Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: PUP.Dealio - die zweite

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 12.01.2011, 07:15   #1
badbadi
 
PUP.Dealio - die zweite - Standard

PUP.Dealio - die zweite



Hallo,

Mein Beitrag bezieht sich auf einen Forumsbeitrag vom 9.1.2011 um 22.35 Uhr mit dem Thema: PUP.Dealio.
Auch bei mir hat das Programm "Malwarebytes" PUP.Dealio entdeckt. Habe dann entsprechend den Anweisungen, die im oben genannten Forumsbeitrag vorgegeben wurden, mit den Programmen JjackThis und CCleaner die geforderten Logfiles erstellt.
Die Ergebnisse würde ich jetzt hier posten und würde mich sehr freuen, wenn Sie jemand von euch anschaut und mir mitteilt, ob mein System noch sauber ist. Danke!

mbam-log

Code:
ATTFilter
Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Datenbank Version: 5506

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

1/12/2011 5:45:42 AM
mbam-log-2011-01-12 (05-45-42).txt

Art des Suchlaufs: Quick-Scan
Durchsuchte Objekte: 145205
Laufzeit: 2 Minute(n), 51 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 1
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{E312764E-7706-43F1-8DAB-FCDD2B1E416D} (PUP.Dealio) -> Quarantined and deleted successfully.

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)
         
hier das Logfile von hijackthis

Code:
ATTFilter
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 6:12:44 AM, on 1/12/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\GIGABYTE\EnergySaver\GSvr.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 

hxxp://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: DeviceVM Url Search Hook - {0063BF63-BFFF-4B8F-9D26-4267DF7F17DD} - 

C:\WINDOWS\system32\dvmurl.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program 

Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program 

Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network 

Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program 

Files\Messenger\msmsgs.exe
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - 

C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - 

C:\WINDOWS\system32\browseui.dll
O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir 

Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir 

Desktop\avguard.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - 

C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision 

Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GEST Service for program management. (GEST Service) - Unknown owner - C:\Program 

Files\GIGABYTE\EnergySaver\GSvr.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program 

Files\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program 

Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

--
End of file - 5245 bytes
         

Und das Ergebnis von CCleaner

Code:
ATTFilter
1st Page 2000 2.00 Free		
Adobe Flash Player 10 ActiveX	Adobe Systems Incorporated	10.1.102.64
Adobe Flash Player 10 Plugin	Adobe Systems Incorporated	10.1.102.64
Adobe Illustrator CS3	Adobe Systems Incorporated	13.0
Adobe InDesign CS3	Adobe Systems Incorporated	5.0
Adobe Photoshop CS3	Adobe Systems Incorporated	10.0
Avira AntiVir Personal - Free Antivirus	Avira GmbH	10.0.0.609
Browser Configuration Utility	DeviceVM Inc.	1.0.4.9
CCleaner	Piriform	3.02
CommandBurner 3.5	Cortex I.T.	
Energy Saver Advance B9.0316.1	GIGABYTE	1.10.0000
Foxit Reader	Foxit Software Company	3.1.3.1030
Google Earth Plug-in	Google	5.2.1.1588
HiJackThis	Trend Micro	1.0.0
Java(TM) 6 Update 22	Sun Microsystems, Inc.	6.0.220
Malwarebytes' Anti-Malware	Malwarebytes Corporation	
Microsoft Compression Client Pack 1.0 for Windows XP	Microsoft Corporation	1
Microsoft IntelliPoint 5.5	Microsoft	5.50.661.0
Microsoft Office Enterprise 2007	Microsoft Corporation	12.0.6425.1000
Microsoft User-Mode Driver Framework Feature Pack 1.0	Microsoft Corporation	
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053	Microsoft Corporation	8.0.50727.4053
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148	Microsoft Corporation	9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17	Microsoft Corporation	9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148	Microsoft Corporation	9.0.30729.4148
Mozilla Firefox (3.6.13)	Mozilla	3.6.13 (de)
NVIDIA Drivers	NVIDIA Corporation	1.3
NVIDIA PhysX	NVIDIA Corporation	9.09.0428
REALTEK GbE & FE Ethernet PCI-E NIC Driver	Realtek	1.20.0000
Realtek High Definition Audio Driver	Realtek Semiconductor Corp.	5.10.0.5780
Total Commander (Remove or Repair)	Ghisler Software GmbH	7.50a
Windows Internet Explorer 8	Microsoft Corporation	20090308.140743
Windows Media Format 11 runtime		
Windows Media Player 11		
WinSCP 4.2.4 beta	Martin Prikryl	4.2.4 beta
         
Ich wollte auch noch die Logfiles von hjtscanlist einfügen, aber das Forum hat mir Folgendes gemeldet:

Der Text, den Sie eingegeben haben, besteht aus 139773 Zeichen und ist damit zu lang. Bitte kürzen Sie den Text auf die maximale Länge von 135120 Zeichen. Deshalb kommt die hjtscanlist im nächsten Teil.

Danke für die Mühe.

Gruß

Badi

Alt 12.01.2011, 07:18   #2
badbadi
 
PUP.Dealio - die zweite - Standard

PUP.Dealio - die zweite



Hallo,

Hier kommt das Logfile von hjtscanlist

Code:
ATTFilter
                        $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ 
                        º                                    º 
                                    hjtscanlist v2.0              
                        º                                    º 
                        $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ 

Microsoft Windows XP [Version 5.1.2600]
 
 
C:

  01/12/2011 06:32 AM      C:\service.log --------- 13609 
        C:\pagefile.sys ---------  
  01/12/2011 05:51 AM      C:\Program Files --------- 0 
  12/18/2010 10:51 AM      C:\WINDOWS --------- 0 
  11/08/2010 06:19 AM      C:\11ea1b7fa7318e976a90 --------- 0 
  11/08/2010 06:19 AM      C:\c3537f57c2f3f85155c6c45e --------- 0 
  01/30/2010 08:24 AM      C:\Documents and Settings --------- 0 
  01/28/2010 07:53 AM      C:\System Volume Information --------- 0 
  11/01/2009 07:51 AM      C:\totalcmd --------- 0 
  11/01/2009 07:51 AM      C:\RECYCLER --------- 0 
  10/31/2009 06:21 AM      C:\MSOCache --------- 0 
  10/29/2009 05:20 PM      C:\Install.log --------- 197 
  10/29/2009 05:18 PM      C:\RHDSetup.log --------- 1519 
  10/29/2009 05:15 PM      C:\Intel --------- 0 
  10/29/2009 04:49 PM      C:\MSDOS.SYS --------- 0 
  10/29/2009 04:49 PM      C:\CONFIG.SYS --------- 0 
  10/29/2009 04:49 PM      C:\AUTOEXEC.BAT --------- 0 
  10/29/2009 04:49 PM      C:\IO.SYS --------- 0 
  10/29/2009 04:45 PM      C:\boot.ini --------- 211 
  04/14/2008 07:01 AM      C:\ntldr --------- 250048 
  04/14/2008 05:13 AM      C:\NTDETECT.COM --------- 47564 
----------------------------------------

