Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Trojaner TR/Kazy.mekml1 (https://www.trojaner-board.de/97606-trojaner-tr-kazy-mekml1.html)

kindereasy 17.04.2011 19:17

Trojaner TR/Kazy.mekml1
 
Hallo,

bin neu hier und hoffe, dass mir jemand helfen kann.

Mein Avira Antivir Programm meldet seit heute Nachmittag ständig, dass es ein Virus oder unerwünschtes Programm "TR/Kazy.mekml1" in C:\Dokumente und Einstellungen\...,\16375604.exe gefunden hat. Entfernen bringt leider nichts. Außerdem erscheint immer wieder die Meldung, dass das System ein Problem mit einer IDE/SATA Festplatte hat und ein Neustart empfohlen wird.

Inzwischen sind nur noch wenige Icons auf meinem Desktop und der Hintergrund ist schwarz. Meine Dateien und Programme sind alle nicht mehr sichtbar und greifbar, es funktioniert nur noch Outlook und Internet (eingeschränkt, fährt dauernd runter und startet neu).

Arbeite mit Windows XP.

Habe OTL.exe - gem. Problemlösung bei anderen Anwendern hier in diesem Forum - durchgeführt und poste hiermit meine reports:

OTL.txt
OTL Logfile:
Code:

OTL logfile created on: 17.04.2011 19:58:35 - Run 2
OTL by OldTimer - Version 3.2.9.1    Folder = F:\
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 69,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 89,00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 186,30 Gb Total Space | 156,69 Gb Free Space | 84,10% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
 
Computer Name: ABC
Current User Name: Elke
Logged in as Administrator.
 
Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
 
========== Processes (SafeList) ==========
 
PRC - F:\OTL.exe File not found
PRC - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\BRcrbSmEXhdOhE.exe (BitSprx)
PRC - C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
PRC - C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
PRC - C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
PRC - C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
PRC - C:\Programme\Avira\AntiVir Desktop\avshadow.exe (Avira GmbH)
PRC - C:\Programme\Lexmark\Monitor\ACJ\LMabMON.exe ()
PRC - C:\Programme\Lexmark\ErrorApp\LMab1err.EXE ( )
PRC - C:\WINDOWS\system32\lmabcoms.exe ( )
PRC - C:\Programme\CDBurnerXP\NMSAccessU.exe ()
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Programme\Picasa2\PicasaMediaDetector.exe (Google Inc.)
PRC - C:\WINDOWS\system32\agrsmsvc.exe (Agere Systems)
PRC - C:\WINDOWS\system32\spool\drivers\w32x86\3\WrtProc.exe ()
PRC - C:\WINDOWS\system32\spool\drivers\w32x86\3\WrtMon.exe ()
PRC - C:\Programme\Acronis\TrueImageHome\TimounterMonitor.exe (Acronis)
PRC - C:\Programme\Acronis\TrueImageHome\TrueImageMonitor.exe (Acronis)
PRC - C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedhlp.exe (Acronis)
PRC - C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe (Acronis)
PRC - C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\issch.exe (Macrovision Corporation)
PRC - c:\jetsuite\JSDAEMON.EXE (JetFax, Inc.)
 
 
========== Modules (SafeList) ==========
 
MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (Microsoft Corporation)
MOD - C:\WINDOWS\system32\msscript.ocx (Microsoft Corporation)
 
 
========== Win32 Services (SafeList) ==========
 
SRV - (stllssvr) -- C:\Programme\Gemeinsame Dateien\SureThing Shared\stllssvr.exe File not found
SRV - (AppMgmt) -- C:\WINDOWS\System32\appmgmts.dll File not found
SRV - (AntiVirService) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (AntiVirSchedulerService) -- C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (Apple Mobile Device) -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (lmab_device) -- C:\WINDOWS\System32\LMabcoms.exe ( )
SRV - (NMSAccessU) -- C:\Programme\CDBurnerXP\NMSAccessU.exe ()
SRV - (AgereModemAudio) -- C:\WINDOWS\system32\agrsmsvc.exe (Agere Systems)
SRV - (AcrSch2Svc) -- C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe (Acronis)
SRV - (IDriverT) -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe (Macrovision Corporation)
SRV - (jsdaemon) -- c:\jetsuite\JSDAEMON.EXE (JetFax, Inc.)
 
 
========== Driver Services (SafeList) ==========
 
DRV - (avipbb) -- C:\WINDOWS\system32\drivers\avipbb.sys (Avira GmbH)
DRV - (avgntflt) -- C:\WINDOWS\system32\drivers\avgntflt.sys (Avira GmbH)
DRV - (timounter) -- C:\WINDOWS\system32\DRIVERS\timntr.sys (Acronis)
DRV - (tifsfilter) -- C:\WINDOWS\system32\drivers\tifsfilt.sys (Acronis)
DRV - (snapman) -- C:\WINDOWS\system32\DRIVERS\snapman.sys (Acronis)
DRV - (ssmdrv) -- C:\WINDOWS\system32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (avgio) -- C:\Programme\Avira\AntiVir Desktop\avgio.sys (Avira GmbH)
DRV - (HDAudBus) -- C:\WINDOWS\system32\drivers\hdaudbus.sys (Windows (R) Server 2003 DDK provider)
DRV - (RTL8187B) -- C:\WINDOWS\system32\drivers\RTL8187B.sys (Realtek Semiconductor Corporation                          )
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.)
DRV - (RTLE8023xp) -- C:\WINDOWS\system32\drivers\Rtenicxp.sys (Realtek Semiconductor Corporation                          )
DRV - (ati2mtag) -- C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.)
DRV - (AgereSoftModem) -- C:\WINDOWS\system32\drivers\AGRSM.sys (Agere Systems)
DRV - (SampleScanner) -- C:\WINDOWS\system32\drivers\ArtecGT.sys (  )
DRV - (jsmux) -- C:\WINDOWS\system32\drivers\JSMUX.SYS (JetFax, Inc.)
DRV - (jsfax) -- C:\WINDOWS\system32\drivers\JSFAX.SYS (JetFax, Inc.)
DRV - (jsscan) -- C:\WINDOWS\system32\drivers\JSSCAN.SYS (JetFax, Inc.)
DRV - (jsdbg) -- C:\WINDOWS\system32\drivers\JSDBG.SYS (JetFax, Inc.)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Internet Explorer\Main,AlwaysUseDefaultPrinter =
IE - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
IE - HKU\S-1-5-21-1214440339-706699826-839522115-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1214440339-706699826-839522115-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
 
 
O1 HOSTS File: ([2006.02.28 14:00:00 | 000,000,820 | -H-- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1      localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (PDFCreator Toolbar Helper) - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Programme\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll ()
O2 - BHO: (Adobe PDF Reader Link Helper) - {F22C37FD-2BCB-40b6-A12E-77DDA1FBDD88} - C:\WINDOWS\System32\AcroIEHelpe.dll File not found
O3 - HKLM\..\Toolbar: (PDFCreator Toolbar) - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Programme\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll ()
O3 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\..\Toolbar\WebBrowser: (PDFCreator Toolbar) - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Programme\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll ()
O4 - HKLM..\Run: [0 - wtm] C:\WINDOWS\wtmkernel.exe (TSS-Productions)
O4 - HKLM..\Run: [Acronis Scheduler2 Service] C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedhlp.exe (Acronis)
O4 - HKLM..\Run: [AcronisTimounterMonitor] C:\Programme\Acronis\TrueImageHome\TimounterMonitor.exe (Acronis)
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [ISUSPM Startup] C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\ISUSPM.exe (Macrovision Corporation)
O4 - HKLM..\Run: [ISUSScheduler] C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\issch.exe (Macrovision Corporation)
O4 - HKLM..\Run: [LexwareInfoService] C:\Programme\Gemeinsame Dateien\Lexware\Update Manager\LxUpdateManager.exe (Haufe-Lexware GmbH & Co. KG)
O4 - HKLM..\Run: [LMPSSDMON] C:\Programme\Lexmark\Monitor\ACJ\LMabMON.exe ()
O4 - HKLM..\Run: [StartCCC] C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe ()
O4 - HKLM..\Run: [TrueImageMonitor.exe] C:\Programme\Acronis\TrueImageHome\TrueImageMonitor.exe (Acronis)
O4 - HKLM..\Run: [WrtMon.exe] C:\WINDOWS\system32\spool\drivers\w32x86\3\WrtMon.exe ()
O4 - HKU\S-1-5-21-1214440339-706699826-839522115-1004..\Run: [BRcrbSmEXhdOhE] C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\BRcrbSmEXhdOhE.exe (BitSprx)
O4 - HKU\S-1-5-21-1214440339-706699826-839522115-1004..\Run: [LMab1err] C:\Programme\Lexmark\ErrorApp\LMab1err.EXE ( )
O4 - HKU\S-1-5-21-1214440339-706699826-839522115-1004..\Run: [Picasa Media Detector] C:\Programme\Picasa2\PicasaMediaDetector.exe (Google Inc.)
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Adobe Reader - Schnellstart.lnk = C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe (Adobe Systems Incorporated)
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\HP LaserJet 3150-Status.lnk = C:\jetsuite\JETSTAT.EXE (eFax.com)
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Live Menu.lnk = C:\Programme\Gemeinsame Dateien\efax\dllcmd32.exe (eFax.com)
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Microsoft Office.lnk = C:\Programme\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation)
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\phase6_18_erinnerung.lnk = C:\Programme\phase6\phase6_18\WinStart\WinStart.exe (phase6)
O4 - Startup: C:\Dokumente und Einstellungen\Elke\Startmenü\Programme\Autostart\Seagate 2GH1S1LH Registrierungen.lnk = C:\Dokumente und Einstellungen\Elke\Anwendungsdaten\Leadertech\PowerRegister\Seagate 2GH1S1LH Registrierungen.exe (Leader Technologies/Seagate)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: RestrictRun = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFileUrl = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFind = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoNetworkConnections = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoChangeStartMenu = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktop = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCommonGroups = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSaveSettings = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewContextMenu = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: A = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: B = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: C = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: D = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: E = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: F = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: G = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: H = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: I = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: J = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: K = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: L = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: M = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: N = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: O = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: P = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: Q = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: R = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: S = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: T = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: U = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: V = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: W = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: X = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: Y = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: Z = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\RestrictRun: 0 = wtmkernel.exe (TSS-Productions)
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\RestrictRun: 1 = wtmstatus.exe (TSS-Productions)
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\RestrictRun: 2 = wtmbrx.exe
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\RestrictRun: 3 = winhelp.exe (Microsoft Corporation)
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - C:\Programme\Microsoft Office\Office10\EXCEL.EXE (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)

Extras.txt:
Code:

OTL Extras logfile created on: 17.04.2011 19:58:35 - Run 2
OTL by OldTimer - Version 3.2.9.1    Folder = F:\
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 69,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 89,00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 186,30 Gb Total Space | 156,69 Gb Free Space | 84,10% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
 
Computer Name: ABC
Current User Name: Elke
Logged in as Administrator.
 
Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htmlfile [edit] -- "C:\Programme\Microsoft Office\Office10\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "C:\Programme\Microsoft Office\Office10\msohtmed.exe" /p %1 (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22002
 
========== Authorized Applications List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Programme\Zattoo\zattood.exe" = C:\Programme\Zattoo\zattood.exe:*:Disabled:zattood -- File not found
"C:\WINDOWS\system32\lmabcoms.exe" = C:\WINDOWS\system32\lmabcoms.exe:*:Enabled:Lexmark Enhanced TCP/IP -- ( )
"C:\Programme\Java\jre6\bin\javaw.exe" = C:\Programme\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary -- (Sun Microsystems, Inc.)
"C:\Programme\iTunes\iTunes.exe" = C:\Programme\iTunes\iTunes.exe:*:Enabled:iTunes -- (Apple Inc.)
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator
"{02FD32B8-3F7F-F57B-7C65-A922211B539E}" = ccc-utility
"{03ED6584-5A5A-4CA3-B61D-741618E510DF}" = Steuer 2008
"{055EE59D-217B-43A7-ABFF-507B966405D8}" = ATI Catalyst Control Center
"{08AEE1E0-20C4-AD0E-0342-170960727C0B}" = Catalyst Control Center Graphics Full Existing
"{0C01AADF-0827-30F9-3F6D-E9DB920931B2}" = Catalyst Control Center Localization Chinese Traditional
"{0D4B35DB-2B77-89AD-88EC-C9BF9609EFE1}" = Catalyst Control Center Localization Korean
"{0E194CFB-7FB4-F5B5-94F4-01D65F8D4494}" = Catalyst Control Center Graphics Full New
"{0E55AF2F-595A-6BDD-124C-F22EBA89F902}" = Catalyst Control Center Localization Chinese Standard
"{12661A78-6C54-B106-E9B9-C91012CBA2AA}" = CCC Help Thai
"{15B2BC56-D179-4450-84B9-7A8D7F4CE1B9}" = Lexware Info Service
"{1AD75B44-F9AE-78E4-B79D-534739A3E215}" = CCC Help Greek
"{1DE24E25-7D36-7E94-7B0E-691219B6C9E8}" = CCC Help Portuguese
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{20C3DEAF-801D-4C3E-9826-E62EE16DB7AB}" = phase6_18
"{2187F4F6-4011-8904-8500-D60822AA7626}" = Skins
"{22543949-70E8-45D0-A938-F38143EB8BF8}" = Catalyst Control Center - Branding
"{26A24AE4-039D-4CA4-87B4-2F83216016FF}" = Java(TM) 6 Update 16
"{29B22401-5F1B-8277-1B8E-2D04B2909427}" = Catalyst Control Center Localization Japanese
"{2A232B31-2BF2-1E40-A05C-F6E533EE62EA}" = Catalyst Control Center Localization Polish
"{2A981294-F14C-4F0F-9627-D793270922F8}" = Bonjour
"{308B6AEA-DE50-4666-996D-0FA461719D6B}" = Apple Mobile Device Support
"{3248F0A8-6813-11D6-A77B-00B0D0160020}" = Java(TM) 6 Update 2
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java(TM) 6 Update 7
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3B7458C7-3F03-4415-AC39-D51EDEACDCCC}" = Steuer 2007
"{3C34B0D0-064B-57F2-83CA-321C248032A0}" = CCC Help Hungarian
"{406A89D6-09E6-4550-B370-8D376DDB56BE}" = Adobe Flash Player 10 ActiveX
"{410AB9BC-B057-4D39-9260-660EE1B4BED2}" = Steuer 2009
"{419CF344-3D94-4DAD-99C8-EA7B00E5EA8B}" = Acronis*True*Image*Home
"{437306A8-313F-F70F-DBA1-A81F8F9DB0C9}" = Catalyst Control Center Localization Norwegian
"{43D3CB03-B85F-DE7A-11B9-E759940C6993}" = CCC Help Turkish
"{47BAE500-B56A-E32A-2E80-1E7C192853A5}" = CCC Help Russian
"{4B526075-AF27-47A2-860D-3DA92928A051}" = Steuer 2010
"{4C6028C5-2EB3-CEF2-22E5-ACF3D1AAF4ED}" = CCC Help Italian
"{4CA7F010-9561-7688-E0CD-AAF1292F9090}" = CCC Help Polish
"{4DB93D06-CE1A-B7E0-A701-3E81A2F184EE}" = Catalyst Control Center Localization Spanish
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{595E9201-522A-A823-A2EC-9F1676C7C2B0}" = Catalyst Control Center Localization Dutch
"{5E8C42DD-7E43-462C-84CC-99E5BBE3E101}" = Steuer 2007
"{600A9225-4E51-BCDD-4277-4B2B8956EE8E}" = ccc-core-static
"{6181E138-C21C-471C-9238-F2F59C314C6C}" = Steuer 2008
"{67DABCB4-239C-4E02-805E-DEA0DDCB1926}" = Steuer Hilfesammlung
"{689EF96A-6984-6269-0307-23295D67036D}" = Catalyst Control Center Core Implementation
"{6ADA8FD6-810D-3E2F-CF24-0F0936E55AA4}" = Catalyst Control Center Localization Finnish
"{6CCD5CD2-2C94-20FE-ED6B-61A338C20FFD}" = CCC Help Chinese Traditional
"{7095FD27-37F0-4750-9DE8-D37DC0043706}" = REALTEK RTL8187B Wireless LAN Driver
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{72CD4C5F-AB0B-4814-8780-9A4F26A2086B}" = Presto! PageManager 7.12.31
"{742F3559-6BFD-6660-329D-8E8CF6C1FCEA}" = CCC Help German
"{78CC3BAB-DE2A-4FB4-8FBB-E4DADDC26747}" = Ad-Aware SE Personal
"{7E05DB3E-6CDD-4116-962F-16BC3DE41A68}" = Steuer Update 14.01
"{7E092D91-B074-CFBE-FD2E-972652ADE785}" = CCC Help French
"{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP
"{881F5DE8-9367-4B81-A325-E91BBC6472F9}" = iTunes
"{8AD22528-C6FC-7A5F-8DB7-721C0E04FC78}" = CCC Help Norwegian
"{90280407-6000-11D3-8CFE-0050048383C9}" = Microsoft Office XP Professional mit FrontPage
"{94C8F73A-D337-C7C5-46A7-8229433B16C1}" = Catalyst Control Center Localization Turkish
"{95140000-00AF-0407-0000-0000000FF1CE}" = Microsoft PowerPoint Viewer
"{99E862CC-6F69-4D39-99AA-DBF71BF3B585}" = OpenOffice.org 3.1
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9B1F5692-9B61-42E0-0EAE-B75ED8F84CD4}" = Catalyst Control Center Localization Czech
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A4E46644-984C-F411-0949-19AA3E37FD1A}" = Catalyst Control Center Localization German
"{A8231944-DA75-2993-359D-3FB44AB196E5}" = CCC Help Czech
"{A9B2784F-15F2-4A4D-6761-3BB4F03113D8}" = Catalyst Control Center Localization Italian
"{AB4F5387-46C9-9022-5279-10ABA788A270}" = Catalyst Control Center Localization Portuguese
"{AC76BA86-7AD7-1031-7B44-A70900000002}" = Adobe Reader 7.0.9 - Deutsch
"{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}" = ABBYY FineReader 6.0 Sprint
"{AE666A5A-8759-29B7-C9E8-98EA1E7F8565}" = Catalyst Control Center Localization French
"{AE756B8A-54F9-588E-B1F9-3B0132647136}" = Catalyst Control Center Localization Hungarian
"{B3FF9271-1C6C-0E30-8CCB-8708CC33A8CB}" = ccc-core-preinstall
"{B4E0B4B8-027A-D78E-0D96-201B634CE4C7}" = CCC Help English
"{B622BDB3-7A67-F509-AAEA-65BA9CF89001}" = Catalyst Control Center Localization Swedish
"{B754B683-E23C-4583-9312-50AD86836B42}" = Steuer Hilfesammlung
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C1893EC1-836D-170C-8382-CA7ADB7D3EA7}" = CCC Help Chinese Standard
"{C1A545BA-E2F3-7DC9-45F7-0DE949A24A81}" = CCC Help Swedish
"{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update
"{C9BED750-1211-4480-B1A5-718A3BE15525}" = REALTEK GbE & FE Ethernet PCI-E NIC Driver
"{CA6CE470-76E0-3EAE-62D5-5E7AB01B158A}" = CCC Help Korean
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D08DF594-B159-48BB-B64E-2221A05AB4A7}" = CCC Help Spanish
"{D2D7FBE2-5407-369D-18D6-ECA0B430A383}" = Catalyst Control Center Localization Danish
"{D5C8E140-6E6F-11DD-9AA9-0050560400B1}" = Haufe iDesk-Service
"{D6E0F772-8A27-8962-F258-40B434726D13}" = CCC Help Danish
"{DFFFF14F-BE57-98C0-3698-33E57E7C9C42}" = CCC Help Dutch
"{E13A3B1E-53C6-4697-AB0E-AE9AC6184499}" = Lexmark Scan Center
"{E990C0BD-E3BC-47F1-B124-4F33D81B0BC3}" = Ultima2000 e+
"{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support
"{EF6735B9-2EC3-D203-8BEF-6208CB39DD2A}" = Catalyst Control Center Graphics Light
"{EF91EDB8-7BFC-D470-EF9D-F90012D50DCF}" = CCC Help Finnish
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F48AAE0F-52F4-11DD-B1F7-0050560400B1}" = Haufe iDesk-Browser
"{F5AFD604-C7A0-4FEC-F500-5F4B9514C591}" = Catalyst Control Center Localization Greek
"{F829ECA5-CC14-45C0-FA39-5A2C2F36E318}" = CCC Help Japanese
"{F876BF67-BD4D-DCF4-4429-486516A6FDFF}" = Catalyst Control Center Localization Thai
"{FFF9A193-90C1-C0D8-8DD0-4F2B645FB8AE}" = Catalyst Control Center Localization Russian
"All ATI Software" = ATI - Dienstprogramm zur Deinstallation der Software
"ATI Display Driver" = ATI Display Driver
"AudibleDownloadManager" = Audible Download Manager
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"JetSuite Pro for the HP LaserJet 3150" = JetSuite Pro for the HP LaserJet 3150
"Lexmark_HostCD" = Lexmark Software deinstallieren
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"PDFCreator Toolbar" = PDFCreator Toolbar
"phase-6 Feeding Tool" = phase-6 Feeding Tool 1.0.1
"Picasa2" = Picasa 2
"TOSHIBA Software Modem" = TOSHIBA Software Modem
"VLC media player" = VLC media player 1.0.5
"Windows XP Service Pack" = Windows XP Service Pack 3
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 17.04.2011 11:48:41 | Computer Name = ABC | Source = .NET Runtime 2.0 Error Reporting | ID = 5000
Description = EventType clr20r3, P1 ccc.exe, P2 2.0.0.0, P3 466032b1, P4 mscorlib,
 P5 2.0.0.0, P6 4d352e63, P7 f4f, P8 7, P9 n3ctrye2kn3c34sgl4zqyrbfte4m13nb, P10
 NIL.
 
