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kza> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\kragnbr.dat> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kppamcnflm.dat> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\knk.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kkrk.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kjvzwobzke.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kffzqte> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kcd> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jvpytddxshm.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jvanbm.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jsgzsb> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jscxtijpp.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jhvyfmljeob> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jfuwpyqkkiu> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jes> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jeoc> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jecbuzopv.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jdlshte> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jazdltqdat.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\iyao> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ivz.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\iurduaasebj> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ithugwck.dat> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\isnvgwxvzx.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ipdnxhip> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\iooy> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\imisiwl.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ilppyukvb.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ikvd.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ifhfyantlzc> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\iduxw.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ict.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hzooveshuhi> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hxokmtz.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hwsfdvw> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hvbzrysf> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hulemjbpzih.dat> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\htubwk.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\htmhmor> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hrqwp> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hrfumedgw.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hqofa> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hiushfclfla.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hbduxvmv> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gwyphivwam> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gwegf.dat> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gvsgjc> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gtkrjpla> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gsztiwpu> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gqr> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ghdvcccqxcv.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gfgr> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gdsbvd> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gcgii.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ganwg> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fzzu.dat> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fxwpiwys> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fsopbrrnag> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\frznpwqgbxt> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fonbotjzdzr> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fnxe.dat> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fmlgoxxnn.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fhagevihj.dat> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\evpk> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\eswjlbv> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\eqartqwjeg> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\epuzw.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\ejxebk> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\eewo.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\eesejbzog.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\eebifxejokv> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ecqooiby> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dzna> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\dwbwxg> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dows> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dogequdlcho> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dmuuqmc.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dkfd.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\djzobvavx.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dgppwo.dat> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dgckkqqq.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dfswulgomz.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dfdenbmhi> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\detwvkklv.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\defhdp.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dbsbm> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\daltzc> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\cxoab> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ctxnogspj.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\cpznhdhikek> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\cixpn> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\cbqynozbpo.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\bzkhikmncyf> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\byoqvakieh.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\bycuny> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\bxqecmpfn.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\bulcyfilrrd.dat> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\bsxkwl.dat> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\bpajjydv> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\betjex.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\baxqskha.dat> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\bacdzugy> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\azuxhafgo.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ayyyufnvi.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\axxvniyw> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\auemdu.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\arsimaqa> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\aqluxxpvzxz> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\alswcpnkwg> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\akophcvl> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\akjgqsepny.ini> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ajnzyssdz.dat> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ahlkupje> in the current context!
Error: Unable to interpret <[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\aesvs.dat> in the current context!

OTL by OldTimer - Version 3.2.59.1 log created on 08282012_155005

oldman960

2012-08-29, 07:54

Hi Scarecrow,

Sorry, that was my fault. Copy and paste this for the fix.