 
C:\WINDOWS

  01/12/2011 06:10 AM     C:\WINDOWS\WindowsUpdate.log --------- 1476399 
  01/12/2011 06:09 AM     C:\WINDOWS\0.log --------- 0 
  01/12/2011 06:09 AM     C:\WINDOWS\gdrv.sys --------- 17488 
  01/12/2011 06:09 AM     C:\WINDOWS\bootstat.dat --------- 2048 
  01/12/2011 06:08 AM     C:\WINDOWS\SchedLgU.Txt --------- 32578 
  01/11/2011 07:55 PM     C:\WINDOWS\wiaservc.log --------- 49 
  01/11/2011 07:55 PM     C:\WINDOWS\wiadebug.log --------- 411 
  01/01/2011 08:39 AM     C:\WINDOWS\wmsetup.log --------- 26557 
  12/16/2010 10:52 AM     C:\WINDOWS\iis6.log --------- 1023994 
  12/16/2010 10:52 AM     C:\WINDOWS\comsetup.log --------- 314807 
  12/16/2010 10:52 AM     C:\WINDOWS\tabletoc.log --------- 47125 
  12/16/2010 10:52 AM     C:\WINDOWS\imsins.log --------- 1393 
  12/16/2010 10:52 AM     C:\WINDOWS\ocmsn.log --------- 50817 
  12/16/2010 10:52 AM     C:\WINDOWS\tsoc.log --------- 422692 
  12/16/2010 10:52 AM     C:\WINDOWS\ntdtcsetup.log --------- 189170 
  12/16/2010 10:52 AM     C:\WINDOWS\KB2296199.log --------- 16000 
  12/16/2010 10:52 AM     C:\WINDOWS\MedCtrOC.log --------- 64142 
  12/16/2010 10:52 AM     C:\WINDOWS\ocgen.log --------- 446348 
  12/16/2010 10:52 AM     C:\WINDOWS\msgsocm.log --------- 45985 
  12/16/2010 10:52 AM     C:\WINDOWS\netfxocm.log --------- 160908 
  12/16/2010 10:52 AM     C:\WINDOWS\FaxSetup.log --------- 914221 
  12/16/2010 10:52 AM     C:\WINDOWS\msmqinst.log --------- 285442 
  12/16/2010 10:52 AM     C:\WINDOWS\updspapi.log --------- 62692 
  12/16/2010 10:52 AM     C:\WINDOWS\imsins.BAK --------- 1393 
  12/16/2010 10:52 AM     C:\WINDOWS\KB2443105.log --------- 15198 
  12/16/2010 10:51 AM     C:\WINDOWS\KB2416400-IE8.log --------- 15134 
  12/16/2010 10:51 AM     C:\WINDOWS\KB2440591.log --------- 7686 
  12/16/2010 10:51 AM     C:\WINDOWS\KB2443685.log --------- 4726 
  12/16/2010 10:51 AM     C:\WINDOWS\KB2436673.log --------- 12760 
  12/16/2010 10:51 AM     C:\WINDOWS\KB2467659.log --------- 7052 
  12/16/2010 10:50 AM     C:\WINDOWS\KB2423089.log --------- 6522 
  11/09/2010 03:53 PM     C:\WINDOWS\spupdsvc.log --------- 117750 
  11/09/2010 06:15 AM     C:\WINDOWS\KB975558.log --------- 14033 
  11/09/2010 06:15 AM     C:\WINDOWS\KB2378111.log --------- 17923 
  11/09/2010 06:15 AM     C:\WINDOWS\KB954155.log --------- 168501 
  11/09/2010 06:15 AM     C:\WINDOWS\KB941569.log --------- 12181 
  11/09/2010 06:15 AM     C:\WINDOWS\setupapi.log --------- 473457 
  11/09/2010 06:14 AM     C:\WINDOWS\KB978695.log --------- 11293 
  11/09/2010 06:14 AM     C:\WINDOWS\KB973540.log --------- 21718 
  11/09/2010 06:14 AM     C:\WINDOWS\KB929399.log --------- 10577 
  11/09/2010 06:14 AM     C:\WINDOWS\KB939683.log --------- 10346 
  11/09/2010 06:14 AM     C:\WINDOWS\KB952069.log --------- 18216 
  11/09/2010 06:14 AM     C:\WINDOWS\KB954154.log --------- 4166 
  11/08/2010 06:20 AM     C:\WINDOWS\wmsetup10.log --------- 510 
  11/08/2010 06:20 AM     C:\WINDOWS\MSCompPackV1.log --------- 7264 
  11/08/2010 06:20 AM     C:\WINDOWS\wmp11.log --------- 22979 
  11/08/2010 06:19 AM     C:\WINDOWS\win.ini --------- 507 
  11/08/2010 06:19 AM     C:\WINDOWS\WMFDist11.log --------- 29302 
  11/08/2010 06:19 AM     C:\WINDOWS\Wudf01000Inst.log --------- 13009 
  10/14/2010 08:10 AM     C:\WINDOWS\KB2387149.log --------- 15108 
  10/14/2010 08:10 AM     C:\WINDOWS\KB2279986.log --------- 19365 
  10/14/2010 08:10 AM     C:\WINDOWS\KB2345886.log --------- 19833 
  10/14/2010 08:10 AM     C:\WINDOWS\KB2296011.log --------- 11730 
  10/14/2010 08:10 AM     C:\WINDOWS\KB982132.log --------- 17807 
  10/14/2010 08:09 AM     C:\WINDOWS\KB979687.log --------- 18392 
  10/14/2010 08:09 AM     C:\WINDOWS\KB2360131-IE8.log --------- 16482 
  10/14/2010 08:07 AM     C:\WINDOWS\KB981957.log --------- 12951 
  10/14/2010 08:07 AM     C:\WINDOWS\KB2360937.log --------- 8302 
  10/08/2010 06:29 AM     C:\WINDOWS\KB2259922.log --------- 8454 
  10/08/2010 06:29 AM     C:\WINDOWS\KB2347290.log --------- 13290 
  10/08/2010 06:29 AM     C:\WINDOWS\KB2121546.log --------- 12772 
  10/08/2010 06:29 AM     C:\WINDOWS\KB982802.log --------- 12619 
  10/08/2010 06:28 AM     C:\WINDOWS\KB981322.log --------- 11066 
  10/08/2010 06:26 AM     C:\WINDOWS\KB2141007.log --------- 10719 
  10/08/2010 06:26 AM     C:\WINDOWS\KB2158563.log --------- 3730 
  08/12/2010 07:10 PM     C:\WINDOWS\KB982214.log --------- 12466 
  08/12/2010 07:10 PM     C:\WINDOWS\KB2115168.log --------- 16581 
  08/12/2010 07:10 PM     C:\WINDOWS\KB981852.log --------- 14062 
  08/12/2010 07:10 PM     C:\WINDOWS\KB2079403.log --------- 16968 
  08/12/2010 07:10 PM     C:\WINDOWS\KB2183461-IE8.log --------- 15376 
  08/12/2010 07:09 PM     C:\WINDOWS\KB2160329.log --------- 13363 
  08/12/2010 07:09 PM     C:\WINDOWS\KB980436.log --------- 12700 
  08/12/2010 07:09 PM     C:\WINDOWS\KB981997.log --------- 6508 
  08/12/2010 07:08 PM     C:\WINDOWS\KB982665.log --------- 10614 
  08/03/2010 12:07 PM     C:\WINDOWS\KB2286198.log --------- 11494 
  07/14/2010 06:46 PM     C:\WINDOWS\KB2229593.log --------- 7257 
  06/10/2010 08:48 PM     C:\WINDOWS\KB982381-IE8.log --------- 13641 
  06/10/2010 08:34 PM     C:\WINDOWS\KB980218.log --------- 11677 
  06/09/2010 09:05 AM     C:\WINDOWS\KB980195.log --------- 6408 
  06/09/2010 09:05 AM     C:\WINDOWS\KB979559.log --------- 12112 
  06/09/2010 09:04 AM     C:\WINDOWS\KB979482.log --------- 10557 
  06/09/2010 09:03 AM     C:\WINDOWS\KB975562.log --------- 10608 
  05/26/2010 09:26 AM     C:\WINDOWS\KB981793.log --------- 3725 
  05/12/2010 11:36 PM     C:\WINDOWS\KB978542.log --------- 14946 
  04/15/2010 08:48 AM     C:\WINDOWS\KB979683.log --------- 7828 
  04/15/2010 08:48 AM     C:\WINDOWS\KB980232.log --------- 6388 
  04/15/2010 08:48 AM     C:\WINDOWS\KB979402.log --------- 4456 
  04/15/2010 08:47 AM     C:\WINDOWS\KB978338.log --------- 11085 
  04/15/2010 08:47 AM     C:\WINDOWS\KB977816.log --------- 10466 
  04/15/2010 08:47 AM     C:\WINDOWS\KB981332-IE8.log --------- 6733 
  04/13/2010 06:58 PM     C:\WINDOWS\KB978601.log --------- 11502 
  04/13/2010 06:58 PM     C:\WINDOWS\KB979309.log --------- 10435 
  04/13/2010 08:19 AM     C:\WINDOWS\KB976002-v5.log --------- 3331 
  04/01/2010 06:21 AM     C:\WINDOWS\KB980182-IE8.log --------- 13448 
  03/26/2010 05:56 AM     C:\WINDOWS\setupact.log --------- 182004 
  03/11/2010 12:36 PM     C:\WINDOWS\KB975561.log --------- 6211 
  03/09/2010 08:50 AM     C:\WINDOWS\KB977165-v2.log --------- 8286 
  02/25/2010 08:12 PM     C:\WINDOWS\KB976662-IE8.log --------- 6566 
  02/25/2010 08:12 PM     C:\WINDOWS\KB979306.log --------- 3725 
  02/11/2010 10:57 AM     C:\WINDOWS\KB978262.log --------- 6839 
  02/11/2010 10:57 AM     C:\WINDOWS\KB971468.log --------- 7352 
  02/11/2010 10:56 AM     C:\WINDOWS\KB978037.log --------- 11647 
  02/11/2010 10:56 AM     C:\WINDOWS\KB975713.log --------- 11404 
  02/11/2010 10:56 AM     C:\WINDOWS\KB978251.log --------- 6892 
  02/11/2010 10:56 AM     C:\WINDOWS\KB975560.log --------- 11667 
  02/11/2010 10:55 AM     C:\WINDOWS\KB977914.log --------- 12306 
  02/11/2010 10:55 AM     C:\WINDOWS\KB978706.log --------- 10689 
  01/30/2010 08:24 AM     C:\WINDOWS\OEWABLog.txt --------- 1351 
  01/22/2010 08:45 AM     C:\WINDOWS\KB978207-IE8.log --------- 13269 
  01/14/2010 01:05 PM     C:\WINDOWS\KB955759.log --------- 7933 
  01/14/2010 01:05 PM     C:\WINDOWS\KB972270.log --------- 6392 
  12/10/2009 03:54 PM     C:\WINDOWS\KB970430.log --------- 18360 
  12/10/2009 03:54 PM     C:\WINDOWS\KB974318.log --------- 16959 
  12/10/2009 03:54 PM     C:\WINDOWS\KB976325-IE8.log --------- 14288 
  12/10/2009 03:54 PM     C:\WINDOWS\KB974392.log --------- 12178 
  12/10/2009 03:54 PM     C:\WINDOWS\KB971737.log --------- 11715 
  12/09/2009 04:27 PM     C:\WINDOWS\KB973904.log --------- 7421 
  11/25/2009 05:34 AM     C:\WINDOWS\KB976098-v2.log --------- 4237 
  11/25/2009 05:34 AM     C:\WINDOWS\KB973687.log --------- 7488 
  11/11/2009 06:37 AM     C:\WINDOWS\KB969947.log --------- 11136 
  11/04/2009 12:14 PM     C:\WINDOWS\KB976749-IE8.log --------- 7669 
  10/31/2009 07:30 PM     C:\WINDOWS\KB959426.log --------- 11411 
  10/31/2009 07:30 PM     C:\WINDOWS\KB973869.log --------- 6788 
  10/31/2009 07:29 PM     C:\WINDOWS\KB971961-IE8.log --------- 7118 
  10/31/2009 07:29 PM     C:\WINDOWS\KB958644.log --------- 7350 
  10/31/2009 06:13 AM     C:\WINDOWS\WgaNotify.log --------- 10353 
  10/31/2009 06:10 AM     C:\WINDOWS\KB951376-v2.log --------- 62149 
  10/31/2009 06:10 AM     C:\WINDOWS\KB952954.log --------- 67907 
  10/31/2009 06:10 AM     C:\WINDOWS\KB946648.log --------- 62033 
  10/31/2009 06:10 AM     C:\WINDOWS\KB956803.log --------- 62753 
  10/31/2009 06:10 AM     C:\WINDOWS\KB960859.log --------- 68682 
  10/31/2009 06:10 AM     C:\WINDOWS\KB958869.log --------- 60141 
  10/31/2009 06:09 AM     C:\WINDOWS\KB951978.log --------- 70089 
  10/31/2009 06:09 AM     C:\WINDOWS\KB968816.log --------- 61699 
  10/31/2009 06:09 AM     C:\WINDOWS\KB961371-v2.log --------- 68829 
  10/31/2009 06:09 AM     C:\WINDOWS\KB972260.log --------- 70325 
  10/31/2009 06:09 AM     C:\WINDOWS\ie8_main.log --------- 78679 
  10/31/2009 06:09 AM     C:\WINDOWS\KB975364-IE8.log --------- 62115 
  10/31/2009 06:09 AM     C:\WINDOWS\KB974455-IE8.log --------- 76951 
  10/31/2009 06:09 AM     C:\WINDOWS\ie8.log --------- 72158 
  10/31/2009 06:06 AM     C:\WINDOWS\KB950974.log --------- 28537 
  10/31/2009 06:06 AM     C:\WINDOWS\KB971657.log --------- 27871 
  10/31/2009 06:06 AM     C:\WINDOWS\KB971557.log --------- 27372 
  10/31/2009 06:06 AM     C:\WINDOWS\KB960225.log --------- 27381 
  10/31/2009 06:06 AM     C:\WINDOWS\KB956744.log --------- 22321 
  10/31/2009 06:06 AM     C:\WINDOWS\KB974112.log --------- 27371 
  10/31/2009 06:06 AM     C:\WINDOWS\KB956572.log --------- 23955 
  10/31/2009 06:05 AM     C:\WINDOWS\KB956844.log --------- 18244 
  10/31/2009 06:05 AM     C:\WINDOWS\KB961501.log --------- 23752 
  10/31/2009 06:05 AM     C:\WINDOWS\KB971633.log --------- 23256 
  10/31/2009 06:05 AM     C:\WINDOWS\KB975025.log --------- 23180 
  10/31/2009 06:05 AM     C:\WINDOWS\KB952004.log --------- 24494 
  10/31/2009 06:05 AM     C:\WINDOWS\KB974571.log --------- 23008 
  10/31/2009 06:05 AM     C:\WINDOWS\KB973507.log --------- 22502 
  10/31/2009 06:05 AM     C:\WINDOWS\KB950762.log --------- 17157 
  10/31/2009 06:05 AM     C:\WINDOWS\KB957097.log --------- 17218 
  10/31/2009 06:05 AM     C:\WINDOWS\KB958687.log --------- 17144 
  10/31/2009 06:05 AM     C:\WINDOWS\KB952287.log --------- 16842 
  10/31/2009 06:05 AM     C:\WINDOWS\KB973354.log --------- 16833 
  10/31/2009 06:05 AM     C:\WINDOWS\KB967715.log --------- 22041 
  10/31/2009 06:05 AM     C:\WINDOWS\KB951066.log --------- 16398 
  10/31/2009 06:05 AM     C:\WINDOWS\KB954459.log --------- 21214 
  10/31/2009 06:05 AM     C:\WINDOWS\KB951748.log --------- 100508 
  10/31/2009 06:04 AM     C:\WINDOWS\KB970238.log --------- 96098 
  10/31/2009 06:04 AM     C:\WINDOWS\KB971486.log --------- 13596 
  10/31/2009 06:04 AM     C:\WINDOWS\KB960803.log --------- 95586 
  10/31/2009 06:04 AM     C:\WINDOWS\KB973815.log --------- 94884 
  10/31/2009 06:04 AM     C:\WINDOWS\KB968537.log --------- 94910 
  10/31/2009 06:04 AM     C:\WINDOWS\KB956802.log --------- 94709 
  10/31/2009 06:04 AM     C:\WINDOWS\KB975467.log --------- 94783 
  10/31/2009 06:04 AM     C:\WINDOWS\KB968389.log --------- 95388 
  10/31/2009 05:47 AM     C:\WINDOWS\KB973525.log --------- 165223 
  10/31/2009 05:46 AM     C:\WINDOWS\KB955069.log --------- 165724 
  10/31/2009 05:46 AM     C:\WINDOWS\KB923561.log --------- 166030 
  10/31/2009 05:46 AM     C:\WINDOWS\KB971961.log --------- 164345 
  10/31/2009 05:46 AM     C:\WINDOWS\KB970653-v3.log --------- 160784 
  10/31/2009 05:44 AM     C:\WINDOWS\KB969059.log --------- 164709 
  10/30/2009 07:57 PM     C:\WINDOWS\KB898461.log --------- 11562 
  10/30/2009 05:00 PM     C:\WINDOWS\WMSysPr9.prx --------- 316640 
  10/30/2009 04:59 PM     C:\WINDOWS\DtcInstall.log --------- 356 
  10/30/2009 04:57 PM     C:\WINDOWS\spupdsvc.log.1.log --------- 187 
  10/30/2009 04:57 PM     C:\WINDOWS\setuplog.txt --------- 808777 
  10/30/2009 04:55 PM     C:\WINDOWS\svcpack.log --------- 265014 
  10/30/2009 04:55 PM     C:\WINDOWS\cmsetacl.log --------- 373 
  10/30/2009 04:54 PM     C:\WINDOWS\sessmgr.setup.log --------- 1281 
  10/30/2009 04:30 PM     C:\WINDOWS\nsreg.dat --------- 0 
  10/29/2009 05:39 PM     C:\WINDOWS\regopt.log --------- 1570 
  10/29/2009 05:17 PM     C:\WINDOWS\KB888111.log --------- 667 
  10/29/2009 05:13 PM     C:\WINDOWS\Sti_Trace.log --------- 0 
  10/29/2009 05:11 PM     C:\WINDOWS\system.ini --------- 231 
  10/29/2009 05:08 PM     C:\WINDOWS\setuperr.log --------- 0 
  10/29/2009 04:52 PM     C:\WINDOWS\REGLOCS.OLD --------- 8192 
  10/29/2009 04:49 PM     C:\WINDOWS\control.ini --------- 0 
  10/29/2009 04:49 PM     C:\WINDOWS\ODBCINST.INI --------- 4161 
  10/29/2009 04:49 PM     C:\WINDOWS\WindowsShell.Manifest --------- 749 
  10/29/2009 04:47 PM     C:\WINDOWS\vbaddin.ini --------- 37 
  10/29/2009 04:47 PM     C:\WINDOWS\vb.ini --------- 36 
  09/24/2009 07:50 AM     C:\WINDOWS\ARJ.PIF --------- 545 
  09/24/2009 07:50 AM     C:\WINDOWS\UC.PIF --------- 545 
  09/24/2009 07:50 AM     C:\WINDOWS\NOCLOSE.PIF --------- 545 
  09/24/2009 07:50 AM     C:\WINDOWS\PKUNZIP.PIF --------- 545 
  09/24/2009 07:50 AM     C:\WINDOWS\PKZIP.PIF --------- 545 
  09/24/2009 07:50 AM     C:\WINDOWS\LHA.PIF --------- 545 
  09/24/2009 07:50 AM     C:\WINDOWS\RAR.PIF --------- 545 
  01/13/2009 07:37 AM     C:\WINDOWS\RTHDCPL.EXE --------- 18084864 
  10/23/2008 10:42 AM     C:\WINDOWS\vncutil.exe --------- 290816 
  09/30/2008 09:38 AM     C:\WINDOWS\MicCal.exe --------- 2168320 
  09/19/2008 10:48 AM     C:\WINDOWS\RtlUpd.exe --------- 1200128 
  08/25/2008 09:17 AM     C:\WINDOWS\RtlExUpd.dll --------- 528384 
  08/19/2008 06:26 AM     C:\WINDOWS\SOUNDMAN.EXE --------- 77824 
  06/24/2008 07:46 AM     C:\WINDOWS\RtkAudioService.exe --------- 104992 
  06/19/2008 09:42 AM     C:\WINDOWS\ALCWZRD.EXE --------- 2808832 
  06/19/2008 09:27 AM     C:\WINDOWS\RTLCPL.EXE --------- 9715200 
  06/19/2008 09:20 AM     C:\WINDOWS\ALCMTR.EXE --------- 57344 
  04/14/2008 02:40 PM     C:\WINDOWS\SET3.tmp --------- 1296669 
  04/14/2008 02:34 PM     C:\WINDOWS\SET4.tmp --------- 1088840 
  04/14/2008 02:34 PM     C:\WINDOWS\SET8.tmp --------- 16535 
  04/14/2008 12:42 PM     C:\WINDOWS\winhlp32.exe --------- 283648 
  04/14/2008 12:42 PM     C:\WINDOWS\regedit.exe --------- 146432 
  04/14/2008 12:42 PM     C:\WINDOWS\NOTEPAD.EXE --------- 69120 
  04/14/2008 12:42 PM     C:\WINDOWS\hh.exe --------- 10752 
  04/14/2008 12:42 PM     C:\WINDOWS\explorer.exe --------- 1033728 
  04/14/2008 12:42 PM     C:\WINDOWS\twain_32.dll --------- 50688 
  04/14/2008 05:42 AM     C:\WINDOWS\slrundll.exe --------- 32866 
  11/20/2007 11:15 AM     C:\WINDOWS\SkyTel.exe --------- 1826816 
  11/14/2007 08:18 AM     C:\WINDOWS\USetup.iss --------- 553 
  12/29/2006 12:31 AM     C:\WINDOWS\000001_.tmp --------- 19569 
  08/04/2004 12:00 PM     C:\WINDOWS\Rhododendron.bmp --------- 17362 
  08/04/2004 12:00 PM     C:\WINDOWS\Blue Lace 16.bmp --------- 1272 
  08/04/2004 12:00 PM     C:\WINDOWS\FeatherTexture.bmp --------- 16730 
  08/04/2004 12:00 PM     C:\WINDOWS\twunk_16.exe --------- 49680 
  08/04/2004 12:00 PM     C:\WINDOWS\twain.dll --------- 94784 
  08/04/2004 12:00 PM     C:\WINDOWS\vmmreg32.dll --------- 18944 
  08/04/2004 12:00 PM     C:\WINDOWS\msdfmap.ini --------- 1405 
  08/04/2004 12:00 PM     C:\WINDOWS\Gone Fishing.bmp --------- 17336 
  08/04/2004 12:00 PM     C:\WINDOWS\explorer.scf --------- 80 
  08/04/2004 12:00 PM     C:\WINDOWS\clock.avi --------- 82944 
  08/04/2004 12:00 PM     C:\WINDOWS\Greenstone.bmp --------- 26582 
  08/04/2004 12:00 PM     C:\WINDOWS\desktop.ini --------- 2 
  08/04/2004 12:00 PM     C:\WINDOWS\TASKMAN.EXE --------- 15360 
  08/04/2004 12:00 PM     C:\WINDOWS\winhelp.exe --------- 256192 
  08/04/2004 12:00 PM     C:\WINDOWS\River Sumida.bmp --------- 26680 
  08/04/2004 12:00 PM     C:\WINDOWS\winnt.bmp --------- 48680 
  08/04/2004 12:00 PM     C:\WINDOWS\winnt256.bmp --------- 48680 
  08/04/2004 12:00 PM     C:\WINDOWS\Santa Fe Stucco.bmp --------- 65832 
  08/04/2004 12:00 PM     C:\WINDOWS\Soap Bubbles.bmp --------- 65978 
  08/04/2004 12:00 PM     C:\WINDOWS\Prairie Wind.bmp --------- 65954 
  08/04/2004 12:00 PM     C:\WINDOWS\Coffee Bean.bmp --------- 17062 
  08/04/2004 12:00 PM     C:\WINDOWS\twunk_32.exe --------- 25600 
  08/04/2004 12:00 PM     C:\WINDOWS\Zapotec.bmp --------- 9522 
  08/04/2004 12:00 PM     C:\WINDOWS\_default.pif --------- 707 
  12/17/1997 06:33 PM     C:\WINDOWS\IsUninst.exe --------- 304128 
----------------------------------------

 
C:\WINDOWS\System

 04/14/2008 12:42 PM    C:\WINDOWS\System\WINSPOOL.DRV --------- 146432 
 04/14/2008 05:24 AM    C:\WINDOWS\System\MMSYSTEM.DLL --------- 68768 
 08/04/2004 12:00 PM    C:\WINDOWS\System\KEYBOARD.DRV --------- 2000 
 08/04/2004 12:00 PM    C:\WINDOWS\System\LZEXPAND.DLL --------- 9936 
 08/04/2004 12:00 PM    C:\WINDOWS\System\MCIAVI.DRV --------- 73376 
 08/04/2004 12:00 PM    C:\WINDOWS\System\MCISEQ.DRV --------- 25264 
 08/04/2004 12:00 PM    C:\WINDOWS\System\MCIWAVE.DRV --------- 28160 
 08/04/2004 12:00 PM    C:\WINDOWS\System\COMMDLG.DLL --------- 32816 
 08/04/2004 12:00 PM    C:\WINDOWS\System\AVIFILE.DLL --------- 109456 
 08/04/2004 12:00 PM    C:\WINDOWS\System\MMTASK.TSK --------- 1152 
 08/04/2004 12:00 PM    C:\WINDOWS\System\MOUSE.DRV --------- 2032 
 08/04/2004 12:00 PM    C:\WINDOWS\System\AVICAP.DLL --------- 69584 
 08/04/2004 12:00 PM    C:\WINDOWS\System\OLECLI.DLL --------- 82944 
 08/04/2004 12:00 PM    C:\WINDOWS\System\OLESVR.DLL --------- 24064 
 08/04/2004 12:00 PM    C:\WINDOWS\System\setup.inf --------- 59167 
 08/04/2004 12:00 PM    C:\WINDOWS\System\SHELL.DLL --------- 5120 
 08/04/2004 12:00 PM    C:\WINDOWS\System\SOUND.DRV --------- 1744 
 08/04/2004 12:00 PM    C:\WINDOWS\System\stdole.tlb --------- 5532 
 08/04/2004 12:00 PM    C:\WINDOWS\System\SYSTEM.DRV --------- 3360 
 08/04/2004 12:00 PM    C:\WINDOWS\System\TAPI.DLL --------- 19200 
 08/04/2004 12:00 PM    C:\WINDOWS\System\TIMER.DRV --------- 4048 
 08/04/2004 12:00 PM    C:\WINDOWS\System\VER.DLL --------- 9008 
 08/04/2004 12:00 PM    C:\WINDOWS\System\VGA.DRV --------- 2176 
 08/04/2004 12:00 PM    C:\WINDOWS\System\WFWNET.DRV --------- 13600 
 08/04/2004 12:00 PM    C:\WINDOWS\System\MSVIDEO.DLL --------- 126912 
----------------------------------------

