Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   PUP.Dealio - die zweite (https://www.trojaner-board.de/94678-pup-dealio-zweite.html)

badbadi 12.01.2011 07:15

PUP.Dealio - die zweite
 
Hallo,

Mein Beitrag bezieht sich auf einen Forumsbeitrag vom 9.1.2011 um 22.35 Uhr mit dem Thema: PUP.Dealio.
Auch bei mir hat das Programm "Malwarebytes" PUP.Dealio entdeckt. Habe dann entsprechend den Anweisungen, die im oben genannten Forumsbeitrag vorgegeben wurden, mit den Programmen JjackThis und CCleaner die geforderten Logfiles erstellt.
Die Ergebnisse würde ich jetzt hier posten und würde mich sehr freuen, wenn Sie jemand von euch anschaut und mir mitteilt, ob mein System noch sauber ist. Danke!

mbam-log

Code:

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Datenbank Version: 5506

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

1/12/2011 5:45:42 AM
mbam-log-2011-01-12 (05-45-42).txt

Art des Suchlaufs: Quick-Scan
Durchsuchte Objekte: 145205
Laufzeit: 2 Minute(n), 51 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 1
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{E312764E-7706-43F1-8DAB-FCDD2B1E416D} (PUP.Dealio) -> Quarantined and deleted successfully.

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)

hier das Logfile von hijackthis

Code:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 6:12:44 AM, on 1/12/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\GIGABYTE\EnergySaver\GSvr.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =

hxxp://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: DeviceVM Url Search Hook - {0063BF63-BFFF-4B8F-9D26-4267DF7F17DD} -

C:\WINDOWS\system32\dvmurl.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program

Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program

Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network

Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program

Files\Messenger\msmsgs.exe
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} -

C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} -

C:\WINDOWS\system32\browseui.dll
O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir

Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir

Desktop\avguard.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. -

C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision

Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GEST Service for program management. (GEST Service) - Unknown owner - C:\Program

Files\GIGABYTE\EnergySaver\GSvr.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program

Files\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program

Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

--
End of file - 5245 bytes


Und das Ergebnis von CCleaner

Code:

1st Page 2000 2.00 Free               
Adobe Flash Player 10 ActiveX        Adobe Systems Incorporated        10.1.102.64
Adobe Flash Player 10 Plugin        Adobe Systems Incorporated        10.1.102.64
Adobe Illustrator CS3        Adobe Systems Incorporated        13.0
Adobe InDesign CS3        Adobe Systems Incorporated        5.0
Adobe Photoshop CS3        Adobe Systems Incorporated        10.0
Avira AntiVir Personal - Free Antivirus        Avira GmbH        10.0.0.609
Browser Configuration Utility        DeviceVM Inc.        1.0.4.9
CCleaner        Piriform        3.02
CommandBurner 3.5        Cortex I.T.       
Energy Saver Advance B9.0316.1        GIGABYTE        1.10.0000
Foxit Reader        Foxit Software Company        3.1.3.1030
Google Earth Plug-in        Google        5.2.1.1588
HiJackThis        Trend Micro        1.0.0
Java(TM) 6 Update 22        Sun Microsystems, Inc.        6.0.220
Malwarebytes' Anti-Malware        Malwarebytes Corporation       
Microsoft Compression Client Pack 1.0 for Windows XP        Microsoft Corporation        1
Microsoft IntelliPoint 5.5        Microsoft        5.50.661.0
Microsoft Office Enterprise 2007        Microsoft Corporation        12.0.6425.1000
Microsoft User-Mode Driver Framework Feature Pack 1.0        Microsoft Corporation       
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053        Microsoft Corporation        8.0.50727.4053
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148        Microsoft Corporation        9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17        Microsoft Corporation        9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148        Microsoft Corporation        9.0.30729.4148
Mozilla Firefox (3.6.13)        Mozilla        3.6.13 (de)
NVIDIA Drivers        NVIDIA Corporation        1.3
NVIDIA PhysX        NVIDIA Corporation        9.09.0428
REALTEK GbE & FE Ethernet PCI-E NIC Driver        Realtek        1.20.0000
Realtek High Definition Audio Driver        Realtek Semiconductor Corp.        5.10.0.5780
Total Commander (Remove or Repair)        Ghisler Software GmbH        7.50a
Windows Internet Explorer 8        Microsoft Corporation        20090308.140743
Windows Media Format 11 runtime               
Windows Media Player 11               
WinSCP 4.2.4 beta        Martin Prikryl        4.2.4 beta

Ich wollte auch noch die Logfiles von hjtscanlist einfügen, aber das Forum hat mir Folgendes gemeldet:

Der Text, den Sie eingegeben haben, besteht aus 139773 Zeichen und ist damit zu lang. Bitte kürzen Sie den Text auf die maximale Länge von 135120 Zeichen. Deshalb kommt die hjtscanlist im nächsten Teil.

Danke für die Mühe.

Gruß

Badi

badbadi 12.01.2011 07:18

Hallo,

Hier kommt das Logfile von hjtscanlist

Code:

                        $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
                        º                                    º
                                    hjtscanlist v2.0             
                        º                                    º
                        $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

Microsoft Windows XP [Version 5.1.2600]
 
 
C:

  01/12/2011 06:32 AM      C:\service.log --------- 13609
        C:\pagefile.sys --------- 
  01/12/2011 05:51 AM      C:\Program Files --------- 0
  12/18/2010 10:51 AM      C:\WINDOWS --------- 0
  11/08/2010 06:19 AM      C:\11ea1b7fa7318e976a90 --------- 0
  11/08/2010 06:19 AM      C:\c3537f57c2f3f85155c6c45e --------- 0
  01/30/2010 08:24 AM      C:\Documents and Settings --------- 0
  01/28/2010 07:53 AM      C:\System Volume Information --------- 0
  11/01/2009 07:51 AM      C:\totalcmd --------- 0
  11/01/2009 07:51 AM      C:\RECYCLER --------- 0
  10/31/2009 06:21 AM      C:\MSOCache --------- 0
  10/29/2009 05:20 PM      C:\Install.log --------- 197
  10/29/2009 05:18 PM      C:\RHDSetup.log --------- 1519
  10/29/2009 05:15 PM      C:\Intel --------- 0
  10/29/2009 04:49 PM      C:\MSDOS.SYS --------- 0
  10/29/2009 04:49 PM      C:\CONFIG.SYS --------- 0
  10/29/2009 04:49 PM      C:\AUTOEXEC.BAT --------- 0
  10/29/2009 04:49 PM      C:\IO.SYS --------- 0
  10/29/2009 04:45 PM      C:\boot.ini --------- 211
  04/14/2008 07:01 AM      C:\ntldr --------- 250048
  04/14/2008 05:13 AM      C:\NTDETECT.COM --------- 47564
----------------------------------------