:services

:OTL
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qttwzyei.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qsopsnklrnj.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qrpcq.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qqqt.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qbvhrrhf
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qbqeurlah
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\qayekwvmsh
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\pxluctu.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pwlwjlqf
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pwa
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pqognjycvt.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ppmurgqnqi
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pjtdqi.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pjjipw
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\phcioojd.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pgsh
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pffkxpns
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pepxq
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pedcjlq.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pdqrcouep
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pcpmvigyknw.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pcnbisr
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pclkwlz.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pbzcnzjjax
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\pathdekgnl.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\oybbndhpat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\oxsta
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ousspnt.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ourtunrnnc
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\otvbczqzr.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\otorwgb.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\oqipw
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\opn
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\oofzxmm.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\oofsbkfk.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ooaomuyhvz.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\olwz
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\olvkvxg
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\olhdsirhbjm.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\oicryjbsxhd.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\odpeuveeirg
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\obfbsckxiuv
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\nysjggwyrz
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\nvdkhnrqwn
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ntpp.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\nreadmitf
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\nqxtrw
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\npx
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\npuailglpt.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\nnzey
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\narceunvfsr.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mwzhlh.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mwuwz.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mvhxlyyr.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\msbwl
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mpvauzxwdz
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\minowwpnhw.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mfpfkyzrxe
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mflohpswrxl.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mbufohzbd.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\mbcuyqp
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\maynwlp.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\lzuovdq
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lwcnbd.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lvzw.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lrotxpqhol
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lqya.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lnuzijew
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lnm.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lffhqjpt.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lfdwrke
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lepkgvz
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\lbial
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kza
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\kragnbr.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kppamcnflm.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\knk.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kkrk.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kjvzwobzke.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kffzqte
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\kcd
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jvpytddxshm.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jvanbm.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jsgzsb
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jscxtijpp.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jhvyfmljeob
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jfuwpyqkkiu
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jes
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jeoc
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jecbuzopv.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jdlshte
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\jazdltqdat.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\iyao
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ivz.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\iurduaasebj
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ithugwck.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\isnvgwxvzx.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ipdnxhip
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\iooy
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\imisiwl.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ilppyukvb.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ikvd.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ifhfyantlzc
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\iduxw.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ict.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hzooveshuhi
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hxokmtz.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hwsfdvw
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hvbzrysf
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hulemjbpzih.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\htubwk.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\htmhmor
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hrqwp
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hrfumedgw.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hqofa
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hiushfclfla.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\hbduxvmv
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gwyphivwam
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gwegf.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gvsgjc
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gtkrjpla
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gsztiwpu
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gqr
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ghdvcccqxcv.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gfgr
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gdsbvd
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\gcgii.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ganwg
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fzzu.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fxwpiwys
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fsopbrrnag
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\frznpwqgbxt
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fonbotjzdzr
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fnxe.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fmlgoxxnn.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\fhagevihj.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\evpk
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\eswjlbv
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\eqartqwjeg
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\epuzw.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\ejxebk
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\eewo.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\eesejbzog.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\eebifxejokv
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ecqooiby
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dzna
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\dwbwxg
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dows
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dogequdlcho
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dmuuqmc.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dkfd.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\djzobvavx.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dgppwo.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dgckkqqq.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dfswulgomz.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dfdenbmhi
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\detwvkklv.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\defhdp.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\dbsbm
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\daltzc
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\cxoab
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ctxnogspj.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\cpznhdhikek
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\cixpn
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\cbqynozbpo.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\bzkhikmncyf
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\byoqvakieh.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\bycuny
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\bxqecmpfn.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\bulcyfilrrd.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\bsxkwl.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\bpajjydv
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\betjex.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\baxqskha.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\bacdzugy
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\azuxhafgo.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ayyyufnvi.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\axxvniyw
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\auemdu.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\arsimaqa
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\aqluxxpvzxz
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\alswcpnkwg
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\akophcvl
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\akjgqsepny.ini
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ajnzyssdz.dat
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\ahlkupje
[2012/06/11 12:40:15 | 000,000,028 | ---- | M] () -- C:\WINDOWS\System32\aesvs.dat

:Commands
[createrestorepoint]

Scarecrow

2012-08-29, 12:44

Here's the log:

