Нещо се разбърниках и чукнах с десен бутон на мишката върху START->Open->Програми Startup

и AVAST пропищя,че паметта е заразена.

Пускам AVAST да поразгледа положението и да сканира и със стартирането се появи съобщение "Паметта е заразена с троянски кон"...програмата ми препоръча да рестартирам и да изчакам сканирането на локалните файлове. Откри поразен файл...но не успях да го преместя, изтрия или каквото и да било (изписа ми,че не намира файл с такова име) и прекъснах сканирането.

Сега гледам в клетката за вируси е открит вирусът:

WIN32/Fraudo [Trj]

Не смея да трия или нещо друго, да не повредя системни файлове...

Какво да направя?

Който може да помогне...

Здравей crazymonster,

Аз съм B-boy[styLe] и ще ти помагам да почистиш система си от зловреден софтуер (ако има такъв). Анализа на логовете, както и премахването на зловредния софтуер, може да отнеме време, затова бъди търпелив. Имай предвид следното:

• Аз ще ти помагам главно за почистването на система от зловреден софтуер. За всякакви други проблеми, създай нова тема в съответния форум и опиши детайлно проблема.
  
• Инструкциите се отнасят само за този проблем и само за този компютър.
  
• Следвай инструкциите ми стриктно, докато не ти кажа, че системата ти е напълно чиста. Това, че симптомите са изчезнали, не значи че всичко е наред.
  
• Ако не разбираш нещо, попитай ме, а не рискувай. По-добре е малко да се позабавим, отколкото да усложним нещата.
  
• Цялата кореспонденция минава през тази тема, не създавай нова тема и не използвай друга тема за тази цел.
  

СТЪПКА 1

Изпълнете указанията от темата: "Системата ми е инфектирана - Какво да правя сега?" и публикувайте резултатите.

СТЪПКА 2

Изтегли DDS от тук.

Запази го на десктопа.

Изключи защитата в реално време на антивирусната си програма (ако е инсталирана такава).Накрая, стартирай инструмента.

• Когато DDS приключи успешно анализа на системата ще отвори два лог файла.

1. 
   
2. DDS.txt
   
3. Attach.txt
   

• Запази ги на десктопа и след това ги прикачи към следващия си пост.

СТЪПКА 3

Изтегли GMER и го разархивирай на десктопа.

Преди да сканираш се увери, че всички останали работещи програми в момента са изключени и антивирусния софтуер няма да предприема никакви действия по време на сканирането на Gmer. Не използвай компютъра си, докато трае сканирането.

Кликни два пъти пъти върху gmer.exe , за да стартираш програмата.

Тя ще направи начално сканиране за секунди. След като то приключи НЕ натискайте бутона Scan, а избери бутона Copy и постави съдържанието на лог файла в следващия си пост.

Започнах сканиране с Malwarebytes' Anti-Malware и Avast започна да намира още вируси и да пропищява. Намери отново същите троянски в 4 файла и 1 spyware. Трябва ли да изключа Avast! или не е необходимо?

Започнах сканиране с Malwarebytes' Anti-Malware и Avast започна да намира още вируси и да пропищява. Намери отново същите троянски в 4 файла и 1 spyware. Трябва ли да изключа Avast! или не е необходимо?

Моля временно го изключете, да. След това изпълнете стъпките и публикувайте нужните логове (текстови файлове).

Ето какво стана по СТЪПКА 1.

Тъй като не ми позволи прикачването на резултата от HiJack

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 04:22:00, on 12.9.2009 г.

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Boot mode: Normal


Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

C:\Program Files\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\RTHDCPL.EXE

C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe

C:\Program Files\D-Tools\daemon.exe

C:\WINDOWS\system32\rundll32.exe

C:\Program Files\GIGABYTE\Gigabyte Super Wireless LAN Card\GNConfig.exe

C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

C:\Program Files\My Lockbox\flockbox.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Common Files\Teleca Shared\CapabilityManager.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\system32\acs.exe

C:\WINDOWS\system32\IFXSPMGT.exe

C:\WINDOWS\system32\IFXTCS.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\system32\IfxPsdSv.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Infineon\Security Platform Software\PSDrt.exe

C:\Program Files\Infineon\Security Platform Software\SpTna.exe

C:\Program Files\Common Files\Teleca Shared\Generic.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\HJT\HijackThis.exe


R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://google.icq.com/search/search_frame.php

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - (no file)

O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll

O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe

O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe

O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe

O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE

O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE

O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe

O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe"  -lang 1033

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent

O4 - HKLM\..\Run: [IFXSPMGT] C:\WINDOWS\system32\IFXSPMGT.exe /NotifyLogon

O4 - HKLM\..\Run: [GNConfig] "C:\Program Files\GIGABYTE\Gigabyte Super Wireless LAN Card\GNConfig.exe" -nogui

O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

O4 - HKLM\..\Run: [flockbox] C:\Program Files\My Lockbox\flockbox.exe /a

O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions

O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O8 - Extra context menu item: Download All by FlashGet - C:\DOCUME~1\User\Desktop\jc_all.htm

O8 - Extra context menu item: Download using FlashGet - C:\DOCUME~1\User\Desktop\jc_link.htm

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

O17 - HKLM\System\CCS\Services\Tcpip\..\{6E42196F-76FC-4ABB-AB98-DB51E35EE73F}: NameServer = 192.168.1.1,192.168.1.2

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

O23 - Service: Atheros Configuration Service (ACS) - Atheros - C:\WINDOWS\system32\acs.exe

O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe

O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

O23 - Service: Security Platform Management Service (IFXSpMgtSrv) - Infineon Technologies AG - C:\WINDOWS\system32\IFXSPMGT.exe

O23 - Service: Trusted Platform Core Service (IFXTCS) - Infineon Technologies AG - C:\WINDOWS\system32\IFXTCS.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: Personal Secure Drive Service (PersonalSecureDriveService) - Infineon Technologies AG - C:\WINDOWS\system32\IfxPsdSv.exe


--

End of file - 6605 bytes

Да продължавам ли със стъпка 2 или да изчакам?

1.txt

Моля продължете и с останалите.

Благодаря.

Ето и останалите резултати. Мисля,че са това

Attach.txt

DDS.txt

gmer.txt

Ето и останалите резултати. Мисля,че са това

Докато анализирам резултатите направете следните неща:

Отворете HijackThis и натиснете "Do a system scan only".

Сложете отметки пред следните редове:

O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - (no file)

O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll

O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

Натиснете бутона "Fix Checked".

Затворете HijackThis.