 
C:\WINDOWS

  01/12/2011 06:10 AM    C:\WINDOWS\WindowsUpdate.log --------- 1476399
  01/12/2011 06:09 AM    C:\WINDOWS\0.log --------- 0
  01/12/2011 06:09 AM    C:\WINDOWS\gdrv.sys --------- 17488
  01/12/2011 06:09 AM    C:\WINDOWS\bootstat.dat --------- 2048
  01/12/2011 06:08 AM    C:\WINDOWS\SchedLgU.Txt --------- 32578
  01/11/2011 07:55 PM    C:\WINDOWS\wiaservc.log --------- 49
  01/11/2011 07:55 PM    C:\WINDOWS\wiadebug.log --------- 411
  01/01/2011 08:39 AM    C:\WINDOWS\wmsetup.log --------- 26557
  12/16/2010 10:52 AM    C:\WINDOWS\iis6.log --------- 1023994
  12/16/2010 10:52 AM    C:\WINDOWS\comsetup.log --------- 314807
  12/16/2010 10:52 AM    C:\WINDOWS\tabletoc.log --------- 47125
  12/16/2010 10:52 AM    C:\WINDOWS\imsins.log --------- 1393
  12/16/2010 10:52 AM    C:\WINDOWS\ocmsn.log --------- 50817
  12/16/2010 10:52 AM    C:\WINDOWS\tsoc.log --------- 422692
  12/16/2010 10:52 AM    C:\WINDOWS\ntdtcsetup.log --------- 189170
  12/16/2010 10:52 AM    C:\WINDOWS\KB2296199.log --------- 16000
  12/16/2010 10:52 AM    C:\WINDOWS\MedCtrOC.log --------- 64142
  12/16/2010 10:52 AM    C:\WINDOWS\ocgen.log --------- 446348
  12/16/2010 10:52 AM    C:\WINDOWS\msgsocm.log --------- 45985
  12/16/2010 10:52 AM    C:\WINDOWS\netfxocm.log --------- 160908
  12/16/2010 10:52 AM    C:\WINDOWS\FaxSetup.log --------- 914221
  12/16/2010 10:52 AM    C:\WINDOWS\msmqinst.log --------- 285442
  12/16/2010 10:52 AM    C:\WINDOWS\updspapi.log --------- 62692
  12/16/2010 10:52 AM    C:\WINDOWS\imsins.BAK --------- 1393
  12/16/2010 10:52 AM    C:\WINDOWS\KB2443105.log --------- 15198
  12/16/2010 10:51 AM    C:\WINDOWS\KB2416400-IE8.log --------- 15134
  12/16/2010 10:51 AM    C:\WINDOWS\KB2440591.log --------- 7686
  12/16/2010 10:51 AM    C:\WINDOWS\KB2443685.log --------- 4726
  12/16/2010 10:51 AM    C:\WINDOWS\KB2436673.log --------- 12760
  12/16/2010 10:51 AM    C:\WINDOWS\KB2467659.log --------- 7052
  12/16/2010 10:50 AM    C:\WINDOWS\KB2423089.log --------- 6522
  11/09/2010 03:53 PM    C:\WINDOWS\spupdsvc.log --------- 117750
  11/09/2010 06:15 AM    C:\WINDOWS\KB975558.log --------- 14033
  11/09/2010 06:15 AM    C:\WINDOWS\KB2378111.log --------- 17923
  11/09/2010 06:15 AM    C:\WINDOWS\KB954155.log --------- 168501
  11/09/2010 06:15 AM    C:\WINDOWS\KB941569.log --------- 12181
  11/09/2010 06:15 AM    C:\WINDOWS\setupapi.log --------- 473457
  11/09/2010 06:14 AM    C:\WINDOWS\KB978695.log --------- 11293
  11/09/2010 06:14 AM    C:\WINDOWS\KB973540.log --------- 21718
  11/09/2010 06:14 AM    C:\WINDOWS\KB929399.log --------- 10577
  11/09/2010 06:14 AM    C:\WINDOWS\KB939683.log --------- 10346
  11/09/2010 06:14 AM    C:\WINDOWS\KB952069.log --------- 18216
  11/09/2010 06:14 AM    C:\WINDOWS\KB954154.log --------- 4166
  11/08/2010 06:20 AM    C:\WINDOWS\wmsetup10.log --------- 510
  11/08/2010 06:20 AM    C:\WINDOWS\MSCompPackV1.log --------- 7264
  11/08/2010 06:20 AM    C:\WINDOWS\wmp11.log --------- 22979
  11/08/2010 06:19 AM    C:\WINDOWS\win.ini --------- 507
  11/08/2010 06:19 AM    C:\WINDOWS\WMFDist11.log --------- 29302
  11/08/2010 06:19 AM    C:\WINDOWS\Wudf01000Inst.log --------- 13009
  10/14/2010 08:10 AM    C:\WINDOWS\KB2387149.log --------- 15108
  10/14/2010 08:10 AM    C:\WINDOWS\KB2279986.log --------- 19365
  10/14/2010 08:10 AM    C:\WINDOWS\KB2345886.log --------- 19833
  10/14/2010 08:10 AM    C:\WINDOWS\KB2296011.log --------- 11730
  10/14/2010 08:10 AM    C:\WINDOWS\KB982132.log --------- 17807
  10/14/2010 08:09 AM    C:\WINDOWS\KB979687.log --------- 18392
  10/14/2010 08:09 AM    C:\WINDOWS\KB2360131-IE8.log --------- 16482
  10/14/2010 08:07 AM    C:\WINDOWS\KB981957.log --------- 12951
  10/14/2010 08:07 AM    C:\WINDOWS\KB2360937.log --------- 8302
  10/08/2010 06:29 AM    C:\WINDOWS\KB2259922.log --------- 8454
  10/08/2010 06:29 AM    C:\WINDOWS\KB2347290.log --------- 13290
  10/08/2010 06:29 AM    C:\WINDOWS\KB2121546.log --------- 12772
  10/08/2010 06:29 AM    C:\WINDOWS\KB982802.log --------- 12619
  10/08/2010 06:28 AM    C:\WINDOWS\KB981322.log --------- 11066
  10/08/2010 06:26 AM    C:\WINDOWS\KB2141007.log --------- 10719
  10/08/2010 06:26 AM    C:\WINDOWS\KB2158563.log --------- 3730
  08/12/2010 07:10 PM    C:\WINDOWS\KB982214.log --------- 12466
  08/12/2010 07:10 PM    C:\WINDOWS\KB2115168.log --------- 16581
  08/12/2010 07:10 PM    C:\WINDOWS\KB981852.log --------- 14062
  08/12/2010 07:10 PM    C:\WINDOWS\KB2079403.log --------- 16968
  08/12/2010 07:10 PM    C:\WINDOWS\KB2183461-IE8.log --------- 15376
  08/12/2010 07:09 PM    C:\WINDOWS\KB2160329.log --------- 13363
  08/12/2010 07:09 PM    C:\WINDOWS\KB980436.log --------- 12700
  08/12/2010 07:09 PM    C:\WINDOWS\KB981997.log --------- 6508
  08/12/2010 07:08 PM    C:\WINDOWS\KB982665.log --------- 10614
  08/03/2010 12:07 PM    C:\WINDOWS\KB2286198.log --------- 11494
  07/14/2010 06:46 PM    C:\WINDOWS\KB2229593.log --------- 7257
  06/10/2010 08:48 PM    C:\WINDOWS\KB982381-IE8.log --------- 13641
  06/10/2010 08:34 PM    C:\WINDOWS\KB980218.log --------- 11677
  06/09/2010 09:05 AM    C:\WINDOWS\KB980195.log --------- 6408
  06/09/2010 09:05 AM    C:\WINDOWS\KB979559.log --------- 12112
  06/09/2010 09:04 AM    C:\WINDOWS\KB979482.log --------- 10557
  06/09/2010 09:03 AM    C:\WINDOWS\KB975562.log --------- 10608
  05/26/2010 09:26 AM    C:\WINDOWS\KB981793.log --------- 3725
  05/12/2010 11:36 PM    C:\WINDOWS\KB978542.log --------- 14946
  04/15/2010 08:48 AM    C:\WINDOWS\KB979683.log --------- 7828
  04/15/2010 08:48 AM    C:\WINDOWS\KB980232.log --------- 6388
  04/15/2010 08:48 AM    C:\WINDOWS\KB979402.log --------- 4456
  04/15/2010 08:47 AM    C:\WINDOWS\KB978338.log --------- 11085
  04/15/2010 08:47 AM    C:\WINDOWS\KB977816.log --------- 10466
  04/15/2010 08:47 AM    C:\WINDOWS\KB981332-IE8.log --------- 6733
  04/13/2010 06:58 PM    C:\WINDOWS\KB978601.log --------- 11502
  04/13/2010 06:58 PM    C:\WINDOWS\KB979309.log --------- 10435
  04/13/2010 08:19 AM    C:\WINDOWS\KB976002-v5.log --------- 3331
  04/01/2010 06:21 AM    C:\WINDOWS\KB980182-IE8.log --------- 13448
  03/26/2010 05:56 AM    C:\WINDOWS\setupact.log --------- 182004
  03/11/2010 12:36 PM    C:\WINDOWS\KB975561.log --------- 6211
  03/09/2010 08:50 AM    C:\WINDOWS\KB977165-v2.log --------- 8286
  02/25/2010 08:12 PM    C:\WINDOWS\KB976662-IE8.log --------- 6566
  02/25/2010 08:12 PM    C:\WINDOWS\KB979306.log --------- 3725
  02/11/2010 10:57 AM    C:\WINDOWS\KB978262.log --------- 6839
  02/11/2010 10:57 AM    C:\WINDOWS\KB971468.log --------- 7352
  02/11/2010 10:56 AM    C:\WINDOWS\KB978037.log --------- 11647
  02/11/2010 10:56 AM    C:\WINDOWS\KB975713.log --------- 11404
  02/11/2010 10:56 AM    C:\WINDOWS\KB978251.log --------- 6892
  02/11/2010 10:56 AM    C:\WINDOWS\KB975560.log --------- 11667
  02/11/2010 10:55 AM    C:\WINDOWS\KB977914.log --------- 12306
  02/11/2010 10:55 AM    C:\WINDOWS\KB978706.log --------- 10689
  01/30/2010 08:24 AM    C:\WINDOWS\OEWABLog.txt --------- 1351
  01/22/2010 08:45 AM    C:\WINDOWS\KB978207-IE8.log --------- 13269
  01/14/2010 01:05 PM    C:\WINDOWS\KB955759.log --------- 7933
  01/14/2010 01:05 PM    C:\WINDOWS\KB972270.log --------- 6392
  12/10/2009 03:54 PM    C:\WINDOWS\KB970430.log --------- 18360
  12/10/2009 03:54 PM    C:\WINDOWS\KB974318.log --------- 16959
  12/10/2009 03:54 PM    C:\WINDOWS\KB976325-IE8.log --------- 14288
  12/10/2009 03:54 PM    C:\WINDOWS\KB974392.log --------- 12178
  12/10/2009 03:54 PM    C:\WINDOWS\KB971737.log --------- 11715
  12/09/2009 04:27 PM    C:\WINDOWS\KB973904.log --------- 7421
  11/25/2009 05:34 AM    C:\WINDOWS\KB976098-v2.log --------- 4237
  11/25/2009 05:34 AM    C:\WINDOWS\KB973687.log --------- 7488
  11/11/2009 06:37 AM    C:\WINDOWS\KB969947.log --------- 11136
  11/04/2009 12:14 PM    C:\WINDOWS\KB976749-IE8.log --------- 7669
  10/31/2009 07:30 PM    C:\WINDOWS\KB959426.log --------- 11411
  10/31/2009 07:30 PM    C:\WINDOWS\KB973869.log --------- 6788
  10/31/2009 07:29 PM    C:\WINDOWS\KB971961-IE8.log --------- 7118
  10/31/2009 07:29 PM    C:\WINDOWS\KB958644.log --------- 7350
  10/31/2009 06:13 AM    C:\WINDOWS\WgaNotify.log --------- 10353
  10/31/2009 06:10 AM    C:\WINDOWS\KB951376-v2.log --------- 62149
  10/31/2009 06:10 AM    C:\WINDOWS\KB952954.log --------- 67907
  10/31/2009 06:10 AM    C:\WINDOWS\KB946648.log --------- 62033
  10/31/2009 06:10 AM    C:\WINDOWS\KB956803.log --------- 62753
  10/31/2009 06:10 AM    C:\WINDOWS\KB960859.log --------- 68682
  10/31/2009 06:10 AM    C:\WINDOWS\KB958869.log --------- 60141
  10/31/2009 06:09 AM    C:\WINDOWS\KB951978.log --------- 70089
  10/31/2009 06:09 AM    C:\WINDOWS\KB968816.log --------- 61699
  10/31/2009 06:09 AM    C:\WINDOWS\KB961371-v2.log --------- 68829
  10/31/2009 06:09 AM    C:\WINDOWS\KB972260.log --------- 70325
  10/31/2009 06:09 AM    C:\WINDOWS\ie8_main.log --------- 78679
  10/31/2009 06:09 AM    C:\WINDOWS\KB975364-IE8.log --------- 62115
  10/31/2009 06:09 AM    C:\WINDOWS\KB974455-IE8.log --------- 76951
  10/31/2009 06:09 AM    C:\WINDOWS\ie8.log --------- 72158
  10/31/2009 06:06 AM    C:\WINDOWS\KB950974.log --------- 28537
  10/31/2009 06:06 AM    C:\WINDOWS\KB971657.log --------- 27871
  10/31/2009 06:06 AM    C:\WINDOWS\KB971557.log --------- 27372
  10/31/2009 06:06 AM    C:\WINDOWS\KB960225.log --------- 27381
  10/31/2009 06:06 AM    C:\WINDOWS\KB956744.log --------- 22321
  10/31/2009 06:06 AM    C:\WINDOWS\KB974112.log --------- 27371
  10/31/2009 06:06 AM    C:\WINDOWS\KB956572.log --------- 23955
  10/31/2009 06:05 AM    C:\WINDOWS\KB956844.log --------- 18244
  10/31/2009 06:05 AM    C:\WINDOWS\KB961501.log --------- 23752
  10/31/2009 06:05 AM    C:\WINDOWS\KB971633.log --------- 23256
  10/31/2009 06:05 AM    C:\WINDOWS\KB975025.log --------- 23180
  10/31/2009 06:05 AM    C:\WINDOWS\KB952004.log --------- 24494
  10/31/2009 06:05 AM    C:\WINDOWS\KB974571.log --------- 23008
  10/31/2009 06:05 AM    C:\WINDOWS\KB973507.log --------- 22502
  10/31/2009 06:05 AM    C:\WINDOWS\KB950762.log --------- 17157
  10/31/2009 06:05 AM    C:\WINDOWS\KB957097.log --------- 17218
  10/31/2009 06:05 AM    C:\WINDOWS\KB958687.log --------- 17144
  10/31/2009 06:05 AM    C:\WINDOWS\KB952287.log --------- 16842
  10/31/2009 06:05 AM    C:\WINDOWS\KB973354.log --------- 16833
  10/31/2009 06:05 AM    C:\WINDOWS\KB967715.log --------- 22041
  10/31/2009 06:05 AM    C:\WINDOWS\KB951066.log --------- 16398
  10/31/2009 06:05 AM    C:\WINDOWS\KB954459.log --------- 21214
  10/31/2009 06:05 AM    C:\WINDOWS\KB951748.log --------- 100508
  10/31/2009 06:04 AM    C:\WINDOWS\KB970238.log --------- 96098
  10/31/2009 06:04 AM    C:\WINDOWS\KB971486.log --------- 13596
  10/31/2009 06:04 AM    C:\WINDOWS\KB960803.log --------- 95586
  10/31/2009 06:04 AM    C:\WINDOWS\KB973815.log --------- 94884
  10/31/2009 06:04 AM    C:\WINDOWS\KB968537.log --------- 94910
  10/31/2009 06:04 AM    C:\WINDOWS\KB956802.log --------- 94709
  10/31/2009 06:04 AM    C:\WINDOWS\KB975467.log --------- 94783
  10/31/2009 06:04 AM    C:\WINDOWS\KB968389.log --------- 95388
  10/31/2009 05:47 AM    C:\WINDOWS\KB973525.log --------- 165223
  10/31/2009 05:46 AM    C:\WINDOWS\KB955069.log --------- 165724
  10/31/2009 05:46 AM    C:\WINDOWS\KB923561.log --------- 166030
  10/31/2009 05:46 AM    C:\WINDOWS\KB971961.log --------- 164345
  10/31/2009 05:46 AM    C:\WINDOWS\KB970653-v3.log --------- 160784
  10/31/2009 05:44 AM    C:\WINDOWS\KB969059.log --------- 164709
  10/30/2009 07:57 PM    C:\WINDOWS\KB898461.log --------- 11562
  10/30/2009 05:00 PM    C:\WINDOWS\WMSysPr9.prx --------- 316640
  10/30/2009 04:59 PM    C:\WINDOWS\DtcInstall.log --------- 356
  10/30/2009 04:57 PM    C:\WINDOWS\spupdsvc.log.1.log --------- 187
  10/30/2009 04:57 PM    C:\WINDOWS\setuplog.txt --------- 808777
  10/30/2009 04:55 PM    C:\WINDOWS\svcpack.log --------- 265014
  10/30/2009 04:55 PM    C:\WINDOWS\cmsetacl.log --------- 373
  10/30/2009 04:54 PM    C:\WINDOWS\sessmgr.setup.log --------- 1281
  10/30/2009 04:30 PM    C:\WINDOWS\nsreg.dat --------- 0
  10/29/2009 05:39 PM    C:\WINDOWS\regopt.log --------- 1570
  10/29/2009 05:17 PM    C:\WINDOWS\KB888111.log --------- 667
  10/29/2009 05:13 PM    C:\WINDOWS\Sti_Trace.log --------- 0
  10/29/2009 05:11 PM    C:\WINDOWS\system.ini --------- 231
  10/29/2009 05:08 PM    C:\WINDOWS\setuperr.log --------- 0
  10/29/2009 04:52 PM    C:\WINDOWS\REGLOCS.OLD --------- 8192
  10/29/2009 04:49 PM    C:\WINDOWS\control.ini --------- 0
  10/29/2009 04:49 PM    C:\WINDOWS\ODBCINST.INI --------- 4161
  10/29/2009 04:49 PM    C:\WINDOWS\WindowsShell.Manifest --------- 749
  10/29/2009 04:47 PM    C:\WINDOWS\vbaddin.ini --------- 37
  10/29/2009 04:47 PM    C:\WINDOWS\vb.ini --------- 36
  09/24/2009 07:50 AM    C:\WINDOWS\ARJ.PIF --------- 545
  09/24/2009 07:50 AM    C:\WINDOWS\UC.PIF --------- 545
  09/24/2009 07:50 AM    C:\WINDOWS\NOCLOSE.PIF --------- 545
  09/24/2009 07:50 AM    C:\WINDOWS\PKUNZIP.PIF --------- 545
  09/24/2009 07:50 AM    C:\WINDOWS\PKZIP.PIF --------- 545
  09/24/2009 07:50 AM    C:\WINDOWS\LHA.PIF --------- 545
  09/24/2009 07:50 AM    C:\WINDOWS\RAR.PIF --------- 545
  01/13/2009 07:37 AM    C:\WINDOWS\RTHDCPL.EXE --------- 18084864
  10/23/2008 10:42 AM    C:\WINDOWS\vncutil.exe --------- 290816
  09/30/2008 09:38 AM    C:\WINDOWS\MicCal.exe --------- 2168320
  09/19/2008 10:48 AM    C:\WINDOWS\RtlUpd.exe --------- 1200128
  08/25/2008 09:17 AM    C:\WINDOWS\RtlExUpd.dll --------- 528384
  08/19/2008 06:26 AM    C:\WINDOWS\SOUNDMAN.EXE --------- 77824
  06/24/2008 07:46 AM    C:\WINDOWS\RtkAudioService.exe --------- 104992
  06/19/2008 09:42 AM    C:\WINDOWS\ALCWZRD.EXE --------- 2808832
  06/19/2008 09:27 AM    C:\WINDOWS\RTLCPL.EXE --------- 9715200
  06/19/2008 09:20 AM    C:\WINDOWS\ALCMTR.EXE --------- 57344
  04/14/2008 02:40 PM    C:\WINDOWS\SET3.tmp --------- 1296669
  04/14/2008 02:34 PM    C:\WINDOWS\SET4.tmp --------- 1088840
  04/14/2008 02:34 PM    C:\WINDOWS\SET8.tmp --------- 16535
  04/14/2008 12:42 PM    C:\WINDOWS\winhlp32.exe --------- 283648
  04/14/2008 12:42 PM    C:\WINDOWS\regedit.exe --------- 146432
  04/14/2008 12:42 PM    C:\WINDOWS\NOTEPAD.EXE --------- 69120
  04/14/2008 12:42 PM    C:\WINDOWS\hh.exe --------- 10752
  04/14/2008 12:42 PM    C:\WINDOWS\explorer.exe --------- 1033728
  04/14/2008 12:42 PM    C:\WINDOWS\twain_32.dll --------- 50688
  04/14/2008 05:42 AM    C:\WINDOWS\slrundll.exe --------- 32866
  11/20/2007 11:15 AM    C:\WINDOWS\SkyTel.exe --------- 1826816
  11/14/2007 08:18 AM    C:\WINDOWS\USetup.iss --------- 553
  12/29/2006 12:31 AM    C:\WINDOWS\000001_.tmp --------- 19569
  08/04/2004 12:00 PM    C:\WINDOWS\Rhododendron.bmp --------- 17362
  08/04/2004 12:00 PM    C:\WINDOWS\Blue Lace 16.bmp --------- 1272
  08/04/2004 12:00 PM    C:\WINDOWS\FeatherTexture.bmp --------- 16730
  08/04/2004 12:00 PM    C:\WINDOWS\twunk_16.exe --------- 49680
  08/04/2004 12:00 PM    C:\WINDOWS\twain.dll --------- 94784
  08/04/2004 12:00 PM    C:\WINDOWS\vmmreg32.dll --------- 18944
  08/04/2004 12:00 PM    C:\WINDOWS\msdfmap.ini --------- 1405
  08/04/2004 12:00 PM    C:\WINDOWS\Gone Fishing.bmp --------- 17336
  08/04/2004 12:00 PM    C:\WINDOWS\explorer.scf --------- 80
  08/04/2004 12:00 PM    C:\WINDOWS\clock.avi --------- 82944
  08/04/2004 12:00 PM    C:\WINDOWS\Greenstone.bmp --------- 26582
  08/04/2004 12:00 PM    C:\WINDOWS\desktop.ini --------- 2
  08/04/2004 12:00 PM    C:\WINDOWS\TASKMAN.EXE --------- 15360
  08/04/2004 12:00 PM    C:\WINDOWS\winhelp.exe --------- 256192
  08/04/2004 12:00 PM    C:\WINDOWS\River Sumida.bmp --------- 26680
  08/04/2004 12:00 PM    C:\WINDOWS\winnt.bmp --------- 48680
  08/04/2004 12:00 PM    C:\WINDOWS\winnt256.bmp --------- 48680
  08/04/2004 12:00 PM    C:\WINDOWS\Santa Fe Stucco.bmp --------- 65832
  08/04/2004 12:00 PM    C:\WINDOWS\Soap Bubbles.bmp --------- 65978
  08/04/2004 12:00 PM    C:\WINDOWS\Prairie Wind.bmp --------- 65954
  08/04/2004 12:00 PM    C:\WINDOWS\Coffee Bean.bmp --------- 17062
  08/04/2004 12:00 PM    C:\WINDOWS\twunk_32.exe --------- 25600
  08/04/2004 12:00 PM    C:\WINDOWS\Zapotec.bmp --------- 9522
  08/04/2004 12:00 PM    C:\WINDOWS\_default.pif --------- 707
  12/17/1997 06:33 PM    C:\WINDOWS\IsUninst.exe --------- 304128
----------------------------------------