========== SERVICES/DRIVERS ==========
========== OTL ==========
C:\WINDOWS\system32\qttwzyei.dat moved successfully.
C:\WINDOWS\system32\qsopsnklrnj.dat moved successfully.
C:\WINDOWS\system32\qrpcq.dat moved successfully.
C:\WINDOWS\system32\qqqt.ini moved successfully.
C:\WINDOWS\system32\qbvhrrhf moved successfully.
C:\WINDOWS\system32\qbqeurlah moved successfully.
C:\WINDOWS\system32\qayekwvmsh moved successfully.
C:\WINDOWS\pxluctu.dat moved successfully.
C:\WINDOWS\system32\pwlwjlqf moved successfully.
C:\WINDOWS\system32\pwa moved successfully.
C:\WINDOWS\system32\pqognjycvt.dat moved successfully.
C:\WINDOWS\system32\ppmurgqnqi moved successfully.
C:\WINDOWS\system32\pjtdqi.ini moved successfully.
C:\WINDOWS\system32\pjjipw moved successfully.
C:\WINDOWS\system32\phcioojd.ini moved successfully.
C:\WINDOWS\system32\pgsh moved successfully.
C:\WINDOWS\system32\pffkxpns moved successfully.
C:\WINDOWS\system32\pepxq moved successfully.
C:\WINDOWS\system32\pedcjlq.ini moved successfully.
C:\WINDOWS\system32\pdqrcouep moved successfully.
C:\WINDOWS\system32\pcpmvigyknw.dat moved successfully.
C:\WINDOWS\system32\pcnbisr moved successfully.
C:\WINDOWS\system32\pclkwlz.ini moved successfully.
C:\WINDOWS\system32\pbzcnzjjax moved successfully.
C:\WINDOWS\system32\pathdekgnl.dat moved successfully.
C:\WINDOWS\system32\oybbndhpat moved successfully.
C:\WINDOWS\system32\oxsta moved successfully.
C:\WINDOWS\system32\ousspnt.ini moved successfully.
C:\WINDOWS\system32\ourtunrnnc moved successfully.
C:\WINDOWS\system32\otvbczqzr.dat moved successfully.
C:\WINDOWS\system32\otorwgb.ini moved successfully.
C:\WINDOWS\system32\oqipw moved successfully.
C:\WINDOWS\system32\opn moved successfully.
C:\WINDOWS\system32\oofzxmm.dat moved successfully.
C:\WINDOWS\system32\oofsbkfk.ini moved successfully.
C:\WINDOWS\system32\ooaomuyhvz.ini moved successfully.
C:\WINDOWS\system32\olwz moved successfully.
C:\WINDOWS\system32\olvkvxg moved successfully.
C:\WINDOWS\system32\olhdsirhbjm.dat moved successfully.
C:\WINDOWS\system32\oicryjbsxhd.ini moved successfully.
C:\WINDOWS\system32\odpeuveeirg moved successfully.
C:\WINDOWS\system32\obfbsckxiuv moved successfully.
C:\WINDOWS\system32\nysjggwyrz moved successfully.
C:\WINDOWS\system32\nvdkhnrqwn moved successfully.
C:\WINDOWS\system32\ntpp.ini moved successfully.
C:\WINDOWS\system32\nreadmitf moved successfully.
C:\WINDOWS\system32\nqxtrw moved successfully.
C:\WINDOWS\system32\npx moved successfully.
C:\WINDOWS\system32\npuailglpt.dat moved successfully.
C:\WINDOWS\system32\nnzey moved successfully.
C:\WINDOWS\system32\narceunvfsr.ini moved successfully.
C:\WINDOWS\system32\mwzhlh.ini moved successfully.
C:\WINDOWS\system32\mwuwz.dat moved successfully.
C:\WINDOWS\system32\mvhxlyyr.dat moved successfully.
C:\WINDOWS\system32\msbwl moved successfully.
C:\WINDOWS\system32\mpvauzxwdz moved successfully.
C:\WINDOWS\system32\minowwpnhw.dat moved successfully.
C:\WINDOWS\system32\mfpfkyzrxe moved successfully.
C:\WINDOWS\system32\mflohpswrxl.dat moved successfully.
C:\WINDOWS\system32\mbufohzbd.dat moved successfully.
C:\WINDOWS\system32\mbcuyqp moved successfully.