Ако е възможно направете снимка на засечените обекти в паметта от avast!.

' date='12 септември 2009 - 04:36 ' timestamp='1252719375' post='1511147']

Докато анализирам резултатите направете следните неща:

Отворете HijackThis и натиснете "Do a system scan only".

Сложете отметки пред следните редове:

Натиснете бутона "Fix Checked".

Затворете HijackThis.

Ако е възможно направете снимка на засечените обекти в паметта от avast!.

Готово е и това.

Снимката като прикачен файл.

Мисля, си че вашия проблем е решен от Malwarebytes:

Заразени стойности в регистратурата:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ttool (Trojan.Agent) -> Quarantined and deleted successfully.

Останалите лог файлове са чисти.

Все пак:

СТЪПКА 1

Използвайте ATF-Cleaner и почистете временните файлове.

Описание за това как се работи с приложението ще намерите тук:

СТЪПКА 2

Спрете временно System Restore:

*Десен бутон на My Computer => Properties => System Restore => сложете отметка пред "Turn off system restore on all drives" => потвърдете с Apply.

Моля, обновете дефинициите на антивирусната си програма, (вече можете отново да включите защитата и в реално време) и направете нова проверка.

Вижте дали проблема остава.

Извърших сканиране при изключен system restore с avast!

Няма открити зарази.

Обаче ме притесняват логовете в клетката за вируси на avast!, на която направих screenshoot по-горе.

При натискане с десен бутон върху някой от тях - ПРОВЕРИ, ми изписва:

Проверка на избраните файлове

Действието завърши успешно!

Бе открит Вирус!

Файл: A0015339.exe

FileID: 6

Описание на Вируса: Win32:Fraudo [Trj]

не знам тези логове трябва ли да ги изтрия ? И дали реално има проблем.

СТЪПКА 1

*. Временно спри защитата на антивирусната си програма в реално време. (ако е инсталирана такава).

*. Изтегли Combofix.

*. Запази го на ДЕСКТОПА.

*. Отвори notepad и въведи чрез copy/paste:

KILLALL::

File::

C:\documents and settings\user\start menu\programs\startup\rncsys32.exe

DDS::

TB: {855F3B16-6D32-4FE6-8A56-BBB695989046} - No File

DirLook::

c:\documents and settings\user\local settings\temp

sysrst::

*. Запази файла с име CFScript и го провлачи чрез drag/drop в Combofix.exe (както е на картинката)

*. По времето на сканиране от страна на ComboFix не стартирай никакви други приложения, не натискай клавиши от клавиатурата и не мести мишката !

*. Публикувай лог файла, който ще се създаде след рестарта на компютъра в следващия си пост.

Ето и резултатът!

А след тази операция ми изписва,че са изключени автоматичните ъпдейти на Уиндоус. Да ги включа ли отново?

Май вече не мога да прикачвам...

ComboFix 09-09-11.01 - User 09.2009 г.  5:29.1.2 - NTFSx86

Microsoft Windows XP Professional  5.1.2600.2.1251.359.1033.18.2046.1540 [GMT 3:00]

Running from: c:\documents and settings\User\Desktop\ComboFix.exe

Command switches used :: c:\documents and settings\User\Desktop\CFScript.txt

AV: avast! antivirus 4.8.1351 [VPS 090911-0] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}


WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!


FILE ::

"c:\documents and settings\user\start menu\programs\startup\rncsys32.exe"

.


(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))

.


c:\windows\Installer\23b776e.msi

c:\windows\Installer\2941487.msi


.

(((((((((((((((((((((((((   Files Created from 2009-08-12 to 2009-09-12  )))))))))))))))))))))))))))))))

.


2009-09-12 00:45 . 2009-09-12 01:39	--------	d-----w-	C:\HJT

2009-09-12 00:12 . 2009-09-12 00:12	--------	d-----w-	c:\documents and settings\User\Application Data\Malwarebytes

2009-09-12 00:12 . 2009-09-10 11:54	38224	----a-w-	c:\windows\system32\drivers\mbamswissarmy.sys

2009-09-12 00:12 . 2009-09-12 00:12	--------	d-----w-	c:\program files\Malwarebytes' Anti-Malware

2009-09-12 00:12 . 2009-09-12 00:12	--------	d-----w-	c:\documents and settings\All Users\Application Data\Malwarebytes

2009-09-12 00:12 . 2009-09-10 11:53	19160	----a-w-	c:\windows\system32\drivers\mbam.sys


.

((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2009-09-11 23:07 . 2008-08-20 19:10	--------	d-----w-	c:\documents and settings\User\Application Data\Skype

2009-09-11 21:05 . 2009-06-08 17:06	--------	d-----w-	c:\documents and settings\User\Application Data\skypePM

2009-08-26 14:26 . 2008-08-20 19:01	--------	d-----w-	c:\program files\Winamp

2009-08-22 19:15 . 2009-06-17 19:09	--------	d-----w-	c:\program files\Common Files\Teleca Shared

2009-08-17 16:10 . 2009-06-03 19:51	1279456	----a-w-	c:\windows\system32\aswBoot.exe

2009-08-17 16:06 . 2009-06-03 19:51	93392	----a-w-	c:\windows\system32\drivers\aswmon.sys

2009-08-17 16:06 . 2009-06-03 19:51	94160	----a-w-	c:\windows\system32\drivers\aswmon2.sys

2009-08-17 16:05 . 2009-06-04 10:43	114768	----a-w-	c:\windows\system32\drivers\aswSP.sys

2009-08-17 16:05 . 2009-06-04 10:43	20560	----a-w-	c:\windows\system32\drivers\aswFsBlk.sys

2009-08-17 16:04 . 2009-06-03 19:51	51376	----a-w-	c:\windows\system32\drivers\aswTdi.sys

2009-08-17 16:04 . 2009-06-03 19:51	23152	----a-w-	c:\windows\system32\drivers\aswRdr.sys

2009-08-17 16:03 . 2009-06-03 19:51	26944	----a-w-	c:\windows\system32\drivers\aavmker4.sys

2009-08-17 16:02 . 2009-06-03 19:51	97480	----a-w-	c:\windows\system32\AVASTSS.scr

2009-08-01 20:38 . 2009-08-01 20:38	--------	d-----w-	c:\program files\MOP

2009-07-24 22:01 . 2009-07-24 09:03	--------	d-----w-	c:\documents and settings\All Users\Application Data\NOS

2009-07-24 22:01 . 2009-07-24 09:03	--------	d-----w-	c:\program files\NOS

2009-07-16 04:22 . 2009-07-16 01:07	--------	d-----w-	c:\documents and settings\User\Application Data\ESTsoft

2009-07-16 04:22 . 2009-07-16 01:07	--------	d-----w-	c:\documents and settings\All Users\Application Data\ESTsoft

2009-07-16 01:49 . 2009-07-16 01:49	--------	d-----w-	c:\program files\7-Zip

2009-07-16 01:07 . 2009-07-16 01:07	--------	d-----w-	c:\program files\ESTsoft

2009-07-16 00:33 . 2009-07-16 00:33	--------	d-----w-	c:\documents and settings\All Users\Application Data\ConeXware

2009-07-07 18:28 . 2009-06-06 22:18	16	----a-w-	c:\windows\popcinfo.dat

2009-07-03 21:00 . 2009-06-07 23:12	18704	----a-w-	c:\documents and settings\User\Local Settings\Application Data\GDIPFONTCACHEV1.DAT

.