Error - 17.04.2011 12:13:20 | Computer Name = ABC | Source = .NET Runtime 2.0 Error Reporting | ID = 5000
Description = EventType clr20r3, P1 ccc.exe, P2 2.0.0.0, P3 466032b1, P4 mscorlib,
 P5 2.0.0.0, P6 4d352e63, P7 f4f, P8 7, P9 n3ctrye2kn3c34sgl4zqyrbfte4m13nb, P10
 NIL.
 
Error - 17.04.2011 12:15:06 | Computer Name = ABC | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung iexplore.exe, Version 6.0.2900.5512, Stillstandmodul
 hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
 
Error - 17.04.2011 12:34:33 | Computer Name = ABC | Source = .NET Runtime 2.0 Error Reporting | ID = 5000
Description = EventType clr20r3, P1 ccc.exe, P2 2.0.0.0, P3 466032b1, P4 mscorlib,
 P5 2.0.0.0, P6 4d352e63, P7 f4f, P8 7, P9 n3ctrye2kn3c34sgl4zqyrbfte4m13nb, P10
 NIL.
 
Error - 17.04.2011 12:35:09 | Computer Name = ABC | Source = .NET Runtime 2.0 Error Reporting | ID = 5000
Description = EventType clr20r3, P1 ccc.exe, P2 2.0.0.0, P3 466032b1, P4 mscorlib,
 P5 2.0.0.0, P6 4d352e63, P7 f4f, P8 7, P9 n3ctrye2kn3c34sgl4zqyrbfte4m13nb, P10
 NIL.
 
Error - 17.04.2011 12:56:31 | Computer Name = ABC | Source = .NET Runtime 2.0 Error Reporting | ID = 5000
Description = EventType clr20r3, P1 ccc.exe, P2 2.0.0.0, P3 466032b1, P4 mscorlib,
 P5 2.0.0.0, P6 4d352e63, P7 f4f, P8 7, P9 n3ctrye2kn3c34sgl4zqyrbfte4m13nb, P10
 NIL.
 
Error - 17.04.2011 13:17:22 | Computer Name = ABC | Source = .NET Runtime 2.0 Error Reporting | ID = 5000
Description = EventType clr20r3, P1 ccc.exe, P2 2.0.0.0, P3 466032b1, P4 mscorlib,
 P5 2.0.0.0, P6 4d352e63, P7 f4f, P8 7, P9 n3ctrye2kn3c34sgl4zqyrbfte4m13nb, P10
 NIL.
 
Error - 17.04.2011 13:17:44 | Computer Name = ABC | Source = .NET Runtime 2.0 Error Reporting | ID = 5000
Description = EventType clr20r3, P1 ccc.exe, P2 2.0.0.0, P3 466032b1, P4 mscorlib,
 P5 2.0.0.0, P6 4d352e63, P7 f4f, P8 7, P9 n3ctrye2kn3c34sgl4zqyrbfte4m13nb, P10
 NIL.
 
Error - 17.04.2011 13:39:01 | Computer Name = ABC | Source = .NET Runtime 2.0 Error Reporting | ID = 5000
Description = EventType clr20r3, P1 ccc.exe, P2 2.0.0.0, P3 466032b1, P4 mscorlib,
 P5 2.0.0.0, P6 4d352e63, P7 f4f, P8 7, P9 n3ctrye2kn3c34sgl4zqyrbfte4m13nb, P10
 NIL.
 
Error - 17.04.2011 13:39:17 | Computer Name = ABC | Source = .NET Runtime 2.0 Error Reporting | ID = 5000
Description = EventType clr20r3, P1 ccc.exe, P2 2.0.0.0, P3 466032b1, P4 mscorlib,
 P5 2.0.0.0, P6 4d352e63, P7 f4f, P8 7, P9 n3ctrye2kn3c34sgl4zqyrbfte4m13nb, P10
 NIL.
 
[ System Events ]
Error - 17.04.2011 11:48:21 | Computer Name = ABC | Source = System Error | ID = 1003
Description = Fehlercode 1000008e, 1. Parameter c0000005, 2. Parameter 805e184d,
 3. Parameter aa089a44, 4. Parameter 00000000.
 
 
< End of report >

--- --- ---

--- --- ---

--- --- ---



Ich würde mich über Hilfe sehr freuen.
... und sorry, wenn ich mich nicht besonders fachmännisch ausdrücke, bin eben kein Computer Spezialist.

Viele Grüße

cosinus 18.04.2011 14:12

Gibt es noch weitere Logs von Malwarebytes? Wenn ja bitte alle posten, die in Malwarebytes im Reiter Logdateien sichtbar sind.

kindereasy 18.04.2011 20:16

@cosinus:

hier kommt der erste Teil meiner Malwarebytes Logdatei (war zu groß um auf einmal zu posten). Teil zwei folgt gleich. Habe nur das File kopiert, aber noch nichts gelöscht. Hilft das weiter?

Grüße


Code:


Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Datenbank Version: 6391

Windows 5.1.2600 Service Pack 3
Internet Explorer 6.0.2900.5512

18.04.2011 21:02:39
mbam-log-2011-04-18 (21-02-06).txt

Art des Suchlaufs: Quick-Scan
Durchsuchte Objekte: 176941
Laufzeit: 6 Minute(n), 33 Sekunde(n)

Infizierte Speicherprozesse: 1
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 7
Infizierte Registrierungswerte: 1
Infizierte Dateiobjekte der Registrierung: 4
Infizierte Verzeichnisse: 1
Infizierte Dateien: 2249

Infizierte Speicherprozesse:
c:\dokumente und einstellungen\all users\anwendungsdaten\brcrbsmexhdohe.exe (Trojan.Agent) -> 1992 -> No action taken.

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
HKEY_CLASSES_ROOT\CLSID\{F22C37FD-2BCB-40b6-A12E-77DDA1FBDD88} (Trojan.Banker) -> No action taken.
HKEY_CLASSES_ROOT\linkrdr.AIEbho.1 (Trojan.Banker) -> No action taken.
HKEY_CLASSES_ROOT\linkrdr.AIEbho (Trojan.Banker) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F22C37FD-2BCB-40B6-A12E-77DDA1FBDD88} (Trojan.Banker) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{F22C37FD-2BCB-40B6-A12E-77DDA1FBDD88} (Trojan.Banker) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\prh (Trojan.Banker) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\tst (Trojan.Banker) -> No action taken.

Infizierte Registrierungswerte:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\BRcrbSmEXhdOhE (Trojan.Agent) -> Value: BRcrbSmEXhdOhE -> No action taken.

Infizierte Dateiobjekte der Registrierung:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop\NoChangingWallPaper (PUM.Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr (PUM.Hijack.TaskManager) -> Bad: (1) Good: (0) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Hijack.UserInit) -> Bad: (C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\appconf32.exe,) Good: (userinit.exe) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr (PUM.Hijack.TaskManager) -> Bad: (1) Good: (0) -> No action taken.

Infizierte Verzeichnisse:
c:\WINDOWS\system32\xmldm (Stolen.Data) -> No action taken.

Infizierte Dateien:
c:\dokumente und einstellungen\all users\anwendungsdaten\brcrbsmexhdohe.exe (Trojan.Agent) -> No action taken.
c:\dokumente und einstellungen\all users\anwendungsdaten\16375604.exe (Trojan.FakeAlert) -> No action taken.
c:\WINDOWS\system32\srvblck2.tmp (Malware.Trace) -> No action taken.
c:\WINDOWS\system32\acroiehelpe.txt (Malware.Trace) -> No action taken.
c:\WINDOWS\system32\xmldm\1192_0000003101.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1192_0000003102.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1192_0000003103.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1192_0000003105.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1192_0000003106.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1192_0000003107.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1192_0000003109.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1192_0000003110.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1192_0000003112.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1192_0000003113.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1192_0000003115.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1192_0000003116.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1192_0000003117.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1192_0000003119.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1192_0000003120.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000025.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000026.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000028.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000029.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000030.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000031.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000032.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000034.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000035.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000036.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000038.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000039.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000040.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000042.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000043.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000044.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000047.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000048.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000049.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000051.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000052.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000053.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000054.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000055.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000056.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000057.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000058.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000059.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000060.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000061.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000062.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000063.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1220_0000001614.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1220_0000001635.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1248_0000000447.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001699.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1308_0000003955.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1316_0000000102.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1360_0000004496.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1360_0000004513.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1360_0000004530.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1364_0000004039_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000065.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000066.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000067.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000068.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000070.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000071.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000072.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000074.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000075.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000076.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000078.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000079.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000003122.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000003123.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000003124.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000003125.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2580_0000003359.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2580_0000003360.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2580_0000003361.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2580_0000003362.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000090.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000091.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000092.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000093.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000094.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000095.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000106.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000107.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000108.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000109.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000110.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000111.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000112.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000113.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000114.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000115.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000117.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000118.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000119.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000120.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000121.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000122.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000123.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000124.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000125.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000126.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000127.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000128.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000129.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000130.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000131.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000132.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2604_0000003309.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2604_0000003311.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2604_0000003312.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2604_0000003313.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2604_0000003315.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2604_0000003316.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000134.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000135.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000136_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000137.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000138.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000139.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000140.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000141.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000142.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000143_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000144.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000145.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000146.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000147.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000148.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000149.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000151.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000153.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000154.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000158.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000159.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000160.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000161.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000162.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000163_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000164_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000165_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000166_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000167.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000168.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000169.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000170.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000171_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000172_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000173.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000910.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000175.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000176.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000177_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000178.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000179.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000180.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000181.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000182_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000184.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000185.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000186_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000187.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000188.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000189.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000190_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000191.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000193.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000194.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000195_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000196_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000197_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000198.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000199.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000210_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000211_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000212_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000213.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000214.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000215.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000216_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000217_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000218_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000219_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000220_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000221.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000222.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000223_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000224_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000226_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000227_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000228.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000229.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000230_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000231_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000232_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000233_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000234_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000235.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000236.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000237_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000238_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000239_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000240_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000002.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000003.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000004.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000006.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000007.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000008.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000010.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000011.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000013.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000014.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000016.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000017.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000019.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000020.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000021.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000022.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000242.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000243.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000244_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000245_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000246_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000247_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000248_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000249.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000250.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000251.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000252.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000253.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000254.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000255.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000256.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000258.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000259.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000260.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000261_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000262_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000263_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000264_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000265_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000266.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000267.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000268.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000270.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000271.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000002445.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000002446.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2672_0000000467.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2672_0000000468.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2672_0000000469.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2672_0000000470.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2672_0000000472.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2672_0000000473.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000275.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000276.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000277.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000278.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000279.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000280.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000281.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000282.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000283.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000284.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000285.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000286.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000287.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000288.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000289.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000290_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000292.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000293.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000294.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000295.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000296.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000297.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000298.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000299.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000300.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000301.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000302.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000303.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000304_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000305.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000306.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000307.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000309.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000310.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000311.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000312.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000313.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000314.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000315.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000316.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000317.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000318.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000319.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000320.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000321.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000322.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000323.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000324.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000581.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000582.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000583.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000584_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000585.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000586.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000587.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000588_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000589.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000590.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000326.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000327.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000328.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000329.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000330.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000331.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000332.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000334.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000336.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000338.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000339.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000341.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000343.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000344.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000064.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000003127.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2840_0000004983.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2840_0000005000.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002402.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002424.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000521.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000545.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000363.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000364.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000366.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000368.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000369.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000370.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000371.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000373.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000374.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000375.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000377.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000378.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000380.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000381.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000383.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000384.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001309.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001310.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001311.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001312.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001314.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001315.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001316.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000387.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000388.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000389.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000390.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000391.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000393.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000394.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000395.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000397.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000398.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000399.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000401.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000402.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000404.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000405.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000406.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000409.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000410.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000412.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000413.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000415.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000416.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000418.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000419.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000421.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000422.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000423.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000424.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000426.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000427.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000428.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000430.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000345.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000346.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000347.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000349.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000350.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000351.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000353.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000354.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000355.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000357.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000358.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000360.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000432.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000433.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000434.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000435.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000437.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000438.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000439.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000441.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000442.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000443.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000445.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000446.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1316_0000000103.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1316_0000000104.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1316_0000000105.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1316_0000003329.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1316_0000003331.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1316_0000003332.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1316_0000003333.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1316_0000003335.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1316_0000003336.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1316_0000003337.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1316_0000003338.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1316_0000003339.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1316_0000003340.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1316_0000003341.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1316_0000003342.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1316_0000003343.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1316_0000003344.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1316_0000003346.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1316_0000003347.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1316_0000003348_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2672_0000000476.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2672_0000000477.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2672_0000000479.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2672_0000000480.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2672_0000000481.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2672_0000000483.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2672_0000000484.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2672_0000000486.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2672_0000000487.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2672_0000000489.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2672_0000000490.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2672_0000000492.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2672_0000000493.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2672_0000000494.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2672_0000000496.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2672_0000000497.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1564_0000000504.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1564_0000000505.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3076_0000000518.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000523.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000524.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000525.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000526.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000528.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000529.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000530.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000532.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000533.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000535.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000536.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000538.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000540.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000541.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000542.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000543.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2880_0000003819.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000546.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000547.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000549.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000550.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000552.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000553.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000555.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000556.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000557.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000559.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000560.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000562.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000563.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000565.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000566.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000568.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000569.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000571.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000572.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000573.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000575.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000576.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000577.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000579.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000580.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000592.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000593_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000594.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000595.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000596.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000597_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000598.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000599.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000600.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000601_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000602.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000603.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000604.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000605.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000606_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000607.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000609.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000610.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000611_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000612.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000613.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000614.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000615.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000616_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000617.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000618.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000619.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000620.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000621_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000622.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000623.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000624.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000626_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000627.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000628.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000629.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000630_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000632.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000633.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000634.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000635.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000637.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000638.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000639.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000641.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000642.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000644.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000645.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000625.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000647.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000666.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000686.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000709.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000731.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3856_0000003411.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3856_0000003427.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001436.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000648.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000649.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000650.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000651.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000652.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000653.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000654.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000655.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000656.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000657.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000658.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000660.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000661.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000662.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000663.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000665.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000667.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000668.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000669.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000670.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000671.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000672.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000673.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000674.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000675.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000676.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000678.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000679.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000680.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000681.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000683.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000684.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000272.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000273.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000687.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000689.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000690.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000691.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000692.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000694.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000695.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000696.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000698.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000699.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000700.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000702.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000703.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000705.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000706.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000707.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000710.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000712.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000713.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000715.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000716.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000718.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000719.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000722.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000723.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000724.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000725.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000726.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000727.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000728.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000729.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000730.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3716_0000000509.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3716_0000000510.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3716_0000000511.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3716_0000000512.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3716_0000000514.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3716_0000000515.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000732.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000733.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000734.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000735.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000736.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000737.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000738.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000739.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000741.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000742.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000743.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000744.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000745.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000747.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000748.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000749.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000750.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000752.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000753.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000754.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000756.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000757.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3684_0000004441.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3684_0000004442.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3684_0000004443.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3684_0000004445.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3684_0000004446.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3684_0000004447.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3684_0000004449.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3684_0000004450.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3684_0000004452.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000786.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000787.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000788.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000790.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000791.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000792.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000794.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000795.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000797.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000798.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000800.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000801.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000803.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000804.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000805.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000806.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000809.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000810.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000812.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000813.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000814.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000815.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000816.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000818.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000819.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000820.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000821.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000822.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000824.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000825.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000826.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000827.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000001280.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000001281.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000001282.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000001283.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000001285.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000001286.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000001287.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000001289.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000001290.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000001292.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000001293.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000830.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000831.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000833.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000834.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000835.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000836.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000838.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000839.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000840.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000842.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000843.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000844.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000845.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000846.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000847.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000848.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000849.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000851.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000852.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000853.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000854.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000856.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000857.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000859.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000860.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000862.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000863.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000864.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000866.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000867.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3672_0000000769.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3672_0000000771.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3672_0000000772.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3672_0000000774.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3672_0000000775.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3672_0000000776.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3672_0000000778.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3672_0000000779.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3672_0000000780.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3672_0000000782.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3672_0000000783.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3128_0000003285.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3128_0000003286.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3128_0000003287.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000887.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000889.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000890.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000891.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000893.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000894.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000895.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000896.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000897.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000899.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000900.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000901.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000903.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000904.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000905.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000907.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000908.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000912.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000913.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000915.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000916.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000917.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000919.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000920.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000922.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000923.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000925.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000926.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000928.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000929.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000930.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000931.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000933.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001884.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001885.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001886.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001887.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000935.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000937.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000938.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000939.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000940.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000941.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000942.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000944.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000945.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000946.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000947.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000949.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000950.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000951.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000953.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000954.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000955.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000956.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000957.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000958.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000959.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000960.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000961.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000962.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000963.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000964.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000965.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000966.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000967.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000200.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000201.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000202.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000203.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000204.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000205.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000206.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000207.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000208_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000969.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000970.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000971.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000972.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000973.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000974.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000975.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000976.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000977.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000978.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000979.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000980.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000981.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000982.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000000992.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000000993.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000000994.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000000995.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000000996.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000000997.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000000998.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000000999.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001000.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001001.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001002.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001003.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001004.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001005.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001006.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001007.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001009.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001010.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001011.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001012.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001013.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001014.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001015.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001016.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001017.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001018.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001019.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001020.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001021.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001022.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001023.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001024.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001026.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001027.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001028.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001029.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001030.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001031.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001032.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001033.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001034.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001035.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001037.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001038.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001046.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001047.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001048.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001049.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001050.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001051.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001052.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001053.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001054.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001055.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001056.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001057.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001058.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001059.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001060.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001061.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001062.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001063.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001064.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001065.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001066.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001067.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001068.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001069.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001070.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001071.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001072.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001073.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001074.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001075.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001076.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001077.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001078.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001079.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001080.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001081.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001082.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001084.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001085.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001086.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001087.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001088.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001089.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001090.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001091.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001092.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001093.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001094.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001095.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001096.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001097.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001098.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001099.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001101.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001102.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001103.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001104.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001105.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001106.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001107.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001108.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001109.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001110.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001111.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001112.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001113.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001114.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001115.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001116.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2952_0000002331.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2952_0000002332.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2952_0000002333.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001118.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001119.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001120.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001121.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001122.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001123.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001124.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001125.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001126.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001127.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001128.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001129.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001130.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001131.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001133.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001134.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001936.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001957.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3232_0000004659.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3232_0000004681.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3248_0000005533.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\328_0000005427.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3300_0000005447.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3300_0000005469.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3328_0000005042.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1364_0000004058.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1492_0000004749.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002696_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001221.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2292_0000002580.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000045.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2880_0000003821.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3076_0000000517.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3328_0000005064.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000608.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001457.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001137.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001138.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001139.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001140.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001141.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001142.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001143.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001144.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001146.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001147.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001148.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001150.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001151.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001152.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001153.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001154.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001155.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1408_0000001163.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1408_0000001165.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1408_0000001166.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1408_0000001168.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1408_0000001169.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1408_0000001171.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1408_0000001172.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1408_0000001174.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1408_0000001175.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1408_0000001176.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1408_0000001178.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1408_0000001179.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1408_0000001181.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1408_0000001182.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1408_0000001184.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1408_0000001185.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1408_0000001187.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1408_0000001188.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1408_0000001189.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1408_0000001191.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1408_0000001192.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001202.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001203.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001204.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001206.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001207.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001209.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001210.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001212.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001213.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001214.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001215.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001216.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001217.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001218.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001219.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001220.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1884_0000005543.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1884_0000005544.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1884_0000005545.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2580_0000003363.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2580_0000003380.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2588_0000003854.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2588_0000003877.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2588_0000003900.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2588_0000003923.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2592_0000003580.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2604_0000003317.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001247.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001747.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001764.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001222.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001223.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001225.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001226.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001227.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001228.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001230.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001231.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001232.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001234.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001235.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000005737.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000005738.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000005739.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000005740.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000005742.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001746.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001248.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001249.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001250.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001251.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001252.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001253.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001255.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001257.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001259.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001261.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001262_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001263_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001264_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001265_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001266_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001267_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001268.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001269.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001270.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001271.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001272.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001274.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001276.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001278.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3972_0000003156.clb (Stolen.Data) -> No action taken.