 
C:\WINDOWS\System32

 01/12/2011 06:09 AM     C:\WINDOWS\system32\CatRoot2 --------- 0 
 01/12/2011 06:09 AM     C:\WINDOWS\system32\wpa.dbl --------- 2206 
 01/12/2011 06:09 AM     C:\WINDOWS\system32\NvApps.xml --------- 235289 
 01/12/2011 05:29 AM     C:\WINDOWS\system32\drivers --------- 0 
 12/31/2010 04:07 PM     C:\WINDOWS\system32\d3d9caps.dat --------- 664 
 12/18/2010 10:50 AM     C:\WINDOWS\system32\FNTCACHE.DAT --------- 1707544 
 12/16/2010 10:52 AM     C:\WINDOWS\system32\dllcache --------- 0 
 12/16/2010 10:51 AM     C:\WINDOWS\system32\TZLog.log --------- 21146 
 12/16/2010 10:50 AM     C:\WINDOWS\system32\MRT.exe --------- 37366216 
 12/02/2010 09:37 AM     C:\WINDOWS\system32\jupdate-1.6.0_22-b04.log --------- 5964 
 11/18/2010 07:12 PM     C:\WINDOWS\system32\isign32.dll --------- 81920 
 11/09/2010 06:15 AM     C:\WINDOWS\system32\CatRoot --------- 0 
 11/08/2010 06:20 AM     C:\WINDOWS\system32\nscompat.tlb --------- 23392 
 11/08/2010 06:20 AM     C:\WINDOWS\system32\amcompat.tlb --------- 16832 
 11/08/2010 06:19 AM     C:\WINDOWS\system32\LogFiles --------- 0 
 11/06/2010 01:26 AM     C:\WINDOWS\system32\mshtmled.dll --------- 66560 
 11/06/2010 01:26 AM     C:\WINDOWS\system32\mshtml.dll --------- 5959168 
 11/06/2010 01:26 AM     C:\WINDOWS\system32\licmgr10.dll --------- 43520 
 11/06/2010 01:26 AM     C:\WINDOWS\system32\iertutil.dll --------- 1991680 
 11/06/2010 01:26 AM     C:\WINDOWS\system32\inetcpl.cpl --------- 1469440 
 11/06/2010 01:26 AM     C:\WINDOWS\system32\msfeedsbs.dll --------- 55296 
 11/06/2010 01:26 AM     C:\WINDOWS\system32\urlmon.dll --------- 1210880 
 11/06/2010 01:26 AM     C:\WINDOWS\system32\mstime.dll --------- 611840 
 11/06/2010 01:26 AM     C:\WINDOWS\system32\msfeeds.dll --------- 602112 
 11/06/2010 01:26 AM     C:\WINDOWS\system32\occache.dll --------- 206848 
 11/06/2010 01:26 AM     C:\WINDOWS\system32\jsproxy.dll --------- 25600 
 11/06/2010 01:26 AM     C:\WINDOWS\system32\wininet.dll --------- 916480 
 11/06/2010 01:26 AM     C:\WINDOWS\system32\ieframe.dll --------- 11080704 
 11/06/2010 01:26 AM     C:\WINDOWS\system32\iepeers.dll --------- 184320 
 11/06/2010 01:26 AM     C:\WINDOWS\system32\iedkcs32.dll --------- 387584 
 11/03/2010 02:12 PM     C:\WINDOWS\system32\tzchange.exe --------- 46080 
 11/03/2010 01:26 PM     C:\WINDOWS\system32\ie4uinit.exe --------- 173568 
 11/03/2010 01:25 PM     C:\WINDOWS\system32\html.iec --------- 385024 
 10/31/2010 06:19 AM     C:\WINDOWS\system32\perfc009.dat --------- 40196 
 10/31/2010 06:19 AM     C:\WINDOWS\system32\perfh009.dat --------- 311934 
 10/31/2010 06:19 AM     C:\WINDOWS\system32\PerfStringBackup.INI --------- 356120 
 10/28/2010 02:13 PM     C:\WINDOWS\system32\atmfd.dll --------- 290048 
 10/26/2010 02:25 PM     C:\WINDOWS\system32\win32k.sys --------- 1853312 
 09/18/2010 11:23 AM     C:\WINDOWS\system32\mfc42u.dll --------- 974848 
 09/18/2010 07:53 AM     C:\WINDOWS\system32\mfc40u.dll --------- 953856 
 09/18/2010 07:53 AM     C:\WINDOWS\system32\mfc40.dll --------- 954368 
 09/18/2010 07:53 AM     C:\WINDOWS\system32\mfc42.dll --------- 974848 
 09/15/2010 04:50 AM     C:\WINDOWS\system32\javaws.exe --------- 153376 
 09/15/2010 04:50 AM     C:\WINDOWS\system32\javaw.exe --------- 145184 
 09/15/2010 04:50 AM     C:\WINDOWS\system32\java.exe --------- 145184 
 09/15/2010 04:50 AM     C:\WINDOWS\system32\deployJava1.dll --------- 472808 
 09/15/2010 02:29 AM     C:\WINDOWS\system32\javacpl.cpl --------- 73728 
 08/27/2010 09:02 AM     C:\WINDOWS\system32\t2embed.dll --------- 119808 
 08/27/2010 06:57 AM     C:\WINDOWS\system32\srvsvc.dll --------- 99840 
 08/26/2010 01:52 PM     C:\WINDOWS\system32\xpsp4res.dll --------- 5120 
 08/25/2010 11:36 PM     C:\WINDOWS\system32\wmp.dll --------- 10841088 
 08/23/2010 05:12 PM     C:\WINDOWS\system32\comctl32.dll --------- 617472 
 08/17/2010 02:17 PM     C:\WINDOWS\system32\spoolsv.exe --------- 58880 
 08/16/2010 09:45 AM     C:\WINDOWS\system32\rpcrt4.dll --------- 590848 
 07/27/2010 07:30 AM     C:\WINDOWS\system32\shell32.dll --------- 8462336 
 07/16/2010 01:05 PM     C:\WINDOWS\system32\ole32.dll --------- 1288192 
 06/30/2010 01:31 PM     C:\WINDOWS\system32\schannel.dll --------- 149504 
 06/18/2010 06:45 PM     C:\WINDOWS\system32\winsrv.dll --------- 293376 
 06/17/2010 03:03 PM     C:\WINDOWS\system32\iccvid.dll --------- 80384 
 06/15/2010 05:17 PM     C:\WINDOWS\system32\l3codecx.ax --------- 143422 
 06/14/2010 08:41 AM     C:\WINDOWS\system32\msxml3.dll --------- 1172480 
 06/09/2010 08:43 AM     C:\WINDOWS\system32\inetcomm.dll --------- 692736 
 04/27/2010 02:59 PM     C:\WINDOWS\system32\ntoskrnl.exe --------- 2146304 
 04/27/2010 02:05 PM     C:\WINDOWS\system32\ntkrnlpa.exe --------- 2024448 
 04/16/2010 04:36 PM     C:\WINDOWS\system32\usp10.dll --------- 406016 
 04/06/2010 04:52 AM     C:\WINDOWS\system32\WMVCore.dll --------- 2462720 
 03/30/2010 12:24 PM     C:\WINDOWS\system32\mp4sdecd.dll --------- 317440 
 03/29/2010 11:52 PM     C:\WINDOWS\system32\mpg4ds32.ax --------- 262416 
 03/10/2010 07:15 AM     C:\WINDOWS\system32\vbscript.dll --------- 420352 
 03/05/2010 03:37 PM     C:\WINDOWS\system32\asycfilt.dll --------- 65536 
 02/12/2010 11:03 AM     C:\WINDOWS\system32\browserchoice.exe --------- 293376 
 02/12/2010 05:33 AM     C:\WINDOWS\system32\6to4svc.dll --------- 100864 
 02/05/2010 07:27 PM     C:\WINDOWS\system32\quartz.dll --------- 1291776 
 01/29/2010 03:43 PM     C:\WINDOWS\system32\l3codeca.acm --------- 307260 
 01/13/2010 03:01 PM     C:\WINDOWS\system32\cabview.dll --------- 86016 
 12/24/2009 07:59 AM     C:\WINDOWS\system32\wintrust.dll --------- 177664 
 12/16/2009 07:43 PM     C:\WINDOWS\system32\mspaint.exe --------- 343040 
 12/14/2009 08:08 AM     C:\WINDOWS\system32\csrsrv.dll --------- 33280 
 12/09/2009 06:53 AM     C:\WINDOWS\system32\jscript.dll --------- 726528 
 12/08/2009 10:23 AM     C:\WINDOWS\system32\shlwapi.dll --------- 474112 
 11/27/2009 06:11 PM     C:\WINDOWS\system32\msyuv.dll --------- 17920 
 11/27/2009 05:07 PM     C:\WINDOWS\system32\tsbyuv.dll --------- 8704 
 11/27/2009 05:07 PM     C:\WINDOWS\system32\msvidc32.dll --------- 28672 
 11/27/2009 05:07 PM     C:\WINDOWS\system32\msrle32.dll --------- 11264 
 11/27/2009 05:07 PM     C:\WINDOWS\system32\avifil32.dll --------- 84992 
 11/27/2009 05:07 PM     C:\WINDOWS\system32\iyuv_32.dll --------- 48128 
 11/15/2009 01:23 PM     C:\WINDOWS\system32\appmgmt --------- 0 
 10/31/2009 06:29 AM     C:\WINDOWS\system32\ReinstallBackups --------- 0 
 10/31/2009 06:24 AM     C:\WINDOWS\system32\config --------- 0 
 10/31/2009 06:11 AM     C:\WINDOWS\system32\wbem --------- 0 
 10/31/2009 06:09 AM     C:\WINDOWS\system32\en-US --------- 0 
 10/30/2009 07:57 PM     C:\WINDOWS\system32\PreInstall --------- 0 
 10/30/2009 04:57 PM     C:\WINDOWS\system32\spupdwxp.log --------- 269 
 10/30/2009 04:54 PM     C:\WINDOWS\system32\inetsrv --------- 0 
 10/30/2009 04:54 PM     C:\WINDOWS\system32\bits --------- 0 
 10/29/2009 05:44 PM     C:\WINDOWS\system32\h323log.txt --------- 0 
 10/29/2009 05:39 PM     C:\WINDOWS\system32\pid.PNF --------- 4444 
 10/29/2009 05:19 PM     C:\WINDOWS\system32\LoopyMusic.wav --------- 940794 
 10/29/2009 05:19 PM     C:\WINDOWS\system32\BuzzingBee.wav --------- 146650 
 10/29/2009 05:19 PM     C:\WINDOWS\system32\Lang --------- 0 
----------------------------------------