((((((((((((((((((((((((((((((((((((((((((((   Look   )))))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

---- Directory of c:\documents and settings\user\local settings\temp ----


2009-09-12 02:29 . 2009-09-12 02:29	53248	----a-w-	c:\documents and settings\user\local settings\temp\catchme.dll

2009-09-12 00:36 . 2009-09-12 00:36	49152	----a-w-	c:\documents and settings\user\local settings\temp\~DF4DD0.tmp

2009-09-11 23:32 . 2009-09-11 23:32	49152	----a-w-	c:\documents and settings\user\local settings\temp\~DFF67A.tmp

2009-09-08 15:14 . 2009-09-08 15:52	0	---hatw-	c:\documents and settings\user\local settings\temp\etilqs_L6SoDUbbGBnlj3VVUBUN

2009-09-07 19:59 . 2009-09-07 19:59	14562	----a-r-	c:\documents and settings\user\local settings\temp\Bit4F.tmp

2009-09-02 06:19 . 2009-09-02 06:19	15245	----a-r-	c:\documents and settings\user\local settings\temp\Bit7C.tmp

2009-09-02 06:17 . 2009-09-02 06:17	11872	----a-r-	c:\documents and settings\user\local settings\temp\Bit5B.tmp

2009-09-02 06:15 . 2009-09-02 06:15	14439	----a-r-	c:\documents and settings\user\local settings\temp\Bit3E.tmp

2009-09-01 12:19 . 2009-09-01 12:22	65536	----a-w-	c:\documents and settings\user\local settings\temp\~DFB60D.tmp

2009-08-30 21:56 . 2009-08-30 21:56	13227	----a-r-	c:\documents and settings\user\local settings\temp\Bit2C.tmp

2009-08-30 21:56 . 2009-08-30 21:56	16384	----a-w-	c:\documents and settings\user\local settings\temp\~DFD693.tmp

2009-08-28 13:01 . 2009-08-28 13:01	8195	----a-r-	c:\documents and settings\user\local settings\temp\Bit52.tmp

2009-08-27 21:34 . 2009-08-27 21:34	49152	----a-w-	c:\documents and settings\user\local settings\temp\~DFF612.tmp

2009-08-27 18:37 . 2009-08-27 18:37	23280	----a-r-	c:\documents and settings\user\local settings\temp\Bit1B0.tmp

2009-08-27 18:36 . 2009-08-27 18:36	21718	----a-r-	c:\documents and settings\user\local settings\temp\Bit1A7.tmp

2009-08-27 18:30 . 2009-08-27 18:30	16258	----a-r-	c:\documents and settings\user\local settings\temp\The Last House On The Left (2009) (Unrated) [Xvid] [DvdRip] 420Demons.rar

2009-08-27 18:30 . 2009-08-27 18:30	14829	----a-r-	c:\documents and settings\user\local settings\temp\Bit146.tmp

2009-08-27 18:28 . 2009-08-27 18:28	14446	----a-r-	c:\documents and settings\user\local settings\temp\Bit11C.tmp

2009-08-27 18:21 . 2009-08-27 18:21	14590	----a-r-	c:\documents and settings\user\local settings\temp\Bit9B.tmp

2009-08-27 18:20 . 2009-08-27 18:20	45357	----a-r-	c:\documents and settings\user\local settings\temp\Bit94.tmp

2009-08-27 10:46 . 2009-08-27 10:46	11846	----a-r-	c:\documents and settings\user\local settings\temp\Bit32.tmp

2009-08-27 10:45 . 2009-08-27 10:45	31901	----a-r-	c:\documents and settings\user\local settings\temp\Bit31.tmp

2009-08-27 10:35 . 2009-08-27 10:35	19178	----a-r-	c:\documents and settings\user\local settings\temp\Bit1F.tmp

2009-08-27 10:30 . 2009-08-27 10:30	100709	----a-r-	c:\documents and settings\user\local settings\temp\Bit1E.tmp

2009-08-27 10:28 . 2009-08-27 10:28	28548	----a-r-	c:\documents and settings\user\local settings\temp\Bit1D.tmp

2009-08-27 10:26 . 2009-08-27 10:26	18829	----a-r-	c:\documents and settings\user\local settings\temp\Bit1C.tmp

2009-08-27 10:25 . 2009-08-27 10:25	10692	----a-r-	c:\documents and settings\user\local settings\temp\Bit1B.tmp

2009-08-27 10:24 . 2009-08-27 10:24	45978	----a-r-	c:\documents and settings\user\local settings\temp\Bit18.tmp

2009-08-27 10:21 . 2009-08-27 10:20	30476	----a-r-	c:\documents and settings\user\local settings\temp\Bit14.tmp

2009-08-25 20:54 . 2009-08-25 20:54	56874	----a-r-	c:\documents and settings\user\local settings\temp\Bit5F7.tmp

2009-08-25 20:53 . 2009-08-25 20:53	14290	----a-r-	c:\documents and settings\user\local settings\temp\Bit5E4.tmp

2009-08-25 20:51 . 2009-08-25 20:51	14819	----a-r-	c:\documents and settings\user\local settings\temp\Bit588.tmp

2009-08-25 20:42 . 2009-08-25 20:42	28390	----a-r-	c:\documents and settings\user\local settings\temp\Bit4A3.tmp

2009-08-25 20:40 . 2009-08-25 20:40	57768	----a-r-	c:\documents and settings\user\local settings\temp\Bit481.tmp

2009-08-25 20:39 . 2009-08-25 20:39	14550	----a-r-	c:\documents and settings\user\local settings\temp\Bit46B.tmp

2009-08-25 20:37 . 2009-08-25 20:37	14495	----a-r-	c:\documents and settings\user\local settings\temp\Bit43C.tmp

