mdm.exe virus

burevestnik

Part 3
**********************************************************
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\forbes.com\media\omniture d

---

[12:05 04/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\images.neopets.com d

---

[01:13 10/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\images.neopets.com\games d

---

[01:13 10/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\images.neopets.com\games\g1107_Kraft_Quest_for_Cheese d

---

[01:13 10/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\images.neopets.com\games\g1107_Kraft_Quest_for_Cheese\v3 d

---

[01:13 10/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\images.neopets.com\games\g1107_Kraft_Quest_for_Cheese\v3\main.swf d

---

[01:13 10/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\interclick.com d

---

[19:51 02/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\is1.j.tv2n.net d

---

[22:54 28/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\is2.j.tv2n.net d

---

[22:46 02/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\l.yimg.com d

---

[19:39 02/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\l.yimg.com\a d

---

[23:03 05/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\l.yimg.com\a\a d

---

[23:03 05/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\l.yimg.com\a\a\1- d

---

[23:03 05/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\l.yimg.com\a\a\1-\java d

---

[23:03 05/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\l.yimg.com\a\a\1-\java\promotions d

---

[23:03 05/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\l.yimg.com\a\a\1-\java\promotions\discovery d

---

[23:03 05/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\l.yimg.com\a\a\1-\java\promotions\discovery\090606 d

---

[23:03 05/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\l.yimg.com\a\a\1-\java\promotions\discovery\090606\d d

---

[23:03 05/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\l.yimg.com\a\a\1-\java\promotions\discovery\090606\d\e1.swf d

---

[23:03 05/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\l.yimg.com\m d

---

[19:39 02/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\l.yimg.com\m\ver d

---

[19:39 02/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\l.yimg.com\m\ver\271.3 d

---

[19:39 02/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\l.yimg.com\m\ver\271.3\embed-2009-03-26-1329 d

---

[19:39 02/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\l.yimg.com\m\ver\271.3\embed-2009-03-26-1329\swf d

---

[19:39 02/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\l.yimg.com\m\ver\271.3\embed-2009-03-26-1329\swf\yup_embed_module.swf d

---

[19:39 02/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\lads.myspace.com d

---

[23:10 02/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\lads.myspace.com\videos d

---

[23:10 02/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\lads.myspace.com\videos\Main.swf d

---

[23:10 02/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\macandcheese.kraftfoods.com d

---

[01:20 10/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\macandcheese.kraftfoods.com\v1 d

---

[01:20 10/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\macandcheese.kraftfoods.com\v1\swf d

---

[01:20 10/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\macandcheese.kraftfoods.com\v1\swf\modules d

---

[01:20 10/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\macandcheese.kraftfoods.com\v1\swf\modules\fuel d

---

[01:20 10/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\macandcheese.kraftfoods.com\v1\swf\modules\fuel\quest d

---

[01:20 10/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\macandcheese.kraftfoods.com\v1\swf\modules\fuel\quest\main.swf d

---

[01:20 10/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\mail.google.com d

---

[23:26 10/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\mcstatic.com d

---

[23:21 13/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\media1.break.com d

---

[00:20 20/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\miniclip.com d

---

[23:22 15/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\miniclip.com\games d

---

[23:22 15/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\miniclip.com\games\fire-storm d

---

[23:22 15/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\miniclip.com\games\fire-storm\en d

---

[23:22 15/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\miniclip.com\games\fire-storm\en\fire_storm.dcr d

---

[23:22 15/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\miniclip.com\games\free-wheels d

---

[23:31 15/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\miniclip.com\games\free-wheels\en d

---

[23:31 15/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\miniclip.com\games\free-wheels\en\free_wheels.dcr d

---

[23:31 15/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\neopets.com d

---

[19:11 07/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\neopets.com\maps d

---

[19:11 07/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\neopets.com\maps\map_preloader1_v2.swf d

---

[19:11 07/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\pandora.com d

---

[22:49 11/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\player.hulu.com d

---

[19:20 06/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\player.hulu.com\2.21 d

---

[19:20 06/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\player.hulu.com\2.21\fancast4x3_player.swf d

---

[19:20 06/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\redir.adap.tv d

---

[23:21 13/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\redir.adap.tv\redir d

---

[23:21 13/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\redir.adap.tv\redir\client d

---

[23:21 13/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\redir.adap.tv\redir\client\AdPlayer8 d

---

[23:21 13/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\redir.adap.tv\redir\client\AdPlayer8\AdPlayer8-24.7_017877.swf d

---

[23:21 13/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\resources-p1.imeem.com d

---

[19:48 06/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\s.mcstatic.com d

---

[23:21 13/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\s.ytimg.com d

---

[23:37 10/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\sodahead.com d

---

[23:04 28/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\static.twitter.com d

---

[00:27 20/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\static.twitter.com\flash d

---

[00:27 20/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\static.twitter.com\flash\widgets d

---

[00:27 20/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\static.twitter.com\flash\widgets\profile d

---

[00:27 20/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\static.twitter.com\flash\widgets\profile\TwitterWidget.swf d

---

[00:27 20/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\swf.neopets.com d

---

[19:40 02/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\swf.neopets.com\flash_enabled_check.swf d

---

[19:40 02/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\twitter.com d

---

[23:07 28/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\twitter.com\flash d

---

[23:07 28/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\twitter.com\flash\twitter_badge.swf d

---

[23:07 28/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\videos.video-loader.com d

---

[22:54 28/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\videos.video-loader.com\rktprl0905 d

---

[22:54 28/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\videos.video-loader.com\rktprl0905\TV2NPlayer.swf d

---

[22:54 28/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\www.coolmath-games.com d

---

[22:05 05/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\www.dailymotion.com d

---

[00:25 14/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\www.dailymotion.com\flash d

---

[00:25 14/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\www.dailymotion.com\flash\dmplayer d

---

[00:25 14/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\www.dailymotion.com\flash\dmplayer\dmplayer.swf d

---

[00:25 14/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\www.fancast.com d

---

[19:20 06/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\www.fancast.com\static-19990 d

---

[19:20 06/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\www.fancast.com\static-19990\swf d

---

[19:20 06/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\www.fancast.com\static-19990\swf\FCVidContainerInit.swf d

---

[19:20 06/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\www.hulu.com d

---

[23:12 05/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\www.hulu.com\playerembed.swf d

---

[23:12 05/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\www.miniclip.com d

---

[23:19 15/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\www.miniclip.com\games d

---

[23:22 15/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\www.miniclip.com\games\fire-storm d

---

[23:22 15/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\www.miniclip.com\games\fire-storm\en d

---

[23:22 15/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\www.miniclip.com\games\fire-storm\en\fire_storm.dcr d

---

[23:22 15/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\www.miniclip.com\games\free-wheels d

---

[23:31 15/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\www.miniclip.com\games\free-wheels\en d

---

[23:31 15/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\www.miniclip.com\games\free-wheels\en\free_wheels.dcr d

---

[23:31 15/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\www.miniclip.com\games\monster-trucks-nitro d

---

[20:22 29/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\www.miniclip.com\games\monster-trucks-nitro\en d

---

[20:22 29/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\www.miniclip.com\games\monster-trucks-nitro\en\MonsterTrucksNitro.swf d

---

[20:22 29/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\www.miniclip.com\players d

---

[23:19 15/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\www.miniclip.com\players\swf d

---

[23:19 15/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\www.miniclip.com\players\swf\components d

---

[23:19 15/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\www.miniclip.com\players\swf\components\loginbox.swf d

---

[23:19 15/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\www.nick.com d

---

[00:54 10/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\www.nick.com\games d

---

[00:54 10/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\www.nick.com\games\data d

---

[00:54 10/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\www.nick.com\games\data\excitebots d

---

[00:54 10/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\www.nick.com\games\data\excitebots\ExciteConnection.swf d

---

[00:54 10/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\www.petpetpark.com d

---

[23:50 16/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\www.petpetpark.com\games d

---

[23:50 16/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\www.petpetpark.com\games\PPP.R15.swf d

---

[23:50 16/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3H5KRCPS\www.youtube.com d

---

[23:22 13/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com d

---

[19:14 02/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support d

---

[19:14 02/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer d

---

[19:14 02/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys d

---

[19:14 02/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#abcnews.go.com d

---

[00:15 20/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#assets.bunchball.com d

---

[19:48 06/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#bin.clearspring.com d

---

[22:10 09/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cdn.gigya.com d

---

[23:06 20/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cdn.visiblemeasures.com d

---

[23:10 02/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#core.mochibot.com d

---

[20:22 29/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#core.videoegg.com d

---

[23:22 13/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#d.scribd.com d

---

[23:15 13/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#d.yimg.com d

---

[11:50 07/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#d2vu12l4y8nfmr.cloudfront.net d

---

[00:24 23/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#flash.quantserve.com d

---

[19:20 06/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#forbes.com d

---

[12:05 04/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#images.neopets.com d

---

[01:13 10/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#interclick.com d

---

[19:51 02/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#is1.j.tv2n.net d

---

[22:54 28/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#is2.j.tv2n.net d

---

[22:46 02/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#l.yimg.com d

---

[19:39 02/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#lads.myspace.com d

---

[23:10 02/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#macandcheese.kraftfoods.com d

---

[01:20 10/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#mail.google.com d

---

[23:26 10/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#mcstatic.com d

---

[23:21 13/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#media1.break.com d

---

[00:20 20/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#miniclip.com d

---

[23:22 15/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#neopets.com d

---

[19:11 07/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pandora.com d

---

[22:49 11/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#player.hulu.com d

---

[19:20 06/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#redir.adap.tv d

---

[23:21 13/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#resources-p1.imeem.com d

---

[19:48 06/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#s.mcstatic.com d

---

[23:21 13/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#s.ytimg.com d

---

[23:37 10/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#sodahead.com d

---

[23:04 28/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#static.twitter.com d