 
C:\WINDOWS\System

 04/14/2008 12:42 PM    C:\WINDOWS\System\WINSPOOL.DRV --------- 146432
 04/14/2008 05:24 AM    C:\WINDOWS\System\MMSYSTEM.DLL --------- 68768
 08/04/2004 12:00 PM    C:\WINDOWS\System\KEYBOARD.DRV --------- 2000
 08/04/2004 12:00 PM    C:\WINDOWS\System\LZEXPAND.DLL --------- 9936
 08/04/2004 12:00 PM    C:\WINDOWS\System\MCIAVI.DRV --------- 73376
 08/04/2004 12:00 PM    C:\WINDOWS\System\MCISEQ.DRV --------- 25264
 08/04/2004 12:00 PM    C:\WINDOWS\System\MCIWAVE.DRV --------- 28160
 08/04/2004 12:00 PM    C:\WINDOWS\System\COMMDLG.DLL --------- 32816
 08/04/2004 12:00 PM    C:\WINDOWS\System\AVIFILE.DLL --------- 109456
 08/04/2004 12:00 PM    C:\WINDOWS\System\MMTASK.TSK --------- 1152
 08/04/2004 12:00 PM    C:\WINDOWS\System\MOUSE.DRV --------- 2032
 08/04/2004 12:00 PM    C:\WINDOWS\System\AVICAP.DLL --------- 69584
 08/04/2004 12:00 PM    C:\WINDOWS\System\OLECLI.DLL --------- 82944
 08/04/2004 12:00 PM    C:\WINDOWS\System\OLESVR.DLL --------- 24064
 08/04/2004 12:00 PM    C:\WINDOWS\System\setup.inf --------- 59167
 08/04/2004 12:00 PM    C:\WINDOWS\System\SHELL.DLL --------- 5120
 08/04/2004 12:00 PM    C:\WINDOWS\System\SOUND.DRV --------- 1744
 08/04/2004 12:00 PM    C:\WINDOWS\System\stdole.tlb --------- 5532
 08/04/2004 12:00 PM    C:\WINDOWS\System\SYSTEM.DRV --------- 3360
 08/04/2004 12:00 PM    C:\WINDOWS\System\TAPI.DLL --------- 19200
 08/04/2004 12:00 PM    C:\WINDOWS\System\TIMER.DRV --------- 4048
 08/04/2004 12:00 PM    C:\WINDOWS\System\VER.DLL --------- 9008
 08/04/2004 12:00 PM    C:\WINDOWS\System\VGA.DRV --------- 2176
 08/04/2004 12:00 PM    C:\WINDOWS\System\WFWNET.DRV --------- 13600
 08/04/2004 12:00 PM    C:\WINDOWS\System\MSVIDEO.DLL --------- 126912
----------------------------------------

 
C:\WINDOWS\System32

 01/12/2011 06:09 AM    C:\WINDOWS\system32\CatRoot2 --------- 0
 01/12/2011 06:09 AM    C:\WINDOWS\system32\wpa.dbl --------- 2206
 01/12/2011 06:09 AM    C:\WINDOWS\system32\NvApps.xml --------- 235289
 01/12/2011 05:29 AM    C:\WINDOWS\system32\drivers --------- 0
 12/31/2010 04:07 PM    C:\WINDOWS\system32\d3d9caps.dat --------- 664
 12/18/2010 10:50 AM    C:\WINDOWS\system32\FNTCACHE.DAT --------- 1707544
 12/16/2010 10:52 AM    C:\WINDOWS\system32\dllcache --------- 0
 12/16/2010 10:51 AM    C:\WINDOWS\system32\TZLog.log --------- 21146
 12/16/2010 10:50 AM    C:\WINDOWS\system32\MRT.exe --------- 37366216
 12/02/2010 09:37 AM    C:\WINDOWS\system32\jupdate-1.6.0_22-b04.log --------- 5964
 11/18/2010 07:12 PM    C:\WINDOWS\system32\isign32.dll --------- 81920
 11/09/2010 06:15 AM    C:\WINDOWS\system32\CatRoot --------- 0
 11/08/2010 06:20 AM    C:\WINDOWS\system32\nscompat.tlb --------- 23392
 11/08/2010 06:20 AM    C:\WINDOWS\system32\amcompat.tlb --------- 16832
 11/08/2010 06:19 AM    C:\WINDOWS\system32\LogFiles --------- 0
 11/06/2010 01:26 AM    C:\WINDOWS\system32\mshtmled.dll --------- 66560
 11/06/2010 01:26 AM    C:\WINDOWS\system32\mshtml.dll --------- 5959168
 11/06/2010 01:26 AM    C:\WINDOWS\system32\licmgr10.dll --------- 43520
 11/06/2010 01:26 AM    C:\WINDOWS\system32\iertutil.dll --------- 1991680
 11/06/2010 01:26 AM    C:\WINDOWS\system32\inetcpl.cpl --------- 1469440
 11/06/2010 01:26 AM    C:\WINDOWS\system32\msfeedsbs.dll --------- 55296
 11/06/2010 01:26 AM    C:\WINDOWS\system32\urlmon.dll --------- 1210880
 11/06/2010 01:26 AM    C:\WINDOWS\system32\mstime.dll --------- 611840
 11/06/2010 01:26 AM    C:\WINDOWS\system32\msfeeds.dll --------- 602112
 11/06/2010 01:26 AM    C:\WINDOWS\system32\occache.dll --------- 206848
 11/06/2010 01:26 AM    C:\WINDOWS\system32\jsproxy.dll --------- 25600
 11/06/2010 01:26 AM    C:\WINDOWS\system32\wininet.dll --------- 916480
 11/06/2010 01:26 AM    C:\WINDOWS\system32\ieframe.dll --------- 11080704
 11/06/2010 01:26 AM    C:\WINDOWS\system32\iepeers.dll --------- 184320
 11/06/2010 01:26 AM    C:\WINDOWS\system32\iedkcs32.dll --------- 387584
 11/03/2010 02:12 PM    C:\WINDOWS\system32\tzchange.exe --------- 46080
 11/03/2010 01:26 PM    C:\WINDOWS\system32\ie4uinit.exe --------- 173568
 11/03/2010 01:25 PM    C:\WINDOWS\system32\html.iec --------- 385024
 10/31/2010 06:19 AM    C:\WINDOWS\system32\perfc009.dat --------- 40196
 10/31/2010 06:19 AM    C:\WINDOWS\system32\perfh009.dat --------- 311934
 10/31/2010 06:19 AM    C:\WINDOWS\system32\PerfStringBackup.INI --------- 356120
 10/28/2010 02:13 PM    C:\WINDOWS\system32\atmfd.dll --------- 290048
 10/26/2010 02:25 PM    C:\WINDOWS\system32\win32k.sys --------- 1853312
 09/18/2010 11:23 AM    C:\WINDOWS\system32\mfc42u.dll --------- 974848
 09/18/2010 07:53 AM    C:\WINDOWS\system32\mfc40u.dll --------- 953856
 09/18/2010 07:53 AM    C:\WINDOWS\system32\mfc40.dll --------- 954368
 09/18/2010 07:53 AM    C:\WINDOWS\system32\mfc42.dll --------- 974848
 09/15/2010 04:50 AM    C:\WINDOWS\system32\javaws.exe --------- 153376
 09/15/2010 04:50 AM    C:\WINDOWS\system32\javaw.exe --------- 145184
 09/15/2010 04:50 AM    C:\WINDOWS\system32\java.exe --------- 145184
 09/15/2010 04:50 AM    C:\WINDOWS\system32\deployJava1.dll --------- 472808
 09/15/2010 02:29 AM    C:\WINDOWS\system32\javacpl.cpl --------- 73728
 08/27/2010 09:02 AM    C:\WINDOWS\system32\t2embed.dll --------- 119808
 08/27/2010 06:57 AM    C:\WINDOWS\system32\srvsvc.dll --------- 99840
 08/26/2010 01:52 PM    C:\WINDOWS\system32\xpsp4res.dll --------- 5120
 08/25/2010 11:36 PM    C:\WINDOWS\system32\wmp.dll --------- 10841088
 08/23/2010 05:12 PM    C:\WINDOWS\system32\comctl32.dll --------- 617472
 08/17/2010 02:17 PM    C:\WINDOWS\system32\spoolsv.exe --------- 58880
 08/16/2010 09:45 AM    C:\WINDOWS\system32\rpcrt4.dll --------- 590848
 07/27/2010 07:30 AM    C:\WINDOWS\system32\shell32.dll --------- 8462336
 07/16/2010 01:05 PM    C:\WINDOWS\system32\ole32.dll --------- 1288192
 06/30/2010 01:31 PM    C:\WINDOWS\system32\schannel.dll --------- 149504
 06/18/2010 06:45 PM    C:\WINDOWS\system32\winsrv.dll --------- 293376
 06/17/2010 03:03 PM    C:\WINDOWS\system32\iccvid.dll --------- 80384
 06/15/2010 05:17 PM    C:\WINDOWS\system32\l3codecx.ax --------- 143422
 06/14/2010 08:41 AM    C:\WINDOWS\system32\msxml3.dll --------- 1172480
 06/09/2010 08:43 AM    C:\WINDOWS\system32\inetcomm.dll --------- 692736
 04/27/2010 02:59 PM    C:\WINDOWS\system32\ntoskrnl.exe --------- 2146304
 04/27/2010 02:05 PM    C:\WINDOWS\system32\ntkrnlpa.exe --------- 2024448
 04/16/2010 04:36 PM    C:\WINDOWS\system32\usp10.dll --------- 406016
 04/06/2010 04:52 AM    C:\WINDOWS\system32\WMVCore.dll --------- 2462720
 03/30/2010 12:24 PM    C:\WINDOWS\system32\mp4sdecd.dll --------- 317440
 03/29/2010 11:52 PM    C:\WINDOWS\system32\mpg4ds32.ax --------- 262416
 03/10/2010 07:15 AM    C:\WINDOWS\system32\vbscript.dll --------- 420352
 03/05/2010 03:37 PM    C:\WINDOWS\system32\asycfilt.dll --------- 65536
 02/12/2010 11:03 AM    C:\WINDOWS\system32\browserchoice.exe --------- 293376
 02/12/2010 05:33 AM    C:\WINDOWS\system32\6to4svc.dll --------- 100864
 02/05/2010 07:27 PM    C:\WINDOWS\system32\quartz.dll --------- 1291776
 01/29/2010 03:43 PM    C:\WINDOWS\system32\l3codeca.acm --------- 307260
 01/13/2010 03:01 PM    C:\WINDOWS\system32\cabview.dll --------- 86016
 12/24/2009 07:59 AM    C:\WINDOWS\system32\wintrust.dll --------- 177664
 12/16/2009 07:43 PM    C:\WINDOWS\system32\mspaint.exe --------- 343040
 12/14/2009 08:08 AM    C:\WINDOWS\system32\csrsrv.dll --------- 33280
 12/09/2009 06:53 AM    C:\WINDOWS\system32\jscript.dll --------- 726528
 12/08/2009 10:23 AM    C:\WINDOWS\system32\shlwapi.dll --------- 474112
 11/27/2009 06:11 PM    C:\WINDOWS\system32\msyuv.dll --------- 17920
 11/27/2009 05:07 PM    C:\WINDOWS\system32\tsbyuv.dll --------- 8704
 11/27/2009 05:07 PM    C:\WINDOWS\system32\msvidc32.dll --------- 28672
 11/27/2009 05:07 PM    C:\WINDOWS\system32\msrle32.dll --------- 11264
 11/27/2009 05:07 PM    C:\WINDOWS\system32\avifil32.dll --------- 84992
 11/27/2009 05:07 PM    C:\WINDOWS\system32\iyuv_32.dll --------- 48128
 11/15/2009 01:23 PM    C:\WINDOWS\system32\appmgmt --------- 0
 10/31/2009 06:29 AM    C:\WINDOWS\system32\ReinstallBackups --------- 0
 10/31/2009 06:24 AM    C:\WINDOWS\system32\config --------- 0
 10/31/2009 06:11 AM    C:\WINDOWS\system32\wbem --------- 0
 10/31/2009 06:09 AM    C:\WINDOWS\system32\en-US --------- 0
 10/30/2009 07:57 PM    C:\WINDOWS\system32\PreInstall --------- 0
 10/30/2009 04:57 PM    C:\WINDOWS\system32\spupdwxp.log --------- 269
 10/30/2009 04:54 PM    C:\WINDOWS\system32\inetsrv --------- 0
 10/30/2009 04:54 PM    C:\WINDOWS\system32\bits --------- 0
 10/29/2009 05:44 PM    C:\WINDOWS\system32\h323log.txt --------- 0
 10/29/2009 05:39 PM    C:\WINDOWS\system32\pid.PNF --------- 4444
 10/29/2009 05:19 PM    C:\WINDOWS\system32\LoopyMusic.wav --------- 940794
 10/29/2009 05:19 PM    C:\WINDOWS\system32\BuzzingBee.wav --------- 146650
 10/29/2009 05:19 PM    C:\WINDOWS\system32\Lang --------- 0
----------------------------------------