2009-08-25 20:35 . 2009-08-25 20:35	57199	----a-r-	c:\documents and settings\user\local settings\temp\Bit40E.tmp

2009-08-25 20:33 . 2009-08-25 20:33	14526	----a-r-	c:\documents and settings\user\local settings\temp\Bit3CA.tmp

2009-08-25 20:33 . 2009-08-25 20:33	17877	----a-r-	c:\documents and settings\user\local settings\temp\shelter(subs.unacs.bg).rar

2009-08-25 20:32 . 2009-08-25 20:32	60723	----a-r-	c:\documents and settings\user\local settings\temp\Bit3C2.tmp

2009-08-25 13:20 . 2009-08-25 13:20	88495	----a-r-	c:\documents and settings\user\local settings\temp\Bit11B.tmp

2009-08-25 13:18 . 2009-08-25 13:18	52827	----a-r-	c:\documents and settings\user\local settings\temp\BitF1.tmp

2009-08-25 13:16 . 2009-08-25 13:16	14904	----a-r-	c:\documents and settings\user\local settings\temp\BitED.tmp

2009-08-21 18:12 . 2009-08-21 18:11	21617	----a-r-	c:\documents and settings\user\local settings\temp\Bit1A1.tmp

2009-08-21 13:15 . 2009-08-21 13:15	81037	----a-r-	c:\documents and settings\user\local settings\temp\BitB3.tmp

2009-08-21 13:13 . 2009-08-21 13:13	109088	----a-r-	c:\documents and settings\user\local settings\temp\BitA2.tmp

2009-08-20 06:43 . 2009-08-20 06:43	14449	----a-r-	c:\documents and settings\user\local settings\temp\Bit47.tmp

2009-08-20 06:42 . 2009-08-20 06:42	14421	----a-r-	c:\documents and settings\user\local settings\temp\Bit3B.tmp

2009-08-20 06:41 . 2009-08-20 06:41	28153	----a-r-	c:\documents and settings\user\local settings\temp\lb-the.casino.job.rar

2009-08-20 06:40 . 2009-08-20 06:40	28419	----a-r-	c:\documents and settings\user\local settings\temp\Bit2B.tmp

2009-08-20 06:40 . 2009-08-20 06:40	14590	----a-r-	c:\documents and settings\user\local settings\temp\Bit24.tmp

2009-08-20 06:40 . 2009-08-20 06:40	14515	----a-r-	c:\documents and settings\user\local settings\temp\Bit17.tmp

2009-08-16 09:33 . 2009-08-16 09:33	56630	----a-r-	c:\documents and settings\user\local settings\temp\Bit1AD.tmp

2009-08-16 09:30 . 2009-08-16 09:30	9530	----a-r-	c:\documents and settings\user\local settings\temp\Bit18D.tmp

2009-08-16 09:28 . 2009-08-16 09:28	14398	----a-r-	c:\documents and settings\user\local settings\temp\Bit184.tmp

2009-08-16 09:27 . 2009-08-16 09:27	14325	----a-r-	c:\documents and settings\user\local settings\temp\Bit170.tmp

2009-08-16 09:27 . 2009-08-16 09:27	14784	----a-r-	c:\documents and settings\user\local settings\temp\Bit168.tmp

2009-08-16 09:23 . 2009-08-16 09:23	14206	----a-r-	c:\documents and settings\user\local settings\temp\BitE9.tmp

2009-08-16 08:10 . 2009-08-16 08:10	100725	----a-r-	c:\documents and settings\user\local settings\temp\Bit96.tmp

2009-08-16 08:06 . 2009-08-16 08:06	13051	----a-r-	c:\documents and settings\user\local settings\temp\Bit95.tmp

2009-08-16 08:00 . 2009-08-16 08:00	16265	----a-r-	c:\documents and settings\user\local settings\temp\Bit93.tmp

2009-08-16 08:00 . 2009-08-16 08:00	16384	----a-w-	c:\documents and settings\user\local settings\temp\~DF4B8F.tmp

2009-08-13 22:26 . 2009-08-13 22:26	16337	----a-r-	c:\documents and settings\user\local settings\temp\Bit1FC.tmp

2009-08-13 22:23 . 2009-08-13 22:23	20066	----a-r-	c:\documents and settings\user\local settings\temp\Bit1FB.tmp

2009-08-13 22:18 . 2009-08-13 22:18	18989	----a-r-	c:\documents and settings\user\local settings\temp\Bit1FA.tmp

2009-08-13 22:16 . 2009-08-13 22:16	12867	----a-r-	c:\documents and settings\user\local settings\temp\Bit1F9.tmp

2009-08-13 22:16 . 2009-08-13 22:16	12187	----a-r-	c:\documents and settings\user\local settings\temp\Bit1F8.tmp

2009-08-13 22:12 . 2009-08-13 22:12	15910	----a-r-	c:\documents and settings\user\local settings\temp\Bit1F7.tmp

2009-08-13 22:11 . 2009-08-13 22:11	20120	----a-r-	c:\documents and settings\user\local settings\temp\Bit1F6.tmp

2009-08-13 22:10 . 2009-08-13 22:10	12060	----a-r-	c:\documents and settings\user\local settings\temp\Bit1F5.tmp

2009-08-13 19:17 . 2009-08-13 19:17	16384	----a-w-	c:\documents and settings\user\local settings\temp\~DFDF3.tmp

2009-08-12 22:22 . 2009-08-12 22:22	112137	----a-r-	c:\documents and settings\user\local settings\temp\Bit1AC.tmp

2009-08-12 22:21 . 2009-08-12 22:21	11812	----a-r-	c:\documents and settings\user\local settings\temp\Bit1A8.tmp

2009-08-12 22:15 . 2009-08-12 22:15	10753	----a-r-	c:\documents and settings\user\local settings\temp\Bit1A6.tmp

2009-08-12 22:11 . 2009-08-12 22:11	11858	----a-r-	c:\documents and settings\user\local settings\temp\Bit19F.tmp

2009-08-12 22:10 . 2009-08-12 22:10	19823	----a-r-	c:\documents and settings\user\local settings\temp\Bit19E.tmp

2009-08-07 13:26 . 2009-08-07 13:59	0	---hatw-	c:\documents and settings\user\local settings\temp\etilqs_8dOA9Dx9dLwSAJT1wV45

2009-08-06 06:40 . 2009-08-06 06:40	15939	----a-r-	c:\documents and settings\user\local settings\temp\Bit7A.tmp