C:\WINDOWS\system32\maynwlp.ini moved successfully.
C:\WINDOWS\lzuovdq moved successfully.
C:\WINDOWS\system32\lwcnbd.ini moved successfully.
C:\WINDOWS\system32\lvzw.dat moved successfully.
C:\WINDOWS\system32\lrotxpqhol moved successfully.
C:\WINDOWS\system32\lqya.dat moved successfully.
C:\WINDOWS\system32\lnuzijew moved successfully.
C:\WINDOWS\system32\lnm.ini moved successfully.
C:\WINDOWS\system32\lffhqjpt.dat moved successfully.
C:\WINDOWS\system32\lfdwrke moved successfully.
C:\WINDOWS\system32\lepkgvz moved successfully.
C:\WINDOWS\system32\lbial moved successfully.
C:\WINDOWS\system32\kza moved successfully.
C:\WINDOWS\kragnbr.dat moved successfully.
C:\WINDOWS\system32\kppamcnflm.dat moved successfully.
C:\WINDOWS\system32\knk.ini moved successfully.
C:\WINDOWS\system32\kkrk.ini moved successfully.
C:\WINDOWS\system32\kjvzwobzke.ini moved successfully.
C:\WINDOWS\system32\kffzqte moved successfully.
C:\WINDOWS\system32\kcd moved successfully.
C:\WINDOWS\system32\jvpytddxshm.ini moved successfully.
C:\WINDOWS\system32\jvanbm.ini moved successfully.
C:\WINDOWS\system32\jsgzsb moved successfully.
C:\WINDOWS\system32\jscxtijpp.ini moved successfully.
C:\WINDOWS\system32\jhvyfmljeob moved successfully.
C:\WINDOWS\system32\jfuwpyqkkiu moved successfully.
C:\WINDOWS\system32\jes moved successfully.
C:\WINDOWS\system32\jeoc moved successfully.
C:\WINDOWS\system32\jecbuzopv.ini moved successfully.
C:\WINDOWS\system32\jdlshte moved successfully.
C:\WINDOWS\system32\jazdltqdat.ini moved successfully.
C:\WINDOWS\system32\iyao moved successfully.
C:\WINDOWS\system32\ivz.ini moved successfully.
C:\WINDOWS\iurduaasebj moved successfully.
C:\WINDOWS\system32\ithugwck.dat moved successfully.
C:\WINDOWS\system32\isnvgwxvzx.ini moved successfully.
C:\WINDOWS\system32\ipdnxhip moved successfully.
C:\WINDOWS\system32\iooy moved successfully.
C:\WINDOWS\system32\imisiwl.ini moved successfully.
C:\WINDOWS\system32\ilppyukvb.ini moved successfully.
C:\WINDOWS\system32\ikvd.ini moved successfully.
C:\WINDOWS\system32\ifhfyantlzc moved successfully.
C:\WINDOWS\system32\iduxw.ini moved successfully.
C:\WINDOWS\system32\ict.ini moved successfully.
C:\WINDOWS\system32\hzooveshuhi moved successfully.
C:\WINDOWS\system32\hxokmtz.ini moved successfully.
C:\WINDOWS\system32\hwsfdvw moved successfully.
C:\WINDOWS\system32\hvbzrysf moved successfully.
C:\WINDOWS\system32\hulemjbpzih.dat moved successfully.
C:\WINDOWS\system32\htubwk.ini moved successfully.
C:\WINDOWS\system32\htmhmor moved successfully.
C:\WINDOWS\system32\hrqwp moved successfully.
C:\WINDOWS\system32\hrfumedgw.ini moved successfully.
C:\WINDOWS\system32\hqofa moved successfully.
C:\WINDOWS\system32\hiushfclfla.ini moved successfully.
C:\WINDOWS\system32\hbduxvmv moved successfully.
C:\WINDOWS\system32\gwyphivwam moved successfully.
C:\WINDOWS\system32\gwegf.dat moved successfully.
C:\WINDOWS\system32\gvsgjc moved successfully.
C:\WINDOWS\system32\gtkrjpla moved successfully.
C:\WINDOWS\system32\gsztiwpu moved successfully.
C:\WINDOWS\system32\gqr moved successfully.
C:\WINDOWS\system32\ghdvcccqxcv.ini moved successfully.
C:\WINDOWS\system32\gfgr moved successfully.