 
C:\WINDOWS\Prefetch

 01/12/2011 06:31 AM     C:\WINDOWS\Prefetch\CMD.EXE-137A0D53.pf --------- 22322 
 01/12/2011 06:31 AM     C:\WINDOWS\Prefetch\TASKLIST.EXE-1B4BE264.pf --------- 21154 
 01/12/2011 06:31 AM     C:\WINDOWS\Prefetch\EXPLORER.EXE-05416907.pf --------- 73552 
 01/12/2011 06:30 AM     C:\WINDOWS\Prefetch\VERCLSID.EXE-3B227142.pf --------- 18294 
 01/12/2011 06:30 AM     C:\WINDOWS\Prefetch\WMIPRVSE.EXE-0E69CB0B.pf --------- 104110 
 01/12/2011 06:30 AM     C:\WINDOWS\Prefetch\TASKLIST.EXE-0E21A133.pf --------- 22540 
 01/12/2011 06:30 AM     C:\WINDOWS\Prefetch\GOOGLEUPDATE.EXE-030125A1.pf --------- 30256 
 01/12/2011 06:29 AM     C:\WINDOWS\Prefetch\AVWSC.EXE-022A620B.pf --------- 29358 
 01/12/2011 06:26 AM     C:\WINDOWS\Prefetch\NOTEPAD.EXE-08F3A979.pf --------- 17168 
 01/12/2011 06:26 AM     C:\WINDOWS\Prefetch\MBAM.EXE-26D201D2.pf --------- 74562 
 01/12/2011 06:25 AM     C:\WINDOWS\Prefetch\HIJACKTHIS.EXE-05A93307.pf --------- 56022 
 01/12/2011 06:17 AM     C:\WINDOWS\Prefetch\WMPLAYER.EXE-3A528C56.pf --------- 52756 
 01/12/2011 06:13 AM     C:\WINDOWS\Prefetch\PLUGIN-CONTAINER.EXE-0779021B.pf --------- 65232 
 01/12/2011 06:12 AM     C:\WINDOWS\Prefetch\JQSNOTIFY.EXE-0722E5CE.pf --------- 7684 
 01/12/2011 06:12 AM     C:\WINDOWS\Prefetch\FIREFOX.EXE-3495265E.pf --------- 75634 
 01/12/2011 06:10 AM     C:\WINDOWS\Prefetch\ALG.EXE-2226CE17.pf --------- 15778 
 01/12/2011 06:10 AM     C:\WINDOWS\Prefetch\IMAPI.EXE-10859813.pf --------- 24116 
 01/12/2011 06:10 AM     C:\WINDOWS\Prefetch\RUNDLL32.EXE-2D59E675.pf --------- 16444 
 01/12/2011 06:10 AM     C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf --------- 996206 
 01/12/2011 06:10 AM     C:\WINDOWS\Prefetch\RUNDLL32.EXE-4CE4C101.pf --------- 22238 
 01/12/2011 06:05 AM     C:\WINDOWS\Prefetch\LOGONUI.EXE-3164D1CB.pf --------- 52522 
 01/12/2011 05:53 AM     C:\WINDOWS\Prefetch\MSIMN.EXE-3356F448.pf --------- 79354 
 01/12/2011 05:51 AM     C:\WINDOWS\Prefetch\MSIEXEC.EXE-0CCC6E74.pf --------- 67044 
 01/12/2011 05:45 AM     C:\WINDOWS\Prefetch\REGEDIT.EXE-17A382F4.pf --------- 13506 
 01/12/2011 05:43 AM     C:\WINDOWS\Prefetch\LOGON.SCR-075DDDCD.pf --------- 6484 
 01/12/2011 05:29 AM     C:\WINDOWS\Prefetch\MBAMGUI.EXE-0B28CE92.pf --------- 9426 
 01/12/2011 05:29 AM     C:\WINDOWS\Prefetch\REGSVR32.EXE-10006695.pf --------- 21314 
 01/12/2011 05:29 AM     C:\WINDOWS\Prefetch\MBAM-SETUP.TMP-37B64F2D.pf --------- 27198 
 01/12/2011 05:29 AM     C:\WINDOWS\Prefetch\MBAM-SETUP.EXE-01622250.pf --------- 17164 
 01/12/2011 05:18 AM     C:\WINDOWS\Prefetch\FOXITR~1.EXE-270FC7C2.pf --------- 45932 
 01/12/2011 05:11 AM     C:\WINDOWS\Prefetch\PUTTY.EXE-3162E984.pf --------- 14600 
 01/11/2011 07:39 PM     C:\WINDOWS\Prefetch\RUNDLL32.EXE-43D5EAB6.pf --------- 18710 
 01/11/2011 07:23 PM     C:\WINDOWS\Prefetch\ASSETSERVICESCS3.EXE-342520B1.pf --------- 64324 
 01/11/2011 07:21 PM     C:\WINDOWS\Prefetch\RUNDLL32.EXE-63DD3754.pf --------- 30982 
 01/11/2011 07:20 PM     C:\WINDOWS\Prefetch\FNPLICENSINGSERVICE.EXE-1F330C7B.pf --------- 61470 
 01/11/2011 07:20 PM     C:\WINDOWS\Prefetch\SVCHOST.EXE-072604B0.pf --------- 19156 
 01/11/2011 07:20 PM     C:\WINDOWS\Prefetch\PHOTOSHOP.EXE-2F7C9E12.pf --------- 73880 
 01/11/2011 07:20 PM     C:\WINDOWS\Prefetch\RUNDLL32.EXE-292DC9BE.pf --------- 16222 
 01/11/2011 07:13 PM     C:\WINDOWS\Prefetch\POWERPNT.EXE-2EF0BDC1.pf --------- 84142 
 01/11/2011 07:01 PM     C:\WINDOWS\Prefetch\IEXPLORE.EXE-06887102.pf --------- 100822 
 01/11/2011 06:55 PM     C:\WINDOWS\Prefetch\HELPSVC.EXE-281F45D0.pf --------- 259338 
 01/11/2011 06:53 PM     C:\WINDOWS\Prefetch\DFRGNTFS.EXE-0F55FCE5.pf --------- 59556 
 01/11/2011 06:53 PM     C:\WINDOWS\Prefetch\DEFRAG.EXE-10D9C910.pf --------- 18054 
 01/11/2011 06:53 PM     C:\WINDOWS\Prefetch\Layout.ini --------- 291108 
 01/11/2011 06:36 PM     C:\WINDOWS\Prefetch\JAVA.EXE-1E3945B0.pf --------- 76658 
 01/11/2011 06:15 PM     C:\WINDOWS\Prefetch\WMPLAYER.EXE-3A528C55.pf --------- 78438 
 01/11/2011 04:16 PM     C:\WINDOWS\Prefetch\AVNOTIFY.EXE-1178AC46.pf --------- 40644 
 01/11/2011 04:16 PM     C:\WINDOWS\Prefetch\UPDATE.EXE-0494B405.pf --------- 58384 
 01/11/2011 04:15 PM     C:\WINDOWS\Prefetch\WSCNTFY.EXE-314E7AE5.pf --------- 18134 
 01/10/2011 07:30 AM     C:\WINDOWS\Prefetch\GOOGLECRASHHANDLER.EXE-302D022C.pf --------- 13498 
 01/10/2011 07:19 AM     C:\WINDOWS\Prefetch\RUNDLL32.EXE-4EA9E7E2.pf --------- 31704 
 01/09/2011 05:46 PM     C:\WINDOWS\Prefetch\RUNDLL32.EXE-5C5FFFE7.pf --------- 13208 
 01/09/2011 04:20 PM     C:\WINDOWS\Prefetch\WINSCP.EXE-1BB1D454.pf --------- 40570 
 01/09/2011 04:07 PM     C:\WINDOWS\Prefetch\WMPLAYER.EXE-3A528C54.pf --------- 64240 
 01/09/2011 03:20 PM     C:\WINDOWS\Prefetch\RUNDLL32.EXE-2A812CA6.pf --------- 29934 
 01/09/2011 03:20 PM     C:\WINDOWS\Prefetch\JUSCHED.EXE-01E8D395.pf --------- 11614 
 01/09/2011 03:20 PM     C:\WINDOWS\Prefetch\USERINIT.EXE-19714419.pf --------- 55318 
 01/09/2011 03:20 PM     C:\WINDOWS\Prefetch\RUNDLL32.EXE-589FC613.pf --------- 26364 
 01/09/2011 03:20 PM     C:\WINDOWS\Prefetch\AVGNT.EXE-20698712.pf --------- 65884 
 01/09/2011 03:20 PM     C:\WINDOWS\Prefetch\ALCMTR.EXE-2681E57D.pf --------- 11760 
 01/09/2011 03:20 PM     C:\WINDOWS\Prefetch\WGATRAY.EXE-2D836F35.pf --------- 42468 
 01/09/2011 07:10 AM     C:\WINDOWS\Prefetch\1STPAGE.EXE-1C8388E3.pf --------- 55412 
 01/09/2011 04:46 AM     C:\WINDOWS\Prefetch\MSMSGS.EXE-158D7DA7.pf --------- 23650 
 01/09/2011 04:46 AM     C:\WINDOWS\Prefetch\CTFMON.EXE-084DB373.pf --------- 18334 
 01/08/2011 12:20 PM     C:\WINDOWS\Prefetch\WUAUCLT.EXE-12D8E25E.pf --------- 36858 
 01/08/2011 08:20 AM     C:\WINDOWS\Prefetch\WMPLAYER.EXE-3A528C53.pf --------- 67518 
 01/07/2011 09:09 AM     C:\WINDOWS\Prefetch\RUNDLL32.EXE-4BCCF899.pf --------- 16002 
 01/07/2011 09:09 AM     C:\WINDOWS\Prefetch\RUNDLL32.EXE-2FCE2E75.pf --------- 19894 
 01/07/2011 09:07 AM     C:\WINDOWS\Prefetch\JAVAWS.EXE-0CFD782B.pf --------- 19932 
 01/07/2011 09:07 AM     C:\WINDOWS\Prefetch\JAVAW.EXE-089E2F81.pf --------- 113662 
 01/07/2011 09:07 AM     C:\WINDOWS\Prefetch\JAUCHECK.EXE-073BD5DD.pf --------- 35674 
 01/07/2011 07:12 AM     C:\WINDOWS\Prefetch\WINWORD.EXE-33121E1E.pf --------- 87680 
 01/07/2011 07:09 AM     C:\WINDOWS\Prefetch\RUNDLL32.EXE-5EF1D200.pf --------- 85628 
 01/07/2011 05:09 AM     C:\WINDOWS\Prefetch\WMPLAYER.EXE-3A528C57.pf --------- 67036 
 01/04/2011 07:16 PM     C:\WINDOWS\Prefetch\SNDVOL32.EXE-1AA68677.pf --------- 15960 
 01/01/2011 08:39 AM     C:\WINDOWS\Prefetch\SETUP_WM.EXE-170F9E81.pf --------- 28350 
 01/01/2011 06:45 AM     C:\WINDOWS\Prefetch\RTHDCPL.EXE-0A4E6E88.pf --------- 46096 
 12/31/2010 05:14 PM     C:\WINDOWS\Prefetch\WMPLAYER.EXE-3A528C52.pf --------- 62584 
 12/31/2010 01:43 PM     C:\WINDOWS\Prefetch\ILLUSTRATOR.EXE-1E7E3026.pf --------- 59320 
 12/29/2010 08:39 AM     C:\WINDOWS\Prefetch\RUNDLL32.EXE-2A38919C.pf --------- 18940 
 12/28/2010 06:29 AM     C:\WINDOWS\Prefetch\CONTROL.EXE-01F9F0D0.pf --------- 25442 
 12/28/2010 06:29 AM     C:\WINDOWS\Prefetch\AVCENTER.EXE-03310382.pf --------- 56664 
 12/28/2010 06:29 AM     C:\WINDOWS\Prefetch\RUNDLL32.EXE-2F71E21A.pf --------- 38038 
 12/27/2010 06:38 AM     C:\WINDOWS\Prefetch\JUCHECK.EXE-2C41713C.pf --------- 72468 
 12/21/2010 07:32 AM     C:\WINDOWS\Prefetch\SCHED.EXE-0368C1B3.pf --------- 33220 
 12/21/2010 07:32 AM     C:\WINDOWS\Prefetch\AVSHADOW.EXE-339BF547.pf --------- 11832 
 12/21/2010 07:32 AM     C:\WINDOWS\Prefetch\AVGUARD.EXE-0594C035.pf --------- 61880 
 12/21/2010 07:32 AM     C:\WINDOWS\Prefetch\RUNONCE.EXE-246F7E39.pf --------- 18286 
 12/21/2010 07:32 AM     C:\WINDOWS\Prefetch\GRPCONV.EXE-2B3A22DD.pf --------- 12390 
 12/19/2010 07:15 PM     C:\WINDOWS\Prefetch\CMDBURN.EXE-1948BEDC.pf --------- 22832 
 12/19/2010 06:41 PM     C:\WINDOWS\Prefetch\DUMPREP.EXE-1C032A1C.pf --------- 50662 
 12/19/2010 06:37 PM     C:\WINDOWS\Prefetch\DWWIN.EXE-002B6E58.pf --------- 24662 
 12/18/2010 07:07 PM     C:\WINDOWS\Prefetch\TOTALCMD.EXE-11E1AF6B.pf --------- 37902 
 12/18/2010 10:51 AM     C:\WINDOWS\Prefetch\IPOINT.EXE-1AE4FAC1.pf --------- 31866 
 12/18/2010 10:51 AM     C:\WINDOWS\Prefetch\NWIZ.EXE-2D5EE4CE.pf --------- 49784 
 12/16/2010 10:52 AM     C:\WINDOWS\Prefetch\UPDATE.EXE-052B9E87.pf --------- 59660 
 12/16/2010 10:52 AM     C:\WINDOWS\Prefetch\UPDATE.EXE-1E6200E3.pf --------- 57592 
 12/16/2010 10:51 AM     C:\WINDOWS\Prefetch\UPDATE.EXE-1A363ED2.pf --------- 66418 
 12/16/2010 10:51 AM     C:\WINDOWS\Prefetch\UPDATE.EXE-059D48EE.pf --------- 57458 
 12/16/2010 10:51 AM     C:\WINDOWS\Prefetch\UPDATE.EXE-2E56A1D2.pf --------- 66130 
 12/16/2010 10:51 AM     C:\WINDOWS\Prefetch\UPDATE.EXE-1D199018.pf --------- 57468 
 12/16/2010 10:51 AM     C:\WINDOWS\Prefetch\UPDATE.EXE-343243EA.pf --------- 57424 
 12/16/2010 10:50 AM     C:\WINDOWS\Prefetch\WINDOWS-KB890830-V3.14-DELTA.-047F16CB.pf --------- 43992 
 12/16/2010 10:50 AM     C:\WINDOWS\Prefetch\MRT.EXE-00AAC00B.pf --------- 53718 
 12/16/2010 10:50 AM     C:\WINDOWS\Prefetch\MRTSTUB.EXE-34942F13.pf --------- 50710 
 12/16/2010 10:49 AM     C:\WINDOWS\Prefetch\UPDATE.EXE-2DD91F1C.pf --------- 57286 
 12/16/2010 10:49 AM     C:\WINDOWS\Prefetch\RUNDLL32.EXE-42410BD7.pf --------- 15990 
 12/16/2010 10:48 AM     C:\WINDOWS\Prefetch\RUNDLL32.EXE-379B6588.pf --------- 15990 
 12/16/2010 09:52 AM     C:\WINDOWS\Prefetch\CALC.EXE-027E1228.pf --------- 13490 
 12/16/2010 08:43 AM     C:\WINDOWS\Prefetch\RUNDLL32.EXE-46F49D8A.pf --------- 15742 
 12/16/2010 08:28 AM     C:\WINDOWS\Prefetch\RUNDLL32.EXE-2F6DF59E.pf --------- 15754 
 12/16/2010 08:22 AM     C:\WINDOWS\Prefetch\RUNDLL32.EXE-62687BEE.pf --------- 24724 
 12/16/2010 06:30 AM     C:\WINDOWS\Prefetch\UPDATE.EXE-1D8512FE.pf --------- 54808 
 12/16/2010 06:30 AM     C:\WINDOWS\Prefetch\UPDATE.EXE-072E6A68.pf --------- 54808 
 12/16/2010 06:30 AM     C:\WINDOWS\Prefetch\UPDATE.EXE-2BA9E0D8.pf --------- 60668 
 12/15/2010 11:42 AM     C:\WINDOWS\Prefetch\RUNDLL32.EXE-3364A8F8.pf --------- 15656 
 12/15/2010 11:42 AM     C:\WINDOWS\Prefetch\RUNDLL32.EXE-2B819C79.pf --------- 22392 
 12/15/2010 07:23 AM     C:\WINDOWS\Prefetch\RUNDLL32.EXE-547FDDEB.pf --------- 23262 
 12/13/2010 11:40 AM     C:\WINDOWS\Prefetch\RUNDLL32.EXE-6381EC73.pf --------- 23750 
 12/13/2010 11:07 AM     C:\WINDOWS\Prefetch\FPUPDATEAX.EXE-252EEA58.pf --------- 20532 
 12/13/2010 09:40 AM     C:\WINDOWS\Prefetch\RUNDLL32.EXE-56C77912.pf --------- 15754 
 12/13/2010 08:57 AM     C:\WINDOWS\Prefetch\RUNDLL32.EXE-5B6C1DDB.pf --------- 16002 
 12/11/2010 03:21 PM     C:\WINDOWS\Prefetch\HELPER.EXE-0A5F5055.pf --------- 17822 
 12/11/2010 03:20 PM     C:\WINDOWS\Prefetch\UPDATER.EXE-36099736.pf --------- 24360 
 12/10/2010 11:17 AM     C:\WINDOWS\Prefetch\DRWTSN32.EXE-140B1585.pf --------- 8648 
 12/09/2010 05:54 AM     C:\WINDOWS\Prefetch\SETUP.EXE-2E562BE4.pf --------- 24918 
 12/07/2010 08:05 AM     C:\WINDOWS\Prefetch\RUNDLL32.EXE-3136FDB0.pf --------- 15656 
----------------------------------------

 
C:\WINDOWS\Tasks

 01/12/2011 06:30 AM     C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job --------- 882 
 01/12/2011 06:09 AM     C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job --------- 878 
 01/12/2011 06:09 AM     C:\WINDOWS\Tasks\SA.DAT --------- 6 
 08/04/2004 12:00 PM     C:\WINDOWS\Tasks\desktop.ini --------- 65 
----------------------------------------

 
C:\WINDOWS\Temp

 01/12/2011 06:09 AM     C:\WINDOWS\Temp\Perflib_Perfdata_80.dat --------- 16384 
 01/12/2011 06:09 AM     C:\WINDOWS\Temp\Perflib_Perfdata_484.dat --------- 16384 
 01/12/2011 06:09 AM     C:\WINDOWS\Temp\WGAErrLog.txt --------- 483 
 12/09/2010 05:54 AM     C:\WINDOWS\Temp\AVSETUP_4d0060fb --------- 0 
 10/07/2010 09:31 PM     C:\WINDOWS\Temp\is9.tmp --------- 0 
 10/07/2010 09:31 PM     C:\WINDOWS\Temp\is7.tmp --------- 0 
 10/07/2010 09:31 PM     C:\WINDOWS\Temp\._msigeplugin52 --------- 0 
 06/30/2010 05:27 AM     C:\WINDOWS\Temp\Perflib_Perfdata_638.dat --------- 16384 
 01/29/2010 12:09 PM     C:\WINDOWS\Temp\dd_ATL90SP1_KB973924UI1EF6.txt --------- 11668 
 01/29/2010 12:09 PM     C:\WINDOWS\Temp\dd_ATL90SP1_KB973924MSI1EF6.txt --------- 237038 
 12/02/2009 05:30 AM     C:\WINDOWS\Temp\dd_ATL80SP1_KB973923UI3A2C.txt --------- 11732 
 12/02/2009 05:30 AM     C:\WINDOWS\Temp\dd_ATL80SP1_KB973923MSI3A2C.txt --------- 804872 
 10/30/2009 05:54 PM     C:\WINDOWS\Temp\SYMEVENT.LOG --------- 8919 
 10/29/2009 10:20 AM     C:\WINDOWS\Temp\coF47.tmp --------- 546160 
----------------------------------------