---

[00:27 20/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#swf.neopets.com d

---

[19:40 02/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#twitter.com d

---

[23:07 28/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#videos.video-loader.com d

---

[22:54 28/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.coolmath-games.com d

---

[22:05 05/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.dailymotion.com d

---

[00:25 14/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.fancast.com d

---

[19:20 06/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.hulu.com d

---

[23:12 05/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.miniclip.com d

---

[23:19 15/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.nick.com d

---

[00:54 10/05/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.petpetpark.com d

---

[23:50 16/06/2009]
C:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.youtube.com d

---

[23:22 13/06/2009]
C:\Documents and Settings\Rachel\Application Data\Microsoft d---s- [19:03 02/05/2009]
C:\Documents and Settings\Rachel\Application Data\Microsoft\AddIns d

---

[23:27 10/05/2009]
C:\Documents and Settings\Rachel\Application Data\Microsoft\Clip Organizer d

---

[15:40 21/06/2009]
C:\Documents and Settings\Rachel\Application Data\Microsoft\CLR Security Config d

---

[21:49 15/05/2009]
C:\Documents and Settings\Rachel\Application Data\Microsoft\CLR Security Config\v1.1.4322 d

---

[21:49 15/05/2009]
C:\Documents and Settings\Rachel\Application Data\Microsoft\CLView d

---

[15:54 21/06/2009]
C:\Documents and Settings\Rachel\Application Data\Microsoft\CLView\1033 d

---

[15:54 21/06/2009]
C:\Documents and Settings\Rachel\Application Data\Microsoft\Credentials d---s- [19:03 02/05/2009]
C:\Documents and Settings\Rachel\Application Data\Microsoft\Credentials\S-1-5-21-1220945662-1532298954-839522115-1006 d---s- [19:03 02/05/2009]
C:\Documents and Settings\Rachel\Application Data\Microsoft\CryptnetUrlCache d---s- [21:56 05/05/2009]
C:\Documents and Settings\Rachel\Application Data\Microsoft\CryptnetUrlCache\Content d---s- [21:56 05/05/2009]
C:\Documents and Settings\Rachel\Application Data\Microsoft\CryptnetUrlCache\MetaData d---s- [21:56 05/05/2009]
C:\Documents and Settings\Rachel\Application Data\Microsoft\Document Building Blocks d

---

[20:22 07/06/2009]
C:\Documents and Settings\Rachel\Application Data\Microsoft\Document Building Blocks\1033 d

---

[20:22 07/06/2009]
C:\Documents and Settings\Rachel\Application Data\Microsoft\HTML Help d

---

[15:53 21/06/2009]
C:\Documents and Settings\Rachel\Application Data\Microsoft\Internet Explorer d

---

[19:03 02/05/2009]
C:\Documents and Settings\Rachel\Application Data\Microsoft\Internet Explorer\Quick Launch dr---- [19:03 02/05/2009]
C:\Documents and Settings\Rachel\Application Data\Microsoft\Internet Explorer\UserData d--hs- [22:30 09/05/2009]
C:\Documents and Settings\Rachel\Application Data\Microsoft\Internet Explorer\UserData\6V17ACLA d--hs- [22:30 09/05/2009]
C:\Documents and Settings\Rachel\Application Data\Microsoft\Internet Explorer\UserData\DD2ZXZ6M d--hs- [22:30 09/05/2009]
C:\Documents and Settings\Rachel\Application Data\Microsoft\Internet Explorer\UserData\T87IASOS d--hs- [22:30 09/05/2009]
C:\Documents and Settings\Rachel\Application Data\Microsoft\Internet Explorer\UserData\XAVW0DU4 d--hs- [22:30 09/05/2009]
C:\Documents and Settings\Rachel\Application Data\Microsoft\Media Player d

---

[19:03 02/05/2009]
C:\Documents and Settings\Rachel\Application Data\Microsoft\Microsoft IntelliPoint d

---

[19:03 02/05/2009]
C:\Documents and Settings\Rachel\Application Data\Microsoft\Microsoft IntelliPoint\SQM d

---

[19:03 02/05/2009]
C:\Documents and Settings\Rachel\Application Data\Microsoft\Office d

---

[19:48 06/05/2009]
C:\Documents and Settings\Rachel\Application Data\Microsoft\Office\Recent d---s- [20:31 07/06/2009]
C:\Documents and Settings\Rachel\Application Data\Microsoft\Outlook d

---

[19:48 06/05/2009]
C:\Documents and Settings\Rachel\Application Data\Microsoft\Proof d

---

[20:22 07/06/2009]
C:\Documents and Settings\Rachel\Application Data\Microsoft\Protect d---s- [19:14 02/05/2009]
C:\Documents and Settings\Rachel\Application Data\Microsoft\Protect\S-1-5-21-1220945662-1532298954-839522115-1006 d---s- [19:14 02/05/2009]
C:\Documents and Settings\Rachel\Application Data\Microsoft\Publisher d

---

[15:37 21/06/2009]
C:\Documents and Settings\Rachel\Application Data\Microsoft\SystemCertificates d---s- [19:03 02/05/2009]
C:\Documents and Settings\Rachel\Application Data\Microsoft\SystemCertificates\My d---s- [19:03 02/05/2009]
C:\Documents and Settings\Rachel\Application Data\Microsoft\SystemCertificates\My\Certificates d---s- [19:03 02/05/2009]
C:\Documents and Settings\Rachel\Application Data\Microsoft\SystemCertificates\My\CRLs d---s- [19:03 02/05/2009]
C:\Documents and Settings\Rachel\Application Data\Microsoft\SystemCertificates\My\CTLs d---s- [19:03 02/05/2009]
C:\Documents and Settings\Rachel\Application Data\Microsoft\Templates d

---

[20:22 07/06/2009]
C:\Documents and Settings\Rachel\Application Data\Microsoft\UProof d

---

[23:27 10/05/2009]
C:\Documents and Settings\Rachel\Application Data\Microsoft\Windows d

---

[19:03 02/05/2009]
C:\Documents and Settings\Rachel\Application Data\Microsoft\Windows\Themes d

---

[19:03 02/05/2009]
C:\Documents and Settings\Rachel\Application Data\Microsoft\Word d

---

[20:22 07/06/2009]
C:\Documents and Settings\Rachel\Application Data\Microsoft\Word\STARTUP d

---

[20:22 07/06/2009]
C:\Documents and Settings\Rachel\Application Data\MiniDm d

---

[23:26 10/05/2009]
C:\Documents and Settings\Rachel\Application Data\Mozilla d

---

[23:05 27/05/2009]
C:\Documents and Settings\Rachel\Application Data\Mozilla\Extensions d

---

[23:05 27/05/2009]
C:\Documents and Settings\Rachel\Application Data\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} d

---

[23:05 27/05/2009]
C:\Documents and Settings\Rachel\Application Data\Mozilla\Firefox d

---

[23:05 27/05/2009]
C:\Documents and Settings\Rachel\Application Data\Mozilla\Firefox\Crash Reports d

---

[23:05 27/05/2009]
C:\Documents and Settings\Rachel\Application Data\Mozilla\Firefox\Profiles d

---

[23:05 27/05/2009]
C:\Documents and Settings\Rachel\Application Data\Mozilla\Firefox\Profiles\io0yv0v1.default d

---

[23:05 27/05/2009]
C:\Documents and Settings\Rachel\Application Data\Mozilla\Firefox\Profiles\io0yv0v1.default\bookmarkbackups d

---

[23:50 27/05/2009]
C:\Documents and Settings\Rachel\Application Data\Mozilla\Firefox\Profiles\io0yv0v1.default\chrome d

---

[23:05 27/05/2009]
C:\Documents and Settings\Rachel\Application Data\Mozilla\Firefox\Profiles\io0yv0v1.default\extensions d

---

[23:05 27/05/2009]
C:\Documents and Settings\Rachel\Application Data\Mozilla\Firefox\Profiles\io0yv0v1.default\minidumps d

---

[23:05 27/05/2009]
C:\Documents and Settings\Rachel\Application Data\WinRAR d

---

[18:50 07/06/2009]
C:\Documents and Settings\Papa\Application Data - Parameters: "/s /n*.exe*"
---Files---
None found.
C:\Documents and Settings\Papa\Application Data\ACD Systems d

---

[02:02 04/05/2009]
C:\Documents and Settings\Papa\Application Data\ACD Systems\ACDSee d

---

[02:02 04/05/2009]
C:\Documents and Settings\Papa\Application Data\ACD Systems\ACDSee\Favorites d

---

[02:02 04/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe d

---

[15:39 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Acrobat d

---

[16:46 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Acrobat\8.0 d

---

[16:47 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Acrobat\8.0\Collab d

---

[02:29 12/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Acrobat\8.0\JavaScripts d

---

[02:31 14/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Acrobat\8.0\organizer70 d

---

[13:22 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Acrobat\8.0\Preferences d

---

[02:29 12/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Acrobat\8.0\Synchronizer d

---

[17:39 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Acrobat\8.0\Synchronizer\metadata d

---

[17:39 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Acrobat\Distiller 8 d

---

[16:46 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Acrobat\Distiller 8\Cache d

---

[16:46 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Adobe PDF d

---

[15:52 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Adobe PDF\Distiller d

---

[16:46 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Adobe PDF\Distiller\Data d

---

[16:46 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Adobe PDF\Distiller\Startup d

---

[16:46 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Adobe PDF\Settings d

---

[15:52 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Adobe Photoshop CS4 d

---

[15:46 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Adobe Photoshop CS4\Presets d

---

[15:52 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Adobe Photoshop CS4\Presets\Actions d

---

[15:52 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Adobe Photoshop CS4\Presets\Black and White d