kindereasy 18.04.2011 20:17

Hier der Rest:

Code:

c:\WINDOWS\system32\xmldm\3972_0000003157.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3972_0000003158.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3972_0000003160.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3972_0000003161.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3972_0000003162.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3972_0000003164.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3972_0000003165.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3972_0000003167.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3972_0000003168.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000001296.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000001298.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000001299.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000001300.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000001302.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000001303.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000001304.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000001306.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000001307.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000003234.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000003235.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000003236.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000003237.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000003238.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000003239.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000003240.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000003241.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000003242.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000003243.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000003244.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000003245.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000003246.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000003247.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000003248.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000003249.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000003250.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000003252.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000003253.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3972_0000003170.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3972_0000003191.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3972_0000004848.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3980_0000005771.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3980_0000005795.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3980_0000005819.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4028_0000002977.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4028_0000002998.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4028_0000003020.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4028_0000003039.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4028_0000003061.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4072_0000004571.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4088_0000003992.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4088_0000004015.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4088_0000005506.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001319.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001321.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001322.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001324.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001325.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001326.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001327.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001329.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001330.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001331.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001333.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001334.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001335.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001336.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001337.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001339.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000155.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000156.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001341.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001342.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001344.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001345.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001346.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001348.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001349.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001350.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001351.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001353.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001354.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001355.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001357.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001358.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001359.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001360.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001361.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001362.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001364.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001365.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001366.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001368.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001369.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001370.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001372.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001373.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001381.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001382.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001384.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001385.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001387.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001388.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001390.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001391.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001392.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001394.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001395.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001396.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001398.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001399.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001400.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001402.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\fromjava01cafdcbb0550712_00003056_rasphone.pbk (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\fromjava01cafdce253eb5bc_00004396_classes.jsa (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\fromjava01cafdce2551c88c_00004396_classes.jsa (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\fromjava01cafdce28d963ca_00004396_classes.jsa (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\fromjava01cafdce28e08ad8_00004396_classes.jsa (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\fromjava01cafdce2a652a26_00004396_classes.jsa (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001404.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001406.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001407.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001408.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001410.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001411.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001412.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001414.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001415.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001416.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001418.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001419.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001420.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001422.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001423.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001424.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001426.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001427.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001428.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001430.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001431.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001432.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001434.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001435.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001438.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001439.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001440.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001442.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001443.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001445.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001446.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001448.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001449.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001451.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001452.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001453.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001454.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001455.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001456.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001458.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001459.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001460.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001461.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001462.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001463.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001464.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001465.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001467.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001468.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001469.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001471.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001472.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001473.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001475.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001476.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3328_0000005022.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3328_0000005023.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3328_0000005024.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3328_0000005026.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3328_0000005027.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3328_0000005028.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3328_0000005030.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3328_0000005031.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3328_0000005033.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3328_0000005034.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3328_0000005036.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3328_0000005037.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3328_0000005038.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3328_0000005039.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3328_0000005041.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001497.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001499.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001500.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001501.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001503.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001504.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001505.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001507.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001508.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001509.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001511.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001512.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001514.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001515.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001517.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001518.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3404_0000002448.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3404_0000002449.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3404_0000002450.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3404_0000002452.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3404_0000002453.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3404_0000002454.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3404_0000002456.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3404_0000002457.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3404_0000002459.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3404_0000002460.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3404_0000002462.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3404_0000002463.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3404_0000002465.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3404_0000002466.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3404_0000002467.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3404_0000002469.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3404_0000002470.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3404_0000002471.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3404_0000002473.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3404_0000002474.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001520.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001521.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001523.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001524.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001525.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001527.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001528.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001529.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001530.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001531.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001533.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001534.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001535.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001537.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001538.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001539.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001541.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001542.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001549.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001550.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001552.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001553.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001555.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001556.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001558.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001559.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001560.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001561.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001563.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001564.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001565.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001567.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001568.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001569.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1732_0000004706.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1732_0000004707.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1732_0000004708.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001572.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001573.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001574.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001576.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001577.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001578.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001579.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001580.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001582.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001583.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001584.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001586.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001587.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001588.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001590.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001591.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000001977.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000001978.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000001979.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000001980.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000001982.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000001983.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000001984.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000001986.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000001987.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000001989.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000001990.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000001992.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1248_0000000448.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1248_0000000449.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1248_0000000450.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1248_0000000451.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1248_0000000452.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1248_0000000453.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1248_0000000454.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1248_0000000455.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1248_0000000456.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1248_0000000457.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1248_0000000458.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1248_0000000459.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1248_0000000460.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1248_0000000461.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1220_0000001616.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1220_0000001617.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1220_0000001618.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1220_0000001619.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1220_0000001620.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1220_0000001621.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1220_0000001623.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1220_0000001624.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1220_0000001625.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1220_0000001626.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1220_0000001628.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1220_0000001629.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1220_0000001631.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1220_0000001632.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1220_0000001633.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1220_0000001636.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001680.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001681.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001682.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001683.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001685.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001686.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001687.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001689.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001690.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001692.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001693.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001695.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001696.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001698.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001644.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001646.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001647.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001649.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001650.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001652.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001653.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001655.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001656.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001657.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001658.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001659.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001660.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001661.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001662.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001663.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001664.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001665.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001666.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001667.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001669.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001670.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001671.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001673.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001674.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001675.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001677.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001678.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001701.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001702.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001704.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001705.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001707.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001708.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001710.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001711.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001713.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001714.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001715.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001717.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001718.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3052_0000001731.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3052_0000001732.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3052_0000001734.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3052_0000001735.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3052_0000001737.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3052_0000001738.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3052_0000001740.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3052_0000001741.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3052_0000001742.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3052_0000001744.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3052_0000001745.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001748.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001749.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001750.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001751.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001752.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001753.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001754.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001755.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001756.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001757.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001758.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001759.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001760.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001761.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001762.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001763.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001765.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001766.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001767.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001768.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001769.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001770.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001771.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001772.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001773.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001774.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001775.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001776.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001777.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001778.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001779.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001780.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001781.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001782.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001783.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001784.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001802.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001804.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001805.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001806.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001807.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001809.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001810.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001811.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001813.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001814.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001815.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001816.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001817.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001818.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001820.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001821.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001824.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001825.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001826.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001827.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001829.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001830.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001831.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001832.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001833.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001835.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001836.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001838.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001839.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001840.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001842.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001843.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3752_0000004904.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3752_0000004905.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3752_0000004906.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3752_0000004907.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3752_0000004909.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3752_0000004910.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3752_0000004911.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3752_0000004913.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3752_0000004914.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3752_0000004916.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3752_0000004917.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3752_0000004919.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3752_0000004920.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3752_0000004921.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3752_0000004922.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3776_0000001856.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3776_0000001857.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3776_0000001859.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3776_0000001860.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3776_0000001861.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3776_0000001862.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3776_0000001863.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3776_0000001864.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3776_0000001865.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3776_0000001866.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3776_0000001867.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3776_0000001868.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3776_0000001869.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3776_0000001871.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3776_0000001872.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3776_0000001874.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3776_0000001875.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3776_0000001877.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3776_0000001878.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3776_0000001879.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3776_0000001881.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3776_0000001882.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3856_0000003403.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3856_0000003404.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3856_0000003405.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3856_0000003406.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3856_0000003407.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3856_0000003408.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3856_0000003409_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3856_0000003410.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001890.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001891.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001893.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001894.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001896.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001897.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001899.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001900.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001902.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001903.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001904.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001905.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001907.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001908.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001909.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001911.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001912.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001913.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001914.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001916.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001917.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001918.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001920.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001921.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001922.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001924.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001925.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001938.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001939.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001941.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001942.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001943.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001944.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001946.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001947.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001948.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001950.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001951.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001952.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001953.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001954.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001955.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001956.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3232_0000004647.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3232_0000004648.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3232_0000004649.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3232_0000004651.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3232_0000004652.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3232_0000004653.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3232_0000004655.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3232_0000004656.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3232_0000004658.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001958.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001959.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001960.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001961.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001962.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001963.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001965.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001966.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001967.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001968.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001970.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001971.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001972.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001974.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001975.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000001994.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000001995.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000001997.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000001998.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000001999.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000002001.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000002002.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000002003.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000002004.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000002005.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000002007.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000002008.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000002009.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000002010.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000002012.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000002013.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000002014.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000002016.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000002017.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\840_0000003604.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\840_0000003605.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\840_0000003606.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\840_0000003608.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\840_0000003609.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000157.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000174.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000192.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000911.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000934.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001889.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\740_0000003265.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001643.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\840_0000003610.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002027.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002049.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001380.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001403.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002028.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002030.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002031.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002033.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002034.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002036.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002037.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002038.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002039.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002041.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002042.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002043.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002045.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002046.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002047.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002048.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002050.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002052.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002053.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002054.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002056.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002057.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002059.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002060.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002062.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002063.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002065.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002066.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002068.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002069.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002070.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002072.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002073.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001375.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001376.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001377.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001378.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002083.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002085.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002086.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002087.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002089.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002090.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002092.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002093.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002094.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002095.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002097.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002098.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002099.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002101.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002102.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002104.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3032_0000002951.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3032_0000002952.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3032_0000002953.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3032_0000002954.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3032_0000002955.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002106.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002107.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002109.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002110.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002111.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002113.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002114.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002116.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002117.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002118.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002119.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002121.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002122.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002123.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002125.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002126.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002129.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002130.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002131.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002133.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002134.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002135.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002137.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002138.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002140.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002141.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002143.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002144.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002145.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002147.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002148.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002149.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002152.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002153.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002155.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002156.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002157.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002159.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002160.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002161.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002163.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002164.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002165.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002167.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002168.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002169.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002172.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002173_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002176.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002177.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002178.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002179.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002180.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002182.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002183.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002185.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002186.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002187.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002189.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002190.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002191.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002192.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002193.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002194.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002197.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002198.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002199.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002200.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002201.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002203.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002204.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002205.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002206.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002207.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002208.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002209.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002211.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002212.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002213.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002215.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002218.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002219.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002221.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002222.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002224.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002225.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002227.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002228.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002230.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002231.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002233.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002234.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002235_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002237.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002238.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002239.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002082.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002105.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002128.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002151.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002174.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002196.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002216.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002240.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002261.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002282.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002303.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3032_0000002956.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3052_0000001729.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002241.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002243.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002244.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002245.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002246.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002248.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002249.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002250.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002251.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002252.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002254.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002255.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002256.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002257.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002259.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002260.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002263.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002264.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002265.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002267.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002268.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002269.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002270.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002271.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002272.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002273.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002275.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002276.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002277.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002279.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002280.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002281.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002283.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002285.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002286.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002287.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002288.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002289.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002291.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002292.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002293.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002295.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002296.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002297.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002298.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002299.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002300.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002301.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002304.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002305.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002307.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002308.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002309.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002310.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002312.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002313.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002314.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002315.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002317.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002318.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002319.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002321.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002322.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002323.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002325.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002326.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002327.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002329.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002330.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2952_0000002335.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2952_0000002336.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2952_0000002337.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2952_0000002338.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2952_0000002339.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2952_0000002340.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2952_0000002341.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2952_0000002342.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2952_0000002343.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2952_0000002344.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2952_0000002346.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2952_0000002347.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2952_0000002349.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2952_0000002350.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002352.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002353.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002354.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002356.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002357.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002358.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002360.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002361.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002363.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002364.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002366.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002367.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002369.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002370.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002371.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002374.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002375.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002376.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002378.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002379.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002380.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002381.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002382.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002383.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002385.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002386.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002387.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002388.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002390.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002391.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002393.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002394.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002395.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002397.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002398.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002404.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002405.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002406.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002408.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002409.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002411.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002412.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002414.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002415.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002416.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002417.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002419.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002420.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002421.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002423.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002425.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002426.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002427.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002428.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002429.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002430.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002431.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002432.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002434.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002435.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002436.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002438.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002439.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002440.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002442.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002443.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000519.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000520.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002477.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002478.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002479.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002481.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002482.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002483.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002485.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002486.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002488.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002489.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002491.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002492.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002493.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002494.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002496.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002497.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002500.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002501.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002502.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002503.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002504.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002505.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002507.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002508.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002509.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002511.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002512.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002513.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002515.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002516.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002517.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002518.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002520.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002521.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002522.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002523.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002524.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002525.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002526.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002527.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002528.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002530.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002532.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002533.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002534.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002536.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002538.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002540.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002541.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002542.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002543.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002545.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002547.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002548.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000869.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000870.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000871.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000872.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000874.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000875.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000876.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000878.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000879.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000881.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000882.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000884.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000885.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3204_0000002550.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3204_0000002551.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3204_0000002553.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3204_0000002554.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3204_0000002555.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3204_0000002556.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3204_0000002557.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3204_0000002558.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3204_0000002559.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3204_0000002560.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3204_0000002561.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3204_0000002562.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3204_0000002563.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3204_0000002564.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3204_0000002565.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3204_0000002566.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3204_0000002567_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3204_0000002569.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3204_0000002570.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3204_0000002571_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3204_0000002572.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001927.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001928.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001929.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001931.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001932.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001933.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001935.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1904_0000000507.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1904_0000000508.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2292_0000002581.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2292_0000002583.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2292_0000002584.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2292_0000002585.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2292_0000002587.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2292_0000002588.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2292_0000002589.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2292_0000002591.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2292_0000002592.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2292_0000002593.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2292_0000002595.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2292_0000002596.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2292_0000002597.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2292_0000002599.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2292_0000002600.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2292_0000002601.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2292_0000002603.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2292_0000002604.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2292_0000002605.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2312_0000003352.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2312_0000003353.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2312_0000003354.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001548.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001570.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1732_0000004710.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1732_0000004731.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1764_0000004409.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000001993.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001200.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002617.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002619.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002620.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002621.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002623.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002625.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002627.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002629.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002630.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002632.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002633.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002635.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002636.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002638.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002639.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002641.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002644.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002645.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002646.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002648.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002649.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002651.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002653.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002654.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002655.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002657.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002658_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002659_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002660_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002661_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002664.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002665_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002666_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002667_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002668_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002669_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002670.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002671.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002672_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002673_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002674_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002675_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002676_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002678.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002679_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002681_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002682_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002683_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002685.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002686_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002687_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002688_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002689_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002690_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002691.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002692.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002693_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002694_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002695_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002697_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002698.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002699.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002700_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002701_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002702_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002703_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002704_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002705.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002706.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002707_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002708_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002709_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002710_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002711_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002714.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002715.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002716.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002717.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002718.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002719.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002720.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002721.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002722.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002723.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002724.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002725.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002726.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002727.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002728.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002729.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002731.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002732.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002733.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002734.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002735.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002736.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002737.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002738.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002739.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002740_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002741_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002742_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002743_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002744_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002746.htm (Stolen.Data) -> No action taken.