 
C:\WINDOWS\Prefetch

 01/12/2011 06:31 AM    C:\WINDOWS\Prefetch\CMD.EXE-137A0D53.pf --------- 22322
 01/12/2011 06:31 AM    C:\WINDOWS\Prefetch\TASKLIST.EXE-1B4BE264.pf --------- 21154
 01/12/2011 06:31 AM    C:\WINDOWS\Prefetch\EXPLORER.EXE-05416907.pf --------- 73552
 01/12/2011 06:30 AM    C:\WINDOWS\Prefetch\VERCLSID.EXE-3B227142.pf --------- 18294
 01/12/2011 06:30 AM    C:\WINDOWS\Prefetch\WMIPRVSE.EXE-0E69CB0B.pf --------- 104110
 01/12/2011 06:30 AM    C:\WINDOWS\Prefetch\TASKLIST.EXE-0E21A133.pf --------- 22540
 01/12/2011 06:30 AM    C:\WINDOWS\Prefetch\GOOGLEUPDATE.EXE-030125A1.pf --------- 30256
 01/12/2011 06:29 AM    C:\WINDOWS\Prefetch\AVWSC.EXE-022A620B.pf --------- 29358
 01/12/2011 06:26 AM    C:\WINDOWS\Prefetch\NOTEPAD.EXE-08F3A979.pf --------- 17168
 01/12/2011 06:26 AM    C:\WINDOWS\Prefetch\MBAM.EXE-26D201D2.pf --------- 74562
 01/12/2011 06:25 AM    C:\WINDOWS\Prefetch\HIJACKTHIS.EXE-05A93307.pf --------- 56022
 01/12/2011 06:17 AM    C:\WINDOWS\Prefetch\WMPLAYER.EXE-3A528C56.pf --------- 52756
 01/12/2011 06:13 AM    C:\WINDOWS\Prefetch\PLUGIN-CONTAINER.EXE-0779021B.pf --------- 65232
 01/12/2011 06:12 AM    C:\WINDOWS\Prefetch\JQSNOTIFY.EXE-0722E5CE.pf --------- 7684
 01/12/2011 06:12 AM    C:\WINDOWS\Prefetch\FIREFOX.EXE-3495265E.pf --------- 75634
 01/12/2011 06:10 AM    C:\WINDOWS\Prefetch\ALG.EXE-2226CE17.pf --------- 15778
 01/12/2011 06:10 AM    C:\WINDOWS\Prefetch\IMAPI.EXE-10859813.pf --------- 24116
 01/12/2011 06:10 AM    C:\WINDOWS\Prefetch\RUNDLL32.EXE-2D59E675.pf --------- 16444
 01/12/2011 06:10 AM    C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf --------- 996206
 01/12/2011 06:10 AM    C:\WINDOWS\Prefetch\RUNDLL32.EXE-4CE4C101.pf --------- 22238
 01/12/2011 06:05 AM    C:\WINDOWS\Prefetch\LOGONUI.EXE-3164D1CB.pf --------- 52522
 01/12/2011 05:53 AM    C:\WINDOWS\Prefetch\MSIMN.EXE-3356F448.pf --------- 79354
 01/12/2011 05:51 AM    C:\WINDOWS\Prefetch\MSIEXEC.EXE-0CCC6E74.pf --------- 67044
 01/12/2011 05:45 AM    C:\WINDOWS\Prefetch\REGEDIT.EXE-17A382F4.pf --------- 13506
 01/12/2011 05:43 AM    C:\WINDOWS\Prefetch\LOGON.SCR-075DDDCD.pf --------- 6484
 01/12/2011 05:29 AM    C:\WINDOWS\Prefetch\MBAMGUI.EXE-0B28CE92.pf --------- 9426
 01/12/2011 05:29 AM    C:\WINDOWS\Prefetch\REGSVR32.EXE-10006695.pf --------- 21314
 01/12/2011 05:29 AM    C:\WINDOWS\Prefetch\MBAM-SETUP.TMP-37B64F2D.pf --------- 27198
 01/12/2011 05:29 AM    C:\WINDOWS\Prefetch\MBAM-SETUP.EXE-01622250.pf --------- 17164
 01/12/2011 05:18 AM    C:\WINDOWS\Prefetch\FOXITR~1.EXE-270FC7C2.pf --------- 45932
 01/12/2011 05:11 AM    C:\WINDOWS\Prefetch\PUTTY.EXE-3162E984.pf --------- 14600
 01/11/2011 07:39 PM    C:\WINDOWS\Prefetch\RUNDLL32.EXE-43D5EAB6.pf --------- 18710
 01/11/2011 07:23 PM    C:\WINDOWS\Prefetch\ASSETSERVICESCS3.EXE-342520B1.pf --------- 64324
 01/11/2011 07:21 PM    C:\WINDOWS\Prefetch\RUNDLL32.EXE-63DD3754.pf --------- 30982
 01/11/2011 07:20 PM    C:\WINDOWS\Prefetch\FNPLICENSINGSERVICE.EXE-1F330C7B.pf --------- 61470
 01/11/2011 07:20 PM    C:\WINDOWS\Prefetch\SVCHOST.EXE-072604B0.pf --------- 19156
 01/11/2011 07:20 PM    C:\WINDOWS\Prefetch\PHOTOSHOP.EXE-2F7C9E12.pf --------- 73880
 01/11/2011 07:20 PM    C:\WINDOWS\Prefetch\RUNDLL32.EXE-292DC9BE.pf --------- 16222
 01/11/2011 07:13 PM    C:\WINDOWS\Prefetch\POWERPNT.EXE-2EF0BDC1.pf --------- 84142
 01/11/2011 07:01 PM    C:\WINDOWS\Prefetch\IEXPLORE.EXE-06887102.pf --------- 100822
 01/11/2011 06:55 PM    C:\WINDOWS\Prefetch\HELPSVC.EXE-281F45D0.pf --------- 259338
 01/11/2011 06:53 PM    C:\WINDOWS\Prefetch\DFRGNTFS.EXE-0F55FCE5.pf --------- 59556
 01/11/2011 06:53 PM    C:\WINDOWS\Prefetch\DEFRAG.EXE-10D9C910.pf --------- 18054
 01/11/2011 06:53 PM    C:\WINDOWS\Prefetch\Layout.ini --------- 291108
 01/11/2011 06:36 PM    C:\WINDOWS\Prefetch\JAVA.EXE-1E3945B0.pf --------- 76658
 01/11/2011 06:15 PM    C:\WINDOWS\Prefetch\WMPLAYER.EXE-3A528C55.pf --------- 78438
 01/11/2011 04:16 PM    C:\WINDOWS\Prefetch\AVNOTIFY.EXE-1178AC46.pf --------- 40644
 01/11/2011 04:16 PM    C:\WINDOWS\Prefetch\UPDATE.EXE-0494B405.pf --------- 58384
 01/11/2011 04:15 PM    C:\WINDOWS\Prefetch\WSCNTFY.EXE-314E7AE5.pf --------- 18134
 01/10/2011 07:30 AM    C:\WINDOWS\Prefetch\GOOGLECRASHHANDLER.EXE-302D022C.pf --------- 13498
 01/10/2011 07:19 AM    C:\WINDOWS\Prefetch\RUNDLL32.EXE-4EA9E7E2.pf --------- 31704
 01/09/2011 05:46 PM    C:\WINDOWS\Prefetch\RUNDLL32.EXE-5C5FFFE7.pf --------- 13208
 01/09/2011 04:20 PM    C:\WINDOWS\Prefetch\WINSCP.EXE-1BB1D454.pf --------- 40570
 01/09/2011 04:07 PM    C:\WINDOWS\Prefetch\WMPLAYER.EXE-3A528C54.pf --------- 64240
 01/09/2011 03:20 PM    C:\WINDOWS\Prefetch\RUNDLL32.EXE-2A812CA6.pf --------- 29934
 01/09/2011 03:20 PM    C:\WINDOWS\Prefetch\JUSCHED.EXE-01E8D395.pf --------- 11614
 01/09/2011 03:20 PM    C:\WINDOWS\Prefetch\USERINIT.EXE-19714419.pf --------- 55318
 01/09/2011 03:20 PM    C:\WINDOWS\Prefetch\RUNDLL32.EXE-589FC613.pf --------- 26364
 01/09/2011 03:20 PM    C:\WINDOWS\Prefetch\AVGNT.EXE-20698712.pf --------- 65884
 01/09/2011 03:20 PM    C:\WINDOWS\Prefetch\ALCMTR.EXE-2681E57D.pf --------- 11760
 01/09/2011 03:20 PM    C:\WINDOWS\Prefetch\WGATRAY.EXE-2D836F35.pf --------- 42468
 01/09/2011 07:10 AM    C:\WINDOWS\Prefetch\1STPAGE.EXE-1C8388E3.pf --------- 55412
 01/09/2011 04:46 AM    C:\WINDOWS\Prefetch\MSMSGS.EXE-158D7DA7.pf --------- 23650
 01/09/2011 04:46 AM    C:\WINDOWS\Prefetch\CTFMON.EXE-084DB373.pf --------- 18334
 01/08/2011 12:20 PM    C:\WINDOWS\Prefetch\WUAUCLT.EXE-12D8E25E.pf --------- 36858
 01/08/2011 08:20 AM    C:\WINDOWS\Prefetch\WMPLAYER.EXE-3A528C53.pf --------- 67518
 01/07/2011 09:09 AM    C:\WINDOWS\Prefetch\RUNDLL32.EXE-4BCCF899.pf --------- 16002
 01/07/2011 09:09 AM    C:\WINDOWS\Prefetch\RUNDLL32.EXE-2FCE2E75.pf --------- 19894
 01/07/2011 09:07 AM    C:\WINDOWS\Prefetch\JAVAWS.EXE-0CFD782B.pf --------- 19932
 01/07/2011 09:07 AM    C:\WINDOWS\Prefetch\JAVAW.EXE-089E2F81.pf --------- 113662
 01/07/2011 09:07 AM    C:\WINDOWS\Prefetch\JAUCHECK.EXE-073BD5DD.pf --------- 35674
 01/07/2011 07:12 AM    C:\WINDOWS\Prefetch\WINWORD.EXE-33121E1E.pf --------- 87680
 01/07/2011 07:09 AM    C:\WINDOWS\Prefetch\RUNDLL32.EXE-5EF1D200.pf --------- 85628
 01/07/2011 05:09 AM    C:\WINDOWS\Prefetch\WMPLAYER.EXE-3A528C57.pf --------- 67036
 01/04/2011 07:16 PM    C:\WINDOWS\Prefetch\SNDVOL32.EXE-1AA68677.pf --------- 15960
 01/01/2011 08:39 AM    C:\WINDOWS\Prefetch\SETUP_WM.EXE-170F9E81.pf --------- 28350
 01/01/2011 06:45 AM    C:\WINDOWS\Prefetch\RTHDCPL.EXE-0A4E6E88.pf --------- 46096
 12/31/2010 05:14 PM    C:\WINDOWS\Prefetch\WMPLAYER.EXE-3A528C52.pf --------- 62584
 12/31/2010 01:43 PM    C:\WINDOWS\Prefetch\ILLUSTRATOR.EXE-1E7E3026.pf --------- 59320
 12/29/2010 08:39 AM    C:\WINDOWS\Prefetch\RUNDLL32.EXE-2A38919C.pf --------- 18940
 12/28/2010 06:29 AM    C:\WINDOWS\Prefetch\CONTROL.EXE-01F9F0D0.pf --------- 25442
 12/28/2010 06:29 AM    C:\WINDOWS\Prefetch\AVCENTER.EXE-03310382.pf --------- 56664
 12/28/2010 06:29 AM    C:\WINDOWS\Prefetch\RUNDLL32.EXE-2F71E21A.pf --------- 38038
 12/27/2010 06:38 AM    C:\WINDOWS\Prefetch\JUCHECK.EXE-2C41713C.pf --------- 72468
 12/21/2010 07:32 AM    C:\WINDOWS\Prefetch\SCHED.EXE-0368C1B3.pf --------- 33220
 12/21/2010 07:32 AM    C:\WINDOWS\Prefetch\AVSHADOW.EXE-339BF547.pf --------- 11832
 12/21/2010 07:32 AM    C:\WINDOWS\Prefetch\AVGUARD.EXE-0594C035.pf --------- 61880
 12/21/2010 07:32 AM    C:\WINDOWS\Prefetch\RUNONCE.EXE-246F7E39.pf --------- 18286
 12/21/2010 07:32 AM    C:\WINDOWS\Prefetch\GRPCONV.EXE-2B3A22DD.pf --------- 12390
 12/19/2010 07:15 PM    C:\WINDOWS\Prefetch\CMDBURN.EXE-1948BEDC.pf --------- 22832
 12/19/2010 06:41 PM    C:\WINDOWS\Prefetch\DUMPREP.EXE-1C032A1C.pf --------- 50662
 12/19/2010 06:37 PM    C:\WINDOWS\Prefetch\DWWIN.EXE-002B6E58.pf --------- 24662
 12/18/2010 07:07 PM    C:\WINDOWS\Prefetch\TOTALCMD.EXE-11E1AF6B.pf --------- 37902
 12/18/2010 10:51 AM    C:\WINDOWS\Prefetch\IPOINT.EXE-1AE4FAC1.pf --------- 31866
 12/18/2010 10:51 AM    C:\WINDOWS\Prefetch\NWIZ.EXE-2D5EE4CE.pf --------- 49784
 12/16/2010 10:52 AM    C:\WINDOWS\Prefetch\UPDATE.EXE-052B9E87.pf --------- 59660
 12/16/2010 10:52 AM    C:\WINDOWS\Prefetch\UPDATE.EXE-1E6200E3.pf --------- 57592
 12/16/2010 10:51 AM    C:\WINDOWS\Prefetch\UPDATE.EXE-1A363ED2.pf --------- 66418
 12/16/2010 10:51 AM    C:\WINDOWS\Prefetch\UPDATE.EXE-059D48EE.pf --------- 57458
 12/16/2010 10:51 AM    C:\WINDOWS\Prefetch\UPDATE.EXE-2E56A1D2.pf --------- 66130
 12/16/2010 10:51 AM    C:\WINDOWS\Prefetch\UPDATE.EXE-1D199018.pf --------- 57468
 12/16/2010 10:51 AM    C:\WINDOWS\Prefetch\UPDATE.EXE-343243EA.pf --------- 57424
 12/16/2010 10:50 AM    C:\WINDOWS\Prefetch\WINDOWS-KB890830-V3.14-DELTA.-047F16CB.pf --------- 43992
 12/16/2010 10:50 AM    C:\WINDOWS\Prefetch\MRT.EXE-00AAC00B.pf --------- 53718
 12/16/2010 10:50 AM    C:\WINDOWS\Prefetch\MRTSTUB.EXE-34942F13.pf --------- 50710
 12/16/2010 10:49 AM    C:\WINDOWS\Prefetch\UPDATE.EXE-2DD91F1C.pf --------- 57286
 12/16/2010 10:49 AM    C:\WINDOWS\Prefetch\RUNDLL32.EXE-42410BD7.pf --------- 15990
 12/16/2010 10:48 AM    C:\WINDOWS\Prefetch\RUNDLL32.EXE-379B6588.pf --------- 15990
 12/16/2010 09:52 AM    C:\WINDOWS\Prefetch\CALC.EXE-027E1228.pf --------- 13490
 12/16/2010 08:43 AM    C:\WINDOWS\Prefetch\RUNDLL32.EXE-46F49D8A.pf --------- 15742
 12/16/2010 08:28 AM    C:\WINDOWS\Prefetch\RUNDLL32.EXE-2F6DF59E.pf --------- 15754
 12/16/2010 08:22 AM    C:\WINDOWS\Prefetch\RUNDLL32.EXE-62687BEE.pf --------- 24724
 12/16/2010 06:30 AM    C:\WINDOWS\Prefetch\UPDATE.EXE-1D8512FE.pf --------- 54808
 12/16/2010 06:30 AM    C:\WINDOWS\Prefetch\UPDATE.EXE-072E6A68.pf --------- 54808
 12/16/2010 06:30 AM    C:\WINDOWS\Prefetch\UPDATE.EXE-2BA9E0D8.pf --------- 60668
 12/15/2010 11:42 AM    C:\WINDOWS\Prefetch\RUNDLL32.EXE-3364A8F8.pf --------- 15656
 12/15/2010 11:42 AM    C:\WINDOWS\Prefetch\RUNDLL32.EXE-2B819C79.pf --------- 22392
 12/15/2010 07:23 AM    C:\WINDOWS\Prefetch\RUNDLL32.EXE-547FDDEB.pf --------- 23262
 12/13/2010 11:40 AM    C:\WINDOWS\Prefetch\RUNDLL32.EXE-6381EC73.pf --------- 23750
 12/13/2010 11:07 AM    C:\WINDOWS\Prefetch\FPUPDATEAX.EXE-252EEA58.pf --------- 20532
 12/13/2010 09:40 AM    C:\WINDOWS\Prefetch\RUNDLL32.EXE-56C77912.pf --------- 15754
 12/13/2010 08:57 AM    C:\WINDOWS\Prefetch\RUNDLL32.EXE-5B6C1DDB.pf --------- 16002
 12/11/2010 03:21 PM    C:\WINDOWS\Prefetch\HELPER.EXE-0A5F5055.pf --------- 17822
 12/11/2010 03:20 PM    C:\WINDOWS\Prefetch\UPDATER.EXE-36099736.pf --------- 24360
 12/10/2010 11:17 AM    C:\WINDOWS\Prefetch\DRWTSN32.EXE-140B1585.pf --------- 8648
 12/09/2010 05:54 AM    C:\WINDOWS\Prefetch\SETUP.EXE-2E562BE4.pf --------- 24918
 12/07/2010 08:05 AM    C:\WINDOWS\Prefetch\RUNDLL32.EXE-3136FDB0.pf --------- 15656
----------------------------------------

 
C:\WINDOWS\Tasks

 01/12/2011 06:30 AM    C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job --------- 882
 01/12/2011 06:09 AM    C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job --------- 878
 01/12/2011 06:09 AM    C:\WINDOWS\Tasks\SA.DAT --------- 6
 08/04/2004 12:00 PM    C:\WINDOWS\Tasks\desktop.ini --------- 65
----------------------------------------