---

[15:52 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Adobe Photoshop CS4\Presets\Brushes d

---

[15:52 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Adobe Photoshop CS4\Presets\Channel Mixer d

---

[15:52 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Adobe Photoshop CS4\Presets\Color Swatches d

---

[15:52 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Adobe Photoshop CS4\Presets\Contours d

---

[15:52 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Adobe Photoshop CS4\Presets\Curves d

---

[15:52 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Adobe Photoshop CS4\Presets\Custom Shapes d

---

[15:52 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Adobe Photoshop CS4\Presets\Duotones d

---

[15:52 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Adobe Photoshop CS4\Presets\Exposure d

---

[15:52 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Adobe Photoshop CS4\Presets\Gradients d

---

[15:52 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Adobe Photoshop CS4\Presets\Hue and Saturation d

---

[15:52 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Adobe Photoshop CS4\Presets\Keyboard Shortcuts d

---

[15:52 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Adobe Photoshop CS4\Presets\Levels d

---

[15:52 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Adobe Photoshop CS4\Presets\Lights d

---

[15:52 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Adobe Photoshop CS4\Presets\Materials d

---

[15:52 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Adobe Photoshop CS4\Presets\Menu Customization d

---

[15:52 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Adobe Photoshop CS4\Presets\Patterns d

---

[15:52 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Adobe Photoshop CS4\Presets\Render Settings d

---

[15:52 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Adobe Photoshop CS4\Presets\Selective Color d

---

[15:52 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Adobe Photoshop CS4\Presets\Styles d

---

[15:52 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Adobe Photoshop CS4\Presets\Tools d

---

[15:52 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Adobe Photoshop CS4\Presets\Volumes d

---

[15:52 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\AIR d

---

[15:41 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\AIR\Updater d

---

[15:41 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Color d

---

[15:52 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Color\Proofing d

---

[15:52 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Color\Settings d

---

[15:52 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Flash Player d

---

[15:41 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Flash Player\AssetCache d

---

[15:41 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Flash Player\AssetCache\SALMWUV8 d

---

[15:41 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Linguistics d

---

[13:21 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Linguistics\Dictionaries d

---

[13:21 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary d

---

[13:21 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary\all d

---

[13:21 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary\brt d

---

[13:21 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary\brz d

---

[13:21 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary\bul d

---

[13:22 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary\can d

---

[13:22 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary\cfr d

---

[13:21 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary\ctl d

---

[13:21 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary\cze d

---

[13:22 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary\dan d

---

[13:21 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary\dut d

---

[13:21 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary\eng d

---

[13:21 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary\est d

---

[13:22 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary\fin d

---

[13:21 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary\frn d

---

[13:21 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary\gre d

---

[13:22 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary\grm d

---

[13:21 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary\hrv d

---

[13:22 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary\hun d

---

[13:22 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary\itl d

---

[13:21 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary\lav d

---

[13:22 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary\lit d

---

[13:22 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary\nrw d

---

[13:21 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary\nyn d

---

[13:21 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary\pol d

---

[13:22 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary\prt d

---

[13:21 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary\rum d

---

[13:22 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary\rus d

---

[13:22 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary\sgr d

---

[13:21 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary\slo d

---

[13:22 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary\slv d

---

[13:22 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary\spn d

---

[13:21 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary\swd d

---

[13:21 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary\tur d

---

[13:22 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Shockwave Player 11 d

---

[16:51 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Shockwave Player 11\DswMedia d

---

[16:51 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Shockwave Player 11\Prefs d

---

[16:51 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Shockwave Player 11\Prefs\98YHAPN5 d

---

[16:51 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Shockwave Player 11\xtras d

---

[16:51 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Shockwave Player 11\xtras\download d

---

[16:51 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Shockwave Player 11\xtras\download\AdobeSystemsIncorporated d

---

[16:51 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Shockwave Player 11\xtras\download\AdobeSystemsIncorporated\DirectSound d

---

[16:51 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Shockwave Player 11\xtras\download\AdobeSystemsIncorporated\FlashAsset d

---

[16:51 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Shockwave Player 11\xtras\download\AdobeSystemsIncorporated\MacroMix d

---

[16:51 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Shockwave Player 11\xtras\download\AdobeSystemsIncorporated\SoundControl d

---

[16:51 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Adobe\Shockwave Player 11\xtras\download\AdobeSystemsIncorporated\SWA d

---

[16:51 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Apple Computer d

---

[02:32 12/06/2009]
C:\Documents and Settings\Papa\Application Data\Apple Computer\QuickTime d

---

[02:32 12/06/2009]
C:\Documents and Settings\Papa\Application Data\DivX d

---

[01:09 29/06/2009]
C:\Documents and Settings\Papa\Application Data\DivX\DivX Codec d

---

[01:09 29/06/2009]
C:\Documents and Settings\Papa\Application Data\ICAClient d

---

[11:51 15/05/2009]
C:\Documents and Settings\Papa\Application Data\ICAClient\Cache d

---

[11:51 15/05/2009]
C:\Documents and Settings\Papa\Application Data\ICAClient\Cache\zlcache d

---

[11:51 15/05/2009]
C:\Documents and Settings\Papa\Application Data\Identities d

---

[13:11 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Identities\{0B057171-3AC7-4F0A-9311-2941E358F8C6} d

---

[13:11 02/05/2009]
C:\Documents and Settings\Papa\Application Data\IEPro d

---

[14:27 02/05/2009]
C:\Documents and Settings\Papa\Application Data\IEPro\adblock d

---

[14:51 02/05/2009]
C:\Documents and Settings\Papa\Application Data\IEPro\autoform d

---

[14:27 02/05/2009]
C:\Documents and Settings\Papa\Application Data\IEPro\textsaver d

---

[14:27 02/05/2009]
C:\Documents and Settings\Papa\Application Data\InstallShield d

---

[17:05 02/05/2009]
C:\Documents and Settings\Papa\Application Data\InstallShield\ISEngine12.0 d

---

[17:05 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Intuit d

---

[02:32 12/05/2009]
C:\Documents and Settings\Papa\Application Data\Intuit\Quicken d

---

[02:32 12/05/2009]
C:\Documents and Settings\Papa\Application Data\Intuit\Quicken\Config d

---

[02:32 12/05/2009]
C:\Documents and Settings\Papa\Application Data\Intuit\Quicken\Data d

---

[02:32 12/05/2009]
C:\Documents and Settings\Papa\Application Data\Intuit\Quicken\Log d

---

[02:32 12/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia d

---

[15:43 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player d

---

[15:43 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects d

---

[15:43 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N d

---

[15:43 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\as1.suitesmart.com d

---

[01:38 03/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\as1.suitesmart.com\_f5e.swf d

---

[01:38 03/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\bankofamerica.com d

---

[01:47 06/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\bankofamerica.com\sas d

---

[01:47 06/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\bankofamerica.com\sas\sas-docs d

---

[01:47 06/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\bankofamerica.com\sas\sas-docs\html d

---

[01:47 06/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\bankofamerica.com\sas\sas-docs\html\pmfso.swf d

---

[01:47 06/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\bin.clearspring.com d

---

[10:54 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\buzzword.acrobat.com d

---

[02:28 16/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\buzzword.acrobat.com\Clients d

---

[02:28 16/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\buzzword.acrobat.com\Clients\605212 d

---

[02:28 16/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\buzzword.acrobat.com\Clients\605212\Buzzword.swf d

---

[02:28 16/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\chase.com d

---

[02:12 03/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\d.yimg.com d

---

[02:24 16/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\d.yimg.com\ks d

---

[02:24 16/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\d.yimg.com\ks\ytv-dint d

---

[02:24 16/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\d.yimg.com\ks\ytv-dint\AdPlugin.swf d

---

[02:24 16/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\epson.com d

---

[16:57 02/05/2009]

burevestnik

Part 4
**********************************************************
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\flowplayer.org d

---

[01:50 19/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\flowplayer.org\swf d

---

[01:50 19/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\flowplayer.org\swf\flowplayer-3.1.1.swf d

---

[01:50 19/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\home.americanexpress.com d

---

[02:00 05/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\home.americanexpress.com\home d

---

[02:00 05/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\home.americanexpress.com\home\load_audio_home.swf d

---

[02:00 05/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\interclick.com d

---

[02:25 21/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\l.yimg.com d

---

[23:51 08/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\l.yimg.com\a d

---

[23:51 08/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\l.yimg.com\a\a d

---

[23:51 08/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\l.yimg.com\a\a\1- d

---

[23:51 08/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\l.yimg.com\a\a\1-\java d

---

[23:51 08/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\l.yimg.com\a\a\1-\java\promotions d

---

[23:51 08/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\l.yimg.com\a\a\1-\java\promotions\bankofamerica d

---

[10:25 02/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\l.yimg.com\a\a\1-\java\promotions\bankofamerica\090518 d

---

[10:25 02/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\l.yimg.com\a\a\1-\java\promotions\bankofamerica\090518\c d

---

[10:25 02/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\l.yimg.com\a\a\1-\java\promotions\paramount d

---

[23:51 08/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\l.yimg.com\a\a\1-\java\promotions\paramount\090508 d

---

[23:51 08/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\l.yimg.com\a\a\1-\java\promotions\paramount\090508\i d

---

[23:51 08/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\login.yahoo.com d

---

[16:52 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\macromedia.com d

---

[16:48 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\mail.google.com d

---

[11:42 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\s.ytimg.com d

---

[10:57 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\seal.buysafe.com d

---

[12:16 07/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\secureinclude.ebaystatic.com d

---

[00:03 11/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\share.acrobat.com d

---

[02:29 16/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\share.acrobat.com\adc d