2009-08-06 06:38 . 2009-08-06 06:38	11188	----a-r-	c:\documents and settings\user\local settings\temp\Bit79.tmp

2009-08-06 06:37 . 2009-08-06 06:37	55968	----a-r-	c:\documents and settings\user\local settings\temp\Bit78.tmp

2009-08-06 06:35 . 2009-08-06 06:35	13733	----a-r-	c:\documents and settings\user\local settings\temp\Bit77.tmp

2009-08-06 06:34 . 2009-08-06 06:34	11244	----a-r-	c:\documents and settings\user\local settings\temp\Bit76.tmp

2009-08-05 04:50 . 2009-08-05 04:50	112052	----a-r-	c:\documents and settings\user\local settings\temp\Bit1C1.tmp

2009-08-05 04:47 . 2009-08-05 04:47	19978	----a-r-	c:\documents and settings\user\local settings\temp\Bit1BD.tmp

2009-08-05 04:44 . 2009-08-05 04:44	89869	----a-r-	c:\documents and settings\user\local settings\temp\Bit1BA.tmp

2009-08-05 04:42 . 2009-08-05 04:42	12727	----a-r-	c:\documents and settings\user\local settings\temp\Bit1B7.tmp

2009-08-05 04:42 . 2009-08-05 04:42	144875	----a-r-	c:\documents and settings\user\local settings\temp\Bit1B6.tmp

2009-08-05 04:39 . 2009-08-05 04:38	20186	----a-r-	c:\documents and settings\user\local settings\temp\Bit1B4.tmp

2009-08-05 04:38 . 2009-08-05 04:38	19794	----a-r-	c:\documents and settings\user\local settings\temp\Bit1B3.tmp

2009-08-05 04:38 . 2009-08-05 04:38	16626	----a-r-	c:\documents and settings\user\local settings\temp\Bit1B2.tmp

2009-08-05 04:37 . 2009-08-05 04:37	14329	----a-r-	c:\documents and settings\user\local settings\temp\Bit1B1.tmp

2009-08-05 04:29 . 2009-08-05 04:29	12783	----a-r-	c:\documents and settings\user\local settings\temp\Bit1AA.tmp

2009-08-05 04:29 . 2009-08-05 04:29	18993	----a-r-	c:\documents and settings\user\local settings\temp\Bit1A9.tmp

2009-08-05 04:07 . 2009-08-05 04:07	14470	----a-r-	c:\documents and settings\user\local settings\temp\Bit12A.tmp

2009-08-05 04:06 . 2009-08-05 04:06	14526	----a-r-	c:\documents and settings\user\local settings\temp\Bit129.tmp

2009-08-05 04:06 . 2009-08-05 04:06	14470	----a-r-	c:\documents and settings\user\local settings\temp\Bit128.tmp

2009-08-05 04:05 . 2009-08-05 04:05	57135	----a-r-	c:\documents and settings\user\local settings\temp\Bit10C.tmp

2009-08-05 04:05 . 2009-08-05 04:05	16384	----a-w-	c:\documents and settings\user\local settings\temp\~DFCC78.tmp

2009-08-04 11:18 . 2009-08-04 11:18	13219	----a-r-	c:\documents and settings\user\local settings\temp\Bit18E.tmp

2009-08-04 11:16 . 2009-08-04 11:16	14275	----a-r-	c:\documents and settings\user\local settings\temp\Bit160.tmp

2009-08-04 11:13 . 2009-08-04 11:13	17606	----a-r-	c:\documents and settings\user\local settings\temp\Bit13A.tmp

2009-08-04 11:12 . 2009-08-04 11:12	77355	----a-r-	c:\documents and settings\user\local settings\temp\Bit122.tmp

2009-08-03 04:00 . 2009-08-03 04:00	88821	----a-r-	c:\documents and settings\user\local settings\temp\Bit113.tmp

2009-08-03 03:59 . 2009-08-03 03:59	107039	----a-r-	c:\documents and settings\user\local settings\temp\Bit112.tmp

2009-08-03 03:59 . 2009-08-03 03:59	76877	----a-r-	c:\documents and settings\user\local settings\temp\Bit111.tmp

2009-08-03 03:52 . 2009-08-03 03:52	105503	----a-r-	c:\documents and settings\user\local settings\temp\Bit104.tmp

2009-08-03 03:49 . 2009-08-03 03:49	274738	----a-r-	c:\documents and settings\user\local settings\temp\Bit103.tmp

2009-08-03 03:49 . 2009-08-03 03:49	287417	----a-r-	c:\documents and settings\user\local settings\temp\Bit102.tmp

2009-08-03 03:48 . 2009-08-03 03:48	101032	----a-r-	c:\documents and settings\user\local settings\temp\BitFD.tmp

2009-08-03 03:48 . 2009-08-03 03:48	14252	----a-r-	c:\documents and settings\user\local settings\temp\BitFC.tmp

2009-08-03 03:39 . 2009-08-03 03:39	14514	----a-r-	c:\documents and settings\user\local settings\temp\Bit99.tmp

2009-08-03 03:38 . 2009-08-03 03:38	21718	----a-r-	c:\documents and settings\user\local settings\temp\Bit90.tmp

2009-08-03 03:38 . 2009-08-03 03:38	23280	----a-r-	c:\documents and settings\user\local settings\temp\Bit88.tmp

2009-07-31 13:21 . 2009-07-31 13:21	16384	----a-w-	c:\documents and settings\user\local settings\temp\~DF9DDA.tmp

2009-07-31 07:08 . 2009-07-31 07:08	28503	----a-r-	c:\documents and settings\user\local settings\temp\Bit23.tmp

2009-07-31 06:26 . 2009-07-31 06:26	69773	----a-r-	c:\documents and settings\user\local settings\temp\Bit8F.tmp

2009-07-31 06:26 . 2009-07-31 06:26	16384	----a-w-	c:\documents and settings\user\local settings\temp\~DFCBF8.tmp

2009-07-31 06:02 . 2009-07-31 06:43	0	---hatw-	c:\documents and settings\user\local settings\temp\etilqs_e8weRo4uheaqlrvec35H

2009-07-29 08:03 . 2009-07-29 08:03	15025	----a-r-	c:\documents and settings\user\local settings\temp\BitC5.tmp

2009-07-29 08:00 . 2009-07-29 08:00	290771	----a-r-	c:\documents and settings\user\local settings\temp\BitC3.tmp

2009-07-29 07:58 . 2009-07-29 07:58	11084	----a-r-	c:\documents and settings\user\local settings\temp\BitC0.tmp

2009-07-29 07:54 . 2009-07-29 07:54	30923	----a-r-	c:\documents and settings\user\local settings\temp\BitBB.tmp