 
C:\WINDOWS\Temp

 01/12/2011 06:09 AM    C:\WINDOWS\Temp\Perflib_Perfdata_80.dat --------- 16384
 01/12/2011 06:09 AM    C:\WINDOWS\Temp\Perflib_Perfdata_484.dat --------- 16384
 01/12/2011 06:09 AM    C:\WINDOWS\Temp\WGAErrLog.txt --------- 483
 12/09/2010 05:54 AM    C:\WINDOWS\Temp\AVSETUP_4d0060fb --------- 0
 10/07/2010 09:31 PM    C:\WINDOWS\Temp\is9.tmp --------- 0
 10/07/2010 09:31 PM    C:\WINDOWS\Temp\is7.tmp --------- 0
 10/07/2010 09:31 PM    C:\WINDOWS\Temp\._msigeplugin52 --------- 0
 06/30/2010 05:27 AM    C:\WINDOWS\Temp\Perflib_Perfdata_638.dat --------- 16384
 01/29/2010 12:09 PM    C:\WINDOWS\Temp\dd_ATL90SP1_KB973924UI1EF6.txt --------- 11668
 01/29/2010 12:09 PM    C:\WINDOWS\Temp\dd_ATL90SP1_KB973924MSI1EF6.txt --------- 237038
 12/02/2009 05:30 AM    C:\WINDOWS\Temp\dd_ATL80SP1_KB973923UI3A2C.txt --------- 11732
 12/02/2009 05:30 AM    C:\WINDOWS\Temp\dd_ATL80SP1_KB973923MSI3A2C.txt --------- 804872
 10/30/2009 05:54 PM    C:\WINDOWS\Temp\SYMEVENT.LOG --------- 8919
 10/29/2009 10:20 AM    C:\WINDOWS\Temp\coF47.tmp --------- 546160
----------------------------------------