---

[02:29 16/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\share.acrobat.com\adc\flex d

---

[02:29 16/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\share.acrobat.com\adc\flex\adc.swf d

---

[02:29 16/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\spe.atdmt.com d

---

[03:21 01/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\spe.atdmt.com\ds d

---

[03:21 01/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\spe.atdmt.com\ds\M5NMKQWESQM2 d

---

[03:21 01/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\spe.atdmt.com\ds\M5NMKQWESQM2\q209_4_16_qw10997_adroit d

---

[03:21 01/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\spe.atdmt.com\ds\M5NMKQWESQM2\q209_4_16_qw10997_adroit\QW10997_Q2_Concepting_bundle_img_160x600_ID705.swf d

---

[03:21 01/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\spe.atdmt.com\ds\M5NMKQWESQM2\q209_4_16_qw10997_adroit\QW10997_Q2_Concepting_hsi_noimg_160x600_ID702.swf d

---

[03:21 01/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\stg.odnoklassniki.ru d

---

[01:37 19/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\tdameritrade.com d

---

[03:44 26/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\tdameritrade.com\virtualclient d

---

[03:44 26/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\tdameritrade.com\virtualclient\vce.swf d

---

[03:44 26/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\udn.specificclick.net d

---

[01:45 06/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\us.mg1.mail.yahoo.com d

---

[16:52 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\www.guggenheim.org d

---

[14:43 16/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\www.ikea.com d

---

[14:33 28/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\www.ikea.com\ms d

---

[14:33 28/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\www.ikea.com\ms\flash d

---

[14:33 28/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\www.ikea.com\ms\flash\rooms_ideas d

---

[14:33 28/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\www.ikea.com\ms\flash\rooms_ideas\mpa2 d

---

[14:33 28/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\www.ikea.com\ms\flash\rooms_ideas\mpa2\MPA2.swf d

---

[14:33 28/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\www.miniclip.com d

---

[21:44 15/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\www.miniclip.com\games d

---

[21:45 15/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\www.miniclip.com\games\squiggle-squid d

---

[21:45 15/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\www.miniclip.com\games\squiggle-squid\en d

---

[21:45 15/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\www.miniclip.com\games\squiggle-squid\en\squiggle.swf d

---

[21:45 15/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\www.miniclip.com\players d

---

[21:44 15/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\www.miniclip.com\players\swf d

---

[21:44 15/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\www.miniclip.com\players\swf\components d

---

[21:44 15/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\www.miniclip.com\players\swf\components\loginbox.swf d

---

[21:44 15/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\#SharedObjects\XL85893N\www.weather.com d

---

[02:06 05/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\macromedia.com d

---

[15:43 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\macromedia.com\support d

---

[15:43 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer d

---

[15:43 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys d

---

[15:43 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#adobe.com d

---

[16:48 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#as1.suitesmart.com d

---

[01:38 03/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#bankofamerica.com d

---

[01:47 06/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#bin.clearspring.com d

---

[10:54 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#buzzword.acrobat.com d

---

[02:28 16/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#chase.com d

---

[02:12 03/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#d.yimg.com d

---

[02:24 16/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#epson.com d

---

[16:57 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#flowplayer.org d

---

[01:50 19/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#home.americanexpress.com d

---

[02:00 05/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#interclick.com d

---

[02:25 21/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#l.yimg.com d

---

[23:51 08/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#login.yahoo.com d

---

[16:52 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#macromedia.com d

---

[16:48 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#mail.google.com d

---

[11:42 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#s.ytimg.com d

---

[10:57 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#seal.buysafe.com d

---

[12:16 07/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#secureinclude.ebaystatic.com d

---

[00:03 11/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#share.acrobat.com d

---

[02:29 16/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#spe.atdmt.com d

---

[03:21 01/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#stg.odnoklassniki.ru d

---

[01:37 19/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#tdameritrade.com d

---

[03:44 26/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#udn.specificclick.net d

---

[01:45 06/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#us.mg1.mail.yahoo.com d

---

[16:52 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.guggenheim.org d

---

[14:43 16/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.ikea.com d

---

[14:33 28/06/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.miniclip.com d

---

[21:44 15/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.weather.com d

---

[02:06 05/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\www.macromedia.com d

---

[16:48 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\www.macromedia.com\bin d

---

[16:48 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\fpupdateax d

---

[16:48 02/05/2009]
fpupdateax.exe --a--- 1915520 bytes [16:48 02/05/2009] [16:48 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Malwarebytes d

---

[02:35 24/06/2009]
C:\Documents and Settings\Papa\Application Data\Malwarebytes\Malwarebytes' Anti-Malware d

---

[02:35 24/06/2009]
C:\Documents and Settings\Papa\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs d

---

[02:35 24/06/2009]
C:\Documents and Settings\Papa\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine d

---

[02:35 24/06/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft d---s- [13:11 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\AddIns d

---

[11:06 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\Address Book d

---

[11:12 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\CLR Security Config d

---

[18:08 15/05/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\CLR Security Config\v1.1.4322 d

---

[18:08 15/05/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\CLR Security Config\v2.0.50727.42 d

---

[02:56 06/06/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\Credentials d---s- [13:11 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\Credentials\S-1-5-21-1220945662-1532298954-839522115-1003 d---s- [13:11 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\CryptnetUrlCache d---s- [13:32 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\CryptnetUrlCache\Content d---s- [13:32 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\CryptnetUrlCache\MetaData d---s- [13:32 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\Crypto d---s- [15:52 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\Crypto\RSA d---s- [15:52 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\Crypto\RSA\S-1-5-21-1220945662-1532298954-839522115-1003 d---s- [15:52 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\Document Building Blocks d

---

[02:12 05/05/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\Document Building Blocks\1033 d

---

[02:12 05/05/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\Excel d

---

[11:06 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\Excel\XLSTART d

---

[11:06 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\HTML Help d

---

[03:07 29/05/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\IdentityCRL d

---

[11:11 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\IdentityCRL\production d

---

[11:11 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\Installer d

---

[13:31 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\Installer\{CAE7D1D9-3794-4169-B4DD-964ADBC534EE} d

---

[13:31 03/05/2009]
ARPPRODUCTICON.exe -ra--- 10134 bytes [13:31 03/05/2009] [13:31 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\Internet Explorer d

---

[13:11 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\Internet Explorer\Quick Launch dr---- [13:11 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\Media Player d

---

[13:11 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\Microsoft IntelliPoint d

---

[15:34 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\Microsoft IntelliPoint\SQM d

---

[15:34 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\MMC d

---

[13:23 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\Office d

---

[11:06 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\Office\Recent d---s- [11:06 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\Outlook d

---

[13:03 15/05/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\Proof d

---

[02:12 05/05/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\Protect d---s- [13:42 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\Protect\S-1-5-21-1220945662-1532298954-839522115-1003 d---s- [13:42 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\Publisher d

---

[18:26 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\SystemCertificates d---s- [13:11 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\SystemCertificates\My d---s- [13:11 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\SystemCertificates\My\Certificates d---s- [13:11 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\SystemCertificates\My\CRLs d---s- [13:11 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\SystemCertificates\My\CTLs d---s- [13:11 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\Templates d

---

[02:12 05/05/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\UProof d

---

[02:12 05/05/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\Windows d

---

[13:11 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\Windows\Themes d

---

[13:11 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\Word d

---

[02:12 05/05/2009]
C:\Documents and Settings\Papa\Application Data\Microsoft\Word\STARTUP d

---

[02:12 05/05/2009]
C:\Documents and Settings\Papa\Application Data\MiniDm d

---

[14:33 02/05/2009]
C:\Documents and Settings\Papa\Application Data\Mozilla d

---

[10:19 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Mozilla\Extensions d

---

[10:19 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} d

---

[10:19 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Mozilla\Firefox d

---

[10:19 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Crash Reports d

---

[10:19 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles d

---

[10:19 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\w1zusv1v.default d

---

[10:19 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\w1zusv1v.default\bookmarkbackups d

---

[10:20 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\w1zusv1v.default\chrome d

---

[10:19 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\w1zusv1v.default\extensions d

---

[10:19 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\w1zusv1v.default\extensions\{dc572301-7619-498c-a57d-39143191b318} d

---

[10:20 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\w1zusv1v.default\extensions\{dc572301-7619-498c-a57d-39143191b318}\chrome d

---

[10:20 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\w1zusv1v.default\extensions\{dc572301-7619-498c-a57d-39143191b318}\defaults d

---

[10:20 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\w1zusv1v.default\extensions\{dc572301-7619-498c-a57d-39143191b318}\defaults\preferences d

---

[10:20 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\w1zusv1v.default\extensions\{FFA36170-80B1-4535-B0E3-A4569E497DD0} d

---

[11:46 25/05/2009]
C:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\w1zusv1v.default\extensions\{FFA36170-80B1-4535-B0E3-A4569E497DD0}\chrome d

---

[11:46 25/05/2009]
C:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\w1zusv1v.default\extensions\{FFA36170-80B1-4535-B0E3-A4569E497DD0}\components d

---

[11:46 25/05/2009]
C:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\w1zusv1v.default\extensions\{FFA36170-80B1-4535-B0E3-A4569E497DD0}\platform d

---

[11:46 25/05/2009]
C:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\w1zusv1v.default\extensions\{FFA36170-80B1-4535-B0E3-A4569E497DD0}\platform\Linux_x86-gcc3 d

---

[11:46 25/05/2009]
C:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\w1zusv1v.default\extensions\{FFA36170-80B1-4535-B0E3-A4569E497DD0}\platform\Linux_x86-gcc3\components d

---

[11:46 25/05/2009]
C:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\w1zusv1v.default\extensions\{FFA36170-80B1-4535-B0E3-A4569E497DD0}\platform\WINNT_x86-msvc d