Vielen Dank im Voraus

cosinus 18.04.2011 20:37

Zitat:

Art des Suchlaufs: Quick-Scan

Bitte routinemäßig einen Vollscan mit malwarebytes machen und Log posten.
Denk daran, dass Malwarebytes vor jedem Scan manuell aktualisiert werden muss!

Falls Logs aus älteren Scans mit Malwarebytes vorhanden sind, bitte auch davon alle posten!

kindereasy 18.04.2011 21:53

OK, Vollscan mit Malwarebytes nach erneuter Aktualisierung durchgeführt. Ältere Logfiles sind leider nicht vorhanden.

Hier Teil 1/2 des aktuellen Logfiles:


Code:

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Datenbank Version: 6392

Windows 5.1.2600 Service Pack 3
Internet Explorer 6.0.2900.5512

18.04.2011 22:44:33
mbam-log-2011-04-18 (22-44-17).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|F:\|)
Durchsuchte Objekte: 258978
Laufzeit: 1 Stunde(n), 2 Minute(n), 1 Sekunde(n)

Infizierte Speicherprozesse: 1
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 7
Infizierte Registrierungswerte: 1
Infizierte Dateiobjekte der Registrierung: 4
Infizierte Verzeichnisse: 1
Infizierte Dateien: 2249

Infizierte Speicherprozesse:
c:\dokumente und einstellungen\all users\anwendungsdaten\brcrbsmexhdohe.exe (Trojan.Agent) -> 1992 -> No action taken.

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
HKEY_CLASSES_ROOT\CLSID\{F22C37FD-2BCB-40b6-A12E-77DDA1FBDD88} (Trojan.Banker) -> No action taken.
HKEY_CLASSES_ROOT\linkrdr.AIEbho.1 (Trojan.Banker) -> No action taken.
HKEY_CLASSES_ROOT\linkrdr.AIEbho (Trojan.Banker) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F22C37FD-2BCB-40B6-A12E-77DDA1FBDD88} (Trojan.Banker) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{F22C37FD-2BCB-40B6-A12E-77DDA1FBDD88} (Trojan.Banker) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\prh (Trojan.Banker) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\tst (Trojan.Banker) -> No action taken.

Infizierte Registrierungswerte:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\BRcrbSmEXhdOhE (Trojan.Agent) -> Value: BRcrbSmEXhdOhE -> No action taken.

Infizierte Dateiobjekte der Registrierung:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop\NoChangingWallPaper (PUM.Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr (PUM.Hijack.TaskManager) -> Bad: (1) Good: (0) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Hijack.UserInit) -> Bad: (C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\appconf32.exe,) Good: (userinit.exe) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr (PUM.Hijack.TaskManager) -> Bad: (1) Good: (0) -> No action taken.

Infizierte Verzeichnisse:
c:\WINDOWS\system32\xmldm (Stolen.Data) -> No action taken.

Infizierte Dateien:
c:\dokumente und einstellungen\all users\anwendungsdaten\brcrbsmexhdohe.exe (Trojan.Agent) -> No action taken.
c:\dokumente und einstellungen\all users\anwendungsdaten\16375604.exe (Trojan.FakeAlert) -> No action taken.
c:\WINDOWS\system32\srvblck2.tmp (Malware.Trace) -> No action taken.
c:\WINDOWS\system32\acroiehelpe.txt (Malware.Trace) -> No action taken.
c:\WINDOWS\system32\xmldm\1192_0000003101.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1192_0000003102.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1192_0000003103.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1192_0000003105.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1192_0000003106.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1192_0000003107.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1192_0000003109.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1192_0000003110.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1192_0000003112.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1192_0000003113.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1192_0000003115.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1192_0000003116.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1192_0000003117.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1192_0000003119.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1192_0000003120.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000025.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000026.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000028.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000029.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000030.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000031.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000032.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000034.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000035.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000036.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000038.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000039.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000040.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000042.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000043.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000044.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000047.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000048.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000049.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000051.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000052.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000053.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000054.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000055.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000056.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000057.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000058.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000059.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000060.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000061.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000062.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000063.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1220_0000001614.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1220_0000001635.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1248_0000000447.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001699.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1308_0000003955.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1316_0000000102.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1360_0000004496.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1360_0000004513.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1360_0000004530.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1364_0000004039_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000065.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000066.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000067.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000068.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000070.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000071.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000072.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000074.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000075.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000076.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000078.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000079.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000003122.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000003123.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000003124.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000003125.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2580_0000003359.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2580_0000003360.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2580_0000003361.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2580_0000003362.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000090.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000091.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000092.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000093.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000094.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000095.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000106.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000107.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000108.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000109.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000110.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000111.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000112.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000113.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000114.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000115.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000117.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000118.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000119.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000120.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000121.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000122.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000123.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000124.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000125.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000126.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000127.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000128.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000129.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000130.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000131.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000132.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2604_0000003309.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2604_0000003311.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2604_0000003312.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2604_0000003313.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2604_0000003315.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2604_0000003316.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000134.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000135.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000136_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000137.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000138.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000139.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000140.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000141.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000142.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000143_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000144.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000145.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000146.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000147.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000148.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000149.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000151.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000153.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2556_0000000154.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000158.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000159.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000160.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000161.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000162.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000163_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000164_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000165_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000166_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000167.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000168.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000169.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000170.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000171_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000172_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000173.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000910.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000175.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000176.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000177_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000178.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000179.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000180.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000181.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000182_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000184.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000185.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000186_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000187.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000188.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000189.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000190_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000191.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000193.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000194.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000195_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000196_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000197_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000198.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000199.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000210_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000211_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000212_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000213.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000214.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000215.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000216_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000217_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000218_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000219_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000220_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000221.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000222.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000223_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000224_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000226_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000227_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000228.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000229.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000230_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000231_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000232_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000233_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000234_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000235.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000236.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000237_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000238_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000239_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000240_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000002.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000003.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000004.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000006.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000007.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000008.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000010.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000011.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000013.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000014.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000016.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000017.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000019.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000020.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000021.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000022.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000242.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000243.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000244_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000245_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000246_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000247_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000248_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000249.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000250.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000251.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000252.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000253.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000254.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000255.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000256.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000258.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000259.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000260.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000261_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000262_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000263_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000264_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000265_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000266.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000267.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000268.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000270.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000271.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000002445.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000002446.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2672_0000000467.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2672_0000000468.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2672_0000000469.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2672_0000000470.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2672_0000000472.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2672_0000000473.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000275.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000276.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000277.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000278.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000279.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000280.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000281.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000282.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000283.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000284.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000285.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000286.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000287.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000288.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000289.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000290_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000292.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000293.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000294.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000295.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000296.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000297.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000298.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000299.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000300.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000301.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000302.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000303.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000304_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000305.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000306.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000307.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000309.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000310.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000311.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000312.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000313.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000314.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000315.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000316.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000317.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000318.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000319.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000320.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000321.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000322.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000323.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000324.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000581.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000582.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000583.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000584_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000585.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000586.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000587.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000588_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000589.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000590.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000326.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000327.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000328.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000329.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000330.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000331.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000332.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000334.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000336.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000338.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000339.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000341.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000343.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000344.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000064.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000003127.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2840_0000004983.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2840_0000005000.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002402.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002424.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000521.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000545.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000363.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000364.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000366.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000368.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000369.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000370.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000371.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000373.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000374.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000375.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000377.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000378.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000380.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000381.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000383.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000384.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001309.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001310.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001311.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001312.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001314.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001315.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001316.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000387.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000388.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000389.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000390.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000391.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000393.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000394.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000395.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000397.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000398.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000399.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000401.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000402.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000404.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000405.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000406.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000409.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000410.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000412.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000413.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000415.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000416.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000418.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000419.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000421.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000422.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000423.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000424.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000426.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000427.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000428.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000430.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000345.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000346.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000347.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000349.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000350.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000351.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000353.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000354.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000355.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000357.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000358.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000360.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000432.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000433.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000434.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000435.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000437.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000438.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000439.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000441.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000442.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000443.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000445.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\508_0000000446.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1316_0000000103.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1316_0000000104.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1316_0000000105.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1316_0000003329.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1316_0000003331.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1316_0000003332.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1316_0000003333.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1316_0000003335.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1316_0000003336.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1316_0000003337.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1316_0000003338.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1316_0000003339.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1316_0000003340.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1316_0000003341.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1316_0000003342.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1316_0000003343.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1316_0000003344.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1316_0000003346.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1316_0000003347.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1316_0000003348_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2672_0000000476.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2672_0000000477.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2672_0000000479.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2672_0000000480.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2672_0000000481.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2672_0000000483.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2672_0000000484.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2672_0000000486.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2672_0000000487.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2672_0000000489.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2672_0000000490.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2672_0000000492.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2672_0000000493.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2672_0000000494.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2672_0000000496.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2672_0000000497.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1564_0000000504.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1564_0000000505.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3076_0000000518.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000523.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000524.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000525.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000526.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000528.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000529.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000530.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000532.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000533.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000535.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000536.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000538.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000540.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000541.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000542.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000543.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2880_0000003819.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000546.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000547.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000549.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000550.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000552.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000553.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000555.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000556.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000557.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000559.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000560.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000562.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000563.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000565.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000566.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000568.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000569.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000571.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000572.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000573.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000575.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000576.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000577.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000579.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000580.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000592.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000593_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000594.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000595.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000596.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000597_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000598.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000599.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000600.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000601_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000602.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000603.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000604.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000605.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000606_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000607.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000609.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000610.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000611_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000612.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000613.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000614.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000615.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000616_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000617.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000618.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000619.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000620.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000621_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000622.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000623.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000624.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000626_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000627.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000628.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000629.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000630_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000632.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000633.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000634.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000635.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000637.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000638.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000639.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000641.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000642.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000644.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000645.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000625.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000647.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000666.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000686.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000709.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000731.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3856_0000003411.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3856_0000003427.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001436.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000648.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000649.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000650.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000651.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000652.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000653.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000654.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000655.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000656.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000657.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000658.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000660.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000661.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000662.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000663.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000665.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000667.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000668.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000669.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000670.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000671.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000672.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000673.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000674.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000675.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000676.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000678.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000679.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000680.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000681.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000683.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000684.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000272.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3736_0000000273.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000687.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000689.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000690.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000691.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000692.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000694.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000695.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000696.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000698.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000699.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000700.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000702.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000703.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000705.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000706.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000707.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000710.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000712.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000713.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000715.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000716.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000718.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000719.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000722.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000723.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000724.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000725.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000726.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000727.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000728.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000729.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000730.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3716_0000000509.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3716_0000000510.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3716_0000000511.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3716_0000000512.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3716_0000000514.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3716_0000000515.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000732.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000733.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000734.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000735.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000736.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000737.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000738.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000739.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000741.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000742.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000743.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000744.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000745.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000747.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000748.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000749.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000750.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000752.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000753.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000754.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000756.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000757.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3684_0000004441.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3684_0000004442.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3684_0000004443.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3684_0000004445.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3684_0000004446.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3684_0000004447.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3684_0000004449.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3684_0000004450.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3684_0000004452.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000786.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000787.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000788.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000790.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000791.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000792.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000794.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000795.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000797.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000798.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000800.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000801.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000803.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000804.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000805.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000806.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000809.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000810.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000812.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000813.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000814.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000815.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000816.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000818.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000819.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000820.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000821.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000822.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000824.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000825.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000826.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000827.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000001280.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000001281.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000001282.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000001283.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000001285.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000001286.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000001287.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000001289.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000001290.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000001292.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000001293.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000830.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000831.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000833.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000834.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000835.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000836.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000838.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000839.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000840.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000842.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000843.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000844.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000845.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000846.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000847.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000848.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000849.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000851.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000852.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000853.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000854.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000856.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000857.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000859.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000860.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000862.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000863.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000864.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000866.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\392_0000000867.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3672_0000000769.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3672_0000000771.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3672_0000000772.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3672_0000000774.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3672_0000000775.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3672_0000000776.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3672_0000000778.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3672_0000000779.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3672_0000000780.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3672_0000000782.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3672_0000000783.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3128_0000003285.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3128_0000003286.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3128_0000003287.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000887.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000889.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000890.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000891.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000893.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000894.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000895.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000896.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000897.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000899.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000900.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000901.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000903.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000904.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000905.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000907.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000908.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000912.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000913.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000915.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000916.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000917.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000919.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000920.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000922.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000923.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000925.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000926.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000928.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000929.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000930.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000931.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000933.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001884.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001885.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001886.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001887.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000935.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000937.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000938.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000939.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000940.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000941.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000942.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000944.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000945.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000946.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000947.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000949.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000950.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000951.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000953.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000954.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000955.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000956.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000957.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000958.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000959.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000960.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000961.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000962.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000963.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000964.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000965.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000966.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000967.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000200.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000201.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000202.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000203.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000204.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000205.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000206.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000207.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2656_0000000208_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000969.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000970.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000971.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000972.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000973.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000974.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000975.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000976.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000977.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000978.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000979.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000980.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000981.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2652_0000000982.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000000992.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000000993.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000000994.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000000995.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000000996.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000000997.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000000998.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000000999.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001000.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001001.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001002.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001003.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001004.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001005.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001006.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001007.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001009.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001010.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001011.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001012.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001013.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001014.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001015.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001016.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001017.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001018.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001019.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001020.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001021.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001022.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001023.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001024.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001026.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001027.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001028.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001029.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001030.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001031.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001032.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001033.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001034.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001035.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001037.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1628_0000001038.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001046.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001047.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001048.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001049.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001050.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001051.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001052.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001053.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001054.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001055.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001056.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001057.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001058.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001059.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001060.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001061.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001062.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001063.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001064.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001065.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001066.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001067.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001068.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001069.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001070.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001071.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001072.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001073.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3396_0000001074.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001075.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001076.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001077.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001078.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001079.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001080.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001081.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001082.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001084.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001085.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001086.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001087.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001088.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001089.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001090.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001091.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001092.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001093.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001094.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001095.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001096.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001097.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001098.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001099.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001101.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001102.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001103.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001104.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001105.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001106.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001107.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001108.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001109.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001110.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001111.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001112.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001113.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001114.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001115.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001116.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2952_0000002331.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2952_0000002332.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2952_0000002333.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001118.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001119.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001120.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001121.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001122.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001123.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001124.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001125.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001126.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001127.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001128.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001129.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001130.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001131.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001133.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001134.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001936.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001957.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3232_0000004659.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3232_0000004681.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3248_0000005533.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\328_0000005427.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3300_0000005447.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3300_0000005469.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3328_0000005042.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1364_0000004058.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1492_0000004749.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002696_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001221.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2292_0000002580.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2708_0000000045.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2880_0000003821.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3076_0000000517.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3328_0000005064.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3796_0000000608.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001457.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001137.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001138.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001139.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001140.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001141.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001142.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001143.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001144.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001146.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001147.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001148.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001150.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001151.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001152.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001153.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001154.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2904_0000001155.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1408_0000001163.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1408_0000001165.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1408_0000001166.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1408_0000001168.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1408_0000001169.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1408_0000001171.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1408_0000001172.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1408_0000001174.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1408_0000001175.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1408_0000001176.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1408_0000001178.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1408_0000001179.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1408_0000001181.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1408_0000001182.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1408_0000001184.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1408_0000001185.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1408_0000001187.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1408_0000001188.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1408_0000001189.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1408_0000001191.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1408_0000001192.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001202.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001203.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001204.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001206.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001207.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001209.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001210.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001212.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001213.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001214.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001215.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001216.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001217.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001218.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001219.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001220.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1884_0000005543.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1884_0000005544.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1884_0000005545.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2580_0000003363.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2580_0000003380.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2588_0000003854.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2588_0000003877.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2588_0000003900.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2588_0000003923.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2592_0000003580.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2604_0000003317.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001247.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001747.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001764.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001222.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001223.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001225.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001226.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001227.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001228.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001230.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001231.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001232.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001234.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001235.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000005737.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000005738.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000005739.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000005740.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000005742.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001746.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001248.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001249.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001250.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001251.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001252.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001253.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001255.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001257.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001259.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001261.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001262_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001263_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001264_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001265_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001266_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001267_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001268.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001269.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001270.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001271.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001272.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001274.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001276.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2612_0000001278.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3972_0000003156.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3972_0000003157.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3972_0000003158.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3972_0000003160.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3972_0000003161.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3972_0000003162.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3972_0000003164.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3972_0000003165.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3972_0000003167.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3972_0000003168.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000001296.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000001298.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000001299.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000001300.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000001302.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000001303.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000001304.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000001306.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000001307.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000003234.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000003235.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000003236.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000003237.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000003238.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000003239.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000003240.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000003241.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000003242.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000003243.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000003244.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000003245.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000003246.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000003247.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000003248.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000003249.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000003250.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000003252.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3940_0000003253.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3972_0000003170.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3972_0000003191.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3972_0000004848.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3980_0000005771.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3980_0000005795.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3980_0000005819.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4028_0000002977.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4028_0000002998.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4028_0000003020.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4028_0000003039.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4028_0000003061.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4072_0000004571.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4088_0000003992.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4088_0000004015.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4088_0000005506.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001319.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001321.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001322.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001324.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001325.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001326.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001327.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001329.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001330.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001331.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001333.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001334.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001335.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001336.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001337.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001339.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000155.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000156.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001341.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001342.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001344.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001345.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001346.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001348.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001349.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001350.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001351.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001353.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001354.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001355.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001357.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001358.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001359.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001360.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001361.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001362.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001364.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001365.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001366.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001368.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001369.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001370.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001372.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\528_0000001373.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001381.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001382.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001384.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001385.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001387.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001388.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001390.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001391.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001392.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001394.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001395.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001396.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001398.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001399.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001400.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001402.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\fromjava01cafdcbb0550712_00003056_rasphone.pbk (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\fromjava01cafdce253eb5bc_00004396_classes.jsa (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\fromjava01cafdce2551c88c_00004396_classes.jsa (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\fromjava01cafdce28d963ca_00004396_classes.jsa (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\fromjava01cafdce28e08ad8_00004396_classes.jsa (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\fromjava01cafdce2a652a26_00004396_classes.jsa (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001404.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001406.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001407.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001408.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001410.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001411.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001412.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001414.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001415.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001416.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001418.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001419.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001420.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001422.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001423.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001424.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001426.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001427.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001428.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001430.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001431.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001432.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001434.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001435.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001438.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001439.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001440.pst (Stolen.Data) -> No action taken.