 
C:\DOCUME~1\badi\LOCALS~1\Temp

 01/12/2011 06:31 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\Temporary Directory 2 for tasklist.zip --------- 0
 01/12/2011 06:30 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\Temporary Directory 1 for tasklist.zip --------- 0
 01/12/2011 06:26 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF5647.tmp --------- 81920
 01/12/2011 06:22 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\wmplog00.sqm --------- 1944
 01/12/2011 06:14 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\jusched.log --------- 712152
 01/12/2011 06:12 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFEDD1.tmp --------- 114688
 01/12/2011 06:09 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\WPDNSE --------- 0
 01/12/2011 05:52 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFF55F.tmp --------- 114688
 01/12/2011 05:50 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\OTL_1.Txt --------- 72922
 01/12/2011 05:50 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\mbam-log-2011-01-09 (21-30-03).txt --------- 1063
 01/12/2011 05:50 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\mbam-log-2011-01-09 (20-53-07).txt --------- 1843
 01/12/2011 05:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF573C.tmp --------- 81920
 01/12/2011 05:18 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-267 --------- 0
 01/11/2011 07:45 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF9842.tmp --------- 16384
 01/11/2011 07:40 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-266 --------- 0
 01/11/2011 07:20 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\amt.log --------- 69384
 01/11/2011 07:20 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\alm.log --------- 206340
 01/11/2011 07:20 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\TWAIN.LOG --------- 697
 01/11/2011 07:20 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\Twunk001.MTX --------- 156
 01/11/2011 07:20 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\Twain001.Mtx --------- 4
 01/11/2011 06:36 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\hsperfdata_badi --------- 0
 01/10/2011 08:43 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-265 --------- 0
 01/10/2011 08:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFE882.tmp --------- 16384
 01/09/2011 07:26 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-264 --------- 0
 01/09/2011 06:30 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-263 --------- 0
 01/08/2011 02:29 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-262 --------- 0
 01/08/2011 06:04 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-261 --------- 0
 01/07/2011 10:02 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (33) --------- 0
 01/07/2011 09:57 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (32) --------- 0
 01/07/2011 09:07 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\AUCHECK_PARSER.txt --------- 3106
 01/07/2011 09:07 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\AUCHECK_CORE.txt --------- 10632
 01/07/2011 08:48 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-260 --------- 0
 01/07/2011 08:34 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFBB9D.tmp --------- 16384
 01/04/2011 08:04 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-259 --------- 0
 01/03/2011 07:45 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-258 --------- 0
 01/02/2011 06:37 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-257 --------- 0
 01/01/2011 02:24 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-256 --------- 0
 12/31/2010 06:28 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32820 --------- 1024
 12/31/2010 06:28 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42820 --------- 1024
 12/31/2010 06:28 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo52820 --------- 1024
 12/31/2010 06:28 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo62820 --------- 3072
 12/31/2010 06:28 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22820 --------- 1024
 12/31/2010 05:13 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-255 --------- 0
 12/30/2010 08:14 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF1DC7.tmp --------- 16384
 12/30/2010 07:31 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-254 --------- 0
 12/29/2010 08:49 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-253 --------- 0
 12/25/2010 08:51 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo52688 --------- 1024
 12/25/2010 08:51 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo62688 --------- 3072
 12/25/2010 08:51 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42688 --------- 1024
 12/25/2010 08:51 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32688 --------- 1024
 12/25/2010 08:51 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22688 --------- 1024
 12/25/2010 08:39 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-252 --------- 0
 12/24/2010 03:00 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-251 --------- 0
 12/24/2010 07:06 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-250 --------- 0
 12/23/2010 09:58 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-249 --------- 0
 12/22/2010 08:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo6240 --------- 3072
 12/22/2010 08:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo3240 --------- 1024
 12/22/2010 08:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo5240 --------- 1024
 12/22/2010 08:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo4240 --------- 1024
 12/22/2010 08:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo2240 --------- 1024
 12/22/2010 07:57 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-248 --------- 0
 12/22/2010 06:22 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\Adobe --------- 0
 12/19/2010 07:40 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (31) --------- 0
 12/19/2010 05:32 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\radFC598.htm --------- 232
 12/19/2010 05:32 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF82C.tmp --------- 32768
 12/19/2010 08:50 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-247 --------- 0
 12/18/2010 07:25 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP43.tmp --------- 61
 12/18/2010 07:25 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP42.tmp --------- 2148
 12/18/2010 07:25 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP41.tmp --------- 771
 12/18/2010 05:33 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-246 --------- 0
 12/16/2010 10:26 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-245 --------- 0
 12/14/2010 06:08 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-244 --------- 0
 12/13/2010 11:04 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-243 --------- 0
 12/11/2010 06:34 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-242 --------- 0
 12/11/2010 06:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\jar_cache1923272072394122370.tmp --------- 0
 12/11/2010 06:22 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\jar_cache5716549771385963044.tmp --------- 0
 12/10/2010 11:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo33668 --------- 1024
 12/10/2010 11:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo53668 --------- 1024
 12/10/2010 11:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo23668 --------- 1024
 12/10/2010 11:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo63668 --------- 3072
 12/10/2010 11:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo43668 --------- 1024
 12/10/2010 11:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\6701_appcompat.txt --------- 9094
 12/10/2010 08:30 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF6E9B.tmp --------- 65536
 12/10/2010 08:21 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-241 --------- 0
 12/10/2010 08:21 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF18FF.tmp --------- 16384
 12/10/2010 06:56 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF7996.tmp --------- 16384
 12/09/2010 09:49 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF8DA.tmp --------- 65536
 12/09/2010 09:32 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-240 --------- 0
 12/09/2010 07:00 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\msohtmlclip1 --------- 0
 12/08/2010 07:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-239 --------- 0
 12/08/2010 07:34 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF7023.tmp --------- 65536
 12/08/2010 07:33 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF82B1.tmp --------- 16384
 12/08/2010 06:06 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFF551.tmp --------- 16384
 12/07/2010 09:26 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo6760 --------- 3072
 12/07/2010 09:26 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo4760 --------- 1024
 12/07/2010 09:26 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo5760 --------- 1024
 12/07/2010 09:26 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo3760 --------- 1024
 12/07/2010 09:26 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo2760 --------- 1024
 12/07/2010 09:09 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-238 --------- 0
 12/05/2010 06:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-237 --------- 0
 12/04/2010 08:40 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-236 --------- 0
 12/03/2010 06:02 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-235 --------- 0
 12/02/2010 10:46 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo63484 --------- 5120
 12/02/2010 09:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF403C.tmp --------- 81920
 12/02/2010 09:40 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF77C8.tmp --------- 65536
 12/02/2010 09:37 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\JAUReg.log --------- 453
 12/02/2010 09:37 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\java_install_reg.log --------- 4209
 12/02/2010 09:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\java_install_sp.log --------- 3229
 12/02/2010 09:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\55702.mst --------- 9244160
 12/02/2010 09:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\jinstall.cfg --------- 1247
 11/29/2010 06:26 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFE2BD.tmp --------- 16384
 11/29/2010 04:54 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF7F58.tmp --------- 65536
 11/29/2010 04:54 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF6AB8.tmp --------- 16384
 11/29/2010 04:36 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-234 --------- 0
 11/28/2010 09:35 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\9931859.od --------- 134
 11/28/2010 09:35 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\9931781.cvr --------- 3572
 11/28/2010 07:28 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFF776.tmp --------- 65536
 11/28/2010 07:28 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFF017.tmp --------- 16384
 11/27/2010 02:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-233 --------- 0
 11/26/2010 08:38 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF369A.tmp --------- 16384
 11/26/2010 07:51 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-232 --------- 0
 11/25/2010 08:04 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-231 --------- 0
 11/25/2010 05:10 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFFCCB.tmp --------- 65536
 11/24/2010 07:14 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF8884.tmp --------- 65536
 11/24/2010 07:14 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF8107.tmp --------- 16384
 11/24/2010 07:14 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-230 --------- 0
 11/24/2010 06:49 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF26E8.tmp --------- 65536
 11/24/2010 06:49 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF1EFB.tmp --------- 16384
 11/23/2010 10:05 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-229 --------- 0
 11/21/2010 06:08 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-228 --------- 0
 11/21/2010 03:49 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\jre-6u22-windows-i586-iftw-rv.exe --------- 875296
 11/20/2010 08:07 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-227 --------- 0
 11/19/2010 07:11 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-226 --------- 0
 11/18/2010 06:31 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\jupload_5718699505397077495_log.txt --------- 28
 11/18/2010 07:08 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (30) --------- 0
 11/18/2010 07:07 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (29) --------- 0
 11/18/2010 07:06 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (28) --------- 0
 11/15/2010 03:20 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFA87C.tmp --------- 65536
 11/15/2010 03:20 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-225 --------- 0
 11/15/2010 05:31 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-224 --------- 0
 11/15/2010 05:00 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\8.dir --------- 0
 11/15/2010 05:00 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\8.tmp --------- 0
 11/13/2010 06:04 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-223 --------- 0
 11/13/2010 01:03 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF1F14.tmp --------- 16384
 11/13/2010 12:53 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF6290.tmp --------- 16384
 11/12/2010 06:48 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF194E.tmp --------- 16384
 11/12/2010 06:47 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-222 --------- 0
 11/09/2010 04:36 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-221 --------- 0
 11/08/2010 09:26 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\92f2_appcompat.txt --------- 9094
 11/08/2010 08:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF3719.tmp --------- 65536
 11/08/2010 08:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF23D7.tmp --------- 65536
 11/08/2010 08:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFFE6.tmp --------- 16384
 11/08/2010 08:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF546.tmp --------- 16384
 11/08/2010 06:20 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\c441_appcompat.txt --------- 9094
 11/08/2010 06:20 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\wmsetup.log --------- 13676
 11/08/2010 06:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\control.xml --------- 12818
 11/08/2010 05:43 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF38FB.tmp --------- 16384
 11/08/2010 05:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\jar_cache5408067556447009158.tmp --------- 0
 11/08/2010 05:28 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\jar_cache1312560550160211730.tmp --------- 0
 11/08/2010 05:14 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF3BC9.tmp --------- 65536
 11/08/2010 05:14 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF33A0.tmp --------- 16384
 11/08/2010 05:06 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\7.dir --------- 0
 11/08/2010 05:06 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\7.tmp --------- 0
 11/07/2010 07:57 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-220 --------- 0
 11/06/2010 07:44 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP73.tmp --------- 2148
 11/06/2010 07:43 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP6C.tmp --------- 1037
 11/06/2010 07:43 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP69.tmp --------- 387
 11/06/2010 07:43 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP66.tmp --------- 600
 11/06/2010 07:43 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP64.tmp --------- 596
 11/06/2010 07:43 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP62.tmp --------- 196
 11/06/2010 07:43 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP61.tmp --------- 467
 11/06/2010 07:43 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP60.tmp --------- 808
 11/06/2010 07:43 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP5C.tmp --------- 191
 11/06/2010 07:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP5A.tmp --------- 196
 11/06/2010 07:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP58.tmp --------- 531
 11/06/2010 07:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP56.tmp --------- 190
 11/06/2010 07:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP55.tmp --------- 534
 11/06/2010 07:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP51.tmp --------- 528
 11/06/2010 07:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP4F.tmp --------- 190
 11/06/2010 07:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP4E.tmp --------- 458
 11/06/2010 07:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP4C.tmp --------- 127
 11/06/2010 07:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP4B.tmp --------- 404
 11/06/2010 07:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP46.tmp --------- 251
 11/06/2010 07:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP44.tmp --------- 659
 11/06/2010 07:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP3D.tmp --------- 598
 11/06/2010 07:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP3C.tmp --------- 1900
 11/06/2010 07:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP3B.tmp --------- 777
 11/06/2010 07:41 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP37.tmp --------- 771
 11/06/2010 06:06 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-219 --------- 0
 11/05/2010 08:00 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFADDF.tmp --------- 65536
 11/04/2010 07:26 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-218 --------- 0
 11/03/2010 09:08 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-217 --------- 0
 11/03/2010 07:08 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFCF0D.tmp --------- 65536
 11/03/2010 07:38 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-216 --------- 0
 11/01/2010 05:19 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\SetupExe(201011010519219A0).log --------- 10563
 11/01/2010 05:12 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\SetupExe(20101101051220E10).log --------- 10563
 10/31/2010 07:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFB371.tmp --------- 65536
 10/31/2010 07:22 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-215 --------- 0
 10/31/2010 06:32 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dd_vcredistUI0BD9.txt --------- 11718
 10/31/2010 06:32 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dd_vcredistMSI0BD9.txt --------- 526954
 10/31/2010 06:26 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\6.dir --------- 0
 10/31/2010 06:26 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\6.tmp --------- 0
 10/30/2010 07:08 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-214 --------- 0
 10/29/2010 08:04 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo63920 --------- 3072
 10/29/2010 08:04 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo53920 --------- 1024
 10/29/2010 08:04 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo43920 --------- 1024
 10/29/2010 08:04 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo23920 --------- 1024
 10/29/2010 08:04 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo33920 --------- 1024
 10/29/2010 06:20 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF78A.tmp --------- 65536
 10/29/2010 06:14 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF98BA.tmp --------- 16384
 10/29/2010 06:14 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-213 --------- 0
 10/29/2010 06:02 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF43BB.tmp --------- 16384
 10/28/2010 08:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\10452078.od --------- 134
 10/28/2010 08:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\10452031.cvr --------- 3988
 10/28/2010 08:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-212 --------- 0
 10/24/2010 07:23 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-211 --------- 0
 10/23/2010 07:14 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-210 --------- 0
 10/22/2010 06:24 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-209 --------- 0
 10/21/2010 06:58 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\c05b_appcompat.txt --------- 9094
 10/21/2010 06:58 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\ca73_appcompat.txt --------- 9094
 10/21/2010 06:17 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF4291.tmp --------- 65536
 10/21/2010 06:17 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF3B93.tmp --------- 16384
 10/21/2010 06:03 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFCC5E.tmp --------- 65536
 10/21/2010 06:03 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFC53E.tmp --------- 16384
 10/21/2010 06:00 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF2907.tmp --------- 16384
 10/21/2010 10:49 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-208 --------- 0
 10/18/2010 09:13 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-207 --------- 0
 10/17/2010 08:24 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF5195.tmp --------- 16384
 10/17/2010 07:45 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF1679.tmp --------- 16384
 10/17/2010 06:44 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-206 --------- 0
 10/15/2010 05:03 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-205 --------- 0
 10/15/2010 04:37 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF20AE.tmp --------- 65536
 10/15/2010 04:37 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF18E9.tmp --------- 16384
 10/15/2010 12:13 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32620 --------- 1024
 10/15/2010 12:13 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42620 --------- 1024
 10/15/2010 12:13 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo62620 --------- 3072
 10/15/2010 12:13 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo52620 --------- 1024
 10/15/2010 12:13 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22620 --------- 1024
 10/15/2010 11:24 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-204 --------- 0
 10/15/2010 07:56 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-203 --------- 0
 10/11/2010 08:18 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo34084 --------- 1024
 10/11/2010 08:18 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo64084 --------- 3072
 10/11/2010 08:18 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo44084 --------- 1024
 10/11/2010 08:18 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo54084 --------- 1024
 10/11/2010 08:18 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo24084 --------- 1024
 10/10/2010 07:09 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-202 --------- 0
 10/09/2010 07:54 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-201 --------- 0
 09/14/2010 06:01 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (27) --------- 0
 09/14/2010 05:55 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (26) --------- 0
 09/13/2010 09:59 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-200 --------- 0
 09/13/2010 06:43 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-199 --------- 0
 09/13/2010 03:30 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFAF42.tmp --------- 65536
 09/13/2010 03:21 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-198 --------- 0
 09/13/2010 08:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-197 --------- 0
 09/05/2010 07:37 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-196 --------- 0
 09/04/2010 04:33 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-195 --------- 0
 09/02/2010 05:35 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-194 --------- 0
 09/01/2010 06:30 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-193 --------- 0
 08/30/2010 10:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo2284 --------- 1024
 08/30/2010 10:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo6284 --------- 3072
 08/30/2010 10:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo4284 --------- 1024
 08/30/2010 10:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo5284 --------- 1024
 08/30/2010 10:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo3284 --------- 1024
 08/30/2010 09:48 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-192 --------- 0
 08/26/2010 10:59 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF7DF3.tmp --------- 65536
 08/26/2010 10:59 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-191 --------- 0
 08/26/2010 10:59 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF715D.tmp --------- 16384
 08/24/2010 01:31 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-190 --------- 0
 08/23/2010 06:33 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-189 --------- 0
 08/23/2010 08:44 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-188 --------- 0
 08/22/2010 08:18 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-187 --------- 0
 08/19/2010 06:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF605A.tmp --------- 16384
 08/18/2010 04:22 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-186 --------- 0
 08/17/2010 09:58 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo31100 --------- 1024
 08/17/2010 09:58 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo51100 --------- 1024
 08/17/2010 09:58 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo61100 --------- 3072
 08/17/2010 09:58 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo21100 --------- 1024
 08/17/2010 09:58 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo41100 --------- 1024
 08/16/2010 06:37 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-185 --------- 0
 08/16/2010 06:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\jar_cache2149214268178432646.tmp --------- 25850
 08/15/2010 12:19 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFCC6C.tmp --------- 65536
 08/15/2010 12:18 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFAAB4.tmp --------- 16384
 08/14/2010 04:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFA6C7.tmp --------- 65536
 08/14/2010 04:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF9E97.tmp --------- 16384
 08/14/2010 04:00 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-184 --------- 0
 08/14/2010 07:45 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\e3fd_appcompat.txt --------- 44106
 08/14/2010 06:14 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-183 --------- 0
 08/12/2010 01:02 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-182 --------- 0
 08/11/2010 06:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-181 --------- 0
 08/10/2010 06:29 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-180 --------- 0
 08/08/2010 11:41 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo61552 --------- 3072
 08/08/2010 11:41 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo31552 --------- 1024
 08/08/2010 11:41 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo21552 --------- 1024
 08/08/2010 11:41 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo51552 --------- 1024
 08/08/2010 11:41 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo41552 --------- 1024
 08/05/2010 11:05 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\ec4b_appcompat.txt --------- 44106
 08/05/2010 10:57 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-179 --------- 0
 08/04/2010 02:39 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (25) --------- 0
 08/04/2010 02:25 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-178 --------- 0
 08/04/2010 01:00 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\aabF.tmp --------- 0
 08/04/2010 12:57 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\gy6E.tmp --------- 0
 08/04/2010 12:54 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\d5mD.tmp --------- 0
 08/03/2010 06:37 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\njd5.tmp --------- 0
 08/02/2010 05:33 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\h0tA.tmp --------- 0
 08/02/2010 05:33 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\6xg9.tmp --------- 0
 08/02/2010 01:20 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-177 --------- 0
 07/30/2010 07:24 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\ge4084 --------- 0
 07/30/2010 07:22 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\ge3140 --------- 0
 07/29/2010 07:33 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-176 --------- 0
 07/27/2010 05:18 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\a129_appcompat.txt --------- 44106
 07/27/2010 05:13 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-175 --------- 0
 07/26/2010 06:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-174 --------- 0
 07/24/2010 06:27 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\tqh15.tmp --------- 0
 07/24/2010 06:27 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\3x214.tmp --------- 0
 07/24/2010 06:27 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\ury13.tmp --------- 0
 07/24/2010 06:27 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\1hw12.tmp --------- 0
 07/24/2010 06:24 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\p5j10.tmp --------- 0
 07/24/2010 06:24 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\qphF.tmp --------- 0
 07/21/2010 07:53 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\3034_appcompat.txt --------- 44084
 07/20/2010 07:14 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF3CA0.tmp --------- 16384
 07/20/2010 07:14 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-173 --------- 0
 07/20/2010 07:06 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\0x825.tmp --------- 0
 07/20/2010 07:06 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\wg324.tmp --------- 0
 07/20/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\koy23.tmp --------- 0
 07/20/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\sou22.tmp --------- 0
 07/20/2010 07:03 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\jun21.tmp --------- 0
 07/20/2010 07:03 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\2jj20.tmp --------- 0
 07/20/2010 07:02 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\e0v1F.tmp --------- 0
 07/20/2010 06:59 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\q7m1C.tmp --------- 0
 07/20/2010 06:58 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\6lh1B.tmp --------- 0
 07/20/2010 06:54 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\i9l1A.tmp --------- 0
 07/20/2010 06:53 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\va119.tmp --------- 0
 07/20/2010 06:53 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\jow18.tmp --------- 0
 07/20/2010 06:49 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\opm17.tmp --------- 0
 07/20/2010 06:49 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\7rd16.tmp --------- 0
 07/20/2010 06:49 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\z1a15.tmp --------- 0
 07/20/2010 06:47 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\rya14.tmp --------- 0
 07/20/2010 06:47 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\d3513.tmp --------- 0
 07/20/2010 06:46 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\g1s12.tmp --------- 0
 07/20/2010 06:45 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\zg711.tmp --------- 0
 07/20/2010 06:37 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\jh510.tmp --------- 0
 07/20/2010 05:27 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\eecA.tmp --------- 0
 07/20/2010 05:21 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\IHNzXVCu.html.part --------- 0
 07/20/2010 08:52 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\ot914.tmp --------- 0
 07/20/2010 08:52 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\im013.tmp --------- 0
 07/16/2010 10:58 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\wichtige_Telefonnummern.doc --------- 11264
 07/13/2010 11:21 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\ge2836 --------- 0
 07/13/2010 11:21 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\geColladaModelCacheLock --------- 0
 07/13/2010 11:21 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\geIconCacheLock --------- 0
 07/13/2010 11:20 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\is29.tmp --------- 0
 07/13/2010 11:20 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\._msigeplugin52 --------- 0
 07/13/2010 11:16 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-172 --------- 0
 07/13/2010 08:23 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo31744 --------- 1024
 07/13/2010 08:23 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo61744 --------- 3072
 07/13/2010 08:23 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo21744 --------- 1024
 07/13/2010 08:23 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo41744 --------- 1024
 07/13/2010 08:23 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo51744 --------- 1024
 07/12/2010 01:27 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-171 --------- 0
 07/10/2010 06:58 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo23484 --------- 1024
 07/10/2010 06:58 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo53484 --------- 1024
 07/10/2010 06:58 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo43484 --------- 1024
 07/10/2010 06:58 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo33484 --------- 1024
 07/10/2010 01:04 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-170 --------- 0
 07/09/2010 06:20 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF32FB.tmp --------- 16384
 07/09/2010 06:04 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFAB33.tmp --------- 65536
 07/09/2010 06:04 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-169 --------- 0
 07/09/2010 06:04 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFA38F.tmp --------- 16384
 07/05/2010 06:45 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\bf2a_appcompat.txt --------- 44084
 07/05/2010 06:20 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-168 --------- 0
 07/05/2010 03:00 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFD681.tmp --------- 16384
 07/04/2010 09:09 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42220 --------- 1024
 07/04/2010 09:09 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo62220 --------- 3072
 07/04/2010 09:09 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo52220 --------- 1024
 07/04/2010 09:09 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22220 --------- 1024
 07/04/2010 09:09 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32220 --------- 1024
 07/04/2010 08:32 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (24) --------- 0
 07/04/2010 08:25 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (23) --------- 0
 07/04/2010 08:20 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (22) --------- 0
 07/04/2010 07:02 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (21) --------- 0
 07/02/2010 05:56 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-167 --------- 0
 07/01/2010 07:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-166 --------- 0
 07/01/2010 06:53 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\aerzteohnegrenzen-application-form.pdf --------- 399663
 07/01/2010 06:35 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFD7C9.tmp --------- 65536
 07/01/2010 06:35 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\aerzteohnegrenzen-infoblatt-mitarbeit.pdf --------- 804598
 06/29/2010 05:38 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\ae58_appcompat.txt --------- 44080
 06/29/2010 05:10 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-165 --------- 0
 06/28/2010 06:25 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-164 --------- 0
 06/21/2010 09:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo74048 --------- 1024
 06/21/2010 09:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo84048 --------- 1024
 06/21/2010 09:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo94048 --------- 1024
 06/21/2010 09:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo114048 --------- 1024
 06/21/2010 09:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo104048 --------- 1024
 06/21/2010 09:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp40522990703 --------- 155648
 06/21/2010 09:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp40522989140 --------- 90112
 06/21/2010 09:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp40522990265 --------- 155648
 06/21/2010 09:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo34048 --------- 1024
 06/21/2010 09:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo24048 --------- 1024
 06/21/2010 09:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp40522981546 --------- 155648
 06/21/2010 09:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo44048 --------- 1024
 06/21/2010 09:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo64048 --------- 3072
 06/21/2010 09:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo54048 --------- 1024
 06/21/2010 09:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp40525707437 --------- 90112
 06/21/2010 09:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp40522972671 --------- 12607488
 06/21/2010 09:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp40522972828 --------- 90112
 06/21/2010 09:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp40522971765 --------- 3170304
 06/21/2010 09:02 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF263D.tmp --------- 65536
 06/21/2010 01:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo92960 --------- 1024
 06/21/2010 01:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo112960 --------- 1024
 06/21/2010 01:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo82960 --------- 1024
 06/21/2010 01:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo102960 --------- 1024
 06/21/2010 01:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo72960 --------- 1024
 06/21/2010 01:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2964673828 --------- 90112
 06/21/2010 01:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32960 --------- 1024
 06/21/2010 01:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2964660609 --------- 90112
 06/21/2010 01:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2964670328 --------- 90112
 06/21/2010 01:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42960 --------- 1024
 06/21/2010 01:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo52960 --------- 1024
 06/21/2010 01:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2964673656 --------- 90112
 06/21/2010 01:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22960 --------- 1024
 06/21/2010 01:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo62960 --------- 3072
 06/21/2010 01:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp29641184390 --------- 90112
 06/21/2010 01:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2964650750 --------- 16801792
 06/21/2010 01:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2964650984 --------- 90112
 06/21/2010 01:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2964649656 --------- 3170304
 06/21/2010 01:20 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF534E.tmp --------- 65536
 06/17/2010 03:36 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-163 --------- 0
 06/16/2010 12:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo62468 --------- 3072
 06/16/2010 12:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo52468 --------- 1024
 06/16/2010 12:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42468 --------- 1024
 06/16/2010 12:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22468 --------- 1024
 06/16/2010 12:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32468 --------- 1024
 06/16/2010 12:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo92408 --------- 1024
 06/16/2010 12:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp260022984562 --------- 90112
 06/16/2010 12:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo112408 --------- 1024
 06/16/2010 12:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo72408 --------- 1024
 06/16/2010 12:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo102408 --------- 1024
 06/16/2010 12:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp260022984687 --------- 90112
 06/16/2010 12:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp260022980468 --------- 90112
 06/16/2010 12:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22408 --------- 1024
 06/16/2010 12:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo82408 --------- 1024
 06/16/2010 12:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo62408 --------- 3072
 06/16/2010 12:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo52408 --------- 1024
 06/16/2010 12:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42408 --------- 1024
 06/16/2010 12:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32408 --------- 1024
 06/16/2010 12:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp260022976734 --------- 90112
 06/16/2010 12:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp260022971546 --------- 90112
 06/16/2010 12:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp260022971281 --------- 4218880
 06/16/2010 12:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp260022970718 --------- 3170304
 06/16/2010 11:43 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFB197.tmp --------- 65536
 06/16/2010 11:41 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp260025698281 --------- 90112
 06/16/2010 07:39 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dw.log --------- 81
 06/16/2010 06:06 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-162 --------- 0
 06/15/2010 06:49 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\6898437.od --------- 134
 06/15/2010 06:49 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\6898421.cvr --------- 5876
 06/15/2010 05:11 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-161 --------- 0
 06/14/2010 12:08 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF82E5.tmp --------- 65536
 06/14/2010 12:08 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\EVN_F10000250180.pdf --------- 52937
 06/14/2010 10:52 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-160 --------- 0
 06/14/2010 08:44 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo23720 --------- 1024
 06/14/2010 08:44 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo33720 --------- 1024
 06/14/2010 08:44 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo63720 --------- 3072
 06/14/2010 08:44 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo53720 --------- 1024
 06/14/2010 08:44 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo43720 --------- 1024
 06/13/2010 02:30 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFF9D4.tmp --------- 65536
 06/13/2010 02:30 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFEF82.tmp --------- 16384
 06/13/2010 01:58 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-159 --------- 0
 06/11/2010 06:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF3953.tmp --------- 65536
 06/11/2010 06:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF3005.tmp --------- 16384
 06/08/2010 09:51 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo63600 --------- 3072
 06/08/2010 09:51 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo53600 --------- 1024
 06/08/2010 09:51 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo33600 --------- 1024
 06/08/2010 09:51 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo43600 --------- 1024
 06/08/2010 09:51 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo23600 --------- 1024
 06/07/2010 09:32 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF86C3.tmp --------- 65536
 06/07/2010 09:32 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF7A6E.tmp --------- 16384
 06/07/2010 09:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-158 --------- 0
 06/06/2010 04:56 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-157 --------- 0
 06/05/2010 07:27 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF7694.tmp --------- 16384
 06/05/2010 07:25 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF30C9.tmp --------- 16384
 06/05/2010 07:24 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF6BE.tmp --------- 16384
 06/05/2010 07:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFDAE8.tmp --------- 16384
 06/05/2010 05:37 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo64004 --------- 3072
 06/05/2010 05:37 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo54004 --------- 1024
 06/05/2010 05:37 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo44004 --------- 3072
 06/05/2010 04:44 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-156 --------- 0
 06/04/2010 05:15 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-155 --------- 0
 06/03/2010 07:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-154 --------- 0
 06/02/2010 06:08 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-153 --------- 0
 06/01/2010 07:59 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-152 --------- 0
 05/30/2010 04:42 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-151 --------- 0
 05/30/2010 09:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-150 --------- 0
 05/29/2010 07:50 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo6464 --------- 3072
 05/29/2010 07:50 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo5464 --------- 1024
 05/29/2010 07:50 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo2464 --------- 1024
 05/29/2010 07:50 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo3464 --------- 1024
 05/29/2010 07:50 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo4464 --------- 1024
 05/29/2010 07:54 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFECEC.tmp --------- 65536
 05/29/2010 07:54 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFE405.tmp --------- 16384