C:\WINDOWS\system32\gdsbvd moved successfully.
C:\WINDOWS\system32\gcgii.ini moved successfully.
C:\WINDOWS\system32\ganwg moved successfully.
C:\WINDOWS\system32\fzzu.dat moved successfully.
C:\WINDOWS\system32\fxwpiwys moved successfully.
C:\WINDOWS\system32\fsopbrrnag moved successfully.
C:\WINDOWS\system32\frznpwqgbxt moved successfully.
C:\WINDOWS\system32\fonbotjzdzr moved successfully.
C:\WINDOWS\system32\fnxe.dat moved successfully.
C:\WINDOWS\system32\fmlgoxxnn.ini moved successfully.
C:\WINDOWS\system32\fhagevihj.dat moved successfully.
C:\WINDOWS\system32\evpk moved successfully.
C:\WINDOWS\system32\eswjlbv moved successfully.
C:\WINDOWS\system32\eqartqwjeg moved successfully.
C:\WINDOWS\system32\epuzw.ini moved successfully.
C:\WINDOWS\ejxebk moved successfully.
C:\WINDOWS\eewo.ini moved successfully.
C:\WINDOWS\system32\eesejbzog.ini moved successfully.
C:\WINDOWS\system32\eebifxejokv moved successfully.
C:\WINDOWS\system32\ecqooiby moved successfully.
C:\WINDOWS\system32\dzna moved successfully.
C:\WINDOWS\dwbwxg moved successfully.
C:\WINDOWS\system32\dows moved successfully.
C:\WINDOWS\system32\dogequdlcho moved successfully.
C:\WINDOWS\system32\dmuuqmc.ini moved successfully.
C:\WINDOWS\system32\dkfd.ini moved successfully.
C:\WINDOWS\system32\djzobvavx.ini moved successfully.
C:\WINDOWS\system32\dgppwo.dat moved successfully.
C:\WINDOWS\system32\dgckkqqq.ini moved successfully.
C:\WINDOWS\system32\dfswulgomz.ini moved successfully.
C:\WINDOWS\system32\dfdenbmhi moved successfully.
C:\WINDOWS\system32\detwvkklv.ini moved successfully.
C:\WINDOWS\system32\defhdp.ini moved successfully.
C:\WINDOWS\system32\dbsbm moved successfully.
C:\WINDOWS\system32\daltzc moved successfully.
C:\WINDOWS\system32\cxoab moved successfully.
C:\WINDOWS\system32\ctxnogspj.ini moved successfully.
C:\WINDOWS\cpznhdhikek moved successfully.
C:\WINDOWS\system32\cixpn moved successfully.
C:\WINDOWS\system32\cbqynozbpo.ini moved successfully.
C:\WINDOWS\system32\bzkhikmncyf moved successfully.
C:\WINDOWS\system32\byoqvakieh.ini moved successfully.
C:\WINDOWS\system32\bycuny moved successfully.
C:\WINDOWS\system32\bxqecmpfn.ini moved successfully.
C:\WINDOWS\system32\bulcyfilrrd.dat moved successfully.
C:\WINDOWS\system32\bsxkwl.dat moved successfully.
C:\WINDOWS\system32\bpajjydv moved successfully.
C:\WINDOWS\system32\betjex.ini moved successfully.
C:\WINDOWS\baxqskha.dat moved successfully.
C:\WINDOWS\system32\bacdzugy moved successfully.
C:\WINDOWS\system32\azuxhafgo.ini moved successfully.
C:\WINDOWS\system32\ayyyufnvi.ini moved successfully.
C:\WINDOWS\system32\axxvniyw moved successfully.
C:\WINDOWS\system32\auemdu.ini moved successfully.
C:\WINDOWS\system32\arsimaqa moved successfully.
C:\WINDOWS\system32\aqluxxpvzxz moved successfully.
C:\WINDOWS\system32\alswcpnkwg moved successfully.
C:\WINDOWS\system32\akophcvl moved successfully.
C:\WINDOWS\system32\akjgqsepny.ini moved successfully.
C:\WINDOWS\system32\ajnzyssdz.dat moved successfully.
C:\WINDOWS\system32\ahlkupje moved successfully.
C:\WINDOWS\system32\aesvs.dat moved successfully.
========== COMMANDS ==========
Restore point Set: OTL Restore Point