 
C:\DOCUME~1\badi\LOCALS~1\Temp

 01/12/2011 06:31 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\Temporary Directory 2 for tasklist.zip --------- 0 
 01/12/2011 06:30 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\Temporary Directory 1 for tasklist.zip --------- 0 
 01/12/2011 06:26 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF5647.tmp --------- 81920 
 01/12/2011 06:22 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\wmplog00.sqm --------- 1944 
 01/12/2011 06:14 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\jusched.log --------- 712152 
 01/12/2011 06:12 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFEDD1.tmp --------- 114688 
 01/12/2011 06:09 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\WPDNSE --------- 0 
 01/12/2011 05:52 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFF55F.tmp --------- 114688 
 01/12/2011 05:50 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\OTL_1.Txt --------- 72922 
 01/12/2011 05:50 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\mbam-log-2011-01-09 (21-30-03).txt --------- 1063 
 01/12/2011 05:50 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\mbam-log-2011-01-09 (20-53-07).txt --------- 1843 
 01/12/2011 05:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF573C.tmp --------- 81920 
 01/12/2011 05:18 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-267 --------- 0 
 01/11/2011 07:45 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF9842.tmp --------- 16384 
 01/11/2011 07:40 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-266 --------- 0 
 01/11/2011 07:20 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\amt.log --------- 69384 
 01/11/2011 07:20 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\alm.log --------- 206340 
 01/11/2011 07:20 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\TWAIN.LOG --------- 697 
 01/11/2011 07:20 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\Twunk001.MTX --------- 156 
 01/11/2011 07:20 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\Twain001.Mtx --------- 4 
 01/11/2011 06:36 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\hsperfdata_badi --------- 0 
 01/10/2011 08:43 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-265 --------- 0 
 01/10/2011 08:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFE882.tmp --------- 16384 
 01/09/2011 07:26 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-264 --------- 0 
 01/09/2011 06:30 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-263 --------- 0 
 01/08/2011 02:29 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-262 --------- 0 
 01/08/2011 06:04 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-261 --------- 0 
 01/07/2011 10:02 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (33) --------- 0 
 01/07/2011 09:57 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (32) --------- 0 
 01/07/2011 09:07 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\AUCHECK_PARSER.txt --------- 3106 
 01/07/2011 09:07 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\AUCHECK_CORE.txt --------- 10632 
 01/07/2011 08:48 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-260 --------- 0 
 01/07/2011 08:34 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFBB9D.tmp --------- 16384 
 01/04/2011 08:04 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-259 --------- 0 
 01/03/2011 07:45 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-258 --------- 0 
 01/02/2011 06:37 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-257 --------- 0 
 01/01/2011 02:24 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-256 --------- 0 
 12/31/2010 06:28 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32820 --------- 1024 
 12/31/2010 06:28 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42820 --------- 1024 
 12/31/2010 06:28 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo52820 --------- 1024 
 12/31/2010 06:28 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo62820 --------- 3072 
 12/31/2010 06:28 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22820 --------- 1024 
 12/31/2010 05:13 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-255 --------- 0 
 12/30/2010 08:14 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF1DC7.tmp --------- 16384 
 12/30/2010 07:31 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-254 --------- 0 
 12/29/2010 08:49 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-253 --------- 0 
 12/25/2010 08:51 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo52688 --------- 1024 
 12/25/2010 08:51 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo62688 --------- 3072 
 12/25/2010 08:51 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42688 --------- 1024 
 12/25/2010 08:51 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32688 --------- 1024 
 12/25/2010 08:51 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22688 --------- 1024 
 12/25/2010 08:39 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-252 --------- 0 
 12/24/2010 03:00 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-251 --------- 0 
 12/24/2010 07:06 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-250 --------- 0 
 12/23/2010 09:58 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-249 --------- 0 
 12/22/2010 08:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo6240 --------- 3072 
 12/22/2010 08:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo3240 --------- 1024 
 12/22/2010 08:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo5240 --------- 1024 
 12/22/2010 08:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo4240 --------- 1024 
 12/22/2010 08:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo2240 --------- 1024 
 12/22/2010 07:57 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-248 --------- 0 
 12/22/2010 06:22 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\Adobe --------- 0 
 12/19/2010 07:40 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (31) --------- 0 
 12/19/2010 05:32 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\radFC598.htm --------- 232 
 12/19/2010 05:32 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF82C.tmp --------- 32768 
 12/19/2010 08:50 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-247 --------- 0 
 12/18/2010 07:25 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP43.tmp --------- 61 
 12/18/2010 07:25 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP42.tmp --------- 2148 
 12/18/2010 07:25 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP41.tmp --------- 771 
 12/18/2010 05:33 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-246 --------- 0 
 12/16/2010 10:26 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-245 --------- 0 
 12/14/2010 06:08 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-244 --------- 0 
 12/13/2010 11:04 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-243 --------- 0 
 12/11/2010 06:34 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-242 --------- 0 
 12/11/2010 06:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\jar_cache1923272072394122370.tmp --------- 0 
 12/11/2010 06:22 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\jar_cache5716549771385963044.tmp --------- 0 
 12/10/2010 11:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo33668 --------- 1024 
 12/10/2010 11:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo53668 --------- 1024 
 12/10/2010 11:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo23668 --------- 1024 
 12/10/2010 11:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo63668 --------- 3072 
 12/10/2010 11:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo43668 --------- 1024 
 12/10/2010 11:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\6701_appcompat.txt --------- 9094 
 12/10/2010 08:30 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF6E9B.tmp --------- 65536 
 12/10/2010 08:21 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-241 --------- 0 
 12/10/2010 08:21 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF18FF.tmp --------- 16384 
 12/10/2010 06:56 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF7996.tmp --------- 16384 
 12/09/2010 09:49 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF8DA.tmp --------- 65536 
 12/09/2010 09:32 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-240 --------- 0 
 12/09/2010 07:00 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\msohtmlclip1 --------- 0 
 12/08/2010 07:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-239 --------- 0 
 12/08/2010 07:34 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF7023.tmp --------- 65536 
 12/08/2010 07:33 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF82B1.tmp --------- 16384 
 12/08/2010 06:06 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFF551.tmp --------- 16384 
 12/07/2010 09:26 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo6760 --------- 3072 
 12/07/2010 09:26 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo4760 --------- 1024 
 12/07/2010 09:26 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo5760 --------- 1024 
 12/07/2010 09:26 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo3760 --------- 1024 
 12/07/2010 09:26 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo2760 --------- 1024 
 12/07/2010 09:09 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-238 --------- 0 
 12/05/2010 06:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-237 --------- 0 
 12/04/2010 08:40 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-236 --------- 0 
 12/03/2010 06:02 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-235 --------- 0 
 12/02/2010 10:46 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo63484 --------- 5120 
 12/02/2010 09:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF403C.tmp --------- 81920 
 12/02/2010 09:40 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF77C8.tmp --------- 65536 
 12/02/2010 09:37 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\JAUReg.log --------- 453 
 12/02/2010 09:37 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\java_install_reg.log --------- 4209 
 12/02/2010 09:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\java_install_sp.log --------- 3229 
 12/02/2010 09:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\55702.mst --------- 9244160 
 12/02/2010 09:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\jinstall.cfg --------- 1247 
 11/29/2010 06:26 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFE2BD.tmp --------- 16384 
 11/29/2010 04:54 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF7F58.tmp --------- 65536 
 11/29/2010 04:54 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF6AB8.tmp --------- 16384 
 11/29/2010 04:36 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-234 --------- 0 
 11/28/2010 09:35 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\9931859.od --------- 134 
 11/28/2010 09:35 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\9931781.cvr --------- 3572 
 11/28/2010 07:28 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFF776.tmp --------- 65536 
 11/28/2010 07:28 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFF017.tmp --------- 16384 
 11/27/2010 02:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-233 --------- 0 
 11/26/2010 08:38 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF369A.tmp --------- 16384 
 11/26/2010 07:51 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-232 --------- 0 
 11/25/2010 08:04 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-231 --------- 0 
 11/25/2010 05:10 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFFCCB.tmp --------- 65536 
 11/24/2010 07:14 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF8884.tmp --------- 65536 
 11/24/2010 07:14 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF8107.tmp --------- 16384 
 11/24/2010 07:14 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-230 --------- 0 
 11/24/2010 06:49 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF26E8.tmp --------- 65536 
 11/24/2010 06:49 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF1EFB.tmp --------- 16384 
 11/23/2010 10:05 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-229 --------- 0 
 11/21/2010 06:08 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-228 --------- 0 
 11/21/2010 03:49 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\jre-6u22-windows-i586-iftw-rv.exe --------- 875296 
 11/20/2010 08:07 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-227 --------- 0 
 11/19/2010 07:11 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-226 --------- 0 
 11/18/2010 06:31 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\jupload_5718699505397077495_log.txt --------- 28 
 11/18/2010 07:08 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (30) --------- 0 
 11/18/2010 07:07 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (29) --------- 0 
 11/18/2010 07:06 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (28) --------- 0 
 11/15/2010 03:20 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFA87C.tmp --------- 65536 
 11/15/2010 03:20 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-225 --------- 0 
 11/15/2010 05:31 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-224 --------- 0 
 11/15/2010 05:00 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\8.dir --------- 0 
 11/15/2010 05:00 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\8.tmp --------- 0 
 11/13/2010 06:04 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-223 --------- 0 
 11/13/2010 01:03 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF1F14.tmp --------- 16384 
 11/13/2010 12:53 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF6290.tmp --------- 16384 
 11/12/2010 06:48 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF194E.tmp --------- 16384 
 11/12/2010 06:47 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-222 --------- 0 
 11/09/2010 04:36 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-221 --------- 0 
 11/08/2010 09:26 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\92f2_appcompat.txt --------- 9094 
 11/08/2010 08:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF3719.tmp --------- 65536 
 11/08/2010 08:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF23D7.tmp --------- 65536 
 11/08/2010 08:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFFE6.tmp --------- 16384 
 11/08/2010 08:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF546.tmp --------- 16384 
 11/08/2010 06:20 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\c441_appcompat.txt --------- 9094 
 11/08/2010 06:20 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\wmsetup.log --------- 13676 
 11/08/2010 06:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\control.xml --------- 12818 
 11/08/2010 05:43 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF38FB.tmp --------- 16384 
 11/08/2010 05:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\jar_cache5408067556447009158.tmp --------- 0 
 11/08/2010 05:28 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\jar_cache1312560550160211730.tmp --------- 0 
 11/08/2010 05:14 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF3BC9.tmp --------- 65536 
 11/08/2010 05:14 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF33A0.tmp --------- 16384 
 11/08/2010 05:06 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\7.dir --------- 0 
 11/08/2010 05:06 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\7.tmp --------- 0 
 11/07/2010 07:57 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-220 --------- 0 
 11/06/2010 07:44 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP73.tmp --------- 2148 
 11/06/2010 07:43 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP6C.tmp --------- 1037 
 11/06/2010 07:43 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP69.tmp --------- 387 
 11/06/2010 07:43 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP66.tmp --------- 600 
 11/06/2010 07:43 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP64.tmp --------- 596 
 11/06/2010 07:43 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP62.tmp --------- 196 
 11/06/2010 07:43 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP61.tmp --------- 467 
 11/06/2010 07:43 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP60.tmp --------- 808 
 11/06/2010 07:43 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP5C.tmp --------- 191 
 11/06/2010 07:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP5A.tmp --------- 196 
 11/06/2010 07:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP58.tmp --------- 531 
 11/06/2010 07:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP56.tmp --------- 190 
 11/06/2010 07:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP55.tmp --------- 534 
 11/06/2010 07:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP51.tmp --------- 528 
 11/06/2010 07:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP4F.tmp --------- 190 
 11/06/2010 07:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP4E.tmp --------- 458 
 11/06/2010 07:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP4C.tmp --------- 127 
 11/06/2010 07:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP4B.tmp --------- 404 
 11/06/2010 07:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP46.tmp --------- 251 
 11/06/2010 07:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP44.tmp --------- 659 
 11/06/2010 07:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP3D.tmp --------- 598 
 11/06/2010 07:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP3C.tmp --------- 1900 
 11/06/2010 07:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP3B.tmp --------- 777 
 11/06/2010 07:41 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP37.tmp --------- 771 
 11/06/2010 06:06 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-219 --------- 0 
 11/05/2010 08:00 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFADDF.tmp --------- 65536 
 11/04/2010 07:26 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-218 --------- 0 
 11/03/2010 09:08 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-217 --------- 0 
 11/03/2010 07:08 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFCF0D.tmp --------- 65536 
 11/03/2010 07:38 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-216 --------- 0 
 11/01/2010 05:19 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\SetupExe(201011010519219A0).log --------- 10563 
 11/01/2010 05:12 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\SetupExe(20101101051220E10).log --------- 10563 
 10/31/2010 07:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFB371.tmp --------- 65536 
 10/31/2010 07:22 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-215 --------- 0 
 10/31/2010 06:32 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dd_vcredistUI0BD9.txt --------- 11718 
 10/31/2010 06:32 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dd_vcredistMSI0BD9.txt --------- 526954 
 10/31/2010 06:26 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\6.dir --------- 0 
 10/31/2010 06:26 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\6.tmp --------- 0 
 10/30/2010 07:08 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-214 --------- 0 
 10/29/2010 08:04 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo63920 --------- 3072 
 10/29/2010 08:04 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo53920 --------- 1024 
 10/29/2010 08:04 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo43920 --------- 1024 
 10/29/2010 08:04 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo23920 --------- 1024 
 10/29/2010 08:04 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo33920 --------- 1024 
 10/29/2010 06:20 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF78A.tmp --------- 65536 
 10/29/2010 06:14 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF98BA.tmp --------- 16384 
 10/29/2010 06:14 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-213 --------- 0 
 10/29/2010 06:02 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF43BB.tmp --------- 16384 
 10/28/2010 08:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\10452078.od --------- 134 
 10/28/2010 08:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\10452031.cvr --------- 3988 
 10/28/2010 08:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-212 --------- 0 
 10/24/2010 07:23 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-211 --------- 0 
 10/23/2010 07:14 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-210 --------- 0 
 10/22/2010 06:24 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-209 --------- 0 
 10/21/2010 06:58 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\c05b_appcompat.txt --------- 9094 
 10/21/2010 06:58 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\ca73_appcompat.txt --------- 9094 
 10/21/2010 06:17 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF4291.tmp --------- 65536 
 10/21/2010 06:17 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF3B93.tmp --------- 16384 
 10/21/2010 06:03 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFCC5E.tmp --------- 65536 
 10/21/2010 06:03 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFC53E.tmp --------- 16384 
 10/21/2010 06:00 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF2907.tmp --------- 16384 
 10/21/2010 10:49 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-208 --------- 0 
 10/18/2010 09:13 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-207 --------- 0 
 10/17/2010 08:24 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF5195.tmp --------- 16384 
 10/17/2010 07:45 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF1679.tmp --------- 16384 
 10/17/2010 06:44 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-206 --------- 0 
 10/15/2010 05:03 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-205 --------- 0 
 10/15/2010 04:37 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF20AE.tmp --------- 65536 
 10/15/2010 04:37 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF18E9.tmp --------- 16384 
 10/15/2010 12:13 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32620 --------- 1024 
 10/15/2010 12:13 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42620 --------- 1024 
 10/15/2010 12:13 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo62620 --------- 3072 
 10/15/2010 12:13 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo52620 --------- 1024 
 10/15/2010 12:13 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22620 --------- 1024 
 10/15/2010 11:24 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-204 --------- 0 
 10/15/2010 07:56 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-203 --------- 0 
 10/11/2010 08:18 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo34084 --------- 1024 
 10/11/2010 08:18 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo64084 --------- 3072 
 10/11/2010 08:18 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo44084 --------- 1024 
 10/11/2010 08:18 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo54084 --------- 1024 
 10/11/2010 08:18 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo24084 --------- 1024 
 10/10/2010 07:09 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-202 --------- 0 
 10/09/2010 07:54 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-201 --------- 0 
 09/14/2010 06:01 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (27) --------- 0 
 09/14/2010 05:55 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (26) --------- 0 
 09/13/2010 09:59 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-200 --------- 0 
 09/13/2010 06:43 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-199 --------- 0 
 09/13/2010 03:30 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFAF42.tmp --------- 65536 
 09/13/2010 03:21 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-198 --------- 0 
 09/13/2010 08:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-197 --------- 0 
 09/05/2010 07:37 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-196 --------- 0 
 09/04/2010 04:33 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-195 --------- 0 
 09/02/2010 05:35 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-194 --------- 0 
 09/01/2010 06:30 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-193 --------- 0 
 08/30/2010 10:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo2284 --------- 1024 
 08/30/2010 10:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo6284 --------- 3072 
 08/30/2010 10:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo4284 --------- 1024 
 08/30/2010 10:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo5284 --------- 1024 
 08/30/2010 10:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo3284 --------- 1024 
 08/30/2010 09:48 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-192 --------- 0 
 08/26/2010 10:59 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF7DF3.tmp --------- 65536 
 08/26/2010 10:59 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-191 --------- 0 
 08/26/2010 10:59 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF715D.tmp --------- 16384 
 08/24/2010 01:31 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-190 --------- 0 
 08/23/2010 06:33 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-189 --------- 0 
 08/23/2010 08:44 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-188 --------- 0 
 08/22/2010 08:18 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-187 --------- 0 
 08/19/2010 06:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF605A.tmp --------- 16384 
 08/18/2010 04:22 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-186 --------- 0 
 08/17/2010 09:58 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo31100 --------- 1024 
 08/17/2010 09:58 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo51100 --------- 1024 
 08/17/2010 09:58 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo61100 --------- 3072 
 08/17/2010 09:58 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo21100 --------- 1024 
 08/17/2010 09:58 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo41100 --------- 1024 
 08/16/2010 06:37 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-185 --------- 0 
 08/16/2010 06:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\jar_cache2149214268178432646.tmp --------- 25850 
 08/15/2010 12:19 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFCC6C.tmp --------- 65536 
 08/15/2010 12:18 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFAAB4.tmp --------- 16384 
 08/14/2010 04:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFA6C7.tmp --------- 65536 
 08/14/2010 04:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF9E97.tmp --------- 16384 
 08/14/2010 04:00 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-184 --------- 0 
 08/14/2010 07:45 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\e3fd_appcompat.txt --------- 44106 
 08/14/2010 06:14 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-183 --------- 0 
 08/12/2010 01:02 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-182 --------- 0 
 08/11/2010 06:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-181 --------- 0 
 08/10/2010 06:29 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-180 --------- 0 
 08/08/2010 11:41 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo61552 --------- 3072 
 08/08/2010 11:41 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo31552 --------- 1024 
 08/08/2010 11:41 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo21552 --------- 1024 
 08/08/2010 11:41 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo51552 --------- 1024 
 08/08/2010 11:41 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo41552 --------- 1024 
 08/05/2010 11:05 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\ec4b_appcompat.txt --------- 44106 
 08/05/2010 10:57 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-179 --------- 0 
 08/04/2010 02:39 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (25) --------- 0 
 08/04/2010 02:25 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-178 --------- 0 
 08/04/2010 01:00 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\aabF.tmp --------- 0 
 08/04/2010 12:57 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\gy6E.tmp --------- 0 
 08/04/2010 12:54 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\d5mD.tmp --------- 0 
 08/03/2010 06:37 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\njd5.tmp --------- 0 
 08/02/2010 05:33 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\h0tA.tmp --------- 0 
 08/02/2010 05:33 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\6xg9.tmp --------- 0 
 08/02/2010 01:20 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-177 --------- 0 
 07/30/2010 07:24 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\ge4084 --------- 0 
 07/30/2010 07:22 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\ge3140 --------- 0 
 07/29/2010 07:33 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-176 --------- 0 
 07/27/2010 05:18 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\a129_appcompat.txt --------- 44106 
 07/27/2010 05:13 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-175 --------- 0 
 07/26/2010 06:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-174 --------- 0 
 07/24/2010 06:27 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\tqh15.tmp --------- 0 
 07/24/2010 06:27 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\3x214.tmp --------- 0 
 07/24/2010 06:27 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\ury13.tmp --------- 0 
 07/24/2010 06:27 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\1hw12.tmp --------- 0 
 07/24/2010 06:24 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\p5j10.tmp --------- 0 
 07/24/2010 06:24 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\qphF.tmp --------- 0 
 07/21/2010 07:53 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\3034_appcompat.txt --------- 44084 
 07/20/2010 07:14 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF3CA0.tmp --------- 16384 
 07/20/2010 07:14 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-173 --------- 0 
 07/20/2010 07:06 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\0x825.tmp --------- 0 
 07/20/2010 07:06 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\wg324.tmp --------- 0 
 07/20/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\koy23.tmp --------- 0 
 07/20/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\sou22.tmp --------- 0 
 07/20/2010 07:03 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\jun21.tmp --------- 0 
 07/20/2010 07:03 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\2jj20.tmp --------- 0 
 07/20/2010 07:02 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\e0v1F.tmp --------- 0 
 07/20/2010 06:59 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\q7m1C.tmp --------- 0 
 07/20/2010 06:58 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\6lh1B.tmp --------- 0 
 07/20/2010 06:54 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\i9l1A.tmp --------- 0 
 07/20/2010 06:53 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\va119.tmp --------- 0 