---

[11:46 25/05/2009]
C:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\w1zusv1v.default\extensions\{FFA36170-80B1-4535-B0E3-A4569E497DD0}\platform\WINNT_x86-msvc\components d

---

[11:46 25/05/2009]
C:\Documents and Settings\Papa\Application Data\Mozilla\Firefox\Profiles\w1zusv1v.default\minidumps d

---

[10:19 03/05/2009]
C:\Documents and Settings\Papa\Application Data\Nero d

---

[19:29 13/06/2009]
C:\Documents and Settings\Papa\Application Data\Nero\Nero8 d

---

[19:29 13/06/2009]
C:\Documents and Settings\Papa\Application Data\Nero\Nero8\Nero Burning ROM d

---

[19:29 13/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun d

---

[00:08 26/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java d

---

[00:08 26/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment d

---

[00:09 26/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache d

---

[00:09 26/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\0 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\1 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\10 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\11 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\12 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\13 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\14 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\15 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\15\58fb3e0f-5a4b3100-n d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\16 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\17 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\18 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\19 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\2 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\20 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\21 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\22 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\23 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\24 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\25 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\26 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\27 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\28 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\29 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\3 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\30 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\31 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\32 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\33 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\34 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\35 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\36 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\37 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\38 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\39 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\4 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\40 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\41 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\42 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\43 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\44 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\45 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\45\4f710eed-2ca4865b-n d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\46 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\47 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\48 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\49 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\5 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\50 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\51 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\52 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\53 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\54 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\55 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\56 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\57 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\58 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\59 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\6 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\60 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\61 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\62 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\62\6baea4fe-5ffdbf40-n d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\63 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\7 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\8 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\9 d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\host d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\cache\6.0\muffin d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\ext d

---

[00:09 26/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\log d

---

[00:09 26/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\security d

---

[00:09 26/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\tmp d

---

[00:59 26/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\Deployment\tmp\si d

---

[00:59 26/06/2009]
C:\Documents and Settings\Papa\Application Data\Sun\Java\jre1.6.0_14 d

---

[00:08 26/06/2009]
C:\Documents and Settings\Papa\Application Data\WinRAR d

---

[01:57 04/05/2009]
C:\Documents and Settings\Leah\Application Data - Parameters: "/s /n*.exe*"
---Files---
None found.
C:\Documents and Settings\Leah\Application Data\Adobe d

---

[16:55 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Adobe\Acrobat d

---

[16:55 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Adobe\Acrobat\8.0 d

---

[16:55 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Adobe\Acrobat\8.0\Synchronizer d

---

[16:55 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Adobe\Acrobat\8.0\Synchronizer\metadata d

---

[16:55 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Adobe\Acrobat\Distiller 8 d

---

[16:55 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Adobe\Acrobat\Distiller 8\Cache d

---

[16:55 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Adobe\Adobe PDF d

---

[16:55 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Adobe\Adobe PDF\Distiller d

---

[16:55 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Adobe\Adobe PDF\Distiller\Data d

---

[16:55 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Adobe\Adobe PDF\Distiller\Startup d

---

[16:55 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Adobe\Adobe PDF\Settings d

---

[16:55 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Adobe\Adobe Photoshop CS4 d

---

[21:38 29/05/2009]
C:\Documents and Settings\Leah\Application Data\Adobe\Adobe Photoshop CS4\Adobe Photoshop CS4 Settings d

---

[21:38 29/05/2009]
C:\Documents and Settings\Leah\Application Data\Adobe\Common d

---

[21:40 29/05/2009]
C:\Documents and Settings\Leah\Application Data\Adobe\CS4ServiceManager d

---

[16:55 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Adobe\Flash Player d

---

[16:59 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Adobe\Flash Player\AssetCache d

---

[16:59 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Adobe\Flash Player\AssetCache\KMAJS36U d

---

[16:59 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Adobe\Premiere Elements d

---

[21:40 29/05/2009]
C:\Documents and Settings\Leah\Application Data\Adobe\Premiere Elements\4.0 d

---

[21:40 29/05/2009]
C:\Documents and Settings\Leah\Application Data\Identities d

---

[16:55 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Identities\{03C94E14-0157-46CF-81C5-7ACC52EAA30B} d

---

[16:55 03/05/2009]
C:\Documents and Settings\Leah\Application Data\IEPro d

---

[16:59 03/05/2009]
C:\Documents and Settings\Leah\Application Data\IEPro\adblock d

---

[16:59 03/05/2009]
C:\Documents and Settings\Leah\Application Data\IEPro\autoform d

---

[16:59 03/05/2009]
C:\Documents and Settings\Leah\Application Data\IEPro\textsaver d

---

[16:59 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Macromedia d

---

[17:00 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Macromedia\Flash Player d

---

[17:00 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Macromedia\Flash Player\#SharedObjects d

---

[17:00 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Macromedia\Flash Player\#SharedObjects\KZZX77AG d

---

[17:00 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Macromedia\Flash Player\#SharedObjects\KZZX77AG\mail.google.com d

---

[17:17 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Macromedia\Flash Player\#SharedObjects\KZZX77AG\pandora.com d

---

[17:00 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Macromedia\Flash Player\#SharedObjects\KZZX77AG\s.ytimg.com d

---

[17:06 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Macromedia\Flash Player\macromedia.com d

---

[17:00 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Macromedia\Flash Player\macromedia.com\support d

---

[17:00 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer d

---

[17:00 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys d

---

[17:00 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#mail.google.com d

---

[17:17 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pandora.com d

---

[17:00 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#s.ytimg.com d

---

[17:06 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Microsoft d---s- [16:55 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Microsoft\AddIns d

---

[16:56 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Microsoft\Clip Organizer d

---

[17:33 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Microsoft\CLR Security Config d

---

[16:36 16/05/2009]
C:\Documents and Settings\Leah\Application Data\Microsoft\CLR Security Config\v1.1.4322 d

---

[16:36 16/05/2009]
C:\Documents and Settings\Leah\Application Data\Microsoft\Credentials d---s- [16:55 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Microsoft\Credentials\S-1-5-21-1220945662-1532298954-839522115-1005 d---s- [16:55 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Microsoft\CryptnetUrlCache d---s- [17:00 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Microsoft\CryptnetUrlCache\Content d---s- [17:00 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Microsoft\CryptnetUrlCache\MetaData d---s- [17:00 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Microsoft\Document Building Blocks d

---

[02:18 15/05/2009]
C:\Documents and Settings\Leah\Application Data\Microsoft\Document Building Blocks\1033 d

---

[02:18 15/05/2009]
C:\Documents and Settings\Leah\Application Data\Microsoft\Internet Explorer d

---

[16:55 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Microsoft\Internet Explorer\Quick Launch dr---- [16:55 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Microsoft\Media Player d

---

[16:55 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Microsoft\Microsoft IntelliPoint d

---

[16:55 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Microsoft\Microsoft IntelliPoint\SQM d

---

[16:55 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Microsoft\Office d

---

[16:56 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Microsoft\Office\Recent d---s- [17:19 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Microsoft\Proof d

---

[02:18 15/05/2009]
C:\Documents and Settings\Leah\Application Data\Microsoft\Protect d---s- [17:00 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Microsoft\Protect\S-1-5-21-1220945662-1532298954-839522115-1005 d---s- [17:00 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Microsoft\Publisher d

---

[16:56 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Microsoft\SystemCertificates d---s- [16:55 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Microsoft\SystemCertificates\My d---s- [16:55 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Microsoft\SystemCertificates\My\Certificates d---s- [16:55 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Microsoft\SystemCertificates\My\CRLs d---s- [16:55 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Microsoft\SystemCertificates\My\CTLs d---s- [16:55 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Microsoft\Templates d

---

[16:56 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Microsoft\UProof d

---

[16:57 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Microsoft\Word d

---

[02:18 15/05/2009]
C:\Documents and Settings\Leah\Application Data\Microsoft\Word\STARTUP d

---

[02:18 15/05/2009]
C:\Documents and Settings\Leah\Application Data\MiniDm d

---

[17:35 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Mozilla d

---

[16:59 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Mozilla\Extensions d

---

[16:59 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} d

---

[16:59 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Mozilla\Firefox d

---

[16:59 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Mozilla\Firefox\Crash Reports d

---

[16:59 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Mozilla\Firefox\Profiles d

---

[16:59 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Mozilla\Firefox\Profiles\v4pigdb0.default d

---

[16:59 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Mozilla\Firefox\Profiles\v4pigdb0.default\bookmarkbackups d

---

[16:59 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Mozilla\Firefox\Profiles\v4pigdb0.default\chrome d

---

[16:59 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Mozilla\Firefox\Profiles\v4pigdb0.default\extensions d

---

[16:59 03/05/2009]
C:\Documents and Settings\Leah\Application Data\Mozilla\Firefox\Profiles\v4pigdb0.default\minidumps d

---

[16:59 03/05/2009]
C:\Documents and Settings\Anna\Local Settings\temp - Parameters: "/s"
---Files---
jusched.log --a--- 888 bytes [17:46 27/06/2009] [02:13 01/07/2009]
lilo2 --a--- 1024 bytes [18:04 28/06/2009] [18:04 28/06/2009]
lilo3 --a--- 1024 bytes [18:04 28/06/2009] [18:04 28/06/2009]
tmp53.tmp --a--- 19407 bytes [17:54 28/06/2009] [17:54 28/06/2009]
wmplog00.sqm --a--- 1416 bytes [14:16 29/06/2009] [14:16 29/06/2009]
zlib1.dll --a--- 59904 bytes [05:54 01/07/2009] [05:54 01/07/2009]
C:\Documents and Settings\Anna\Local Settings\temp\Adobe d

---

[17:36 28/06/2009]
C:\Documents and Settings\Anna\Local Settings\temp\Adobe\Acrobat d