OTL by OldTimer - Version 3.2.59.1 log created on 08292012_124307

oldman960

2012-08-30, 03:17

Hi Scarecrow,

Are you having any problems?

Scarecrow

2012-08-30, 12:06

They are all gone!
I think the computer is clean now. I will run a scan with ESET and one more with Spybot too. Also, I got a question.
Well, may I ask how were these files created and what was their purpose?

Thank you.

oldman960

2012-08-30, 15:46

Hi Scarecrow,

It looks like the files were part of a vundo infection. Vundo usually creates ad popups.

Download and save to your desktop Malwarebytes Anti-Malware (http://www.majorgeeks.com/Malwarebytes_Anti-Malware_d5756.html)

Double Click mbam-setup.exe to install the application.
Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
If an update is found, it will download and install the latest version.
Once the program has loaded, select "Perform Quick Scan", then click Scan.
The scan may take some time to finish,so please be patient.
When the scan is complete, click OK, then Show Results to view the results.
Make sure that everything is checked, and click Remove Selected.
When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
Copy&Paste the entire report in your next reply.

Extra Note:
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly.

Next

*Note
It is recommended to disable onboard antivirus program and antispyware programs while performing scans so there are no conflicts and it will speed up scan time.
Please don't go surfing while your resident protection is disabled!
Once the scan is finished remember to re-enable your antivirus along with your antispyware programs.

Go here to run an online scannner from
ESET (http://www.eset.eu/online-scanner)

(Note: You can use Internet Explorer or FireFox for this scan. If you use FireFox you will be asked to install an additional component. Please allow this.)

Tick the box next to YES, I accept the Terms of Use.
Click Start
When asked, allow the activex control to install
Disable your Antivirus software. You can usually do this with its Notfication Tray icon near the clock
Click Start
Make sure that the option "Remove found threats" is Unchecked, and the option "Scan unwanted applications" is Checked.
Click Scan.
Wait for the scan to finish.
When the scan completes, click List of found threats
click Export to Text file and save the file to your desktop using a unique name, such as ESETScan.
Include the contents of this report in your next reply

Note - when ESET doesn't find any threats, no report will be created.

Push the back button.
Push Finish
Re-enable your Antivirus software.

Please post back with
MBAM log
ESET log if there was one

Scarecrow

2012-08-30, 19:14

Hello,
I made a quick scan with MBAM, one full scan with ESET Smart Security and one with Spybot (portable (http://portableapps.com/apps/security/spybot_portable)).
ESET online scanner wasn't online for me at that time, it was giving 404 error. Now it's back online, anyway.
Spybot and ESS didn't find anything, MBAM too.

MBAM log:
Malwarebytes Anti-Malware 1.62.0.1300
www.malwarebytes.org

Database version: v2012.08.30.03

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
user :: USER-0D3DA03F2E [administrator]

30/8/2012 4:48:10 μμ
mbam-log-2012-08-30 (16-48-10).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 199177
Time elapsed: 2 minute(s), 56 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

oldman960

2012-09-01, 17:59

Hi Scarecrow,

I think we can clean up the tools now.

From your desktop, please delete, if present
any notepads/logs that we created
DDS.scr
aswMBR.exe
mbr.dat

Next

* Create a new restore point

You must be logged on to an administrator account
Go to Start - All Programs - Accessories - System Tools - System Restore.
Click Create a restore point, and then click Next.
In the text box labeled Restore Point Description, type a name for this restore point
click create

* Remove old restore points

Go to Start - All Programs - Accessories - system tools.
Launch the Disk Cleanup tool and let it run.
When it finishes a box with tabs will appear, select the more options tab.
On this tab you will find a section for System Restore.
If you press the Clean Up button for that section, Windows will delete all restore points except for the most recent one.