 07/20/2010 06:53 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\jow18.tmp --------- 0 
 07/20/2010 06:49 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\opm17.tmp --------- 0 
 07/20/2010 06:49 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\7rd16.tmp --------- 0 
 07/20/2010 06:49 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\z1a15.tmp --------- 0 
 07/20/2010 06:47 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\rya14.tmp --------- 0 
 07/20/2010 06:47 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\d3513.tmp --------- 0 
 07/20/2010 06:46 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\g1s12.tmp --------- 0 
 07/20/2010 06:45 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\zg711.tmp --------- 0 
 07/20/2010 06:37 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\jh510.tmp --------- 0 
 07/20/2010 05:27 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\eecA.tmp --------- 0 
 07/20/2010 05:21 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\IHNzXVCu.html.part --------- 0 
 07/20/2010 08:52 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\ot914.tmp --------- 0 
 07/20/2010 08:52 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\im013.tmp --------- 0 
 07/16/2010 10:58 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\wichtige_Telefonnummern.doc --------- 11264 
 07/13/2010 11:21 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\ge2836 --------- 0 
 07/13/2010 11:21 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\geColladaModelCacheLock --------- 0 
 07/13/2010 11:21 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\geIconCacheLock --------- 0 
 07/13/2010 11:20 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\is29.tmp --------- 0 
 07/13/2010 11:20 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\._msigeplugin52 --------- 0 
 07/13/2010 11:16 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-172 --------- 0 
 07/13/2010 08:23 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo31744 --------- 1024 
 07/13/2010 08:23 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo61744 --------- 3072 
 07/13/2010 08:23 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo21744 --------- 1024 
 07/13/2010 08:23 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo41744 --------- 1024 
 07/13/2010 08:23 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo51744 --------- 1024 
 07/12/2010 01:27 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-171 --------- 0 
 07/10/2010 06:58 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo23484 --------- 1024 
 07/10/2010 06:58 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo53484 --------- 1024 
 07/10/2010 06:58 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo43484 --------- 1024 
 07/10/2010 06:58 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo33484 --------- 1024 
 07/10/2010 01:04 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-170 --------- 0 
 07/09/2010 06:20 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF32FB.tmp --------- 16384 
 07/09/2010 06:04 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFAB33.tmp --------- 65536 
 07/09/2010 06:04 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-169 --------- 0 
 07/09/2010 06:04 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFA38F.tmp --------- 16384 
 07/05/2010 06:45 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\bf2a_appcompat.txt --------- 44084 
 07/05/2010 06:20 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-168 --------- 0 
 07/05/2010 03:00 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFD681.tmp --------- 16384 
 07/04/2010 09:09 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42220 --------- 1024 
 07/04/2010 09:09 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo62220 --------- 3072 
 07/04/2010 09:09 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo52220 --------- 1024 
 07/04/2010 09:09 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22220 --------- 1024 
 07/04/2010 09:09 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32220 --------- 1024 
 07/04/2010 08:32 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (24) --------- 0 
 07/04/2010 08:25 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (23) --------- 0 
 07/04/2010 08:20 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (22) --------- 0 
 07/04/2010 07:02 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (21) --------- 0 
 07/02/2010 05:56 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-167 --------- 0 
 07/01/2010 07:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-166 --------- 0 
 07/01/2010 06:53 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\aerzteohnegrenzen-application-form.pdf --------- 399663 
 07/01/2010 06:35 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFD7C9.tmp --------- 65536 
 07/01/2010 06:35 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\aerzteohnegrenzen-infoblatt-mitarbeit.pdf --------- 804598 
 06/29/2010 05:38 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\ae58_appcompat.txt --------- 44080 
 06/29/2010 05:10 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-165 --------- 0 
 06/28/2010 06:25 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-164 --------- 0 
 06/21/2010 09:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo74048 --------- 1024 
 06/21/2010 09:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo84048 --------- 1024 
 06/21/2010 09:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo94048 --------- 1024 
 06/21/2010 09:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo114048 --------- 1024 
 06/21/2010 09:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo104048 --------- 1024 
 06/21/2010 09:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp40522990703 --------- 155648 
 06/21/2010 09:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp40522989140 --------- 90112 
 06/21/2010 09:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp40522990265 --------- 155648 
 06/21/2010 09:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo34048 --------- 1024 
 06/21/2010 09:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo24048 --------- 1024 
 06/21/2010 09:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp40522981546 --------- 155648 
 06/21/2010 09:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo44048 --------- 1024 
 06/21/2010 09:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo64048 --------- 3072 
 06/21/2010 09:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo54048 --------- 1024 
 06/21/2010 09:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp40525707437 --------- 90112 
 06/21/2010 09:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp40522972671 --------- 12607488 
 06/21/2010 09:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp40522972828 --------- 90112 
 06/21/2010 09:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp40522971765 --------- 3170304 
 06/21/2010 09:02 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF263D.tmp --------- 65536 
 06/21/2010 01:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo92960 --------- 1024 
 06/21/2010 01:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo112960 --------- 1024 
 06/21/2010 01:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo82960 --------- 1024 
 06/21/2010 01:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo102960 --------- 1024 
 06/21/2010 01:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo72960 --------- 1024 
 06/21/2010 01:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2964673828 --------- 90112 
 06/21/2010 01:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32960 --------- 1024 
 06/21/2010 01:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2964660609 --------- 90112 
 06/21/2010 01:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2964670328 --------- 90112 
 06/21/2010 01:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42960 --------- 1024 
 06/21/2010 01:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo52960 --------- 1024 
 06/21/2010 01:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2964673656 --------- 90112 
 06/21/2010 01:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22960 --------- 1024 
 06/21/2010 01:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo62960 --------- 3072 
 06/21/2010 01:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp29641184390 --------- 90112 
 06/21/2010 01:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2964650750 --------- 16801792 
 06/21/2010 01:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2964650984 --------- 90112 
 06/21/2010 01:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2964649656 --------- 3170304 
 06/21/2010 01:20 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF534E.tmp --------- 65536 
 06/17/2010 03:36 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-163 --------- 0 
 06/16/2010 12:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo62468 --------- 3072 
 06/16/2010 12:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo52468 --------- 1024 
 06/16/2010 12:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42468 --------- 1024 
 06/16/2010 12:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22468 --------- 1024 
 06/16/2010 12:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32468 --------- 1024 
 06/16/2010 12:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo92408 --------- 1024 
 06/16/2010 12:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp260022984562 --------- 90112 
 06/16/2010 12:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo112408 --------- 1024 
 06/16/2010 12:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo72408 --------- 1024 
 06/16/2010 12:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo102408 --------- 1024 
 06/16/2010 12:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp260022984687 --------- 90112 
 06/16/2010 12:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp260022980468 --------- 90112 
 06/16/2010 12:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22408 --------- 1024 
 06/16/2010 12:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo82408 --------- 1024 
 06/16/2010 12:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo62408 --------- 3072 
 06/16/2010 12:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo52408 --------- 1024 
 06/16/2010 12:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42408 --------- 1024 
 06/16/2010 12:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32408 --------- 1024 
 06/16/2010 12:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp260022976734 --------- 90112 
 06/16/2010 12:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp260022971546 --------- 90112 
 06/16/2010 12:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp260022971281 --------- 4218880 
 06/16/2010 12:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp260022970718 --------- 3170304 
 06/16/2010 11:43 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFB197.tmp --------- 65536 
 06/16/2010 11:41 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp260025698281 --------- 90112 
 06/16/2010 07:39 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dw.log --------- 81 
 06/16/2010 06:06 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-162 --------- 0 
 06/15/2010 06:49 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\6898437.od --------- 134 
 06/15/2010 06:49 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\6898421.cvr --------- 5876 
 06/15/2010 05:11 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-161 --------- 0 
 06/14/2010 12:08 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF82E5.tmp --------- 65536 
 06/14/2010 12:08 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\EVN_F10000250180.pdf --------- 52937 
 06/14/2010 10:52 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-160 --------- 0 
 06/14/2010 08:44 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo23720 --------- 1024 
 06/14/2010 08:44 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo33720 --------- 1024 
 06/14/2010 08:44 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo63720 --------- 3072 
 06/14/2010 08:44 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo53720 --------- 1024 
 06/14/2010 08:44 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo43720 --------- 1024 
 06/13/2010 02:30 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFF9D4.tmp --------- 65536 
 06/13/2010 02:30 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFEF82.tmp --------- 16384 
 06/13/2010 01:58 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-159 --------- 0 
 06/11/2010 06:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF3953.tmp --------- 65536 
 06/11/2010 06:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF3005.tmp --------- 16384 
 06/08/2010 09:51 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo63600 --------- 3072 
 06/08/2010 09:51 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo53600 --------- 1024 
 06/08/2010 09:51 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo33600 --------- 1024 
 06/08/2010 09:51 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo43600 --------- 1024 
 06/08/2010 09:51 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo23600 --------- 1024 
 06/07/2010 09:32 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF86C3.tmp --------- 65536 
 06/07/2010 09:32 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF7A6E.tmp --------- 16384 
 06/07/2010 09:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-158 --------- 0 
 06/06/2010 04:56 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-157 --------- 0 
 06/05/2010 07:27 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF7694.tmp --------- 16384 
 06/05/2010 07:25 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF30C9.tmp --------- 16384 
 06/05/2010 07:24 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF6BE.tmp --------- 16384 
 06/05/2010 07:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFDAE8.tmp --------- 16384 
 06/05/2010 05:37 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo64004 --------- 3072 
 06/05/2010 05:37 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo54004 --------- 1024 
 06/05/2010 05:37 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo44004 --------- 3072 
 06/05/2010 04:44 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-156 --------- 0 
 06/04/2010 05:15 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-155 --------- 0 
 06/03/2010 07:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-154 --------- 0 
 06/02/2010 06:08 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-153 --------- 0 
 06/01/2010 07:59 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-152 --------- 0 
 05/30/2010 04:42 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-151 --------- 0 
 05/30/2010 09:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-150 --------- 0 
 05/29/2010 07:50 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo6464 --------- 3072 
 05/29/2010 07:50 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo5464 --------- 1024 
 05/29/2010 07:50 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo2464 --------- 1024 
 05/29/2010 07:50 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo3464 --------- 1024 
 05/29/2010 07:50 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo4464 --------- 1024 
 05/29/2010 07:54 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFECEC.tmp --------- 65536 
 05/29/2010 07:54 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFE405.tmp --------- 16384 
 05/28/2010 06:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-149 --------- 0 
 05/27/2010 07:02 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-148 --------- 0 
 05/27/2010 04:38 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-147 --------- 0 
 05/24/2010 10:04 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP36.tmp --------- 1301 
 05/24/2010 10:04 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP35.tmp --------- 1857 
 05/24/2010 10:04 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP33.tmp --------- 2209 
 05/24/2010 10:04 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP2F.tmp --------- 771 
 05/24/2010 08:49 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-146 --------- 0 
 05/22/2010 11:09 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo3248 --------- 1024 
 05/22/2010 11:09 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo4248 --------- 1024 
 05/22/2010 11:09 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo2248 --------- 1024 
 05/22/2010 11:09 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo5248 --------- 1024 
 05/22/2010 11:09 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo6248 --------- 3072 
 05/22/2010 08:21 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF4918.tmp --------- 16384 
 05/22/2010 06:24 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-145 --------- 0 
 05/21/2010 07:48 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-144 --------- 0 
 05/21/2010 07:28 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (20) --------- 0 
 05/21/2010 06:19 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (19) --------- 0 
 05/21/2010 06:12 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (18) --------- 0 
 05/21/2010 06:03 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (17) --------- 0 
 05/21/2010 05:51 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (16) --------- 0 
 05/21/2010 05:50 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (15) --------- 0 
 05/21/2010 05:37 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (14) --------- 0 
 05/20/2010 01:50 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22308 --------- 1024 
 05/20/2010 01:50 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo62308 --------- 3072 
 05/20/2010 01:50 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo52308 --------- 1024 
 05/20/2010 01:50 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32308 --------- 1024 
 05/20/2010 01:50 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42308 --------- 1024 
 05/20/2010 01:47 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFA342.tmp --------- 65536 
 05/20/2010 01:47 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF9C34.tmp --------- 16384 
 05/20/2010 11:25 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-143 --------- 0 
 05/19/2010 05:57 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-142 --------- 0 
 05/18/2010 06:21 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-141 --------- 0 
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo73736 --------- 1024 
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo83736 --------- 1024 
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo43736 --------- 1024 
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo63736 --------- 3072 
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo23736 --------- 1024 
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo33736 --------- 1024 
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo53736 --------- 1024 
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo93736 --------- 3072 
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo102936 --------- 1024 
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo112936 --------- 1024 
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo72936 --------- 1024 
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo82936 --------- 1024 
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2940124062 --------- 155648 
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo92936 --------- 1024 
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2940108625 --------- 90112 
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2940104906 --------- 155648 
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42936 --------- 1024 
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22936 --------- 1024 
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo52936 --------- 1024 
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo62936 --------- 3072 
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32936 --------- 1024 
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2940122875 --------- 155648 
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp29405032250 --------- 811008 
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp294091640 --------- 90112 
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp294091468 --------- 7364608 
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp294090312 --------- 3170304 
 05/17/2010 06:16 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF95E6.tmp --------- 65536 
 05/17/2010 06:16 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF8DDA.tmp --------- 16384 
 05/17/2010 06:12 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFB56B.tmp --------- 65536 
 05/17/2010 03:38 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo3548 --------- 1024 
 05/17/2010 03:38 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp5524775406 --------- 90112 
 05/17/2010 03:38 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo6548 --------- 3072 
 05/17/2010 03:38 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp5524777250 --------- 90112 
 05/17/2010 03:38 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp5524781187 --------- 90112 
 05/17/2010 03:38 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo5548 --------- 1024 
 05/17/2010 03:38 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo2548 --------- 1024 
 05/17/2010 03:38 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo4548 --------- 1024 
 05/17/2010 03:38 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp5524770078 --------- 90112 
 05/17/2010 03:38 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp5524770218 --------- 90112 
 05/17/2010 03:19 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp5524789437 --------- 90112 
 05/17/2010 03:19 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp5524789296 --------- 90112 
 05/17/2010 03:19 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp5524769125 --------- 3170304 
 05/16/2010 06:41 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFBB20.tmp --------- 65536 
 05/15/2010 09:48 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-140 --------- 0 
 05/15/2010 09:44 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFDB11.tmp --------- 16384 
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22012 --------- 1024 
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo82012 --------- 1024 
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo52012 --------- 1024 
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42012 --------- 1024 
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32012 --------- 1024 
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo72012 --------- 1024 
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo62012 --------- 3072 
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo92012 --------- 3072 
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo83848 --------- 1024 
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo103848 --------- 1024 
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo113848 --------- 1024 
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo93848 --------- 1024 
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo33848 --------- 1024 
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo43848 --------- 1024 
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo23848 --------- 1024 
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp38521027234 --------- 90112 
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp38521017250 --------- 90112 
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo63848 --------- 3072 
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo53848 --------- 1024 
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo73848 --------- 1024 
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp38521027093 --------- 90112 
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp38521006718 --------- 90112 
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3852998531 --------- 8413184 
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3852998687 --------- 90112 
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3852997625 --------- 3170304 
 05/14/2010 07:49 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF3A17.tmp --------- 65536 
 05/14/2010 07:41 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp385210807250 --------- 155648 
 05/13/2010 06:45 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-139 --------- 0 
 05/13/2010 06:30 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF5169.tmp --------- 65536 
 05/13/2010 06:18 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\Temporary Directory 2 for einzelnabrunden.zip --------- 0 
 05/13/2010 10:18 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo81736 --------- 1024 
 05/13/2010 10:18 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo61736 --------- 3072 
 05/13/2010 10:18 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo21736 --------- 1024 
 05/13/2010 10:18 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo41736 --------- 3072 
 05/13/2010 10:18 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo51736 --------- 1024 
 05/13/2010 10:18 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo31736 --------- 1024 
 05/13/2010 10:18 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo71736 --------- 1024 
 05/13/2010 10:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp238812187609 --------- 90112 
 05/13/2010 10:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22328 --------- 1024 
 05/13/2010 10:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp238812187515 --------- 90112 
 05/13/2010 10:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp238812185250 --------- 90112 
 05/13/2010 10:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32328 --------- 1024 
 05/13/2010 10:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42328 --------- 3072 
 05/13/2010 10:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp238812183921 --------- 90112 
 05/13/2010 10:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp238812182921 --------- 90112 
 05/13/2010 10:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp238812182703 --------- 3170304 
 05/13/2010 10:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp238812183750 --------- 155648 
 05/13/2010 10:14 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\Temporary Directory 1 for einzelnabrunden.zip --------- 0 
 05/13/2010 10:14 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-138 --------- 0 
 05/13/2010 10:07 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp238812182875 --------- 548864 
 05/13/2010 09:59 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF170.tmp --------- 65536 
 05/13/2010 09:59 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFF914.tmp --------- 16384 
 05/13/2010 05:41 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF5FAD.tmp --------- 65536 
 05/13/2010 05:41 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF5693.tmp --------- 16384 
 05/12/2010 10:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-137 --------- 0 
 05/12/2010 11:15 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp279675984 --------- 155648 
 05/12/2010 11:15 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp279675218 --------- 155648 
 05/12/2010 11:15 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp279668187 --------- 90112 
 05/12/2010 11:15 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp279664656 --------- 155648 
 05/12/2010 11:15 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp279659437 --------- 155648 
 05/12/2010 11:15 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp279653984 --------- 90112 
 05/12/2010 11:15 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp279652734 --------- 3170304 
 05/12/2010 11:15 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp279653781 --------- 221184 
 05/12/2010 09:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo23000 --------- 1024 
 05/12/2010 09:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo33000 --------- 1024 
 05/12/2010 09:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3004332765 --------- 90112 
 05/12/2010 09:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3004332921 --------- 90112 
 05/12/2010 09:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo43000 --------- 3072 
 05/12/2010 09:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3004317765 --------- 90112 
 05/12/2010 09:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3004323671 --------- 90112 
 05/12/2010 09:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3004319703 --------- 90112 
 05/12/2010 09:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3004311000 --------- 3170304 
 05/12/2010 09:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3004312031 --------- 16801792 
 05/12/2010 09:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3004312234 --------- 90112 
 05/11/2010 07:03 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-136 --------- 0 
 05/10/2010 08:08 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-135 --------- 0 
 05/09/2010 07:13 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo31996 --------- 1024 
 05/09/2010 07:13 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo21996 --------- 1024 
 05/09/2010 07:13 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo41996 --------- 3072 
 05/09/2010 07:13 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp15641472031 --------- 90112 
 05/09/2010 07:13 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo31276 --------- 1024 
 05/09/2010 07:13 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo41276 --------- 3072 
 05/09/2010 07:13 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo21276 --------- 1024 
 05/09/2010 07:13 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp15641471937 --------- 90112 
 05/09/2010 07:13 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp15641469093 --------- 90112 
 05/09/2010 07:13 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp15641467718 --------- 90112 
 05/09/2010 07:13 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp15641466859 --------- 90112 
 05/09/2010 07:13 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp15641466812 --------- 3170304 
 05/09/2010 07:13 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp15641466671 --------- 3170304 
 05/09/2010 07:11 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp15643990906 --------- 90112 
 05/09/2010 07:09 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFB4C3.tmp --------- 65536 
 05/09/2010 06:26 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-134 --------- 0 
 05/09/2010 12:43 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-133 --------- 0 
 05/09/2010 09:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-132 --------- 0 
 05/09/2010 02:12 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-131 --------- 0 