 05/28/2010 06:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-149 --------- 0
 05/27/2010 07:02 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-148 --------- 0
 05/27/2010 04:38 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-147 --------- 0
 05/24/2010 10:04 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP36.tmp --------- 1301
 05/24/2010 10:04 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP35.tmp --------- 1857
 05/24/2010 10:04 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP33.tmp --------- 2209
 05/24/2010 10:04 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP2F.tmp --------- 771
 05/24/2010 08:49 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-146 --------- 0
 05/22/2010 11:09 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo3248 --------- 1024
 05/22/2010 11:09 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo4248 --------- 1024
 05/22/2010 11:09 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo2248 --------- 1024
 05/22/2010 11:09 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo5248 --------- 1024
 05/22/2010 11:09 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo6248 --------- 3072
 05/22/2010 08:21 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF4918.tmp --------- 16384
 05/22/2010 06:24 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-145 --------- 0
 05/21/2010 07:48 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-144 --------- 0
 05/21/2010 07:28 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (20) --------- 0
 05/21/2010 06:19 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (19) --------- 0
 05/21/2010 06:12 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (18) --------- 0
 05/21/2010 06:03 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (17) --------- 0
 05/21/2010 05:51 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (16) --------- 0
 05/21/2010 05:50 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (15) --------- 0
 05/21/2010 05:37 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (14) --------- 0
 05/20/2010 01:50 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22308 --------- 1024
 05/20/2010 01:50 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo62308 --------- 3072
 05/20/2010 01:50 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo52308 --------- 1024
 05/20/2010 01:50 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32308 --------- 1024
 05/20/2010 01:50 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42308 --------- 1024
 05/20/2010 01:47 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFA342.tmp --------- 65536
 05/20/2010 01:47 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF9C34.tmp --------- 16384
 05/20/2010 11:25 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-143 --------- 0
 05/19/2010 05:57 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-142 --------- 0
 05/18/2010 06:21 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-141 --------- 0
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo73736 --------- 1024
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo83736 --------- 1024
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo43736 --------- 1024
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo63736 --------- 3072
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo23736 --------- 1024
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo33736 --------- 1024
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo53736 --------- 1024
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo93736 --------- 3072
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo102936 --------- 1024
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo112936 --------- 1024
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo72936 --------- 1024
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo82936 --------- 1024
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2940124062 --------- 155648
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo92936 --------- 1024
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2940108625 --------- 90112
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2940104906 --------- 155648
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42936 --------- 1024
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22936 --------- 1024
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo52936 --------- 1024
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo62936 --------- 3072
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32936 --------- 1024
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2940122875 --------- 155648
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp29405032250 --------- 811008
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp294091640 --------- 90112
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp294091468 --------- 7364608
 05/17/2010 07:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp294090312 --------- 3170304
 05/17/2010 06:16 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF95E6.tmp --------- 65536
 05/17/2010 06:16 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF8DDA.tmp --------- 16384
 05/17/2010 06:12 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFB56B.tmp --------- 65536
 05/17/2010 03:38 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo3548 --------- 1024
 05/17/2010 03:38 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp5524775406 --------- 90112
 05/17/2010 03:38 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo6548 --------- 3072
 05/17/2010 03:38 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp5524777250 --------- 90112
 05/17/2010 03:38 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp5524781187 --------- 90112
 05/17/2010 03:38 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo5548 --------- 1024
 05/17/2010 03:38 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo2548 --------- 1024
 05/17/2010 03:38 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo4548 --------- 1024
 05/17/2010 03:38 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp5524770078 --------- 90112
 05/17/2010 03:38 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp5524770218 --------- 90112
 05/17/2010 03:19 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp5524789437 --------- 90112
 05/17/2010 03:19 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp5524789296 --------- 90112
 05/17/2010 03:19 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp5524769125 --------- 3170304
 05/16/2010 06:41 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFBB20.tmp --------- 65536
 05/15/2010 09:48 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-140 --------- 0
 05/15/2010 09:44 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFDB11.tmp --------- 16384
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22012 --------- 1024
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo82012 --------- 1024
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo52012 --------- 1024
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42012 --------- 1024
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32012 --------- 1024
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo72012 --------- 1024
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo62012 --------- 3072
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo92012 --------- 3072
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo83848 --------- 1024
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo103848 --------- 1024
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo113848 --------- 1024
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo93848 --------- 1024
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo33848 --------- 1024
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo43848 --------- 1024
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo23848 --------- 1024
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp38521027234 --------- 90112
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp38521017250 --------- 90112
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo63848 --------- 3072
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo53848 --------- 1024
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo73848 --------- 1024
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp38521027093 --------- 90112
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp38521006718 --------- 90112
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3852998531 --------- 8413184
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3852998687 --------- 90112
 05/14/2010 10:11 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3852997625 --------- 3170304
 05/14/2010 07:49 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF3A17.tmp --------- 65536
 05/14/2010 07:41 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp385210807250 --------- 155648
 05/13/2010 06:45 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-139 --------- 0
 05/13/2010 06:30 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF5169.tmp --------- 65536
 05/13/2010 06:18 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\Temporary Directory 2 for einzelnabrunden.zip --------- 0
 05/13/2010 10:18 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo81736 --------- 1024
 05/13/2010 10:18 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo61736 --------- 3072
 05/13/2010 10:18 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo21736 --------- 1024
 05/13/2010 10:18 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo41736 --------- 3072
 05/13/2010 10:18 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo51736 --------- 1024
 05/13/2010 10:18 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo31736 --------- 1024
 05/13/2010 10:18 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo71736 --------- 1024
 05/13/2010 10:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp238812187609 --------- 90112
 05/13/2010 10:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22328 --------- 1024
 05/13/2010 10:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp238812187515 --------- 90112
 05/13/2010 10:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp238812185250 --------- 90112
 05/13/2010 10:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32328 --------- 1024
 05/13/2010 10:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42328 --------- 3072
 05/13/2010 10:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp238812183921 --------- 90112
 05/13/2010 10:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp238812182921 --------- 90112
 05/13/2010 10:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp238812182703 --------- 3170304
 05/13/2010 10:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp238812183750 --------- 155648
 05/13/2010 10:14 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\Temporary Directory 1 for einzelnabrunden.zip --------- 0
 05/13/2010 10:14 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-138 --------- 0
 05/13/2010 10:07 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp238812182875 --------- 548864
 05/13/2010 09:59 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF170.tmp --------- 65536
 05/13/2010 09:59 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFF914.tmp --------- 16384
 05/13/2010 05:41 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF5FAD.tmp --------- 65536
 05/13/2010 05:41 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF5693.tmp --------- 16384
 05/12/2010 10:01 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-137 --------- 0
 05/12/2010 11:15 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp279675984 --------- 155648
 05/12/2010 11:15 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp279675218 --------- 155648
 05/12/2010 11:15 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp279668187 --------- 90112
 05/12/2010 11:15 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp279664656 --------- 155648
 05/12/2010 11:15 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp279659437 --------- 155648
 05/12/2010 11:15 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp279653984 --------- 90112
 05/12/2010 11:15 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp279652734 --------- 3170304
 05/12/2010 11:15 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp279653781 --------- 221184
 05/12/2010 09:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo23000 --------- 1024
 05/12/2010 09:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo33000 --------- 1024
 05/12/2010 09:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3004332765 --------- 90112
 05/12/2010 09:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3004332921 --------- 90112
 05/12/2010 09:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo43000 --------- 3072
 05/12/2010 09:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3004317765 --------- 90112
 05/12/2010 09:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3004323671 --------- 90112
 05/12/2010 09:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3004319703 --------- 90112
 05/12/2010 09:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3004311000 --------- 3170304
 05/12/2010 09:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3004312031 --------- 16801792
 05/12/2010 09:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3004312234 --------- 90112
 05/11/2010 07:03 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-136 --------- 0
 05/10/2010 08:08 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-135 --------- 0
 05/09/2010 07:13 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo31996 --------- 1024
 05/09/2010 07:13 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo21996 --------- 1024
 05/09/2010 07:13 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo41996 --------- 3072
 05/09/2010 07:13 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp15641472031 --------- 90112
 05/09/2010 07:13 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo31276 --------- 1024
 05/09/2010 07:13 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo41276 --------- 3072
 05/09/2010 07:13 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo21276 --------- 1024
 05/09/2010 07:13 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp15641471937 --------- 90112
 05/09/2010 07:13 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp15641469093 --------- 90112
 05/09/2010 07:13 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp15641467718 --------- 90112
 05/09/2010 07:13 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp15641466859 --------- 90112
 05/09/2010 07:13 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp15641466812 --------- 3170304
 05/09/2010 07:13 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp15641466671 --------- 3170304
 05/09/2010 07:11 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp15643990906 --------- 90112
 05/09/2010 07:09 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFB4C3.tmp --------- 65536
 05/09/2010 06:26 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-134 --------- 0
 05/09/2010 12:43 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-133 --------- 0
 05/09/2010 09:36 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-132 --------- 0
 05/09/2010 02:12 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-131 --------- 0
 05/08/2010 07:21 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3856483796 --------- 90112
 05/08/2010 07:21 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3856478390 --------- 90112
 05/08/2010 07:21 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo23852 --------- 1024
 05/08/2010 07:21 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3856474218 --------- 90112
 05/08/2010 07:21 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo43852 --------- 3072
 05/08/2010 07:21 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo33852 --------- 1024
 05/08/2010 07:21 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3856483906 --------- 90112
 05/08/2010 07:21 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp38561380593 --------- 90112
 05/08/2010 07:21 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3856467625 --------- 90112
 05/08/2010 07:21 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3856466468 --------- 3170304
 05/08/2010 07:21 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3856467484 --------- 4218880
 05/08/2010 07:06 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-130 --------- 0
 05/07/2010 11:45 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-129 --------- 0
 05/07/2010 06:20 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFA10D.tmp --------- 65536
 05/07/2010 06:20 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF9A0A.tmp --------- 16384
 05/07/2010 06:20 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-128 --------- 0
 05/06/2010 08:52 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF60BF.tmp --------- 65536
 05/05/2010 04:10 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo33348 --------- 1024
 05/05/2010 04:10 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo23348 --------- 1024
 05/05/2010 04:10 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo43348 --------- 3072
 05/05/2010 04:10 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp165234826562 --------- 90112
 05/05/2010 04:10 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo63492 --------- 1024
 05/05/2010 04:10 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo53492 --------- 1024
 05/05/2010 04:10 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo73492 --------- 1024
 05/05/2010 04:10 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp165234826640 --------- 90112
 05/05/2010 04:10 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo23492 --------- 1024
 05/05/2010 04:10 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp165234823437 --------- 90112
 05/05/2010 04:10 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo43492 --------- 3072
 05/05/2010 04:10 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo33492 --------- 1024
 05/05/2010 04:10 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp165234822031 --------- 90112
 05/05/2010 04:10 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp165239983765 --------- 90112
 05/05/2010 04:10 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp165234821062 --------- 6316032
 05/05/2010 04:10 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp165234820875 --------- 3170304
 05/05/2010 04:10 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp165234821093 --------- 90112
 05/03/2010 10:06 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\jre-6u20-windows-i586-iftw-rv.exe --------- 922400
 05/03/2010 03:35 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo72108 --------- 1024
 05/03/2010 03:35 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo62108 --------- 1024
 05/03/2010 03:35 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo52108 --------- 1024
 05/03/2010 03:35 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp21563644187 --------- 90112
 05/03/2010 03:35 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp21563644375 --------- 90112
 05/03/2010 03:35 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42108 --------- 3072
 05/03/2010 03:35 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32108 --------- 1024
 05/03/2010 03:35 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22108 --------- 1024
 05/03/2010 03:35 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp21563640593 --------- 90112
 05/03/2010 03:35 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp21563641937 --------- 90112
 05/03/2010 03:35 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp21563640437 --------- 90112
 05/03/2010 03:35 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp21563639640 --------- 90112
 05/03/2010 03:35 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp21563639593 --------- 221184
 05/03/2010 03:35 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp21563639437 --------- 3170304
 05/03/2010 03:27 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF2BFD.tmp --------- 65536
 05/03/2010 08:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp28521498046 --------- 90112
 05/03/2010 08:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42848 --------- 5120
 05/03/2010 08:42 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp28521497890 --------- 33579008
 05/03/2010 08:41 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp28521495734 --------- 3170304
 05/02/2010 11:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2852252781 --------- 155648
 05/02/2010 11:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2852252187 --------- 155648
 05/02/2010 11:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo62848 --------- 1024
 05/02/2010 11:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo72848 --------- 1024
 05/02/2010 11:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo52848 --------- 1024
 05/02/2010 11:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2852249484 --------- 90112
 05/02/2010 11:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2852231125 --------- 155648
 05/02/2010 11:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32848 --------- 1024
 05/02/2010 11:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22848 --------- 1024
 05/02/2010 11:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2852218343 --------- 90112
 05/02/2010 11:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2852216203 --------- 3170304
 05/02/2010 11:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2852218109 --------- 548864
 05/02/2010 11:37 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2852697312 --------- 90112
 05/02/2010 10:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32636 --------- 1024
 05/02/2010 10:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22636 --------- 1024
 05/02/2010 10:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42636 --------- 3072
 05/02/2010 10:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo52968 --------- 1024
 05/02/2010 10:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo62968 --------- 1024
 05/02/2010 10:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo72968 --------- 1024
 05/02/2010 10:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2972198390 --------- 90112
 05/02/2010 10:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22968 --------- 1024
 05/02/2010 10:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2972198203 --------- 90112
 05/02/2010 10:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42968 --------- 3072
 05/02/2010 10:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2972195187 --------- 90112
 05/02/2010 10:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32968 --------- 1024
 05/02/2010 10:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2972184515 --------- 90112
 05/02/2010 10:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp297214637468 --------- 90112
 05/02/2010 10:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2972172593 --------- 90112
 05/02/2010 10:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2972172406 --------- 33579008
 05/02/2010 10:29 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp2972170515 --------- 3170304
 05/02/2010 10:21 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-127 --------- 0
 05/02/2010 09:46 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF69EA.tmp --------- 65536
 05/02/2010 09:26 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFDBFD.tmp --------- 16384
 05/01/2010 04:30 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-126 --------- 0
 04/30/2010 10:21 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-125 --------- 0
 04/29/2010 05:26 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP38.tmp --------- 4013
 04/29/2010 05:26 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-124 --------- 0
 04/29/2010 05:25 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP32.tmp --------- 387
 04/29/2010 05:25 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP30.tmp --------- 7594
 04/29/2010 05:21 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP2E.tmp --------- 191
 04/29/2010 05:21 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP2D.tmp --------- 777
 04/29/2010 05:21 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP2C.tmp --------- 1882
 04/29/2010 05:19 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP2A.tmp --------- 711
 04/28/2010 06:26 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-123 --------- 0
 04/28/2010 06:32 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP3A.tmp --------- 1882
 04/28/2010 06:32 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP34.tmp --------- 1037
 04/28/2010 06:32 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP31.tmp --------- 387
 04/28/2010 06:31 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP2B.tmp --------- 777
 04/28/2010 06:31 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP29.tmp --------- 711
 04/24/2010 06:55 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-122 --------- 0
 04/23/2010 08:41 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo43820 --------- 3072
 04/23/2010 08:41 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo23820 --------- 1024
 04/23/2010 08:41 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo33820 --------- 1024
 04/23/2010 08:11 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-121 --------- 0
 04/23/2010 07:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFBBB.tmp --------- 65536
 04/23/2010 06:08 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF629A.tmp --------- 16384
 04/22/2010 07:28 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo43432 --------- 3072
 04/22/2010 07:28 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo23432 --------- 1024
 04/22/2010 07:28 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo33432 --------- 1024
 04/22/2010 07:28 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\12051000.od --------- 134
 04/22/2010 07:28 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\12050953.cvr --------- 4552
 04/22/2010 05:51 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFFF72.tmp --------- 65536
 04/22/2010 05:51 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFEDA9.tmp --------- 16384
 04/22/2010 05:50 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-120 --------- 0
 04/22/2010 12:06 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-119 --------- 0
 04/22/2010 05:25 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-118 --------- 0
 04/20/2010 06:48 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-117 --------- 0
 04/19/2010 05:19 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\jar_cache5892824875804979542.tmp --------- 0
 04/19/2010 05:19 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\java_install.log --------- 27001
 04/19/2010 04:59 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\4a93dc.mst --------- 4993536
 04/17/2010 05:40 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (13) --------- 0
 04/16/2010 11:58 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22252 --------- 1024
 04/16/2010 11:58 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42252 --------- 3072
 04/16/2010 11:58 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32252 --------- 1024
 04/14/2010 06:41 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-116 --------- 0
 04/14/2010 12:59 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-115 --------- 0
 04/13/2010 06:49 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-114 --------- 0
 04/13/2010 07:23 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-113 --------- 0
 04/12/2010 03:12 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-112 --------- 0
 04/10/2010 07:16 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo43364 --------- 3072
 04/10/2010 07:16 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo23364 --------- 1024
 04/10/2010 07:16 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo33364 --------- 1024
 04/10/2010 06:48 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-111 --------- 0
 04/09/2010 07:37 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-110 --------- 0
 04/09/2010 10:57 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-109 --------- 0
 04/09/2010 05:22 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-108 --------- 0
 04/08/2010 07:37 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-107 --------- 0
 04/07/2010 07:27 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3872637109 --------- 155648
 04/07/2010 07:27 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3872637984 --------- 155648
 04/07/2010 07:27 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3872632890 --------- 90112
 04/07/2010 07:27 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo23868 --------- 1024
 04/07/2010 07:27 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo33868 --------- 1024
 04/07/2010 07:27 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3872628406 --------- 155648
 04/07/2010 07:27 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo43868 --------- 3072
 04/07/2010 07:27 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3872624718 --------- 155648
 04/07/2010 07:27 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3872613375 --------- 3170304
 04/07/2010 07:27 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3872615390 --------- 90112
 04/07/2010 07:24 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3872615234 --------- 548864
 04/05/2010 02:50 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~nsu.tmp --------- 0
 04/02/2010 07:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp25168333109 --------- 155648
 04/02/2010 07:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp25168329187 --------- 90112
 04/02/2010 07:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp25168332593 --------- 155648
 04/02/2010 07:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32512 --------- 1024
 04/02/2010 07:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp25168327968 --------- 155648
 04/02/2010 07:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22512 --------- 1024
 04/02/2010 07:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42512 --------- 3072
 04/02/2010 07:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp25168787234 --------- 90112
 04/02/2010 07:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp25168325859 --------- 90112
 04/02/2010 07:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp25168325796 --------- 2121728
 04/02/2010 07:07 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp25168325609 --------- 2121728
 04/02/2010 06:58 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3420239125 --------- 90112
 04/02/2010 06:58 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3420230796 --------- 90112
 04/02/2010 06:58 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3420226500 --------- 90112
 04/02/2010 06:58 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3420238984 --------- 90112
 04/02/2010 06:58 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3420215812 --------- 90112
 04/02/2010 06:58 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3420215593 --------- 29384704
 04/02/2010 06:58 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3420213703 --------- 2121728
 04/02/2010 06:54 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp34208056218 --------- 90112
 04/02/2010 06:33 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-106 --------- 0
 03/31/2010 07:40 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFFEC7.tmp --------- 65536
 03/31/2010 07:40 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFF7DB.tmp --------- 16384
 03/31/2010 07:22 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-105 --------- 0
 03/30/2010 07:16 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\8266671.od --------- 134
 03/30/2010 07:16 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\8266640.cvr --------- 6508
 03/29/2010 09:49 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFDD1B.tmp --------- 65536
 03/29/2010 09:49 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFD4FD.tmp --------- 16384
 03/28/2010 06:38 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-104 --------- 0
 03/26/2010 08:16 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\uclB.tmp --------- 0
 03/21/2010 08:38 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-103 --------- 0
 03/20/2010 10:45 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp36686861390 --------- 90112
 03/20/2010 10:45 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp36686863156 --------- 155648
 03/20/2010 10:45 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp36686862656 --------- 155648
 03/20/2010 10:45 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo33644 --------- 1024
 03/20/2010 10:45 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo43644 --------- 3072
 03/20/2010 10:45 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp36686850062 --------- 155648
 03/20/2010 10:45 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo23644 --------- 1024
 03/20/2010 10:45 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp36686846375 --------- 155648
 03/20/2010 10:45 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp36686838515 --------- 90112
 03/20/2010 10:45 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp36686836703 --------- 2121728
 03/20/2010 09:50 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-102 --------- 0
 03/20/2010 08:16 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp36686838359 --------- 8413184
 03/20/2010 06:01 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF6517.tmp --------- 16384
 03/19/2010 10:21 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-101 --------- 0
 03/19/2010 07:06 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3372518234 --------- 155648
 03/19/2010 07:06 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo23368 --------- 1024
 03/19/2010 07:06 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3372516046 --------- 90112
 03/19/2010 07:06 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo33368 --------- 1024
 03/19/2010 07:06 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo43368 --------- 3072
 03/19/2010 07:06 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3372517421 --------- 155648
 03/19/2010 07:06 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3372506218 --------- 155648
 03/19/2010 07:06 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp33721503796 --------- 90112
 03/19/2010 07:06 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3372493843 --------- 90112
 03/19/2010 07:06 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3372493703 --------- 1073152
 03/19/2010 07:06 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp3372492000 --------- 2121728
 03/18/2010 07:32 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-100 --------- 0
 03/18/2010 10:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp19167649734 --------- 155648
 03/18/2010 10:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp19167648765 --------- 155648
 03/18/2010 10:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo31920 --------- 1024
 03/18/2010 10:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo21920 --------- 1024
 03/18/2010 10:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo41920 --------- 3072
 03/18/2010 10:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp19167647453 --------- 90112
 03/18/2010 10:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp19167640843 --------- 155648
 03/18/2010 10:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp19169307718 --------- 90112
 03/18/2010 10:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp19167628437 --------- 12607488
 03/18/2010 10:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp19167628562 --------- 90112
 03/18/2010 10:47 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\DBTmp19167626718 --------- 2121728
 03/18/2010 10:30 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\Acr780-831dce --------- 358
 03/16/2010 05:25 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\5211046.od --------- 134
 03/16/2010 05:25 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\5211015.cvr --------- 4072
 03/10/2010 08:11 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-99 --------- 0
 03/10/2010 05:47 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (12) --------- 0
 03/10/2010 05:39 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (11) --------- 0
 03/10/2010 05:36 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (10) --------- 0
 03/10/2010 05:31 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (9) --------- 0
 03/10/2010 05:26 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (8) --------- 0
 03/07/2010 09:32 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22860 --------- 1024
 03/07/2010 09:32 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32860 --------- 1024
 03/07/2010 09:32 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42860 --------- 3072
 03/07/2010 08:54 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-98 --------- 0
 03/07/2010 12:26 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-97 --------- 0
 03/07/2010 06:32 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-96 --------- 0
 03/06/2010 06:25 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-95 --------- 0
 03/06/2010 06:20 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFFD3C.tmp --------- 16384
 03/06/2010 04:27 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\rao2F.tmp --------- 0
 03/05/2010 08:09 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-94 --------- 0
 03/05/2010 12:33 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42004 --------- 3072
 03/05/2010 12:33 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32004 --------- 1024
 03/05/2010 12:33 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22004 --------- 1024
 03/04/2010 08:26 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-93 --------- 0
 03/04/2010 12:31 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (7) --------- 0
 03/02/2010 12:57 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\19a1_appcompat.txt --------- 9094
 03/02/2010 12:48 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-92 --------- 0
 03/02/2010 11:19 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFD120.tmp --------- 16384
 03/02/2010 10:37 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DF96D4.tmp --------- 16384
 02/27/2010 08:25 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-91 --------- 0
 02/27/2010 06:14 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-90 --------- 0
 02/26/2010 05:48 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-89 --------- 0
 02/25/2010 08:12 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo33516 --------- 1024
 02/25/2010 08:12 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo43516 --------- 3072
 02/25/2010 08:12 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo23516 --------- 1024
 02/23/2010 05:05 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-88 --------- 0
 02/22/2010 06:44 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-87 --------- 0
 02/20/2010 09:38 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-86 --------- 0
 02/19/2010 10:34 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (6) --------- 0
 02/19/2010 08:19 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (5) --------- 0
 02/18/2010 08:10 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-85 --------- 0
 02/18/2010 02:31 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-84 --------- 0
 02/18/2010 01:51 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP22.tmp --------- 777
 02/18/2010 01:51 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP20.tmp --------- 1813
 02/18/2010 01:51 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP1D.tmp --------- 711
 02/18/2010 07:26 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-83 --------- 0
 02/17/2010 08:28 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-82 --------- 0
 02/16/2010 03:59 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-81 --------- 0
 02/16/2010 01:59 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42060 --------- 3072
 02/16/2010 01:59 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32060 --------- 1024
 02/16/2010 01:59 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22060 --------- 1024
 02/16/2010 01:18 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-80 --------- 0
 02/16/2010 08:32 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-79 --------- 0
 02/15/2010 06:36 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-78 --------- 0
 02/15/2010 09:26 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo43520 --------- 3072
 02/15/2010 09:26 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo33520 --------- 1024
 02/15/2010 09:26 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo23520 --------- 1024
 02/14/2010 08:28 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-77 --------- 0
 02/13/2010 03:35 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-76 --------- 0
 02/12/2010 08:37 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo21196 --------- 1024
 02/12/2010 08:37 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo31196 --------- 1024
 02/12/2010 08:37 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo41196 --------- 3072
 02/12/2010 08:36 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-75 --------- 0
 02/11/2010 10:55 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22296 --------- 1024
 02/11/2010 10:55 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32296 --------- 1024
 02/11/2010 10:55 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42296 --------- 3072
 02/11/2010 09:17 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (4) --------- 0
 02/11/2010 07:03 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dynastg (3) --------- 0
 02/09/2010 07:22 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32000 --------- 1024
 02/09/2010 07:22 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22000 --------- 1024
 02/09/2010 07:22 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42000 --------- 3072
 02/09/2010 07:16 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-74 --------- 0
 02/09/2010 02:40 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\29316406.od --------- 134
 02/09/2010 02:40 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\29316375.cvr --------- 4368
 02/09/2010 11:45 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-73 --------- 0
 02/08/2010 06:15 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-72 --------- 0
 02/05/2010 07:00 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\Temporary Directory 1 for guestbook.zip --------- 0
 02/05/2010 06:15 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-71 --------- 0
 02/01/2010 07:36 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-70 --------- 0
 02/01/2010 06:14 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\sr03.tmp --------- 0
 01/31/2010 12:23 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-69 --------- 0
 01/30/2010 08:51 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-68 --------- 0
 01/28/2010 08:35 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\AVSETUP_4b613de1 --------- 0
 01/28/2010 08:33 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dd_vcredistUI2C02.txt --------- 11374
 01/28/2010 08:33 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\dd_vcredistMSI2C02.txt --------- 522674
 01/28/2010 07:56 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-67 --------- 0
 01/28/2010 07:41 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\SYMEVENT.LOG --------- 14520
 01/28/2010 07:40 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\SymNRT 1-28-2010 7h40m49s.log --------- 122900
 01/27/2010 11:13 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo42564 --------- 3072
 01/27/2010 11:13 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo22564 --------- 1024
 01/27/2010 11:13 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\lilo32564 --------- 1024
 01/26/2010 06:34 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-66 --------- 0
 01/26/2010 05:31 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\Norton Setup 15,0,0 1-26-2010 17h30m12s.log --------- 39234
 01/26/2010 05:30 PM      C:\DOCUME~1\badi\LOCALS~1\Temp\Norton Stub 4,0,0 1-26-2010 17h29m52s.log --------- 8910
 01/26/2010 05:24 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP28.tmp --------- 329
 01/26/2010 05:24 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP25.tmp --------- 336
 01/26/2010 05:23 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP24.tmp --------- 493
 01/26/2010 05:23 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP23.tmp --------- 1317
 01/26/2010 05:23 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP21.tmp --------- 1857
 01/26/2010 05:23 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP1F.tmp --------- 1301
 01/26/2010 05:14 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP1C.tmp --------- 72
 01/26/2010 05:14 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP1B.tmp --------- 73
 01/26/2010 05:13 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP5.tmp --------- 2530
 01/26/2010 05:13 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP4.tmp --------- 411
 01/26/2010 05:13 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP3.tmp --------- 389
 01/26/2010 05:13 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\FTP1.tmp --------- 711
 01/25/2010 10:07 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\15620953.od --------- 134
 01/25/2010 10:07 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\15620890.cvr --------- 4036
 01/25/2010 09:04 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\plugtmp-65 --------- 0
 01/24/2010 11:39 AM      C:\DOCUME~1\badi\LOCALS~1\Temp\~DFF32D.tmp --------- 16384
----------------------------------------