Next

Open OTL then click the Clean Up button. You may get prompted by your firewall that OTL wants to contact the internet - allow this. A cleanup.txt will be downloaded, a message dialog will ask you if you want to proceed with the cleanup process, click Yes. This will do some clean up tasks and delete some of the tools you have downloaded plus itself.

I suggest you keep MBAM. Keep it updated and use it regularly.

* Updates and Upgrades

Your java is out of date. Click your start button, open Control panel.
Locate the Java icon (it looks like a coffee cup)
double click it to open it
click the Update tab
Click update now
Decline any additional installs that may be offered during the install.

Next, clear the java cache

To clear the Java Plug-in cache: Click Start > Control Panel.
Double-click the Java icon in the control panel.
On the General tab, Click Settings under Temporary Internet Files.
On the Temporary Files Settings screen, Click Delete Files.
check all boxes
Click OK

* Some Recommendations and prevention tips

Basic security consists of 1 antivirus program, 1 resident antispyware program, 1 on demand antispyware program and a firewall. Just add a firewall to what you have.

* If you are behind a router Windows firewall should be fine. Otherwise a 3rd party firewall with outbound monitoring is recommended. If ESET Security includes a firewall you are ok.

If you are neither behind a router or ESET does not include a firewall

Click FIREWALL (http://www.bleepingcomputer.com/forums/tutorial60.html) for links and tutorials to good, free and paid for firewalls. (Note: Zone Alarm is becoming bloatware)

You can use Spybot to install a Custom Hosts file which will block access to known malicious sites.
1-Left-click the "Spybot - Search & Destroy" shortcut to open the program
2-Right-click an item in the list of immunizations and click "Deselect All."
3-Scroll down to the bottom of the list and click the checkbox to the left of "Global (Hosts)" under the "Windows" header.
4-Click "Immunize" on the Spybot toolbar.

-Secure your Internet Explorer

From within Internet Explorer click on the Tools menu and then click on Options.
Click once on the Security tab
Click once on the Internet icon so it becomes highlighted.
Click once on the Custom Level button.
Change the Download signed ActiveX controls to Prompt
Change the Download unsigned ActiveX controls to Disable
Change the Initialize and script ActiveX controls not marked as safe to Disable
Change the Installation of desktop items to Prompt
Change the Launching programs and files in an IFRAME to Prompt
Change the Navigate sub-frames across different domains to Prompt
When all these settings have been made, click on the OK button.
If it prompts you as to whether or not you want to save the settings, press the Yes button.
Next press the Apply button and then the OK to exit the Internet Properties page.

- Keeping your Windows up-to-date is crucial to your computer's security. Please go to the Windows Update Site (http://www.update.microsoft.com/windowsupdate/v6/default.aspx?ln=en-us)(using Internet Explorer) and download and install all critical updates on a regular basis

- Make sure you have reset Automatic Updates to your chosen optionClick your start button > Control Panel > System > Automatic Updates tab

- Keep your antivirus program updated, as well as any other security programs you have.

-More tips and programs can be found HERE (http://forums.whatthetech.com/Preventing_Malware_Tools_Practices_Safe_Computing_t98700.html)

Please post back if you have any problems.

Take care

Scarecrow

2012-09-02, 00:15

Hello,
I updated Java, deleted older versions using JavaRa and cleaned Java's temporary files. Also, I made a new system restore point and cleaned older restore points.
ESET Smart Security includes a firewall, so I will continue using this. About the IE thing, well I never use IE for browsing, I only use it to download Windows updates in case Automatic Updates fail.
Everything is running fine now, I haven't noticed any problems so far.

Finally, I want to thank you for your assistance.
:thanks:

oldman960

2012-09-02, 20:01

Hi Scarecrow,

Good job. As for IE since you do use it occasionally you may as well make it as secure as possible.

You're welcome. Take care.

oldman960

2012-09-05, 16:05

Since this issue appears to be resolved ... this Topic has been closed.