2009-07-29 07:54 . 2009-07-29 07:54	16356	----a-r-	c:\documents and settings\user\local settings\temp\BitBA.tmp

2009-07-29 07:50 . 2009-07-29 07:50	15000	----a-r-	c:\documents and settings\user\local settings\temp\BitB8.tmp

2009-07-29 07:49 . 2009-07-29 07:49	15820	----a-r-	c:\documents and settings\user\local settings\temp\BitB6.tmp

2009-07-29 07:49 . 2009-07-29 07:49	555465	----a-r-	c:\documents and settings\user\local settings\temp\BitB4.tmp

2009-07-29 07:48 . 2009-07-29 07:48	12359	----a-r-	c:\documents and settings\user\local settings\temp\BitB2.tmp

2009-07-29 07:45 . 2009-07-29 07:45	16390	----a-r-	c:\documents and settings\user\local settings\temp\BitB0.tmp

2009-07-29 07:44 . 2009-07-29 07:44	30649	----a-r-	c:\documents and settings\user\local settings\temp\BitAF.tmp

2009-07-29 07:42 . 2009-07-29 07:42	16317	----a-r-	c:\documents and settings\user\local settings\temp\BitAE.tmp

2009-07-29 07:40 . 2009-07-29 07:40	86724	----a-r-	c:\documents and settings\user\local settings\temp\BitAC.tmp

2009-07-29 07:39 . 2009-07-29 07:39	15976	----a-r-	c:\documents and settings\user\local settings\temp\BitAB.tmp

2009-07-29 07:37 . 2009-07-29 07:37	14718	----a-r-	c:\documents and settings\user\local settings\temp\BitAA.tmp

2009-07-29 07:36 . 2009-07-29 07:36	11533	----a-r-	c:\documents and settings\user\local settings\temp\BitA4.tmp

2009-07-28 05:09 . 2009-07-28 05:09	12304	---hatw-	c:\documents and settings\user\local settings\temp\etilqs_2EaywCmYzr2iAENcnXot

2009-07-27 06:36 . 2009-07-27 06:36	68474	----a-r-	c:\documents and settings\user\local settings\temp\Bit10F.tmp

2009-07-27 06:35 . 2009-07-27 06:35	28166	----a-r-	c:\documents and settings\user\local settings\temp\Bit10E.tmp

2009-07-27 06:33 . 2009-07-27 06:33	17165	----a-r-	c:\documents and settings\user\local settings\temp\BitEF.tmp

2009-07-27 06:30 . 2009-07-27 06:30	5725	----a-r-	c:\documents and settings\user\local settings\temp\BitDB.tmp

2009-07-27 06:28 . 2009-07-27 06:28	68452	----a-r-	c:\documents and settings\user\local settings\temp\BitD8.tmp

2009-07-27 06:25 . 2009-07-27 06:25	14772	----a-r-	c:\documents and settings\user\local settings\temp\BitC1.tmp

2009-07-27 06:25 . 2009-07-27 06:25	14772	----a-r-	c:\documents and settings\user\local settings\temp\Only.Internal.5.2009.XXX.DVDRiP.XviD-WDE.torrent

2009-07-25 20:40 . 2009-07-25 20:40	49152	----a-w-	c:\documents and settings\user\local settings\temp\~DFC317.tmp

2009-07-22 19:55 . 2009-07-22 19:55	15355	----a-r-	c:\documents and settings\user\local settings\temp\BitD7.tmp

2009-07-21 22:42 . 2009-07-21 22:42	13978	----a-r-	c:\documents and settings\user\local settings\temp\Bit1D4.tmp

2009-07-21 22:41 . 2009-07-21 22:41	13813	----a-r-	c:\documents and settings\user\local settings\temp\Bit1BB.tmp

2009-07-21 22:40 . 2009-07-21 22:40	8925	----a-r-	c:\documents and settings\user\local settings\temp\Bit1AB.tmp

2009-07-21 18:09 . 2009-07-21 18:09	49152	----a-w-	c:\documents and settings\user\local settings\temp\~DFA1C7.tmp

2009-07-21 13:02 . 2009-07-21 13:02	34703	----a-r-	c:\documents and settings\user\local settings\temp\Bit144.tmp

2009-07-21 13:00 . 2009-07-21 13:00	15743	----a-r-	c:\documents and settings\user\local settings\temp\Bit11E.tmp

2009-07-21 12:55 . 2009-07-21 12:55	13663	----a-r-	c:\documents and settings\user\local settings\temp\BitA0.tmp

2009-07-21 00:31 . 2009-07-21 00:31	51125	----a-r-	c:\documents and settings\user\local settings\temp\Bit38A.tmp

2009-07-20 07:05 . 2009-07-20 07:05	85290	----a-r-	c:\documents and settings\user\local settings\temp\Bit45E.tmp

2009-07-20 06:52 . 2009-07-20 06:52	9553	----a-r-	c:\documents and settings\user\local settings\temp\Bit36A.tmp

2009-07-20 06:49 . 2009-07-20 06:49	15005	----a-r-	c:\documents and settings\user\local settings\temp\Bit342.tmp

2009-07-20 06:46 . 2009-07-20 06:45	12319	----a-r-	c:\documents and settings\user\local settings\temp\Bit2E2.tmp

2009-07-20 06:45 . 2009-07-20 06:45	12998	----a-r-	c:\documents and settings\user\local settings\temp\Bit2E1.tmp

2009-07-20 06:43 . 2009-07-20 06:43	9837	----a-r-	c:\documents and settings\user\local settings\temp\Bit272.tmp

2009-07-20 06:37 . 2009-07-20 06:37	7702	----a-r-	c:\documents and settings\user\local settings\temp\Bit25E.tmp

2009-07-17 19:21 . 2009-07-17 19:21	20941	----a-r-	c:\documents and settings\user\local settings\temp\Bit3A7.tmp

2009-07-17 17:21 . 2009-07-17 17:21	18445	----a-r-	c:\documents and settings\user\local settings\temp\Bit2A8.tmp

2009-07-17 17:19 . 2009-07-17 17:19	16683	----a-r-	c:\documents and settings\user\local settings\temp\Bit29B.tmp

2009-07-17 12:49 . 2009-07-17 12:49	122073	----a-r-	c:\documents and settings\user\local settings\temp\Bit183.tmp

2009-07-17 12:46 . 2009-07-17 12:46	105828	----a-r-	c:\documents and settings\user\local settings\temp\Bit182.tmp