---

[17:36 28/06/2009]
C:\Documents and Settings\Anna\Local Settings\temp\Adobe\Acrobat\8.0 d

---

[17:36 28/06/2009]
C:\Documents and Settings\Anna\Local Settings\temp\DefaultEmoticons d

---

[02:09 01/07/2009]
C:\Documents and Settings\Anna\Local Settings\temp\Icons d

---

[02:11 01/07/2009]
C:\Documents and Settings\Anna\Local Settings\temp\outlook logging d

---

[01:46 28/06/2009]
firstrun.log --a--- 111 bytes [01:46 28/06/2009] [02:09 01/07/2009]
C:\Documents and Settings\Anna\Local Settings\temp\VBE d

---

[17:42 27/06/2009]
C:\Documents and Settings\Anna\Local Settings\temp\WPDNSE d

---

[02:08 01/07/2009]
C:\Documents and Settings\Anna\Local Settings\temp\~temp d--hs- [21:42 27/06/2009]
C:\Documents and Settings\Anna\Local Settings\temp\~temp\gb43c04 d--hs- [16:47 28/06/2009]
spoolsv.exe --a--- 219136 bytes [16:47 28/06/2009] [16:47 28/06/2009]
C:\Documents and Settings\Anna\Local Settings\temp\~temp\gb43c05 d--hs- [17:40 30/06/2009]
spoolsv.exe --a--- 220672 bytes [17:40 30/06/2009] [17:40 30/06/2009]
C:\Documents and Settings\Anna\Local Settings\temp\~temp\gb45c04 d--hs- [16:47 28/06/2009]
spoolsv.exe --a--- 221184 bytes [16:47 28/06/2009] [16:47 28/06/2009]
C:\Documents and Settings\Anna\Local Settings\temp\~temp\gb45c05 d--hs- [04:29 01/07/2009]
spoolsv.exe --a--- 222208 bytes [04:29 01/07/2009] [04:29 01/07/2009]
C:\Documents and Settings\Anna\Local Settings\temp\~temp\gb50c03 d--hs- [16:47 28/06/2009]
spoolsv.exe --a--- 221184 bytes [16:47 28/06/2009] [16:47 28/06/2009]
C:\Documents and Settings\Anna\Local Settings\temp\~temp\gb50c04 d--hs- [04:29 01/07/2009]
spoolsv.exe --a--- 222208 bytes [04:29 01/07/2009] [04:29 01/07/2009]
C:\Documents and Settings\Anna\Local Settings\temp\~temp\gb52c02 d--hs- [19:11 29/06/2009]
spoolsv.exe --a--- 221184 bytes [19:11 29/06/2009] [19:11 29/06/2009]
C:\Documents and Settings\Anna\Local Settings\temp\~temp\gb52c03 d--hs- [04:29 01/07/2009]
spoolsv.exe --a--- 222208 bytes [04:29 01/07/2009] [04:29 01/07/2009]
C:\Documents and Settings\Anna\Local Settings\temp\~temp\gb56c01 d--hs- [16:47 28/06/2009]
spoolsv.exe --a--- 221184 bytes [16:47 28/06/2009] [16:47 28/06/2009]
C:\Documents and Settings\Anna\Local Settings\temp\~temp\gb56c02 d--hs- [04:29 01/07/2009]
spoolsv.exe --a--- 222208 bytes [04:29 01/07/2009] [04:29 01/07/2009]
C:\Documents and Settings\Anna\Local Settings\temp\~temp\gb57c01 d--hs- [17:32 29/06/2009]
spoolsv.exe --a--- 221184 bytes [17:32 29/06/2009] [17:32 29/06/2009]
C:\Documents and Settings\Anna\Local Settings\temp\~temp\gb57c02 d--hs- [04:29 01/07/2009]
spoolsv.exe --a--- 222208 bytes [04:29 01/07/2009] [04:29 01/07/2009]
C:\Documents and Settings\Anna\Local Settings\temp\~temp\mlp28 d--hs- [21:42 27/06/2009]
C:\Documents and Settings\Anna\Local Settings\temp\~temp\mlp29 d--hs- [12:21 29/06/2009]
C:\Documents and Settings\Anna\Local Settings\temp\~temp\mlp30 d--hs- [12:08 30/06/2009]
mdm.exe --a--- 38400 bytes [05:54 01/07/2009] [05:54 01/07/2009]
C:\Documents and Settings\Rachel\Local Settings\temp - Parameters: "/s"
---Files---
None found.
No folders found.
C:\Documents and Settings\Papa\Local Settings\Temp - Parameters: "/s"
---Files---
BCG113A.tmp --a--- 4096 bytes [10:14 30/06/2009] [10:14 30/06/2009]
E_S77.tmp --a--- 146 bytes [02:48 28/06/2009] [02:48 28/06/2009]
java_install_reg.log --a--- 582 bytes [20:19 27/06/2009] [07:19 29/06/2009]
jusched.log --a--- 7569 bytes [17:51 27/06/2009] [00:09 02/07/2009]
NSF7.tmp --a--- 276 bytes [03:33 01/07/2009] [03:33 01/07/2009]
~DFFE27.tmp --a--- 16384 bytes [02:13 30/06/2009] [02:13 30/06/2009]
~DFFE32.tmp --a--- 512 bytes [02:13 30/06/2009] [02:13 30/06/2009]
C:\Documents and Settings\Papa\Local Settings\Temp\hsperfdata_Papa d

---

[20:19 27/06/2009]
C:\Documents and Settings\Papa\Local Settings\Temp\VBE d

---

[18:55 28/06/2009]
C:\Documents and Settings\Papa\Local Settings\Temp\WPDNSE d

---

[00:04 02/07/2009]
C:\Documents and Settings\Leah\Local Settings\Temp - Parameters: "/s"
---Files---
None found.

burevestnik

Part 5
**********************************************************No folders found.
C:\WINDOWS\System - Parameters: "/s"
---Files---
AVICAP.DLL --a--- 69584 bytes [08:28 02/05/2009] [12:00 04/08/2004]
AVIFILE.DLL --a--- 109456 bytes [08:28 02/05/2009] [12:00 04/08/2004]
COMMDLG.DLL --a--- 32816 bytes [08:28 02/05/2009] [12:00 04/08/2004]
KEYBOARD.DRV --a--- 2000 bytes [08:28 02/05/2009] [12:00 04/08/2004]
LZEXPAND.DLL --a--- 9936 bytes [08:28 02/05/2009] [12:00 04/08/2004]
MCIAVI.DRV --a--- 73376 bytes [08:28 02/05/2009] [12:00 04/08/2004]
MCISEQ.DRV --a--- 25264 bytes [08:28 02/05/2009] [12:00 04/08/2004]
MCIWAVE.DRV --a--- 28160 bytes [08:28 02/05/2009] [12:00 04/08/2004]
MMSYSTEM.DLL --a--- 68768 bytes [08:28 02/05/2009] [12:00 04/08/2004]
MMTASK.TSK --a--- 1152 bytes [08:28 02/05/2009] [12:00 04/08/2004]
MOUSE.DRV --a--- 2032 bytes [08:28 02/05/2009] [12:00 04/08/2004]
MSVIDEO.DLL --a--- 126912 bytes [08:28 02/05/2009] [12:00 04/08/2004]
OLECLI.DLL --a--- 82944 bytes [08:28 02/05/2009] [12:00 04/08/2004]
OLESVR.DLL --a--- 24064 bytes [08:28 02/05/2009] [12:00 04/08/2004]
setup.inf --a--- 59167 bytes [12:00 04/08/2004] [12:00 04/08/2004]
SHELL.DLL --a--- 5120 bytes [08:28 02/05/2009] [12:00 04/08/2004]
SOUND.DRV --a--- 1744 bytes [08:28 02/05/2009] [12:00 04/08/2004]
stdole.tlb --a--- 5532 bytes [12:00 04/08/2004] [12:00 04/08/2004]
SYSTEM.DRV --a--- 3360 bytes [08:28 02/05/2009] [12:00 04/08/2004]
TAPI.DLL --a--- 19200 bytes [08:28 02/05/2009] [12:00 04/08/2004]
TIMER.DRV --a--- 4048 bytes [08:28 02/05/2009] [12:00 04/08/2004]
VER.DLL --a--- 9008 bytes [08:28 02/05/2009] [12:00 04/08/2004]
VGA.DRV --a--- 2176 bytes [08:28 02/05/2009] [12:00 04/08/2004]
WFWNET.DRV --a--- 13600 bytes [08:28 02/05/2009] [12:00 04/08/2004]
winspool.drv --a--- 146432 bytes [08:28 02/05/2009] [00:12 14/04/2008]
No folders found.
========== filefind ==========
Searching for "spoolsv.exe"
C:\Documents and Settings\Anna\Local Settings\temp\~temp\gb43c04\spoolsv.exe --a--- 219136 bytes [16:47 28/06/2009] [16:47 28/06/2009] BFA3A3A816978E6B5A8E6654E16CD31A
C:\Documents and Settings\Anna\Local Settings\temp\~temp\gb43c05\spoolsv.exe --a--- 220672 bytes [17:40 30/06/2009] [17:40 30/06/2009] 996F788D955C99FE9D0FB09DC86B366D
C:\Documents and Settings\Anna\Local Settings\temp\~temp\gb45c04\spoolsv.exe --a--- 221184 bytes [16:47 28/06/2009] [16:47 28/06/2009] 4E19C036979C8E9E0B4748F979560C19
C:\Documents and Settings\Anna\Local Settings\temp\~temp\gb45c05\spoolsv.exe --a--- 222208 bytes [04:29 01/07/2009] [04:29 01/07/2009] 715756FD0D45B25835C2456196BBD145
C:\Documents and Settings\Anna\Local Settings\temp\~temp\gb50c03\spoolsv.exe --a--- 221184 bytes [16:47 28/06/2009] [16:47 28/06/2009] 7F89E1AA9BF2F953FBDE3600ABF510BA
C:\Documents and Settings\Anna\Local Settings\temp\~temp\gb50c04\spoolsv.exe --a--- 222208 bytes [04:29 01/07/2009] [04:29 01/07/2009] A22FA7086E3CC3BEC1E0A8B7BBDCF514
C:\Documents and Settings\Anna\Local Settings\temp\~temp\gb52c02\spoolsv.exe --a--- 221184 bytes [19:11 29/06/2009] [19:11 29/06/2009] B0003A45E191D94D55D0BE84F6900125
C:\Documents and Settings\Anna\Local Settings\temp\~temp\gb52c03\spoolsv.exe --a--- 222208 bytes [04:29 01/07/2009] [04:29 01/07/2009] 483C58278B262F12F4FF7435F4C958AF
C:\Documents and Settings\Anna\Local Settings\temp\~temp\gb56c01\spoolsv.exe --a--- 221184 bytes [16:47 28/06/2009] [16:47 28/06/2009] 2A5DC21599E13EA1A4209857FBA049FC
C:\Documents and Settings\Anna\Local Settings\temp\~temp\gb56c02\spoolsv.exe --a--- 222208 bytes [04:29 01/07/2009] [04:29 01/07/2009] 9EFC007EA6EA82786519BB047155BE73
C:\Documents and Settings\Anna\Local Settings\temp\~temp\gb57c01\spoolsv.exe --a--- 221184 bytes [17:32 29/06/2009] [17:32 29/06/2009] 4C64281A7084B00FB057D1A0F5426630
C:\Documents and Settings\Anna\Local Settings\temp\~temp\gb57c02\spoolsv.exe --a--- 222208 bytes [04:29 01/07/2009] [04:29 01/07/2009] 933F2AEFFFF7E81C3818D2AF6C7C0648
C:\WINDOWS\$NtServicePackUninstall$\spoolsv.exe