Danke und Gute Nacht.

kindereasy 18.04.2011 21:55

... und Teil 2/2:

Code:

c:\WINDOWS\system32\xmldm\3896_0000001442.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001443.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001445.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001446.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001448.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001449.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001451.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001452.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001453.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001454.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001455.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001456.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001458.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001459.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001460.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001461.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001462.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001463.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001464.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001465.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001467.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001468.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001469.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001471.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001472.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001473.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001475.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3896_0000001476.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3328_0000005022.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3328_0000005023.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3328_0000005024.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3328_0000005026.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3328_0000005027.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3328_0000005028.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3328_0000005030.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3328_0000005031.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3328_0000005033.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3328_0000005034.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3328_0000005036.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3328_0000005037.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3328_0000005038.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3328_0000005039.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3328_0000005041.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001497.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001499.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001500.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001501.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001503.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001504.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001505.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001507.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001508.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001509.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001511.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001512.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001514.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001515.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001517.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001518.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3404_0000002448.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3404_0000002449.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3404_0000002450.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3404_0000002452.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3404_0000002453.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3404_0000002454.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3404_0000002456.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3404_0000002457.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3404_0000002459.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3404_0000002460.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3404_0000002462.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3404_0000002463.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3404_0000002465.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3404_0000002466.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3404_0000002467.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3404_0000002469.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3404_0000002470.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3404_0000002471.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3404_0000002473.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3404_0000002474.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001520.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001521.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001523.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001524.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001525.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001527.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001528.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001529.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001530.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001531.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001533.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001534.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001535.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001537.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001538.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001539.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001541.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3356_0000001542.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001549.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001550.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001552.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001553.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001555.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001556.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001558.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001559.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001560.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001561.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001563.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001564.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001565.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001567.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001568.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001569.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1732_0000004706.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1732_0000004707.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1732_0000004708.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001572.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001573.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001574.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001576.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001577.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001578.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001579.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001580.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001582.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001583.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001584.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001586.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001587.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001588.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001590.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001591.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000001977.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000001978.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000001979.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000001980.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000001982.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000001983.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000001984.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000001986.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000001987.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000001989.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000001990.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000001992.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1248_0000000448.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1248_0000000449.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1248_0000000450.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1248_0000000451.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1248_0000000452.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1248_0000000453.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1248_0000000454.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1248_0000000455.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1248_0000000456.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1248_0000000457.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1248_0000000458.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1248_0000000459.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1248_0000000460.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1248_0000000461.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1220_0000001616.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1220_0000001617.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1220_0000001618.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1220_0000001619.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1220_0000001620.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1220_0000001621.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1220_0000001623.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1220_0000001624.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1220_0000001625.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1220_0000001626.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1220_0000001628.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1220_0000001629.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1220_0000001631.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1220_0000001632.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1220_0000001633.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1220_0000001636.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001680.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001681.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001682.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001683.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001685.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001686.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001687.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001689.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001690.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001692.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001693.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001695.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001696.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001698.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001644.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001646.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001647.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001649.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001650.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001652.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001653.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001655.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001656.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001657.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001658.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001659.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001660.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001661.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001662.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001663.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001664.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001665.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001666.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001667.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001669.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001670.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001671.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001673.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001674.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001675.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001677.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001678.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001701.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001702.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001704.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001705.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001707.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001708.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001710.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001711.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001713.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001714.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001715.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001717.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1292_0000001718.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3052_0000001731.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3052_0000001732.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3052_0000001734.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3052_0000001735.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3052_0000001737.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3052_0000001738.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3052_0000001740.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3052_0000001741.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3052_0000001742.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3052_0000001744.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3052_0000001745.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001748.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001749.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001750.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001751.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001752.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001753.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001754.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001755.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001756.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001757.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001758.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001759.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001760.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001761.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001762.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001763.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001765.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001766.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001767.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001768.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001769.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001770.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001771.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001772.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001773.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001774.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001775.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001776.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001777.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001778.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001779.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001780.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001781.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001782.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001783.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2620_0000001784.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001802.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001804.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001805.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001806.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001807.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001809.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001810.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001811.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001813.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001814.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001815.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001816.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001817.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001818.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001820.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001821.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001824.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001825.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001826.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001827.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001829.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001830.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001831.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001832.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001833.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001835.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001836.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001838.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001839.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001840.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001842.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\4504_0000001843.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3752_0000004904.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3752_0000004905.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3752_0000004906.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3752_0000004907.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3752_0000004909.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3752_0000004910.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3752_0000004911.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3752_0000004913.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3752_0000004914.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3752_0000004916.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3752_0000004917.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3752_0000004919.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3752_0000004920.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3752_0000004921.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3752_0000004922.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3776_0000001856.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3776_0000001857.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3776_0000001859.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3776_0000001860.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3776_0000001861.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3776_0000001862.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3776_0000001863.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3776_0000001864.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3776_0000001865.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3776_0000001866.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3776_0000001867.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3776_0000001868.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3776_0000001869.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3776_0000001871.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3776_0000001872.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3776_0000001874.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3776_0000001875.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3776_0000001877.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3776_0000001878.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3776_0000001879.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3776_0000001881.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3776_0000001882.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3856_0000003403.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3856_0000003404.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3856_0000003405.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3856_0000003406.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3856_0000003407.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3856_0000003408.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3856_0000003409_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3856_0000003410.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001890.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001891.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001893.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001894.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001896.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001897.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001899.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001900.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001902.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001903.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001904.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001905.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001907.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001908.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001909.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001911.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001912.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001913.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001914.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001916.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001917.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001918.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001920.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001921.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001922.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001924.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001925.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001938.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001939.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001941.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001942.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001943.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001944.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001946.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001947.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001948.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001950.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001951.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001952.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001953.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001954.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001955.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001956.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3232_0000004647.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3232_0000004648.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3232_0000004649.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3232_0000004651.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3232_0000004652.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3232_0000004653.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3232_0000004655.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3232_0000004656.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3232_0000004658.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001958.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001959.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001960.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001961.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001962.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001963.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001965.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001966.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001967.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001968.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001970.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001971.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001972.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001974.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001975.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000001994.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000001995.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000001997.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000001998.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000001999.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000002001.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000002002.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000002003.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000002004.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000002005.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000002007.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000002008.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000002009.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000002010.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000002012.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000002013.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000002014.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000002016.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000002017.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\840_0000003604.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\840_0000003605.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\840_0000003606.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\840_0000003608.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\840_0000003609.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000157.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000174.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\552_0000000192.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000911.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\568_0000000934.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\640_0000001889.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\740_0000003265.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\752_0000001643.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\840_0000003610.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002027.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002049.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001380.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001403.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002028.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002030.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002031.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002033.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002034.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002036.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002037.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002038.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002039.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002041.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002042.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002043.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002045.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002046.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002047.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002048.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002050.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002052.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002053.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002054.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002056.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002057.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002059.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002060.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002062.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002063.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002065.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002066.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002068.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002069.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002070.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002072.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\860_0000002073.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001375.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001376.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001377.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\880_0000001378.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002083.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002085.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002086.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002087.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002089.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002090.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002092.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002093.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002094.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002095.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002097.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002098.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002099.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002101.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002102.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002104.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3032_0000002951.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3032_0000002952.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3032_0000002953.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3032_0000002954.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3032_0000002955.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002106.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002107.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002109.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002110.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002111.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002113.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002114.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002116.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002117.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002118.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002119.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002121.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002122.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002123.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002125.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002126.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002129.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002130.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002131.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002133.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002134.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002135.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002137.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002138.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002140.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002141.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002143.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002144.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002145.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002147.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002148.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002149.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002152.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002153.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002155.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002156.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002157.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002159.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002160.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002161.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002163.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002164.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002165.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002167.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002168.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002169.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002172.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002173_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002176.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002177.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002178.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002179.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002180.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002182.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002183.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002185.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002186.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002187.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002189.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002190.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002191.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002192.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002193.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002194.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002197.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002198.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002199.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002200.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002201.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002203.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002204.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002205.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002206.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002207.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002208.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002209.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002211.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002212.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002213.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002215.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002218.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002219.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002221.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002222.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002224.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002225.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002227.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002228.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002230.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002231.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002233.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002234.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002235_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002237.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002238.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002239.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002082.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002105.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002128.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002151.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002174.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002196.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002216.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002240.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002261.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002282.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002303.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3032_0000002956.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3052_0000001729.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002241.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002243.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002244.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002245.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002246.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002248.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002249.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002250.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002251.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002252.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002254.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002255.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002256.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002257.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002259.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002260.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002263.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002264.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002265.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002267.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002268.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002269.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002270.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002271.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002272.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002273.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002275.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002276.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002277.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002279.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002280.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002281.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002283.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002285.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002286.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002287.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002288.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002289.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002291.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002292.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002293.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002295.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002296.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002297.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002298.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002299.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002300.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002301.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002304.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002305.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002307.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002308.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002309.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002310.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002312.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002313.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002314.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002315.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002317.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002318.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002319.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002321.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002322.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002323.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002325.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002326.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002327.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002329.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3020_0000002330.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2952_0000002335.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2952_0000002336.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2952_0000002337.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2952_0000002338.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2952_0000002339.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2952_0000002340.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2952_0000002341.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2952_0000002342.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2952_0000002343.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2952_0000002344.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2952_0000002346.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2952_0000002347.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2952_0000002349.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2952_0000002350.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002352.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002353.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002354.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002356.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002357.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002358.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002360.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002361.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002363.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002364.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002366.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002367.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002369.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002370.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002371.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002374.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002375.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002376.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002378.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002379.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002380.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002381.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002382.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002383.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002385.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002386.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002387.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002388.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002390.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002391.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002393.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002394.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002395.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002397.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3928_0000002398.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002404.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002405.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002406.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002408.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002409.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002411.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002412.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002414.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002415.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002416.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002417.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002419.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002420.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002421.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002423.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002425.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002426.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002427.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002428.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002429.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002430.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002431.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002432.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002434.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002435.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002436.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002438.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002439.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002440.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002442.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2848_0000002443.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000519.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2864_0000000520.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002477.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002478.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002479.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002481.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002482.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002483.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002485.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002486.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002488.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002489.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002491.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002492.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002493.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002494.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002496.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002497.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002500.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002501.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002502.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002503.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002504.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002505.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002507.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002508.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002509.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002511.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002512.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002513.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002515.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002516.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002517.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002518.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002520.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002521.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002522.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002523.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002524.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002525.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002526.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002527.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002528.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002530.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002532.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002533.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002534.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002536.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002538.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002540.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002541.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002542.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002543.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002545.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002547.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3180_0000002548.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000869.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000870.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000871.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000872.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000874.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000875.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000876.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000878.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000879.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000881.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000882.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000884.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3124_0000000885.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3204_0000002550.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3204_0000002551.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3204_0000002553.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3204_0000002554.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3204_0000002555.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3204_0000002556.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3204_0000002557.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3204_0000002558.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3204_0000002559.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3204_0000002560.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3204_0000002561.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3204_0000002562.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3204_0000002563.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3204_0000002564.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3204_0000002565.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3204_0000002566.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3204_0000002567_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3204_0000002569.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3204_0000002570.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3204_0000002571_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3204_0000002572.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001927.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001928.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001929.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001931.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001932.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001933.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\3228_0000001935.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1904_0000000507.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1904_0000000508.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2292_0000002581.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2292_0000002583.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2292_0000002584.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2292_0000002585.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2292_0000002587.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2292_0000002588.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2292_0000002589.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2292_0000002591.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2292_0000002592.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2292_0000002593.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2292_0000002595.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2292_0000002596.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2292_0000002597.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2292_0000002599.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2292_0000002600.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2292_0000002601.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2292_0000002603.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2292_0000002604.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2292_0000002605.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2312_0000003352.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2312_0000003353.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\2312_0000003354.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001548.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1720_0000001570.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1732_0000004710.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1732_0000004731.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1764_0000004409.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1792_0000001993.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1828_0000001200.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002617.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002619.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002620.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002621.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002623.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002625.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002627.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002629.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002630.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002632.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002633.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002635.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002636.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002638.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002639.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002641.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002644.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002645.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002646.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002648.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002649.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002651.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002653.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002654.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002655.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002657.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002658_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002659_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002660_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002661_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002664.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002665_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002666_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002667_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002668_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002669_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002670.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002671.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002672_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002673_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002674_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002675_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002676_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002678.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002679_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002681_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002682_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002683_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002685.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002686_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002687_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002688_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002689_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002690_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002691.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002692.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002693_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002694_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002695_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002697_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002698.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002699.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002700_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002701_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002702_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002703_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002704_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002705.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002706.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002707_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002708_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002709_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002710_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002711_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002714.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002715.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002716.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002717.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002718.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002719.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002720.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002721.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002722.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002723.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002724.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002725.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002726.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002727.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002728.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002729.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002731.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002732.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002733.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002734.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002735.frm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002736.pst (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002737.key (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002738.clb (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002739.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002740_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002741_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002742_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002743_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002744_ifrm.htm (Stolen.Data) -> No action taken.
c:\WINDOWS\system32\xmldm\1604_0000002746.htm (Stolen.Data) -> No action taken.


cosinus 18.04.2011 21:58

Zitat:

-> No action taken.
Du musst alle Funde entfernen!!

kindereasy 19.04.2011 20:41

Liste der Anhänge anzeigen (Anzahl: 1)
Hallo Arne,

habe nun alle Funde entfernt, Logfile gespeichert, nochmal mit Malwarebytes gescannt und zweites Logfile gespeichert (Files Siehe Zip Datei). Nun gab's keine Funde mehr.

Zwischenzeitlich habe ich die meisten Dateien über "Eigenschaften" wieder sichtbar gemacht (Haken bei "Versteckt" entfernt) - wie man sich doch über etwas feuen kann, das man sonst als Selbstverständlichkeit betrachtet

Nun habe ich noch ein paar Problemchen:
1) Unter "Start" "Programme" erscheinen meine Programme nicht.
2) Angehängte Fehlermeldung erscheint nach dem Neustart (ATI Control Center)
3) Fehlermeldung nach Neustart, dass in einem Script ein Fehler aufgetaucht ist und ich gefragt werde, ob ich das Laden der Seite fortsetzen will. Hier handelt es sich jedes Mal um andere Seiten, die sich nach Werbeseiten anhören (hab leider die vorigen Meldungen einfach ohne Screenshot weggeklickt).
4) Kurzfristig hat Avira noch den Virus "TR/Trash.Gen" gemeldet, ist aber nach Klick auf "Entfernen" und dadurch ausgelöster Systemprüfung nicht mehr aufgetaucht.