 05/08/2010 07:21 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3856483796 --------- 90112 
 05/08/2010 07:21 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3856478390 --------- 90112 
 05/08/2010 07:21 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo23852 --------- 1024 
 05/08/2010 07:21 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3856474218 --------- 90112 
 05/08/2010 07:21 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo43852 --------- 3072 
 05/08/2010 07:21 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo33852 --------- 1024 
 05/08/2010 07:21 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3856483906 --------- 90112 
 05/08/2010 07:21 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp38561380593 --------- 90112 
 05/08/2010 07:21 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3856467625 --------- 90112 
 05/08/2010 07:21 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3856466468 --------- 3170304 
 05/08/2010 07:21 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3856467484 --------- 4218880 
 05/08/2010 07:06 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-130 --------- 0 
 05/07/2010 11:45 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-129 --------- 0 
 05/07/2010 06:20 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFA10D.tmp --------- 65536 
 05/07/2010 06:20 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF9A0A.tmp --------- 16384 
 05/07/2010 06:20 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-128 --------- 0 
 05/06/2010 08:52 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF60BF.tmp --------- 65536 
 05/05/2010 04:10 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo33348 --------- 1024 
 05/05/2010 04:10 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo23348 --------- 1024 
 05/05/2010 04:10 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo43348 --------- 3072 
 05/05/2010 04:10 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp165234826562 --------- 90112 
 05/05/2010 04:10 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo63492 --------- 1024 
 05/05/2010 04:10 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo53492 --------- 1024 
 05/05/2010 04:10 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo73492 --------- 1024 
 05/05/2010 04:10 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp165234826640 --------- 90112 
 05/05/2010 04:10 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo23492 --------- 1024 
 05/05/2010 04:10 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp165234823437 --------- 90112 
 05/05/2010 04:10 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo43492 --------- 3072 
 05/05/2010 04:10 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo33492 --------- 1024 
 05/05/2010 04:10 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp165234822031 --------- 90112 
 05/05/2010 04:10 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp165239983765 --------- 90112 
 05/05/2010 04:10 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp165234821062 --------- 6316032 
 05/05/2010 04:10 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp165234820875 --------- 3170304 
 05/05/2010 04:10 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp165234821093 --------- 90112 
 05/03/2010 10:06 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\jre-6u20-windows-i586-iftw-rv.exe --------- 922400 
 05/03/2010 03:35 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo72108 --------- 1024 
 05/03/2010 03:35 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo62108 --------- 1024 
 05/03/2010 03:35 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo52108 --------- 1024 
 05/03/2010 03:35 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp21563644187 --------- 90112 
 05/03/2010 03:35 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp21563644375 --------- 90112 
 05/03/2010 03:35 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42108 --------- 3072 
 05/03/2010 03:35 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32108 --------- 1024 
 05/03/2010 03:35 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22108 --------- 1024 
 05/03/2010 03:35 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp21563640593 --------- 90112 
 05/03/2010 03:35 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp21563641937 --------- 90112 
 05/03/2010 03:35 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp21563640437 --------- 90112 
 05/03/2010 03:35 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp21563639640 --------- 90112 
 05/03/2010 03:35 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp21563639593 --------- 221184 
 05/03/2010 03:35 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp21563639437 --------- 3170304 
 05/03/2010 03:27 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF2BFD.tmp --------- 65536 
 05/03/2010 08:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp28521498046 --------- 90112 
 05/03/2010 08:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42848 --------- 5120 
 05/03/2010 08:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp28521497890 --------- 33579008 
 05/03/2010 08:41 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp28521495734 --------- 3170304 
 05/02/2010 11:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2852252781 --------- 155648 
 05/02/2010 11:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2852252187 --------- 155648 
 05/02/2010 11:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo62848 --------- 1024 
 05/02/2010 11:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo72848 --------- 1024 
 05/02/2010 11:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo52848 --------- 1024 
 05/02/2010 11:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2852249484 --------- 90112 
 05/02/2010 11:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2852231125 --------- 155648 
 05/02/2010 11:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32848 --------- 1024 
 05/02/2010 11:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22848 --------- 1024 
 05/02/2010 11:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2852218343 --------- 90112 
 05/02/2010 11:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2852216203 --------- 3170304 
 05/02/2010 11:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2852218109 --------- 548864 
 05/02/2010 11:37 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2852697312 --------- 90112 
 05/02/2010 10:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32636 --------- 1024 
 05/02/2010 10:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22636 --------- 1024 
 05/02/2010 10:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42636 --------- 3072 
 05/02/2010 10:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo52968 --------- 1024 
 05/02/2010 10:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo62968 --------- 1024 
 05/02/2010 10:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo72968 --------- 1024 
 05/02/2010 10:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2972198390 --------- 90112 
 05/02/2010 10:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22968 --------- 1024 
 05/02/2010 10:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2972198203 --------- 90112 
 05/02/2010 10:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42968 --------- 3072 
 05/02/2010 10:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2972195187 --------- 90112 
 05/02/2010 10:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32968 --------- 1024 
 05/02/2010 10:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2972184515 --------- 90112 
 05/02/2010 10:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp297214637468 --------- 90112 
 05/02/2010 10:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2972172593 --------- 90112 
 05/02/2010 10:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2972172406 --------- 33579008 
 05/02/2010 10:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2972170515 --------- 3170304 
 05/02/2010 10:21 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-127 --------- 0 
 05/02/2010 09:46 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF69EA.tmp --------- 65536 
 05/02/2010 09:26 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFDBFD.tmp --------- 16384 
 05/01/2010 04:30 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-126 --------- 0 
 04/30/2010 10:21 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-125 --------- 0 
 04/29/2010 05:26 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP38.tmp --------- 4013 
 04/29/2010 05:26 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-124 --------- 0 
 04/29/2010 05:25 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP32.tmp --------- 387 
 04/29/2010 05:25 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP30.tmp --------- 7594 
 04/29/2010 05:21 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP2E.tmp --------- 191 
 04/29/2010 05:21 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP2D.tmp --------- 777 
 04/29/2010 05:21 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP2C.tmp --------- 1882 
 04/29/2010 05:19 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP2A.tmp --------- 711 
 04/28/2010 06:26 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-123 --------- 0 
 04/28/2010 06:32 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP3A.tmp --------- 1882 
 04/28/2010 06:32 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP34.tmp --------- 1037 
 04/28/2010 06:32 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP31.tmp --------- 387 
 04/28/2010 06:31 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP2B.tmp --------- 777 
 04/28/2010 06:31 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP29.tmp --------- 711 
 04/24/2010 06:55 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-122 --------- 0 
 04/23/2010 08:41 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo43820 --------- 3072 
 04/23/2010 08:41 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo23820 --------- 1024 
 04/23/2010 08:41 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo33820 --------- 1024 
 04/23/2010 08:11 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-121 --------- 0 
 04/23/2010 07:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFBBB.tmp --------- 65536 
 04/23/2010 06:08 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF629A.tmp --------- 16384 
 04/22/2010 07:28 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo43432 --------- 3072 
 04/22/2010 07:28 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo23432 --------- 1024 
 04/22/2010 07:28 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo33432 --------- 1024 
 04/22/2010 07:28 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\12051000.od --------- 134 
 04/22/2010 07:28 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\12050953.cvr --------- 4552 
 04/22/2010 05:51 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFFF72.tmp --------- 65536 
 04/22/2010 05:51 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFEDA9.tmp --------- 16384 
 04/22/2010 05:50 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-120 --------- 0 
 04/22/2010 12:06 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-119 --------- 0 
 04/22/2010 05:25 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-118 --------- 0 
 04/20/2010 06:48 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-117 --------- 0 
 04/19/2010 05:19 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\jar_cache5892824875804979542.tmp --------- 0 
 04/19/2010 05:19 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\java_install.log --------- 27001 
 04/19/2010 04:59 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\4a93dc.mst --------- 4993536 
 04/17/2010 05:40 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (13) --------- 0 
 04/16/2010 11:58 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22252 --------- 1024 
 04/16/2010 11:58 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42252 --------- 3072 
 04/16/2010 11:58 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32252 --------- 1024 
 04/14/2010 06:41 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-116 --------- 0 
 04/14/2010 12:59 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-115 --------- 0 
 04/13/2010 06:49 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-114 --------- 0 
 04/13/2010 07:23 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-113 --------- 0 
 04/12/2010 03:12 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-112 --------- 0 
 04/10/2010 07:16 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo43364 --------- 3072 
 04/10/2010 07:16 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo23364 --------- 1024 
 04/10/2010 07:16 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo33364 --------- 1024 
 04/10/2010 06:48 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-111 --------- 0 
 04/09/2010 07:37 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-110 --------- 0 
 04/09/2010 10:57 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-109 --------- 0 
 04/09/2010 05:22 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-108 --------- 0 
 04/08/2010 07:37 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-107 --------- 0 
 04/07/2010 07:27 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3872637109 --------- 155648 
 04/07/2010 07:27 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3872637984 --------- 155648 
 04/07/2010 07:27 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3872632890 --------- 90112 
 04/07/2010 07:27 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo23868 --------- 1024 
 04/07/2010 07:27 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo33868 --------- 1024 
 04/07/2010 07:27 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3872628406 --------- 155648 
 04/07/2010 07:27 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo43868 --------- 3072 
 04/07/2010 07:27 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3872624718 --------- 155648 
 04/07/2010 07:27 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3872613375 --------- 3170304 
 04/07/2010 07:27 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3872615390 --------- 90112 
 04/07/2010 07:24 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3872615234 --------- 548864 
 04/05/2010 02:50 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~nsu.tmp --------- 0 
 04/02/2010 07:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp25168333109 --------- 155648 
 04/02/2010 07:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp25168329187 --------- 90112 
 04/02/2010 07:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp25168332593 --------- 155648 
 04/02/2010 07:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32512 --------- 1024 
 04/02/2010 07:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp25168327968 --------- 155648 
 04/02/2010 07:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22512 --------- 1024 
 04/02/2010 07:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42512 --------- 3072 
 04/02/2010 07:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp25168787234 --------- 90112 
 04/02/2010 07:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp25168325859 --------- 90112 
 04/02/2010 07:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp25168325796 --------- 2121728 
 04/02/2010 07:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp25168325609 --------- 2121728 
 04/02/2010 06:58 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3420239125 --------- 90112 
 04/02/2010 06:58 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3420230796 --------- 90112 
 04/02/2010 06:58 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3420226500 --------- 90112 
 04/02/2010 06:58 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3420238984 --------- 90112 
 04/02/2010 06:58 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3420215812 --------- 90112 
 04/02/2010 06:58 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3420215593 --------- 29384704 
 04/02/2010 06:58 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3420213703 --------- 2121728 
 04/02/2010 06:54 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp34208056218 --------- 90112 
 04/02/2010 06:33 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-106 --------- 0 
 03/31/2010 07:40 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFFEC7.tmp --------- 65536 
 03/31/2010 07:40 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFF7DB.tmp --------- 16384 
 03/31/2010 07:22 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-105 --------- 0 
 03/30/2010 07:16 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\8266671.od --------- 134 
 03/30/2010 07:16 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\8266640.cvr --------- 6508 
 03/29/2010 09:49 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFDD1B.tmp --------- 65536 
 03/29/2010 09:49 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFD4FD.tmp --------- 16384 
 03/28/2010 06:38 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-104 --------- 0 
 03/26/2010 08:16 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\uclB.tmp --------- 0 
 03/21/2010 08:38 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-103 --------- 0 
 03/20/2010 10:45 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp36686861390 --------- 90112 
 03/20/2010 10:45 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp36686863156 --------- 155648 
 03/20/2010 10:45 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp36686862656 --------- 155648 
 03/20/2010 10:45 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo33644 --------- 1024 
 03/20/2010 10:45 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo43644 --------- 3072 
 03/20/2010 10:45 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp36686850062 --------- 155648 
 03/20/2010 10:45 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo23644 --------- 1024 
 03/20/2010 10:45 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp36686846375 --------- 155648 
 03/20/2010 10:45 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp36686838515 --------- 90112 
 03/20/2010 10:45 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp36686836703 --------- 2121728 
 03/20/2010 09:50 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-102 --------- 0 
 03/20/2010 08:16 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp36686838359 --------- 8413184 
 03/20/2010 06:01 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF6517.tmp --------- 16384 
 03/19/2010 10:21 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-101 --------- 0 
 03/19/2010 07:06 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3372518234 --------- 155648 
 03/19/2010 07:06 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo23368 --------- 1024 
 03/19/2010 07:06 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3372516046 --------- 90112 
 03/19/2010 07:06 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo33368 --------- 1024 
 03/19/2010 07:06 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo43368 --------- 3072 
 03/19/2010 07:06 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3372517421 --------- 155648 
 03/19/2010 07:06 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3372506218 --------- 155648 
 03/19/2010 07:06 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp33721503796 --------- 90112 
 03/19/2010 07:06 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3372493843 --------- 90112 
 03/19/2010 07:06 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3372493703 --------- 1073152 
 03/19/2010 07:06 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3372492000 --------- 2121728 
 03/18/2010 07:32 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-100 --------- 0 
 03/18/2010 10:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp19167649734 --------- 155648 
 03/18/2010 10:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp19167648765 --------- 155648 
 03/18/2010 10:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo31920 --------- 1024 
 03/18/2010 10:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo21920 --------- 1024 
 03/18/2010 10:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo41920 --------- 3072 
 03/18/2010 10:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp19167647453 --------- 90112 
 03/18/2010 10:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp19167640843 --------- 155648 
 03/18/2010 10:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp19169307718 --------- 90112 
 03/18/2010 10:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp19167628437 --------- 12607488 
 03/18/2010 10:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp19167628562 --------- 90112 
 03/18/2010 10:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp19167626718 --------- 2121728 
 03/18/2010 10:30 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\Acr780-831dce --------- 358 
 03/16/2010 05:25 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\5211046.od --------- 134 
 03/16/2010 05:25 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\5211015.cvr --------- 4072 
 03/10/2010 08:11 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-99 --------- 0 
 03/10/2010 05:47 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (12) --------- 0 
 03/10/2010 05:39 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (11) --------- 0 
 03/10/2010 05:36 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (10) --------- 0 
 03/10/2010 05:31 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (9) --------- 0 
 03/10/2010 05:26 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (8) --------- 0 
 03/07/2010 09:32 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22860 --------- 1024 
 03/07/2010 09:32 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32860 --------- 1024 
 03/07/2010 09:32 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42860 --------- 3072 
 03/07/2010 08:54 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-98 --------- 0 
 03/07/2010 12:26 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-97 --------- 0 
 03/07/2010 06:32 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-96 --------- 0 
 03/06/2010 06:25 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-95 --------- 0 
 03/06/2010 06:20 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFFD3C.tmp --------- 16384 
 03/06/2010 04:27 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\rao2F.tmp --------- 0 
 03/05/2010 08:09 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-94 --------- 0 
 03/05/2010 12:33 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42004 --------- 3072 
 03/05/2010 12:33 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32004 --------- 1024 
 03/05/2010 12:33 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22004 --------- 1024 
 03/04/2010 08:26 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-93 --------- 0 
 03/04/2010 12:31 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (7) --------- 0 
 03/02/2010 12:57 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\19a1_appcompat.txt --------- 9094 
 03/02/2010 12:48 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-92 --------- 0 
 03/02/2010 11:19 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFD120.tmp --------- 16384 
 03/02/2010 10:37 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF96D4.tmp --------- 16384 
 02/27/2010 08:25 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-91 --------- 0 
 02/27/2010 06:14 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-90 --------- 0 
 02/26/2010 05:48 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-89 --------- 0 
 02/25/2010 08:12 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo33516 --------- 1024 
 02/25/2010 08:12 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo43516 --------- 3072 
 02/25/2010 08:12 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo23516 --------- 1024 
 02/23/2010 05:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-88 --------- 0 
 02/22/2010 06:44 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-87 --------- 0 
 02/20/2010 09:38 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-86 --------- 0 
 02/19/2010 10:34 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (6) --------- 0 
 02/19/2010 08:19 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (5) --------- 0 
 02/18/2010 08:10 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-85 --------- 0 
 02/18/2010 02:31 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-84 --------- 0 
 02/18/2010 01:51 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP22.tmp --------- 777 
 02/18/2010 01:51 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP20.tmp --------- 1813 
 02/18/2010 01:51 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP1D.tmp --------- 711 
 02/18/2010 07:26 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-83 --------- 0 
 02/17/2010 08:28 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-82 --------- 0 
 02/16/2010 03:59 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-81 --------- 0 
 02/16/2010 01:59 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42060 --------- 3072 
 02/16/2010 01:59 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32060 --------- 1024 
 02/16/2010 01:59 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22060 --------- 1024 
 02/16/2010 01:18 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-80 --------- 0 
 02/16/2010 08:32 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-79 --------- 0 
 02/15/2010 06:36 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-78 --------- 0 
 02/15/2010 09:26 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo43520 --------- 3072 
 02/15/2010 09:26 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo33520 --------- 1024 
 02/15/2010 09:26 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo23520 --------- 1024 
 02/14/2010 08:28 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-77 --------- 0 
 02/13/2010 03:35 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-76 --------- 0 
 02/12/2010 08:37 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo21196 --------- 1024 
 02/12/2010 08:37 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo31196 --------- 1024 
 02/12/2010 08:37 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo41196 --------- 3072 
 02/12/2010 08:36 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-75 --------- 0 
 02/11/2010 10:55 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22296 --------- 1024 
 02/11/2010 10:55 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32296 --------- 1024 
 02/11/2010 10:55 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42296 --------- 3072 
 02/11/2010 09:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (4) --------- 0 
 02/11/2010 07:03 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (3) --------- 0 
 02/09/2010 07:22 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32000 --------- 1024 
 02/09/2010 07:22 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22000 --------- 1024 
 02/09/2010 07:22 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42000 --------- 3072 
 02/09/2010 07:16 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-74 --------- 0 
 02/09/2010 02:40 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\29316406.od --------- 134 
 02/09/2010 02:40 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\29316375.cvr --------- 4368 
 02/09/2010 11:45 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-73 --------- 0 
 02/08/2010 06:15 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-72 --------- 0 
 02/05/2010 07:00 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\Temporary Directory 1 for guestbook.zip --------- 0 
 02/05/2010 06:15 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-71 --------- 0 
 02/01/2010 07:36 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-70 --------- 0 
 02/01/2010 06:14 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\sr03.tmp --------- 0 
 01/31/2010 12:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-69 --------- 0 
 01/30/2010 08:51 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-68 --------- 0 
 01/28/2010 08:35 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\AVSETUP_4b613de1 --------- 0 
 01/28/2010 08:33 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dd_vcredistUI2C02.txt --------- 11374 
 01/28/2010 08:33 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dd_vcredistMSI2C02.txt --------- 522674 
 01/28/2010 07:56 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-67 --------- 0 
 01/28/2010 07:41 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\SYMEVENT.LOG --------- 14520 
 01/28/2010 07:40 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\SymNRT 1-28-2010 7h40m49s.log --------- 122900 
 01/27/2010 11:13 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42564 --------- 3072 
 01/27/2010 11:13 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22564 --------- 1024 
 01/27/2010 11:13 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32564 --------- 1024 
 01/26/2010 06:34 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-66 --------- 0 
 01/26/2010 05:31 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\Norton Setup 15,0,0 1-26-2010 17h30m12s.log --------- 39234 
 01/26/2010 05:30 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\Norton Stub 4,0,0 1-26-2010 17h29m52s.log --------- 8910 
 01/26/2010 05:24 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP28.tmp --------- 329 
 01/26/2010 05:24 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP25.tmp --------- 336 
 01/26/2010 05:23 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP24.tmp --------- 493 
 01/26/2010 05:23 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP23.tmp --------- 1317 
 01/26/2010 05:23 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP21.tmp --------- 1857 
 01/26/2010 05:23 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP1F.tmp --------- 1301 
 01/26/2010 05:14 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP1C.tmp --------- 72 
 01/26/2010 05:14 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP1B.tmp --------- 73 
 01/26/2010 05:13 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP5.tmp --------- 2530 
 01/26/2010 05:13 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP4.tmp --------- 411 
 01/26/2010 05:13 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP3.tmp --------- 389 
 01/26/2010 05:13 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP1.tmp --------- 711 
 01/25/2010 10:07 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\15620953.od --------- 134 
 01/25/2010 10:07 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\15620890.cvr --------- 4036 
 01/25/2010 09:04 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-65 --------- 0 
 01/24/2010 11:39 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFF32D.tmp --------- 16384 
----------------------------------------