---

c 57856 bytes [13:51 02/05/2009] [12:00 04/08/2004] 7435B108B935E42EA92CA94F59C8E717
C:\WINDOWS\ServicePackFiles\i386\spoolsv.exe

---

57856 bytes [00:12 14/04/2008] [00:12 14/04/2008] D8E14A61ACC1D4A6CD0D38AEBAC7FA3B
C:\WINDOWS\system32\dllcache\cache\spoolsv.exe --a--c 57856 bytes [10:28 25/06/2009] [00:12 14/04/2008] D8E14A61ACC1D4A6CD0D38AEBAC7FA3B
C:\WINDOWS\system32\spoolsv.exe --a--- 57856 bytes [12:00 04/08/2004] [00:12 14/04/2008] D8E14A61ACC1D4A6CD0D38AEBAC7FA3B
Searching for "ieudinit.exe"
C:\WINDOWS\$hf_mig$\KB963027-IE7\SP3QFE\ieudinit.exe --a--- 13824 bytes [13:38 02/05/2009] [10:24 20/02/2009] 666DD4ABA0025897B34B0E69C3B9109D
C:\WINDOWS\$hf_mig$\KB969897-IE7\SP3QFE\ieudinit.exe --a--- 13824 bytes [09:56 28/04/2009] [09:56 28/04/2009] E2E1332D2A8F04F35FC64F83A3006103
C:\WINDOWS\ie7updates\KB963027-IE7\ieudinit.exe

---

c 13312 bytes [13:40 02/05/2009] [22:39 13/08/2007] D3D2009FD649AA5082DA2F8CBD7D9F3D
C:\WINDOWS\ie7updates\KB969897-IE7\ieudinit.exe

---

c 13824 bytes [02:47 13/06/2009] [10:20 20/02/2009] BAACFE1A277DBE29BA6044DCF44A7785
C:\WINDOWS\system32\dllcache\ieudinit.exe

---

c 13824 bytes [13:38 02/05/2009] [09:05 28/04/2009] C2B8415504A841E55708517658F771B3
C:\WINDOWS\system32\ieudinit.exe --a--- 13824 bytes [22:39 13/08/2007] [09:05 28/04/2009] C2B8415504A841E55708517658F771B3
Searching for "cmstp.exe"
C:\WINDOWS\$NtServicePackUninstall$\cmstp.exe

---

c 63488 bytes [13:52 02/05/2009] [12:00 04/08/2004] 69B231148006E8B15EE839ABBF8CA576
C:\WINDOWS\ServicePackFiles\i386\cmstp.exe

---

63488 bytes [00:12 14/04/2008] [00:12 14/04/2008] 231138871DCE86961694177508CC8F17
C:\WINDOWS\system32\cmstp.exe --a--- 63488 bytes [12:00 04/08/2004] [00:12 14/04/2008] 231138871DCE86961694177508CC8F17
Searching for "mstinit.exe"
C:\WINDOWS\$NtServicePackUninstall$\mstinit.exe

---

c 12288 bytes [13:52 02/05/2009] [12:00 04/08/2004] 4EC9A411607BFB7288EFF808223C25D6
C:\WINDOWS\ServicePackFiles\i386\mstinit.exe

---

12288 bytes [00:12 14/04/2008] [00:12 14/04/2008] D5788A5243D1DD160E0F97AA4808B2BE
C:\WINDOWS\system32\mstinit.exe --a--- 12288 bytes [12:38 02/05/2009] [00:12 14/04/2008] D5788A5243D1DD160E0F97AA4808B2BE
Searching for "sessmgr.exe"
C:\WINDOWS\$NtServicePackUninstall$\sessmgr.exe

---

c 140800 bytes [13:51 02/05/2009] [12:00 04/08/2004] 729798E0933076B8FCFCD9934698F164
C:\WINDOWS\ServicePackFiles\i386\sessmgr.exe

---

141312 bytes [00:12 14/04/2008] [00:12 14/04/2008] 3C37BF86641BDA977C3BF8A840F3B7FA
C:\WINDOWS\system32\sessmgr.exe --a--- 141312 bytes [12:37 02/05/2009] [00:12 14/04/2008] 3C37BF86641BDA977C3BF8A840F3B7FA
Searching for "cisvc.exe"
C:\Documents and Settings\Anna\Local Settings\Application Data\Microsoft\cisvc.exe --a--- 61440 bytes [23:37 05/06/2009] [00:20 09/05/2009] 228DC8ADC7EDAFD3063B68A695D31A6D
C:\WINDOWS\$NtServicePackUninstall$\cisvc.exe

---

c 5632 bytes [13:52 02/05/2009] [12:00 04/08/2004] 3192BD04D032A9C4A85A3278C268A13A
C:\WINDOWS\ServicePackFiles\i386\cisvc.exe

---

5632 bytes [00:12 14/04/2008] [00:12 14/04/2008] 1CFE720EB8D93A7158A4EBC3AB178BDE
C:\WINDOWS\system32\cisvc.exe --a--- 5632 bytes [12:00 04/08/2004] [00:12 14/04/2008] 1CFE720EB8D93A7158A4EBC3AB178BDE
Searching for "comrepl.exe"
C:\WINDOWS\$NtServicePackUninstall$\comrepl.exe

---

c 9728 bytes [13:52 02/05/2009] [12:00 04/08/2004] 42B1F1CE95A41D35AF65CCF8925728A3
C:\WINDOWS\ServicePackFiles\i386\comrepl.exe

---

9728 bytes [00:12 14/04/2008] [00:12 14/04/2008] DEDDBCE9D0B6E4864F593A8A36849E1D
C:\WINDOWS\system32\Com\comrepl.exe --a--- 9728 bytes [12:37 02/05/2009] [00:12 14/04/2008] DEDDBCE9D0B6E4864F593A8A36849E1D
Searching for "rsvp.exe"
C:\WINDOWS\system32\dllcache\rsvp.exe --a--c 132608 bytes [12:00 04/08/2004] [12:00 04/08/2004] 471B3F9741D762ABE75E9DEEA4787E47
C:\WINDOWS\system32\rsvp.exe --a--- 132608 bytes [12:00 04/08/2004] [12:00 04/08/2004] 471B3F9741D762ABE75E9DEEA4787E47
Searching for "esentutl.exe"
C:\WINDOWS\system32\dllcache\esentutl.exe --a--c 39424 bytes [12:00 04/08/2004] [12:00 04/08/2004] DF17198F6A13CA1011FFEF1D9B702481
C:\WINDOWS\system32\esentutl.exe --a--- 39424 bytes [12:00 04/08/2004] [12:00 04/08/2004] DF17198F6A13CA1011FFEF1D9B702481
-=End Of File=-

burevestnik

By th way, since we started our little experiments, my computer began to restart by itself from the "severe error" at least once a day.
Is cure worse than the decease? :-)

Katana

burevestnik wrote:

Is cure worse than the decease? :-)

Not normally, but your machine was heavily infected.

It is installtion keygen anyway.

I need to know if you ever used this Keygen, even if it was only once.




OTMoveIt
Please download OTM by OldTimer and save it to your desktop

• Double-click OTM.exe to run it.
• Copy the lines in the codebox below. ( Make sure you include :Processes )

:Processes
:Reg
:Files
C:\Documents and Settings\Anna\Local Settings\temp\*.* /s
C:\Documents and Settings\Rachel\Local Settings\temp\*.* /s
C:\Documents and Settings\Papa\Local Settings\Temp\*.* /s
C:\Documents and Settings\Leah\Local Settings\Temp\*.* /s
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Logs\*.*
C:\Documents and Settings\Anna\Local Settings\Application Data\Microsoft\cisvc.exe
:Commands
[Purity]
[EmptyTemp]

• Return to OTM, right click in the Paste List of Files/Folders to Move window (under the yellow bar) and choose Paste.