... und folgende Fragen:
Hast Du noch Vorschläge für o.g. Punkte?
Ist der Trojaner nun wohl beseitigt? Oder sollte ich noch weitere Schritte unternehmen?
Macht es Sinn, mein Acronis True Image Backup von vor ca. 10 Tagen aufzuspielen, um den eventuell noch vorhanden Trojaner wegzubekommen?

Danke schon mal für die Hilfe bis hierher!

Grüße
Elke

cosinus 19.04.2011 21:10

Dann poste jetzt frische OTL-Logs. Wenns geht auch das erste Log posten (OTL.txt) denn das war beim ersten Mal sehr unvollständig :pfeiff:

kindereasy 19.04.2011 21:34

OK, hier kommen die OTL Logs vom 17.04. und von heute.

Gruß
Elke

cosinus 20.04.2011 17:02

Mach einen OTL-Fix, beende alle evtl. geöffneten Programme, auch Virenscanner deaktivieren (!), starte OTL und kopiere folgenden Text in die "Custom Scan/Fixes" Box (unten in OTL): (das ":OTL" muss mitkopiert werden!!!)

Code:

:OTL
PRC - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\BRcrbSmEXhdOhE.exe (BitSprx)
O4 - HKLM..\Run: [0 - wtm] C:\WINDOWS\wtmkernel.exe (TSS-Productions)
O4 - HKU\S-1-5-21-1214440339-706699826-839522115-1004..\Run: [BRcrbSmEXhdOhE] C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\BRcrbSmEXhdOhE.exe (BitSprx)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: A = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: B = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: C = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: D = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: E = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: F = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: G = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: H = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: I = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: J = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: K = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: L = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: M = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: N = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: O = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: P = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: Q = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: R = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: S = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: T = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: U = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: V = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: W = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: X = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: Y = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide: Z = 0
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\RestrictRun: 0 = wtmkernel.exe (TSS-Productions)
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\RestrictRun: 1 = wtmstatus.exe (TSS-Productions)
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\RestrictRun: 2 = wtmbrx.exe
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\RestrictRun: 3 = winhelp.exe (Microsoft Corporation)
O7 - HKU\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\appconf32.exe) - C:\WINDOWS\System32\appconf32.exe File not found
[2011.04.17 17:26:12 | 000,569,344 | -H-- | C] (BitSprx) -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\BRcrbSmEXhdOhE.exe
[2011.04.17 18:55:29 | 000,000,160 | -H-- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\~16375604r
[2011.04.17 18:55:29 | 000,000,120 | -H-- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\~16375604
[2011.04.17 18:55:28 | 000,000,823 | -H-- | M] () -- C:\Dokumente und Einstellungen\Elke\Desktop\Windows Recovery.lnk
[2011.04.17 18:55:08 | 000,000,328 | -H-- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\16375604
[2011.04.17 17:56:10 | 000,018,560 | -H-- | M] () -- C:\wtmstatus.wtx
[2011.04.17 17:56:10 | 000,018,560 | -H-- | M] () -- C:\Elke.wtm
[2011.04.17 17:45:58 | 000,487,424 | -H-- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\16375604.exe
[2011.04.17 17:37:07 | 000,000,059 | -H-- | M] () -- C:\Dokumente und Einstellungen\Elke\wtmtemp.bat
[2011.04.17 17:31:42 | 000,009,700 | -H-- | M] () -- C:\WINDOWS\JETSUITE.INI
[2011.04.17 17:29:59 | 000,001,295 | -H-- | M] () -- C:\Dokumente und Einstellungen\Elke\Startmenü\Programme\Autostart\Seagate 2GH1S1LH Registrierungen.lnk
[2011.04.17 17:26:12 | 000,569,344 | -H-- | M] (BitSprx) -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\BRcrbSmEXhdOhE.exe
[2011.04.17 15:59:34 | 000,000,005 | -H-- | M] () -- C:\Programme\Gemeinsame Dateien\updkor.sys
[2010.12.30 16:59:27 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
:Commands
[purity]
[resethosts]
[emptytemp]

Klick dann oben links auf den Button Fix!
Das Logfile müsste geöffnet werden, wenn Du nach dem Fixen auf ok klickst, poste das bitte. Evtl. wird der Rechner neu gestartet.

Die mit diesem Script gefixten Einträge, Dateien und Ordner werden zur Sicherheit nicht vollständig gelöscht, es wird eine Sicherheitskopie auf der Systempartition im Ordner "_OTL" erstellt.

kindereasy 20.04.2011 19:58

Hallo Arne,

habe gefixt und hier kommt das Logfile:

Code:

All processes killed
========== OTL ==========
No active process named BRcrbSmEXhdOhE.exe was found!
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\0 - wtm deleted successfully.
C:\WINDOWS\wtmkernel.exe moved successfully.
Registry value HKEY_USERS\S-1-5-21-1214440339-706699826-839522115-1004\Software\Microsoft\Windows\CurrentVersion\Run\\BRcrbSmEXhdOhE not found.
File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\BRcrbSmEXhdOhE.exe not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\DisableTaskMgr deleted successfully.
Registry value HKEY_USERS\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide\\A deleted successfully.
Registry value HKEY_USERS\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide\\B deleted successfully.
Registry value HKEY_USERS\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide\\C deleted successfully.
Registry value HKEY_USERS\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide\\D deleted successfully.
Registry value HKEY_USERS\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide\\E deleted successfully.
Registry value HKEY_USERS\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide\\F deleted successfully.
Registry value HKEY_USERS\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide\\G deleted successfully.
Registry value HKEY_USERS\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide\\H deleted successfully.
Registry value HKEY_USERS\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide\\I deleted successfully.
Registry value HKEY_USERS\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide\\J deleted successfully.
Registry value HKEY_USERS\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide\\K deleted successfully.
Registry value HKEY_USERS\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide\\L deleted successfully.
Registry value HKEY_USERS\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide\\M deleted successfully.
Registry value HKEY_USERS\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide\\N deleted successfully.
Registry value HKEY_USERS\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide\\O deleted successfully.
Registry value HKEY_USERS\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide\\P deleted successfully.
Registry value HKEY_USERS\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide\\Q deleted successfully.
Registry value HKEY_USERS\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide\\R deleted successfully.
Registry value HKEY_USERS\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide\\S deleted successfully.
Registry value HKEY_USERS\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide\\T deleted successfully.
Registry value HKEY_USERS\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide\\U deleted successfully.
Registry value HKEY_USERS\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide\\V deleted successfully.
Registry value HKEY_USERS\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide\\W deleted successfully.
Registry value HKEY_USERS\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide\\X deleted successfully.
Registry value HKEY_USERS\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide\\Y deleted successfully.
Registry value HKEY_USERS\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Hide\\Z deleted successfully.
Registry value HKEY_USERS\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\RestrictRun\\0 deleted successfully.
File wtmkernel.exe not found.
Registry value HKEY_USERS\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\RestrictRun\\1 deleted successfully.
C:\WINDOWS\wtmstatus.exe moved successfully.
Registry value HKEY_USERS\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\RestrictRun\\2 deleted successfully.
Registry value HKEY_USERS\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\RestrictRun\\3 deleted successfully.
C:\WINDOWS\winhelp.exe moved successfully.
Registry value HKEY_USERS\S-1-5-21-1214440339-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\DisableTaskMgr deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\UserInit:C:\WINDOWS\system32\appconf32.exe deleted successfully.
File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\BRcrbSmEXhdOhE.exe not found.
C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\~16375604r moved successfully.
C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\~16375604 moved successfully.
C:\Dokumente und Einstellungen\Elke\Desktop\Windows Recovery.lnk moved successfully.
C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\16375604 moved successfully.
C:\wtmstatus.wtx moved successfully.
C:\Elke.wtm moved successfully.
File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\16375604.exe not found.
C:\Dokumente und Einstellungen\Elke\wtmtemp.bat moved successfully.
C:\WINDOWS\JETSUITE.INI moved successfully.
C:\Dokumente und Einstellungen\Elke\Startmenü\Programme\Autostart\Seagate 2GH1S1LH Registrierungen.lnk moved successfully.
File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\BRcrbSmEXhdOhE.exe not found.
C:\Programme\Gemeinsame Dateien\updkor.sys moved successfully.
C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{429CAD59-35B1-4DBC-BB6D-1DB246563521}\x86\x86 folder moved successfully.
C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{429CAD59-35B1-4DBC-BB6D-1DB246563521}\x86 folder moved successfully.
C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{429CAD59-35B1-4DBC-BB6D-1DB246563521} folder moved successfully.
========== COMMANDS ==========
C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
 
[EMPTYTEMP]
 
User: All Users
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
User: Elke
->Temp folder emptied: 285471383 bytes
->Temporary Internet Files folder emptied: 280935345 bytes
->Java cache emptied: 73894310 bytes
->Flash cache emptied: 22254 bytes
 
User: Gast
->Temp folder emptied: 587497 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
User: Testkonto
->Temp folder emptied: 587497 bytes
->Temporary Internet Files folder emptied: 121454 bytes
 
%systemdrive% .tmp files removed: 18560 bytes
%systemroot% .tmp files removed: 2148906 bytes
%systemroot%\System32 .tmp files removed: 2951 bytes
%systemroot%\System32\dllcache .tmp files removed: 57344 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 32038433 bytes
RecycleBin emptied: 4028428198 bytes
 
Total Files Cleaned = 4.487,00 mb
 
 
OTL by OldTimer - Version 3.2.9.1 log created on 04202011_204550

Files\Folders moved on Reboot...
C:\Dokumente und Einstellungen\Elke\Lokale Einstellungen\Temporary Internet Files\Content.IE5\416R0D6N\97606-trojaner-tr-kazy-mekml1-2[1].html moved successfully.

Registry entries deleted on Reboot...


Gruß
Elke

kindereasy 20.04.2011 21:20

Liste der Anhänge anzeigen (Anzahl: 1)
Gerade kam der Scriptfehler wieder (Siehe Anhang).

Bin ab jetzt über Ostern offline, würde mich aber freuen, wenn wir danach weitermachen...

Schöne Ostern!

Gruß
Elke

cosinus 21.04.2011 14:48

Hör auf diesen IE in dieser Uraltversion zu benutzen! Nimm erstmal so etwas wie Firefox oder Opera. Der IE wird später auf Version 8 hochgezogen!

Mach bitte den OTL-Fix"

kindereasy 26.04.2011 20:11

OK, hab nun Firefox (den Rat zu wechseln hab ich schon öfters bekommen, aber nie befolgt).

Hatten wir nicht "OTL-Fix" schon gemacht? Wenn nein, kannst Du bitte genauer erklären, was Du mit OTL-Fix meinst?

Gruß
Elke

cosinus 27.04.2011 09:40

Muss das Log übersehen haben...

Bitte nun dieses Tool von Kaspersky ausführen und das Log posten => http://www.trojaner-board.de/82358-t...entfernen.html

Falls du durch die Infektion auf deine Dokumente/Eigenen Dateien nicht zugreifen kannst, bitte unhide ausführen:
Downloade dir bitte unhide.exe und speichere diese Datei auf deinem Desktop.
Starte das Tool und es sollten alle Dateien und Ordner wieder sichtbar sein. ( Könnte eine Weile dauern )
http://www.trojaner-board.de/images/icons/icon4.gif Vista und 7 User müssen das Tool per Rechtsklick als Administrator ausführen! http://www.trojaner-board.de/images/icons/icon4.gif

kindereasy 27.04.2011 19:11

Hallo,

nach Ausführen von unhide.exe sehe ich meine Dateien und auch meine Programme unter Start/Programme/... wieder - das tut gut!

Allerdings bekomme ich die Datei tdsskiller.exe einfach nicht geöffnet. Download auf Desktop hat funktioniert, aber öffenen geht nicht, weder mit Doppelklick, noch mit RMT und Öffnen. Hab den Download sowohl mit dem von Dir angegebenen Link probiert, als auch direkt auf der Kaspersky Homepage, aber es tut sich leider gar nichts. Hast Du noch nen Tipp?

Grüße
Elke

cosinus 27.04.2011 19:33

Dann bitte jetzt CF ausführen, tdsskiller probierst du danach nochmal.

ComboFix

Ein Leitfaden und Tutorium zur Nutzung von ComboFix
  • Lade dir ComboFix hier herunter auf deinen Desktop. Benenne es beim Runterladen um in cofi.exe.
http://saved.im/mtm0nzyzmzd5/cofi.jpg
  • Schliesse alle Programme, vor allem dein Antivirenprogramm und andere Hintergrundwächter sowie deinen Internetbrowser.
  • Starte cofi.exe von deinem Desktop aus, bestätige die Warnmeldungen, führe die Updates durch (falls vorgeschlagen), installiere die Wiederherstellungskonsole (falls vorgeschlagen) und lass dein System durchsuchen.
    Vermeide es auch während Combofix läuft die Maus und Tastatur zu benutzen.
  • Im Anschluss öffnet sich automatisch eine combofix.txt, diesen Inhalt bitte kopieren ([Strg]a, [Strg]c) und in deinen Beitrag einfügen ([Strg]v). Die Datei findest du außerdem unter: C:\ComboFix.txt.
Wichtiger Hinweis:
Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!
Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich ziehen und eine Bereinigung der Infektion noch erschweren.

kindereasy 29.04.2011 17:17

Hallo,

ComboFix herunterladen und umbenennen in cofi.exe hat funktioniert, CCleaner Systembereinigung ebenso.

Allerdings komme ich beim Ausführen von cofi.exe nicht weiter. Hab meiner Meinung nach wirklich Firewall, Antivirenprogramm, Updates und automatische Internetverbindung deaktiviert, weder Maus noch Tastatur berührt. Es erscheint nur ein Mini-Fenster auf dem Desktop mit Überschrift "ComboFix", darunter füllt sich ganz schnell ein blauer Balken, die Sanduhr bleibt noch ein paar Sekunden sichtbar und dann tut sich gar nichts mehr (Screenshot erstellen funktioniert in diesem Status leider auch nicht). Die ganzen Fenster, die im Leitfaden zur Nutzung von ComboFix beschrieben sind, erscheinen bei mir gar nicht. Gibt's noch Chancen?

Grüße
Elke

cosinus 29.04.2011 20:45

Starte Windows neu, lösch die alte cofi.exe, lade CF neu als cofi.exe runter und probier es bitte nochmal.

kindereasy 29.04.2011 22:39

Nun hat's doch geklappt (musste beim ersten kleinen Fenster 15 Min. warten bis es weiterging). Hier kommt nun der Inhalt der Datei combofix.txt. Hoffe das hilft weiter.

Gruß
Elke
... und vielen Dank schon mal für die Hilfe bis hierher!

Code:

ComboFix 11-04-29.01 - Elke 29.04.2011  23:17:47.1.2 - x86
Microsoft Windows XP Home Edition  5.1.2600.3.1252.49.1031.18.1918.1421 [GMT 2:00]
ausgeführt von:: c:\dokumente und einstellungen\Elke\Desktop\cofi.exe
AV: AntiVir Desktop *Disabled/Outdated* {AD166499-45F9-482A-A743-FDD3350758C7}
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\dokumente und einstellungen\Elke\Startmenü\Programme\Windows Recovery
c:\dokumente und einstellungen\Elke\Startmenü\Programme\Windows Recovery\Uninstall Windows Recovery.lnk
c:\dokumente und einstellungen\Elke\Startmenü\Programme\Windows Recovery\Windows Recovery.lnk
c:\dokumente und einstellungen\Elke\WINDOWS
C:\Recycle.Bin
c:\recycle.bin\Recycle.Bin.exe
c:\windows\system32\cock
c:\windows\system32\UAs
c:\windows\system32\UAs\iexplore_UAs001.dat
c:\windows\system32msvbvm60.dll
.
Infizierte Kopie von c:\windows\system32\drivers\volsnap.sys wurde gefunden und desinfiziert
Kopie von - Kitty had a snack :p wurde wiederhergestellt
.
(((((((((((((((((((((((  Dateien erstellt von 2011-03-28 bis 2011-04-29  ))))))))))))))))))))))))))))))
.
.
2011-04-27 19:02 . 2011-04-27 19:02        --------        d-----w-        c:\programme\CCleaner
2011-04-27 17:53 . 2011-04-27 17:53        5        ----a-w-        c:\programme\Gemeinsame Dateien\updkor.sys
2011-04-26 19:01 . 2011-04-26 19:01        --------        d-----w-        c:\dokumente und einstellungen\Elke\Lokale Einstellungen\Anwendungsdaten\Mozilla
2011-04-20 18:45 . 2011-04-20 18:45        --------        d-----w-        C:\_OTL
2011-04-19 19:16 . 2011-04-19 19:16        --------        d-----w-        c:\programme\7-Zip
2011-04-18 18:51 . 2011-04-18 18:51        --------        d-----w-        c:\dokumente und einstellungen\Elke\Anwendungsdaten\Malwarebytes
2011-04-18 18:50 . 2010-12-20 16:09        38224        ----a-w-        c:\windows\system32\drivers\mbamswissarmy.sys
2011-04-18 18:50 . 2011-04-18 18:50        --------        d-----w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\Malwarebytes
2011-04-18 18:50 . 2011-04-18 18:50        --------        d-----w-        c:\programme\Malwarebytes' Anti-Malware
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-03-16 18:43 . 2009-05-22 20:05        137656        ----a-w-        c:\windows\system32\drivers\avipbb.sys
2011-03-07 05:33 . 2008-06-15 10:01        692736        ----a-w-        c:\windows\system32\inetcomm.dll
2011-03-04 06:44 . 2006-02-28 12:00        434176        ----a-w-        c:\windows\system32\vbscript.dll
2011-03-03 13:53 . 2006-02-28 12:00        1858048        ----a-w-        c:\windows\system32\win32k.sys
2011-02-17 13:51 . 2006-02-28 12:00        81920        ----a-w-        c:\windows\system32\ieencode.dll
2011-02-17 13:51 . 2006-02-28 12:00        672768        ----a-w-        c:\windows\system32\wininet.dll
2011-02-17 13:51 . 2006-02-28 12:00        61952        ----a-w-        c:\windows\system32\tdc.ocx
2011-02-17 13:50 . 2006-02-28 12:00        371200        ----a-w-        c:\windows\system32\html.iec
2011-02-17 13:18 . 2006-02-28 12:00        455936        ----a-w-        c:\windows\system32\drivers\mrxsmb.sys
2011-02-17 13:18 . 2006-02-28 12:00        357888        ----a-w-        c:\windows\system32\drivers\srv.sys
2011-02-17 12:54 . 2008-05-05 05:25        5632        ----a-w-        c:\windows\system32\xpsp4res.dll
2011-02-15 12:56 . 2006-02-28 12:00        290432        ----a-w-        c:\windows\system32\atmfd.dll
2011-02-09 13:53 . 2006-02-28 12:00        270848        ----a-w-        c:\windows\system32\sbe.dll
2011-02-09 13:53 . 2006-02-28 12:00        186880        ----a-w-        c:\windows\system32\encdec.dll
2011-02-08 13:33 . 2006-02-28 12:00        978944        ----a-w-        c:\windows\system32\mfc42.dll
2011-02-08 13:33 . 2006-02-28 12:00        974848        ----a-w-        c:\windows\system32\mfc42u.dll
2011-02-02 07:58 . 2008-06-15 09:59        2067456        ----a-w-        c:\windows\system32\mstscax.dll
2011-04-29 17:58 . 2011-04-26 19:01        142296        ----a-w-        c:\programme\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Picasa Media Detector"="c:\programme\Picasa2\PicasaMediaDetector.exe" [2008-02-26 443968]
"LMab1err"="c:\programme\Lexmark\ErrorApp\LMab1err.exe" [2008-11-21 590504]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2007-12-13 16841216]
"StartCCC"="c:\programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 90112]
"SunJavaUpdateSched"="c:\programme\Java\jre6\bin\jusched.exe" [2009-10-04 149280]
"ISUSPM Startup"="c:\progra~1\GEMEIN~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2006-08-25 221184]
"ISUSScheduler"="c:\programme\Gemeinsame Dateien\InstallShield\UpdateService\issch.exe" [2006-08-25 81920]
"avgnt"="c:\programme\Avira\AntiVir Desktop\avgnt.exe" [2010-11-11 281768]
"WrtMon.exe"="c:\windows\system32\spool\drivers\w32x86\3\WrtMon.exe" [2007-07-18 20480]
"LMPSSDMON"="c:\programme\Lexmark\Monitor\ACJ\LMabMON.exe" [2008-11-21 753664]
"TrueImageMonitor.exe"="c:\programme\Acronis\TrueImageHome\TrueImageMonitor.exe" [2006-10-18 1189920]
"AcronisTimounterMonitor"="c:\programme\Acronis\TrueImageHome\TimounterMonitor.exe" [2006-10-18 1962896]
"Acronis Scheduler2 Service"="c:\programme\Gemeinsame Dateien\Acronis\Schedule2\schedhlp.exe" [2006-10-17 87584]
"QuickTime Task"="c:\programme\QuickTime\qttask.exe" [2010-11-29 421888]
"iTunesHelper"="c:\programme\iTunes\iTunesHelper.exe" [2010-12-13 421160]
"LexwareInfoService"="c:\programme\Gemeinsame Dateien\Lexware\Update Manager\LxUpdateManager.exe" [2010-09-15 339312]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\dokumente und einstellungen\All Users\Startmen\Programme\Autostart\
Adobe Reader - Schnellstart.lnk - c:\programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-9-23 29696]
HP LaserJet 3150-Status.lnk - c:\jetsuite\JETSTAT.EXE [2008-6-18 147456]
Live Menu.lnk - c:\programme\Gemeinsame Dateien\efax\dllcmd32.exe [2008-6-18 26112]
Microsoft Office.lnk - c:\programme\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360]
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoFileUrl"= 0 (0x0)
"NoCommonGroups"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\WINDOWS\\system32\\lmabcoms.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Programme\\Java\\jre6\\bin\\javaw.exe"=
"c:\\Programme\\Bonjour\\mDNSResponder.exe"=
"c:\\Programme\\iTunes\\iTunes.exe"=
.
R1 jsmux;jsmux;c:\windows\system32\drivers\JSMUX.SYS [18.06.2008 21:27 173880]
R1 jsscan;jsscan;c:\windows\system32\drivers\JSSCAN.SYS [18.06.2008 21:27 56672]
R2 AntiVirSchedulerService;Avira AntiVir Planer;c:\programme\Avira\AntiVir Desktop\sched.exe [22.05.2009 22:05 135336]
R2 jsfax;jsfax;c:\windows\system32\drivers\JSFAX.SYS [18.06.2008 21:27 59604]
R3 RTL8187B;Realtek RTL8187B Wireless 802.11g 54Mbps USB 2.0 Network Adapter;c:\windows\system32\drivers\RTL8187B.sys [23.06.2008 07:46 264576]
S3 SampleScanner;USB Flatbed Scanner Driver;c:\windows\system32\drivers\ArtecGT.sys [03.01.2011 18:58 18120]
S4 jsdbg;jsdbg;c:\windows\system32\drivers\JSDBG.SYS [18.06.2008 21:27 50352]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.google.de/
uInternet Settings,ProxyOverride = *.local
IE: Nach Microsoft &Excel exportieren - c:\progra~1\MICROS~2\Office10\EXCEL.EXE/3000
DPF: {888078C6-70B2-4F88-8EE7-1F50DDEA6120} - hxxps://as.photoprintit.de/ips-opdata/activex/ImageUploader6.cab
FF - ProfilePath - c:\dokumente und einstellungen\Elke\Anwendungsdaten\Mozilla\Firefox\Profiles\uvn8rxcq.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.de/
FF - prefs.js: network.proxy.type - 0
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
HKCU-Run-4E3E0230AEBB4E96 - c:\recycle.bin\Recycle.Bin.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, hxxp://www.gmer.net
Rootkit scan 2011-04-29 23:23
Windows 5.1.2600 Service Pack 3 NTFS
.
Scanne versteckte Prozesse...
.
Scanne versteckte Autostarteinträge...
.
Scanne versteckte Dateien...
.
Scan erfolgreich abgeschlossen
versteckte Dateien: 0
.
**************************************************************************
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-1214440339-706699826-839522115-1004\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:45,1d,81,05,c0,05,48,1f,df,a8,ef,6c,6b,76,67,e2,82,ee,b2,b7,a9,e7,5c,
  fa,1a,dc,8f,fc,bf,88,71,e7,b3,36,92,d3,ff,b0,4a,f6,bf,e4,85,59,7d,4f,f5,6b,\
"??"=hex:44,a3,32,31,24,ac,61,07,b6,f9,ab,d2,97,c8,2b,d0
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- Durch laufende Prozesse gestartete DLLs ---------------------
.
- - - - - - - > 'winlogon.exe'(904)
c:\windows\system32\Ati2evxx.dll
.
- - - - - - - > 'explorer.exe'(2808)
c:\progra~1\GEMEIN~1\efax\HsPfcW32.dll
c:\windows\system32\HotRes32.dll
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe
c:\windows\system32\agrsmsvc.exe
c:\programme\Avira\AntiVir Desktop\avguard.exe
c:\programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\programme\Bonjour\mDNSResponder.exe
c:\programme\Java\jre6\bin\jqs.exe
c:\jetsuite\jsdaemon.exe
c:\programme\Avira\AntiVir Desktop\avshadow.exe
c:\windows\system32\LMabcoms.exe
c:\programme\CDBurnerXP\NMSAccessU.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\windows\system32\wscntfy.exe
c:\windows\RTHDCPL.EXE
c:\programme\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
c:\windows\system32\spool\drivers\w32x86\3\WrtProc.exe
c:\programme\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
c:\programme\iPod\bin\iPodService.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2011-04-29  23:28:27 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2011-04-29 21:28
.
Vor Suchlauf: 11 Verzeichnis(se), 172.872.077.312 Bytes frei
Nach Suchlauf: 13 Verzeichnis(se), 172.895.440.896 Bytes frei
.
WindowsXP-KB310994-SP2-Home-BootDisk-DEU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect
.
- - End Of File - - CB651C803843D57B7074A848D1843A1E


cosinus 30.04.2011 02:21

Starte jetzt nochmal den tdsskiller, er sollte jetzt funktionieren :)

kindereasy 30.04.2011 16:19

Liste der Anhänge anzeigen (Anzahl: 1)
Also, tdsskiller lief jetzt durch und zeigte nach Beenden des Scans "Infection: not found". Ich war total begeistert und scannte gleich anschließend mit Malwarebytes - auch dort wurde nichts gefunden. Anbei tdsskiller report und malwarebytes logfile.

Heißt das, wir sind am Ziel angekommen und haben den Trojaner verjagt? Oder freue ich mich da gerade zu früh?

Viele Grüße
Elke

cosinus 01.05.2011 13:47

Ok. Bitte nun Logs mit GMER und OSAM erstellen und posten.
GMER stürzt häufiger ab, wenn das Tool auch beim 2. Mal nicht will, lass es einfach weg und führ nur OSAM aus - die Online-Abfrage durch OSAM bitte überspringen.
Bei OSAM bitte darauf auch achten, dass Du das Log auch als *.log und nicht *.html oder so abspeicherst.


Downloade Dir danach bitte MBRCheck (by a_d_13) und speichere die Datei auf dem Desktop.
  • Doppelklick auf die MBRCheck.exe.
    Vista und Win7 User mit Rechtsklick "als Administrator starten"
  • Das Tool braucht nur wenige Sekunden.
  • Danach solltest du eine MBRCheck_<Datum>_<Uhrzeit>.txt auf dem Desktop finden.
Poste mir bitte den Inhalt des .txt Dokumentes

kindereasy 01.05.2011 16:17

Liste der Anhänge anzeigen (Anzahl: 1)
Das waren mal etwas einfachere Scans (am ComboFix bin ich kürzlich fast verzweifelt).

Anbei die Logs von GMER und MBRCheck, OSAM kommt am Ende der Nachricht, da ich's nicht anhängen konnte.

Außerdem noch eine Übersicht über die Funde, die mein Avira gestern Abend bei einer vollständigen Systemprüfung fand. Soll ich diese in Quarantäne verschieben? (Hab vorsichtshalber nichts unternommen, da ich mich in Deine Strategie nicht einmischen wollte).

Gruß
Elke

Code:

Report of OSAM: Autorun Manager v5.0.11926.0
hxxp://www.online-solutions.ru/en/
Saved at 17:06:54 on 01.05.2011

OS: Windows XP Home Edition Service Pack 3 (Build 2600)
Default Browser: Mozilla Corporation Firefox 4.0.1

Scanner Settings
[x] Rootkits detection (hidden registry)
[x] Rootkits detection (hidden files)
[x] Retrieve files information
[x] Check Microsoft signatures

Filters
[ ] Trusted entries
[ ] Empty entries
[x] Hidden registry entries (rootkit activity)
[x] Exclusively opened files
[x] Not found files
[x] Files without detailed information
[x] Existing files
[ ] Non-startable services
[ ] Non-startable drivers
[x] Active entries
[x] Disabled entries


[Control Panel Objects]
-----( %SystemRoot%\system32 )-----
"infocardcpl.cpl" - "Microsoft Corporation" - C:\WINDOWS\system32\infocardcpl.cpl
"ISUSPM.cpl" - "InstallShield Software Corporation" - C:\WINDOWS\system32\ISUSPM.cpl
"javacpl.cpl" - "Sun Microsystems, Inc." - C:\WINDOWS\system32\javacpl.cpl
"JSCPL32.CPL" - "eFax.com" - C:\WINDOWS\system32\JSCPL32.CPL
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Control Panel\Cpls )-----
"Avira AntiVir Personal - Free Antivirus " - "Avira GmbH" - C:\PROGRA~1\Avira\ANTIVI~1\avconfig.cpl
"Avira AntiVir Personal – Free Antivirus " - "Avira GmbH" - C:\PROGRA~1\Avira\ANTIVI~1\avconfig.cpl
"QuickTime" - "Apple Inc." - C:\Programme\QuickTime\QTSystem\QuickTime.cpl

[Drivers]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
"Acronis Snapshots Manager" (snapman) - "Acronis" - C:\WINDOWS\System32\DRIVERS\snapman.sys
"Acronis True Image Backup Archive Explorer" (timounter) - "Acronis" - C:\WINDOWS\System32\DRIVERS\timntr.sys
"Acronis True Image FS Filter" (tifsfilter) - "Acronis" - C:\WINDOWS\System32\DRIVERS\tifsfilt.sys
"avgio" (avgio) - "Avira GmbH" - C:\Programme\Avira\AntiVir Desktop\avgio.sys
"avgntflt" (avgntflt) - "Avira GmbH" - C:\WINDOWS\System32\DRIVERS\avgntflt.sys
"avipbb" (avipbb) - "Avira GmbH" - C:\WINDOWS\System32\DRIVERS\avipbb.sys
"catchme" (catchme) - ? - C:\cofi\catchme.sys  (File not found)
"Changer" (Changer) - ? - C:\WINDOWS\system32\drivers\Changer.sys  (File not found)
"i2omgmt" (i2omgmt) - ? - C:\WINDOWS\system32\drivers\i2omgmt.sys  (File not found)
"jsfax" (jsfax) - "JetFax, Inc." - C:\WINDOWS\System32\drivers\jsfax.sys
"jsmux" (jsmux) - "JetFax, Inc." - C:\WINDOWS\System32\drivers\jsmux.sys
"jsscan" (jsscan) - "JetFax, Inc." - C:\WINDOWS\System32\drivers\jsscan.sys
"lbrtfdc" (lbrtfdc) - ? - C:\WINDOWS\system32\drivers\lbrtfdc.sys  (File not found)
"PCIDump" (PCIDump) - ? - C:\WINDOWS\system32\drivers\PCIDump.sys  (File not found)
"PDCOMP" (PDCOMP) - ? - C:\WINDOWS\system32\drivers\PDCOMP.sys  (File not found)
"PDFRAME" (PDFRAME) - ? - C:\WINDOWS\system32\drivers\PDFRAME.sys  (File not found)
"PDRELI" (PDRELI) - ? - C:\WINDOWS\system32\drivers\PDRELI.sys  (File not found)
"PDRFRAME" (PDRFRAME) - ? - C:\WINDOWS\system32\drivers\PDRFRAME.sys  (File not found)
"PxHelp20" (PxHelp20) - "Sonic Solutions" - C:\WINDOWS\System32\Drivers\PxHelp20.sys
"pxtdrpow" (pxtdrpow) - ? - C:\DOKUME~1\Elke\LOKALE~1\Temp\pxtdrpow.sys  (Hidden registry entry, rootkit activity | File not found)
"ssmdrv" (ssmdrv) - "Avira GmbH" - C:\WINDOWS\System32\DRIVERS\ssmdrv.sys
"USB Flatbed Scanner Driver" (SampleScanner) - "  " - C:\WINDOWS\System32\DRIVERS\ArtecGT.sys
"WDICA" (WDICA) - ? - C:\WINDOWS\system32\drivers\WDICA.sys  (File not found)