 
C:\Program Files

----------------------------------------

 
C:\Documents and Settings\All Users\..

badi   
LocalService   
gast   
NetworkService   
Default User   
All Users   
----------------------------------------

 
C:\WINDOWS\system32\drivers\etc\hosts

127.0.0.1      localhost

----------------------------------------

 

Image Name                  PID Session Name    Session#    Mem Usage
========================= ====== ================ ======== ============
System Idle Process            0 Console                0        28 K
System                        4 Console                0        240 K
smss.exe                    644 Console                0        416 K
csrss.exe                    716 Console                0      4,176 K
winlogon.exe                740 Console                0      3,904 K
services.exe                784 Console                0      3,504 K
lsass.exe                    796 Console                0      1,396 K
nvsvc32.exe                1004 Console                0      4,764 K
svchost.exe                1032 Console                0      5,168 K
svchost.exe                1100 Console                0      4,460 K
svchost.exe                1196 Console                0    23,700 K
svchost.exe                1356 Console                0      3,756 K
svchost.exe                1392 Console                0      7,512 K
spoolsv.exe                1536 Console                0      4,748 K
sched.exe                  1624 Console                0        828 K
avguard.exe                1644 Console                0    12,344 K
svchost.exe                1712 Console                0      3,796 K
avshadow.exe                1764 Console                0      2,848 K
explorer.exe                268 Console                0    30,012 K
RTHDCPL.EXE                  552 Console                0    23,004 K
rundll32.exe                584 Console                0      4,164 K
ipoint.exe                  608 Console                0      7,240 K
avgnt.exe                    632 Console                0      1,632 K
jusched.exe                  656 Console                0      2,856 K
ctfmon.exe                  688 Console                0      3,356 K
mDNSResponder.exe            700 Console                0      3,564 K
GSvr.exe                    128 Console                0      2,844 K
msmsgs.exe                  1148 Console                0      2,120 K
jqs.exe                    1156 Console                0      1,404 K
alg.exe                    2120 Console                0      3,668 K
HiJackThis.exe              2792 Console                0      8,584 K
notepad.exe                2852 Console                0      3,700 K
firefox.exe                2860 Console                0    118,404 K
plugin-container.exe        3308 Console                0    16,416 K
mbam.exe                    3644 Console                0    78,696 K
notepad.exe                3680 Console                0      3,568 K
cmd.exe                    2312 Console                0      2,340 K
tasklist.exe                3944 Console                0      4,568 K
wmiprvse.exe                200 Console                0      5,888 K

 
***** Ende des Scans Wed 01/12/2011 um  6:32:35.56 ***

Nochmals Dank für das Durchsehen.

Badi


Alle Zeitangaben in WEZ +1. Es ist jetzt 17:53 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131