2009-07-17 12:46 . 2009-07-17 12:46	13569	----a-r-	c:\documents and settings\user\local settings\temp\Bit181.tmp

2009-07-17 12:41 . 2009-07-17 12:41	14800	----a-r-	c:\documents and settings\user\local settings\temp\Bit180.tmp

2009-07-17 12:39 . 2009-07-17 12:39	66844	----a-r-	c:\documents and settings\user\local settings\temp\Bit17F.tmp

2009-07-17 12:35 . 2009-07-17 12:35	14268	----a-r-	c:\documents and settings\user\local settings\temp\Bit17D.tmp

2009-07-17 12:35 . 2009-07-17 12:35	11273	----a-r-	c:\documents and settings\user\local settings\temp\Bit17C.tmp

2009-07-17 12:34 . 2009-07-17 12:34	35701	----a-r-	c:\documents and settings\user\local settings\temp\Bit17B.tmp

2009-07-17 12:31 . 2009-07-17 12:31	12036	----a-r-	c:\documents and settings\user\local settings\temp\Bit17A.tmp

2009-07-17 12:31 . 2009-07-17 12:31	30923	----a-r-	c:\documents and settings\user\local settings\temp\Bit179.tmp

2009-07-17 12:28 . 2009-07-17 12:28	246669	----a-r-	c:\documents and settings\user\local settings\temp\Bit177.tmp

2009-07-17 12:25 . 2009-07-17 12:25	13281	----a-r-	c:\documents and settings\user\local settings\temp\Bit174.tmp

2009-07-17 12:23 . 2009-07-17 12:23	11097	----a-r-	c:\documents and settings\user\local settings\temp\Bit173.tmp

2009-07-16 14:25 . 2009-07-16 14:25	39440	----a-r-	c:\documents and settings\user\local settings\temp\Bit41.tmp

2009-07-16 14:25 . 2009-07-16 14:25	16384	----a-w-	c:\documents and settings\user\local settings\temp\~DFC3E6.tmp

2009-07-16 14:25 . 2009-07-16 14:25	39440	----a-r-	c:\documents and settings\user\local settings\temp\Emilia - Samotna staia [2005].torrent

2009-07-16 04:29 . 2009-07-16 04:29	983206	----a-r-	c:\documents and settings\user\local settings\temp\link-sistem.rar

2009-07-15 00:13 . 2009-07-15 00:13	29401	----a-r-	c:\documents and settings\user\local settings\temp\Bit505.tmp

2009-07-15 00:11 . 2009-07-15 00:11	29518	----a-r-	c:\documents and settings\user\local settings\temp\Bit4DE.tmp

2009-07-14 17:47 . 2009-07-14 17:47	49152	----a-w-	c:\documents and settings\user\local settings\temp\~DF6318.tmp

2009-07-14 12:33 . 2009-07-14 12:33	49152	----a-w-	c:\documents and settings\user\local settings\temp\~DFBE77.tmp

2009-07-14 01:49 . 2009-07-14 01:49	22297	----a-r-	c:\documents and settings\user\local settings\temp\Bit889.tmp

2009-07-14 01:49 . 2009-07-14 01:49	17733	----a-r-	c:\documents and settings\user\local settings\temp\Bit87A.tmp

2009-07-13 23:37 . 2009-07-13 23:37	49152	----a-w-	c:\documents and settings\user\local settings\temp\~DFEC64.tmp

2009-07-13 20:19 . 2009-07-13 20:19	16373	----a-r-	c:\documents and settings\user\local settings\temp\Bit4FA.tmp

2009-07-13 20:18 . 2009-07-13 20:18	14625	----a-r-	c:\documents and settings\user\local settings\temp\Bit4CA.tmp

2009-07-13 20:14 . 2009-07-13 20:14	15274	----a-r-	c:\documents and settings\user\local settings\temp\Bit4A2.tmp

2009-07-13 20:12 . 2009-07-13 20:12	15799	----a-r-	c:\documents and settings\user\local settings\temp\Bit487.tmp

2009-07-13 20:11 . 2009-07-13 20:11	14481	----a-r-	c:\documents and settings\user\local settings\temp\Bit47E.tmp

2009-07-13 20:09 . 2009-07-13 20:09	7382	----a-r-	c:\documents and settings\user\local settings\temp\Bit46D.tmp

2009-07-13 20:06 . 2009-07-13 20:06	14625	----a-r-	c:\documents and settings\user\local settings\temp\Bit44C.tmp

2009-07-13 16:41 . 2009-07-13 16:41	56350	----a-r-	c:\documents and settings\user\local settings\temp\Bit245.tmp

2009-07-13 16:40 . 2009-07-13 16:40	28979	----a-r-	c:\documents and settings\user\local settings\temp\Bit231.tmp

2009-07-13 16:39 . 2009-07-13 16:38	23433	----a-r-	c:\documents and settings\user\local settings\temp\Bit223.tmp

2009-07-13 14:51 . 2009-07-13 14:51	22650	----a-r-	c:\documents and settings\user\local settings\temp\BitD0.tmp

2009-07-13 14:49 . 2009-07-13 14:49	14383	----a-r-	c:\documents and settings\user\local settings\temp\BitAD.tmp

2009-07-13 14:47 . 2009-07-13 14:47	28795	----a-r-	c:\documents and settings\user\local settings\temp\Bit8E.tmp

2009-07-12 15:05 . 2009-07-12 15:05	13285	----a-r-	c:\documents and settings\user\local settings\temp\Bit6C9.tmp

2009-07-12 15:04 . 2009-07-12 15:04	16711	----a-r-	c:\documents and settings\user\local settings\temp\Bit6C8.tmp

2009-07-12 15:03 . 2009-07-12 15:03	14737	----a-r-	c:\documents and settings\user\local settings\temp\Bit67F.tmp

2009-07-12 15:02 . 2009-07-12 15:02	7245	----a-r-	c:\documents and settings\user\local settings\temp\Bit634.tmp

2009-07-12 15:01 . 2009-07-12 15:01	13179	----a-r-	c:\documents and settings\user\local settings\temp\Bit5F2.tmp

2009-07-12 15:00 . 2009-07-12 15:00	15063	----a-r-	c:\documents and settings\user\local settings\temp\Bit5A3.tmp

2009-07-12 14:59 . 2009-07-12 14:59	14744	----a-r-	c:\documents and settings\user\local settings\temp\Bit584.tmp

2009-07-12 14:58 . 2009-07-12 14:58	14345	----a-r-	c:\documents and settings\user\local settings\temp\Bit559.tmp