• - Close ALL open windows (especially Internet Explorer!)-
• Click the red Moveit! button.
• Copy everything in the Results window (under the green bar), and paste it in your next reply.
• Close OTM

If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.

Please post the OTMoveIt log.
Reboot your machine and see if the problem still exists
(if it does, where ? )

burevestnik

Yes,
I did use that keygen once.
*******************************************************
All processes killed
========== PROCESSES ==========
========== REGISTRY ==========
========== FILES ==========
C:\Documents and Settings\Anna\Local Settings\temp\jusched.log moved successfully.
C:\Documents and Settings\Anna\Local Settings\temp\lilo2 moved successfully.
C:\Documents and Settings\Anna\Local Settings\temp\lilo3 moved successfully.
C:\Documents and Settings\Anna\Local Settings\temp\tmp53.tmp moved successfully.
C:\Documents and Settings\Anna\Local Settings\temp\wmplog00.sqm moved successfully.
DllUnregisterServer procedure not found in C:\Documents and Settings\Anna\Local Settings\temp\zlib1.dll
C:\Documents and Settings\Anna\Local Settings\temp\zlib1.dll NOT unregistered.
C:\Documents and Settings\Anna\Local Settings\temp\zlib1.dll moved successfully.
C:\Documents and Settings\Anna\Local Settings\temp\~temp\gb43c04\spoolsv.exe moved successfully.
C:\Documents and Settings\Anna\Local Settings\temp\~temp\gb43c05\spoolsv.exe moved successfully.
C:\Documents and Settings\Anna\Local Settings\temp\~temp\gb45c04\spoolsv.exe moved successfully.
C:\Documents and Settings\Anna\Local Settings\temp\~temp\gb45c05\spoolsv.exe moved successfully.
C:\Documents and Settings\Anna\Local Settings\temp\~temp\gb50c03\spoolsv.exe moved successfully.
C:\Documents and Settings\Anna\Local Settings\temp\~temp\gb50c04\spoolsv.exe moved successfully.
C:\Documents and Settings\Anna\Local Settings\temp\~temp\gb52c02\spoolsv.exe moved successfully.
C:\Documents and Settings\Anna\Local Settings\temp\~temp\gb52c03\spoolsv.exe moved successfully.
C:\Documents and Settings\Anna\Local Settings\temp\~temp\gb56c01\spoolsv.exe moved successfully.
C:\Documents and Settings\Anna\Local Settings\temp\~temp\gb56c02\spoolsv.exe moved successfully.
C:\Documents and Settings\Anna\Local Settings\temp\~temp\gb57c01\spoolsv.exe moved successfully.
C:\Documents and Settings\Anna\Local Settings\temp\~temp\gb57c02\spoolsv.exe moved successfully.
File move failed. C:\Documents and Settings\Anna\Local Settings\temp\~temp\mlp30\mdm.exe scheduled to be moved on reboot.
C:\Documents and Settings\Anna\Local Settings\temp\outlook logging\firstrun.log moved successfully.
File/Folder C:\Documents and Settings\Rachel\Local Settings\temp\*.* not found.
C:\Documents and Settings\Papa\Local Settings\Temp\BCG113A.tmp moved successfully.
C:\Documents and Settings\Papa\Local Settings\Temp\E_S77.tmp moved successfully.
C:\Documents and Settings\Papa\Local Settings\Temp\java_install_reg.log moved successfully.
C:\Documents and Settings\Papa\Local Settings\Temp\jusched.log moved successfully.
C:\Documents and Settings\Papa\Local Settings\Temp\NSF7.tmp moved successfully.
C:\Documents and Settings\Papa\Local Settings\Temp\~DFFE27.tmp moved successfully.
C:\Documents and Settings\Papa\Local Settings\Temp\~DFFE32.tmp moved successfully.
File/Folder C:\Documents and Settings\Leah\Local Settings\Temp\*.* not found.
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Logs\06272009.Log moved successfully.
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Logs\06282009.Log moved successfully.
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Logs\06292009.Log moved successfully.
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Logs\06302009.Log moved successfully.
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Logs\07012009.Log moved successfully.
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Logs\07022009.Log moved successfully.
C:\Documents and Settings\Anna\Local Settings\Application Data\Microsoft\cisvc.exe moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Anna
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 58820402 bytes
->FireFox cache emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Leah
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->FireFox cache emptied: 0 bytes

User: LocalService
->Temp folder emptied: 0 bytes
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 11256 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Papa
->Temp folder emptied: 0 bytes
File delete failed. C:\Documents and Settings\Papa\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
->Temporary Internet Files folder emptied: 1152018 bytes
->Java cache emptied: 13425503 bytes
->FireFox cache emptied: 3323346 bytes

User: Rachel
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->FireFox cache emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
Windows Temp folder emptied: 17007 bytes

RecycleBin emptied: 1143988338 bytes

Total Files Cleaned = 1164.25 mb


OTM by OldTimer - Version 3.0.0.2 log created on 07022009_061710
Files moved on Reboot...
File C:\Documents and Settings\Anna\Local Settings\temp\~temp\mlp30\mdm.exe not found!
Registry entries deleted on Reboot...

Katana

Katana wrote:

Reboot your machine and see if the problem still exists

Is the problem still present ?

burevestnik

I did not see it since yesterday....

Katana

Katana wrote:

If you ever used this file, then you need to reformat your computer

It allow outsiders COMPLETE access to every keystroke, account, and password you use while on this machine, and complete access to any other data present...

Uninstall OTMoveIt (OTM.exe)

• Open OTMoveIt Click Cleanup,
• When a box pops up click YES.

Your machine appears to be clean now,
but as I previously mentioned to you, if you used that file then you need to reformat your machine to be completely safe.

burevestnik

To be completely safe you have to live in North Dakota in a shack and not use computer at all... :-)
That keygen was provided by a friend who used it many times for other people and never it was a problem of any sorts...

Anyway, thank you for your help! I hope it is relatively clean now. But this exercise proves my observation, which I got during my many years in IT: with Windows, it is always faster to rebuild the PC instead of looking for a problem and fixing it...

Katana, I have read your recommendations and I would like to clarify them, if you have few minutes.

1. What Antivirus software you would recommend? I use Symantec AntiVirus v 10.1.8.8000 (Corpotae edition). And I also use MS Windows Defender. This configuration was recommended by PC support team at work. I also have installtion files for Symantec Endpoint protection (Corporate) v 11. It includes anti-spamware, etc. What do you think? Should I change it to, let's say, Avira or Kaspersky?

2. You recommended several software pieces to run:

Spybot - Search & Destroy
MalwareBytes Anti-malware
a-squared Free
superantispyware


Prevention

• SpywareBlaster 4.0
• Winpatrol
• SpywareGuard 2.2
• ZonedOut
• MVPS HOSTS"

This is all great, but it is a little too much for me. I would prefer to use one in each group or some suite of apps, if possible...

3. Router. I cuirrently use ZoneAlarm router Z100G. It has antivirus software inside in addition to other Checkpoint features. I am looking at D-Link DIR825, People say it is much faster and as secure as others. What do you think?

4. What about local software firewall? ZoneAlarm, Comodo? Anything else you can recommend, if I need it at all?

I am sorry to bother you with so many questions...
Thanks in advance!

Katana

burevestnik wrote:

That keygen was provided by a friend who used it many times for other people and never it was a problem of any sorts...

Then they were lucky ...
The W32.IRCBot tag that the file was given means that the file has the ability to contact the internet.
There is no valid reason why a key generator should need this ability.
This is not a false positive, that file is definately infected.

burevestnik wrote:

with Windows, it is always faster to rebuild the PC instead of looking for a problem and fixing it...

Unfortunately, that is often very true. The malware authors are always trying to hide what they do, and as you can see they throw files around like confetti.

burevestnik wrote:

What Antivirus software you would recommend?

Any of the following

Paid AV list
kaspersky
ESET NOD32

Free AV list ( Home users only)
Avira AntiVir
Avast

burevestnik wrote:

I also use MS Windows Defender.

Defender is very limited in what it finds and removes.

burevestnik wrote:

I use Symantec AntiVirus v 10.1.8.8000 (Corporate edition).
I also have installtion files for Symantec Endpoint protection (Corporate) v 11. It includes anti-spamware, etc.

You need to check the EULA for those programs, I suspect that they should only be used on Company machines.

burevestnik wrote:

I would prefer to use one in each group or some suite of apps, if possible...

MalwareBytes + Winpatrol

burevestnik wrote:

3. Router. I cuirrently use ZoneAlarm router Z100G. It has antivirus software inside in addition to other Checkpoint features. I am looking at D-Link DIR825, People say it is much faster and as secure as others. What do you think?

I know very little about different routers, you would be better asking in a hardware room about those

burevestnik wrote:

4. What about local software firewall? ZoneAlarm, Comodo? Anything else you can recommend, if I need it at all?

A software firewall is always advisable if you have the spare ram for it.
If you do get an infection that your AV + AS don't pick up, then a firewall can stop it from calling in more dross.
Have a look HERE for some current info on Comodo, and some recommendations on firewalls.

burevestnik wrote:

I am sorry to bother you with so many questions...

Not a problem

burevestnik

Katana,
thank you for your prompt response!
As for Symantec software, our company distributed it to us, since we have to connect to work...
If I use Avira, I have to disable Symantec and then load it when connecting. It does not happen pften, though...

Katana

burevestnik wrote:

our company distributed it to us

Hmm .... they obviously don't like you very much if they make you use Symantec

burevestnik

Big corporations usually are using either Symantec or McAfee (I personally do not like it), Sometimes, TrendMicro... I will try Avira in resident mode, and Symantec in stand-by mode. I hope it will be possible.