 
C:\Program Files

----------------------------------------

 
C:\Documents and Settings\All Users\.. 

badi    
LocalService    
gast    
NetworkService    
Default User    
All Users    
----------------------------------------

 
C:\WINDOWS\system32\drivers\etc\hosts

127.0.0.1       localhost

----------------------------------------

 

Image Name                   PID Session Name     Session#    Mem Usage
========================= ====== ================ ======== ============
System Idle Process            0 Console                 0         28 K
System                         4 Console                 0        240 K
smss.exe                     644 Console                 0        416 K
csrss.exe                    716 Console                 0      4,176 K
winlogon.exe                 740 Console                 0      3,904 K
services.exe                 784 Console                 0      3,504 K
lsass.exe                    796 Console                 0      1,396 K
nvsvc32.exe                 1004 Console                 0      4,764 K
svchost.exe                 1032 Console                 0      5,168 K
svchost.exe                 1100 Console                 0      4,460 K
svchost.exe                 1196 Console                 0     23,700 K
svchost.exe                 1356 Console                 0      3,756 K
svchost.exe                 1392 Console                 0      7,512 K
spoolsv.exe                 1536 Console                 0      4,748 K
sched.exe                   1624 Console                 0        828 K
avguard.exe                 1644 Console                 0     12,344 K
svchost.exe                 1712 Console                 0      3,796 K
avshadow.exe                1764 Console                 0      2,848 K
explorer.exe                 268 Console                 0     30,012 K
RTHDCPL.EXE                  552 Console                 0     23,004 K
rundll32.exe                 584 Console                 0      4,164 K
ipoint.exe                   608 Console                 0      7,240 K
avgnt.exe                    632 Console                 0      1,632 K
jusched.exe                  656 Console                 0      2,856 K
ctfmon.exe                   688 Console                 0      3,356 K
mDNSResponder.exe            700 Console                 0      3,564 K
GSvr.exe                     128 Console                 0      2,844 K
msmsgs.exe                  1148 Console                 0      2,120 K
jqs.exe                     1156 Console                 0      1,404 K
alg.exe                     2120 Console                 0      3,668 K
HiJackThis.exe              2792 Console                 0      8,584 K
notepad.exe                 2852 Console                 0      3,700 K
firefox.exe                 2860 Console                 0    118,404 K
plugin-container.exe        3308 Console                 0     16,416 K
mbam.exe                    3644 Console                 0     78,696 K
notepad.exe                 3680 Console                 0      3,568 K
cmd.exe                     2312 Console                 0      2,340 K
tasklist.exe                3944 Console                 0      4,568 K
wmiprvse.exe                 200 Console                 0      5,888 K

 
***** Ende des Scans Wed 01/12/2011 um  6:32:35.56 ***
         
Nochmals Dank für das Durchsehen.

Badi
__________________


Antwort

Themen zu PUP.Dealio - die zweite
antivir, antivir guard, avira, bho, bonjour, computer, dateien, desktop, dll, explorer, firefox, flash player, format, helper, hijack, hkus\s-1-5-18, indesign, malwarebytes, microsoft, nvidia, photoshop, plug-in, programm, programme, rundll, software, system, windows xp



Ähnliche Themen: PUP.Dealio - die zweite


  1. Malwarebytes zeigt Pup.dealio.tb... evtl. auch anderer Befall?
    Plagegeister aller Art und deren Bekämpfung - 01.07.2013 (9)
  2. PUP.Dealio.TB in C:\Users\ev\AppData\Local\Temp\is-3TFKM.tmp\dealio.exe von Malwarebytes identifiziert
    Log-Analyse und Auswertung - 20.05.2013 (10)
  3. PUP.Dealio aus Groupon-Rechnung?
    Plagegeister aller Art und deren Bekämpfung - 08.03.2013 (1)
  4. Auf Vista pup.installbrain und pup.dealio.TB gefunden!
    Plagegeister aller Art und deren Bekämpfung - 02.02.2013 (24)
  5. Malwarebytes hat pup.dealio.tb gefunden
    Log-Analyse und Auswertung - 21.11.2012 (36)
  6. Win32/Adware.Toolbar.Dealio gemeldet von ESET Scanner
    Log-Analyse und Auswertung - 23.01.2012 (4)
  7. Erneut Pup.dealio gefunden
    Plagegeister aller Art und deren Bekämpfung - 14.04.2011 (14)
  8. PUP.Dealio und diverse andere in Quarantäne
    Log-Analyse und Auswertung - 22.03.2011 (25)
  9. PUP.Dealio und Spyware.spyeyes
    Plagegeister aller Art und deren Bekämpfung - 04.03.2011 (21)
  10. PUP.Dealio
    Plagegeister aller Art und deren Bekämpfung - 10.02.2011 (32)
  11. PUP.Dealio
    Plagegeister aller Art und deren Bekämpfung - 10.02.2011 (21)
  12. Hilfe, Trojaner pup.dealio auf System entdeckt. Wer kann helfen???
    Log-Analyse und Auswertung - 01.02.2011 (28)
  13. PUP.Dealio infected
    Plagegeister aller Art und deren Bekämpfung - 25.01.2011 (7)
  14. PUP.Dealio
    Plagegeister aller Art und deren Bekämpfung - 17.01.2011 (10)
  15. Autorun.inf blockiert TR/Trash.GEN und PUP.Dealio Funde
    Log-Analyse und Auswertung - 14.01.2011 (1)
  16. Befall mit TR/Drop.Agen.ascd.1 und/oder PUP.Dealio?
    Log-Analyse und Auswertung - 13.01.2011 (7)
  17. Dealio Adware Search Settings PC infiziert
    Plagegeister aller Art und deren Bekämpfung - 29.03.2010 (10)

Zum Thema PUP.Dealio - die zweite - Hallo, Mein Beitrag bezieht sich auf einen Forumsbeitrag vom 9.1.2011 um 22.35 Uhr mit dem Thema: PUP.Dealio. Auch bei mir hat das Programm "Malwarebytes" PUP.Dealio entdeckt. Habe dann entsprechend den - PUP.Dealio - die zweite...
Archiv
Du betrachtest: PUP.Dealio - die zweite auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.