[Explorer]
-----( HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components )-----
{89B4C1CD-B018-4511-B0A1-5476DBF70820} "StubPath" - "Microsoft Corporation" - c:\WINDOWS\system32\Rundll32.exe c:\WINDOWS\system32\mscories.dll,Install
-----( HKLM\Software\Classes\Folder\shellex\ColumnHandlers )-----
{16148659-720A-457d-850B-2DBD87BB129D} "AudibleShlExt Class" - "Audible, Inc." - C:\Programme\Audible\Bin\AudibleExt.dll
{F9DB5320-233E-11D1-9F84-707F02C10627} "PDF Shell Extension" - "Adobe Systems, Inc." - C:\Programme\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll
{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396} "{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}" - ? - C:\Programme\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll
-----( HKLM\Software\Classes\Protocols\Filter )-----
{1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1" - "Microsoft Corporation" - C:\WINDOWS\system32\mscoree.dll
{1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1" - "Microsoft Corporation" - C:\WINDOWS\system32\mscoree.dll
{1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1" - "Microsoft Corporation" - C:\WINDOWS\system32\mscoree.dll
-----( HKLM\Software\Classes\Protocols\Handler )-----
{3D9F03FA-7A94-11D3-BE81-0050048385D1} "Data Page Pluggable Protocol mso-offdap Handler" - "Microsoft Corporation" - C:\PROGRA~1\GEMEIN~1\MICROS~1\WEBCOM~1\10\OWC10.DLL
{CD00020A-8B95-11D1-82DB-00C04FB1625D} "Microsoft PKM KnowledgePluggable Class" - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Folders\PKMCDO.DLL
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )-----
{23170F69-40C1-278A-1000-000100020000} "7-Zip Shell Extension" - "Igor Pavlov" - C:\Programme\7-Zip\7-zip.dll
{C539A15A-3AF9-4c92-B771-50CB78F5C751} "Acronis True Image Shell Context Menu Extension" - ? -  (File not found | COM-object registry key not found)
{C539A15B-3AF9-4c92-B771-50CB78F5C751} "Acronis True Image Shell Extension" - ? -  (File not found | COM-object registry key not found)
{16148659-720A-457d-850B-2DBD87BB129D} "AudibleShlExt Class" - "Audible, Inc." - C:\Programme\Audible\Bin\AudibleExt.dll
{42071714-76d4-11d1-8b24-00a0c9068ff3} "CPL-Erweiterung für Anzeigeverschiebung" - ? - deskpan.dll  (File not found)
{B9E1D2CB-CCFF-4AA6-9579-D7A4754030EF} "iTunes" - "Apple Inc." - C:\Programme\iTunes\iTunesMiniPlayer.dll
{853FE2B1-B769-11d0-9C4E-00C04FB6C6FA} "Kontextmenü für die Verschlüsselung" - ? -  (File not found | COM-object registry key not found)
{42042206-2D85-11D3-8CFF-005004838597} "Microsoft Office HTML Icon Handler" - "Microsoft Corporation" - C:\Programme\Microsoft Office\Office10\msohev.dll
{993BE281-6695-4BA5-8A2A-7AACBFAAB69E} "Microsoft Office Metadata Handler" - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE14\msoshext.dll
{C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97} "Microsoft Office Thumbnail Handler" - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE14\msoshext.dll
{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396} "OpenOffice.org Column Handler" - ? - C:\Programme\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll
{087B3AE3-E237-4467-B8DB-5A38AB959AC9} "OpenOffice.org Infotip Handler" - ? - C:\Programme\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll
{63542C48-9552-494A-84F7-73AA6A7C99C1} "OpenOffice.org Property Sheet Handler" - ? - C:\Programme\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll
{3B092F0C-7696-40E3-A80F-68D74DA84210} "OpenOffice.org Thumbnail Viewer" - ? - C:\Programme\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll
{0006F045-0000-0000-C000-000000000046} "Outlook-Dateisymbolerweiterung" - "Microsoft Corporation" - C:\Programme\Microsoft Office\Office10\OLKFSTUB.DLL
{45AC2688-0253-4ED8-97DE-B5370FA7D48A} "Shell Extension for Malware scanning" - "Avira GmbH" - C:\Programme\Avira\AntiVir Desktop\shlext.dll
{E37E2028-CE1A-4f42-AF05-6CEABC4E5D75} "Shell Icon Handler for Application References" - "Microsoft Corporation" - c:\WINDOWS\system32\dfshim.dll
{764BF0E1-F219-11ce-972D-00AA00A14F56} "Shellerweiterungen für die Dateikomprimierung" - ? -  (File not found | COM-object registry key not found)
{e82a2d71-5b2f-43a0-97b8-81be15854de8} "ShellLink for Application References" - "Microsoft Corporation" - c:\WINDOWS\system32\dfshim.dll
{5E2121EE-0300-11D4-8D3B-444553540000} "SimpleShlExt Class" - ? - C:\Programme\ATI Technologies\ATI.ACE\Core-Static\atiacmxx.dll
{BDEADF00-C265-11D0-BCED-00A0C90AB50F} "Webordner" - "Microsoft Corporation" - C:\PROGRA~1\GEMEIN~1\MICROS~1\WEBFOL~1\MSONSEXT.DLL

[Internet Explorer]
-----( HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser )-----
<binary data> "ITBarLayout" - ? -  (File not found | COM-object registry key not found)
<binary data> "PDFCreator Toolbar" - ? - C:\Programme\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
-----( HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units )-----
{888078C6-70B2-4F88-8EE7-1F50DDEA6120} "CeWe Color AG & Co. OHG Control" - "CeWe Color AG & Co. OHG" - C:\WINDOWS\Downloaded Program Files\ImageUploader6.ocx / https://as.photoprintit.de/ips-opdata/activex/ImageUploader6.cab
{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} "Java Plug-in 1.6.0_02" - "Sun Microsystems, Inc." - C:\Programme\Java\jre1.6.0_02\bin\npjpi160_02.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab
{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} "Java Plug-in 1.6.0_07" - "Sun Microsystems, Inc." - C:\Programme\Java\jre1.6.0_07\bin\npjpi160_07.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
{8AD9C840-044E-11D1-B3E9-00805F499D93} "Java Plug-in 1.6.0_16" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\npjpi160_16.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab
{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} "Java Plug-in 1.6.0_16" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\npjpi160_16.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab
{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} "Java Plug-in 1.6.0_16" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\npjpi160_16.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab
{D27CDB6E-AE6D-11CF-96B8-444553540000} "Shockwave Flash Object" - "Adobe Systems, Inc." - C:\WINDOWS\system32\Macromed\Flash\Flash10i.ocx / hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
-----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar )-----
{31CF9EBE-5755-4A1D-AC25-2834D952D9B4} "PDFCreator Toolbar" - ? - C:\Programme\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects )-----
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} "Adobe PDF Reader Link Helper" - "Adobe Systems Incorporated" - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
{DBC80044-A445-435b-BC74-9C25C1C588A9} "Java(tm) Plug-In 2 SSV Helper" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\jp2ssv.dll
{E7E6F031-17CE-4C07-BC86-EABFE594F69C} "JQSIEStartDetectorImpl Class" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
{C451C08A-EC37-45DF-AAAD-18B51AB5E837} "PDFCreator Toolbar Helper" - ? - C:\Programme\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll

[Logon]
-----( %AllUsersProfile%\Startmenü\Programme\Autostart )-----
"Adobe Reader - Schnellstart.lnk" - "Adobe Systems Incorporated" - C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe  (Shortcut exists | File exists)
"desktop.ini" - ? - C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\desktop.ini
"HP LaserJet 3150-Status.lnk" - "eFax.com" - C:\jetsuite\JETSTAT.EXE  (Shortcut exists | File exists)
"Live Menu.lnk" - "eFax.com" - C:\Programme\Gemeinsame Dateien\efax\dllcmd32.exe  (Shortcut exists | File exists)
"Microsoft Office.lnk" - "Microsoft Corporation" - C:\Programme\Microsoft Office\Office10\OSA.EXE  (Shortcut exists | File exists)
-----( %UserProfile%\Startmenü\Programme\Autostart )-----
"desktop.ini" - ? - C:\Dokumente und Einstellungen\Elke\Startmenü\Programme\Autostart\desktop.ini
-----( HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run )-----
"LMab1err" - " " - C:\Programme\Lexmark\ErrorApp\LMab1err.exe
"Picasa Media Detector" - "Google Inc." - C:\Programme\Picasa2\PicasaMediaDetector.exe
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Run )-----
"Acronis Scheduler2 Service" - "Acronis" - "C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedhlp.exe"
"AcronisTimounterMonitor" - "Acronis" - C:\Programme\Acronis\TrueImageHome\TimounterMonitor.exe
"avgnt" - "Avira GmbH" - "C:\Programme\Avira\AntiVir Desktop\avgnt.exe" /min
"ISUSPM Startup" - "Macrovision Corporation" - C:\PROGRA~1\GEMEIN~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
"ISUSScheduler" - "Macrovision Corporation" - "C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\issch.exe" -start
"iTunesHelper" - "Apple Inc." - "C:\Programme\iTunes\iTunesHelper.exe"
"LexwareInfoService" - "Haufe-Lexware GmbH & Co. KG" - C:\Programme\Gemeinsame Dateien\Lexware\Update Manager\LxUpdateManager.exe /autostart
"LMPSSDMON" - ? - C:\Programme\Lexmark\Monitor\ACJ\LMabMON.exe
"QuickTime Task" - "Apple Inc." - "C:\Programme\QuickTime\qttask.exe" -atboottime
"StartCCC" - ? - C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe  (File found, but it contains no detailed information)
"SunJavaUpdateSched" - "Sun Microsystems, Inc." - "C:\Programme\Java\jre6\bin\jusched.exe"
"TrueImageMonitor.exe" - "Acronis" - C:\Programme\Acronis\TrueImageHome\TrueImageMonitor.exe
"WrtMon.exe" - ? - C:\WINDOWS\system32\spool\drivers\w32x86\3\WrtMon.exe

[Print Monitors]
-----( HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors )-----
"JetFax Language Monitor" - "eFax.com" - C:\WINDOWS\system32\jsmuxmon.dll
"Lexmark Enhanced TCP/IP Port" - " " - C:\WINDOWS\system32\lmablmpm.dll
"PDFCreator" - ? - C:\WINDOWS\system32\pdfcmnnt.dll  (File found, but it contains no detailed information)

[Services]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
".NET Runtime Optimization Service v2.0.50727_X86" (clr_optimization_v2.0.50727_32) - "Microsoft Corporation" - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
"Acronis Scheduler2 Service" (AcrSch2Svc) - "Acronis" - C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe
"Anwendungsverwaltung" (AppMgmt) - ? - C:\WINDOWS\System32\appmgmts.dll  (File not found)
"Apple Mobile Device" (Apple Mobile Device) - "Apple Inc." - C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
"ASP.NET State Service" (aspnet_state) - "Microsoft Corporation" - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
"Avira AntiVir Guard" (AntiVirService) - "Avira GmbH" - C:\Programme\Avira\AntiVir Desktop\avguard.exe
"Avira AntiVir Planer" (AntiVirSchedulerService) - "Avira GmbH" - C:\Programme\Avira\AntiVir Desktop\sched.exe
"Dienst "Bonjour"" (Bonjour Service) - "Apple Inc." - C:\Programme\Bonjour\mDNSResponder.exe
"Google Updater Service" (gusvc) - "Google" - C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe
"InstallDriver Table Manager" (IDriverT) - "Macrovision Corporation" - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe
"iPod-Dienst" (iPod Service) - "Apple Inc." - C:\Programme\iPod\bin\iPodService.exe
"Java Quick Starter" (JavaQuickStarterService) - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\jqs.exe
"jsdaemon" (jsdaemon) - "JetFax, Inc." - c:\jetsuite\jsdaemon.exe
"lmab_device" (lmab_device) - " " - C:\WINDOWS\system32\LMabcoms.exe
"NMSAccessU" (NMSAccessU) - ? - C:\Programme\CDBurnerXP\NMSAccessU.exe  (File found, but it contains no detailed information)
"stllssvr" (stllssvr) - ? - "C:\Programme\Gemeinsame Dateien\SureThing Shared\stllssvr.exe"  (File not found)
"Windows CardSpace" (idsvc) - "Microsoft Corporation" - c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
"Windows Presentation Foundation Font Cache 3.0.0.0" (FontCache3.0.0.0) - "Microsoft Corporation" - c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe

[Winlogon]
-----( HKCU\Control Panel\IOProcs )-----
"MVB" - ? - mvfs32.dll  (File not found)
-----( HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions )-----
{c6dc5466-785a-11d2-84d0-00c04fb169f7} "Softwareinstallation" - ? - appmgmts.dll  (File not found)

[Winsock Providers]
-----( HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries )-----
"mdnsNSP" - "Apple Inc." - C:\Programme\Bonjour\mdnsNSP.dll

===[ Logfile end ]=========================================[ Logfile end ]===

If You have questions or want to get some help, You can visit hxxp://forum.online-solutions.ru


cosinus 01.05.2011 16:23

Die Avirafunde bringen so nicht. Screenshots sind da doof, poste das komplette Protokoll von AntiVir.

kindereasy 01.05.2011 16:47

OK, hier die Logdatei von Avira ...

Gruß
Elke

cosinus 01.05.2011 18:48

Ein paar Funde im Javacache und isolierte Schädlinge (von OTL und CF)

Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SASW und poste die Logs.
Denk dran beide Tools zu updaten vor dem Scan!!

kindereasy 01.05.2011 21:17

und hier kommen die Logs von Malwarebytes und SuperAntiSpyware:

Code:

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Datenbank Version: 6484

Windows 5.1.2600 Service Pack 3
Internet Explorer 6.0.2900.5512

01.05.2011 20:39:32
mbam-log-2011-05-01 (20-39-32).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)
Durchsuchte Objekte: 238015
Laufzeit: 35 Minute(n), 8 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)

Code:

SUPERAntiSpyware Scan Log
hxxp://www.superantispyware.com

Generated 05/01/2011 at 09:59 PM

Application Version : 4.51.1000

Core Rules Database Version : 6966
Trace Rules Database Version: 4778

Scan type      : Complete Scan
Total Scan Time : 01:03:45

Memory items scanned      : 643
Memory threats detected  : 0
Registry items scanned    : 5557
Registry threats detected : 0
File items scanned        : 73362
File threats detected    : 2

Trojan.Agent/Gen-Nullo[Short]
        C:\QOOBOX\QUARANTINE\C\RECYCLE.BIN\RECYCLE.BIN.EXE.VIR
        C:\SYSTEM VOLUME INFORMATION\_RESTORE{E5A12B04-E333-4833-96C9-07BADDF7701F}\RP228\A0073345.EXE


cosinus 02.05.2011 11:26

Nur Überreste, harmlos.
Rechner wieder ok?

kindereasy 02.05.2011 19:58

Hallo Arne,

Rechner läuft wieder super, ja sogar besser als vorher. Alle Dateien sind wieder da und meine Programme laufen wieder. Die Scriptfehler tauchen auch nicht mehr auf. Werde gleich Morgen ein Backup von der Festplatte machen.

Herzlichen Dank!!!

Das hätte ich alleine niemals hinbekommen und ich finde es super, dass Du Dich so toll um mich/meinen Rechner gekümmert hast - Du bist echt klasse!!! Werde mir dieses Forum merken, hoffe aber, dass ich es nicht mehr benötigen werde (diese Aktion hat mich doch einiges an Nerven gekostet).

Darf ich abschließend noch ein paar Fragen loswerden?
- Avira meldete gestern noch ein paar Mal zwei der Funde aus der letzten Systemprüfung, die ich noch nicht in Quarantäne verschoben hatte (TR/Patched.Gen und TR/Drop.Softomat.AN). Sind diese Funde weg, wenn ich sie in Quarantäne verschiebe?
- Hab jetzt noch ein Super Anti Spyware Symbol in meiner Taskleiste rechts unten. Macht es für mich als Laien Sinn, regelmäßig mit diesem Tool und/oder Malwarebytes zu scannen?
- Wie schütze ich mich zukünftig am Besten? Ist Avira AntiVir ausreichend (hat diesen Trojaner zwar gleich gemeldet, aber meinen Rechner nicht wirklich davor geschützt)?
- was sind das für Menschen, die solche Trojaner verbreiten?

Nochmal vielen Dank für die Hilfe und Geduld!

Viele Grüße
Elke

cosinus 02.05.2011 20:38

Zitat:

Sind diese Funde weg, wenn ich sie in Quarantäne verschiebe?
ja, Quarantäne bedeutet entfernt, aber Sicherheitskopie in isoliertem bereich.

Zitat:

Macht es für mich als Laien Sinn, regelmäßig mit diesem Tool und/oder Malwarebytes zu scannen?
Malwarebytes ja, SASW kannst du wieder löschen. Wenn du mit Malwarebytes scanst, musst du es immer vorher aktualisieren!

Zitat:

- Wie schütze ich mich zukünftig am Besten? Ist Avira AntiVir ausreichend (hat diesen Trojaner zwar gleich gemeldet, aber meinen Rechner nicht wirklich davor geschützt)?
AntiVir reicht, vom Standpunkt Virenscanner aus betrachtet, aber du musst dein Verhalten/Konzept anpassen!
Halte Dich am besten grob an diese fünf Regeln:

1) Sei misstrauisch im Internet und v.a. bei unbekannten E-Mails, sei vorsichtig bei der Herausgabe persönlicher Daten!!
2) Halte Windows und alle verwendeten Programme immer aktuell
3) Führe regelmäßig Backups auf externe Medien durch
4) Arbeite mit eingeschränkten Rechten
5) Nutze sichere Programme wie zB Opera oder Firefox zum Surfen statt den IE, zum Mailen Thunderbird statt Outlook Express - E-Mails nur als reinen text anzeigen lassen

Alles noch genauer erklärt steht hier => Kompromittierung unvermeidbar?

Zitat:

- was sind das für Menschen, die solche Trojaner verbreiten?
Das sind alles kleine geldgierige [beeeeep] :D



Dann wären wir durch! :abklatsch:

Bitte abschließend die Updates prüfen, unten mein Leitfaden dazu.
Für noch mehr Sicherheit solltest Du nach der beseitigten Infektion auch möglichst alle Passwörter ändern.


Microsoftupdate

Windows XP: Besuch mit dem IE die MS-Updateseite und lass Dir alle wichtigen Updates installieren.

Windows Vista/7: Anleitung Windows-Update



PDF-Reader aktualisieren
Dein Adobe Reader ist nicht aktuell, was ein großes Sicherheitsrisiko darstellt. Du solltest daher besser die alte Version über Systemsteuerung => Software deinstallieren, indem Du dort auf "Adobe Reader x.0" klickst und das Programm entfernst.

Ich empfehle einen alternativen PDF-Reader wie SumatraPDF oder Foxit PDF Reader, beide sind sehr viel schlanker und flotter als der AdobeReader.

Bitte überprüf bei der Gelegenheit auch die Aktualität des Flashplayers, hier der direkte Downloadlink:

Mozilla und andere Browser => http://filepony.de/?q=Flash+Player
Internet Explorer => http://fpdownload.adobe.com/get/flas..._player_ax.exe


Java-Update
Veraltete Java-Installationen sind ein Sicherheitsrisiko, daher solltest Du die alten Versionen löschen (falls vorhanden, am besten mit JavaRa) und auf die neuste aktualisieren. Beende dazu alle Programme (v.a. die Browser), klick danach auf Start, Systemsteuerung, Software und deinstalliere darüber alle aufgelisteten Java-Versionen. Lad Dir danach von hier das aktuelle Java SE Runtime Environment (JRE) herunter und installiere es.

kindereasy 02.05.2011 21:10

Danke für die vielen Tipps!

Werde in den nächsten Tagen gleich dran arbeiten, denn da gibt's bei mir einiges Verbesserungspotential.

Weiterhin viel Erfolg!
... und einfach nochmal DANKE! :knuddel:


Alle Zeitangaben in WEZ +1. Es ist jetzt 17:01 Uhr.

Copyright ©2000-2024, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24