2009-07-12 14:56 . 2009-07-12 14:56	14383	----a-r-	c:\documents and settings\user\local settings\temp\Bit4F1.tmp

2009-07-12 14:53 . 2009-07-12 14:53	342890	----a-r-	c:\documents and settings\user\local settings\temp\Bit4E4.tmp

2009-07-12 14:47 . 2009-07-12 14:47	342890	----a-r-	c:\documents and settings\user\local settings\temp\Bit482.tmp

2009-07-12 14:47 . 2009-07-12 14:47	37234	----a-r-	c:\documents and settings\user\local settings\temp\Bit468.tmp

2009-07-12 14:42 . 2009-07-12 14:42	30299	----a-r-	c:\documents and settings\user\local settings\temp\Bit3D4.tmp

2009-07-12 14:42 . 2009-07-12 14:42	32302	----a-r-	c:\documents and settings\user\local settings\temp\Bit3D3.tmp

2009-07-12 00:55 . 2009-07-12 00:55	14671	----a-r-	c:\documents and settings\user\local settings\temp\Bit676.tmp

2009-07-12 00:55 . 2009-07-12 00:55	23250	----a-r-	c:\documents and settings\user\local settings\temp\Bit675.tmp

2009-07-12 00:53 . 2009-07-12 00:53	63624	----a-r-	c:\documents and settings\user\local settings\temp\Bit670.tmp

2009-07-12 00:50 . 2009-07-12 00:50	56767	----a-r-	c:\documents and settings\user\local settings\temp\Bit659.tmp

2009-07-12 00:48 . 2009-07-12 00:48	14715	----a-r-	c:\documents and settings\user\local settings\temp\Bit650.tmp

2009-07-12 00:44 . 2009-07-12 00:44	7582	----a-r-	c:\documents and settings\user\local settings\temp\Bit633.tmp

2009-07-12 00:44 . 2009-07-12 00:43	13016	----a-r-	c:\documents and settings\user\local settings\temp\Bit632.tmp

2009-07-12 00:40 . 2009-07-12 00:40	56883	----a-r-	c:\documents and settings\user\local settings\temp\Bit610.tmp

2009-07-11 17:26 . 2009-07-11 17:26	14424	----a-r-	c:\documents and settings\user\local settings\temp\Bit432.tmp

2009-07-11 17:26 . 2009-07-11 17:26	14424	----a-r-	c:\documents and settings\user\local settings\temp\Crash.And.Burn.2008.DVDRip.XViD.AC3-TBc.torrent

2009-07-11 17:25 . 2009-07-11 17:25	44064	----a-r-	c:\documents and settings\user\local settings\temp\State of Play-exelent.rar

2009-07-11 17:25 . 2009-07-11 17:25	20437	----a-r-	c:\documents and settings\user\local settings\temp\Bit41F.tmp

2009-07-11 17:25 . 2009-07-11 17:25	20437	----a-r-	c:\documents and settings\user\local settings\temp\State Of Play(TS-HQ)(Line)(Xvid-EXELENT).torrent

2009-07-11 17:23 . 2009-07-11 17:23	15378	----a-r-	c:\documents and settings\user\local settings\temp\Bit40D.tmp

2009-07-11 17:23 . 2009-07-11 17:23	15378	----a-r-	c:\documents and settings\user\local settings\temp\Transformers.Revenge.of.the.Fallen.TS.XviD-DEViSE-1.torrent

2009-07-11 17:23 . 2009-07-11 17:23	15378	----a-r-	c:\documents and settings\user\local settings\temp\Bit40C.tmp

2009-07-11 17:23 . 2009-07-11 17:23	15378	----a-r-	c:\documents and settings\user\local settings\temp\Transformers.Revenge.of.the.Fallen.TS.XviD-DEViSE.torrent

2009-07-11 17:22 . 2009-07-11 17:22	36747	----a-r-	c:\documents and settings\user\local settings\temp\17.again.bdrip.xvid-nedivx(subs.unacs.bg).rar

2009-07-11 17:22 . 2009-07-11 17:22	14459	----a-r-	c:\documents and settings\user\local settings\temp\Bit403.tmp

2009-07-11 17:22 . 2009-07-11 17:22	16384	----a-w-	c:\documents and settings\user\local settings\temp\~DF35E5.tmp

2009-07-11 17:22 . 2009-07-11 17:22	14459	----a-r-	c:\documents and settings\user\local settings\temp\17 Again (2009) [DvdRip] [Xvid] -Noir.torrent

2009-07-11 16:45 . 2009-07-11 16:45	28704	---hatw-	c:\documents and settings\user\local settings\temp\etilqs_wTZiHBTkdS3fr3vqu3zy

2009-07-10 16:05 . 2009-07-10 16:05	20371	----a-r-	c:\documents and settings\user\local settings\temp\Bit402.tmp

2009-07-10 16:04 . 2009-07-10 16:04	12041	----a-r-	c:\documents and settings\user\local settings\temp\Bit400.tmp

2009-07-10 16:03 . 2009-07-10 16:03	11425	----a-r-	c:\documents and settings\user\local settings\temp\Bit3FD.tmp

2009-07-10 16:01 . 2009-07-10 16:01	12434	----a-r-	c:\documents and settings\user\local settings\temp\Bit3FA.tmp

2009-07-10 16:01 . 2009-07-10 16:01	14258	----a-r-	c:\documents and settings\user\local settings\temp\Bit3F9.tmp

2009-07-10 15:59 . 2009-07-10 15:59	14909	----a-r-	c:\documents and settings\user\local settings\temp\Bit3EF.tmp

2009-07-10 13:08 . 2009-07-10 13:08	14407	----a-r-	c:\documents and settings\user\local settings\temp\Bit1D7.tmp

2009-07-10 13:07 . 2009-07-10 13:07	14390	----a-r-	c:\documents and settings\user\local settings\temp\Bit1BF.tmp

2009-07-10 13:07 . 2009-07-10 13:07	56883	----a-r-	c:\documents and settings\user\local settings\temp\Bit1B5.tmp

2009-07-10 13:06 . 2009-07-10 13:06	56425	----a-r-	c:\documents and settings\user\local settings\temp\Bit1A5.tmp

2009-07-10 13:04 . 2009-07-10 13:04	14397	----a-r-	c:\documents and settings\user\local settings\temp\Bit17E.tmp

2009-07-10 13:00 . 2009-07-10 13:00	14568	----a-r-	c:\documents and settings\user\local settings\temp\Bit140.tmp

2009-07-10 12:59 . 2009-07-10 12:59	42205	----a-r-	c:\documents and settings\user\local settings\temp\Bit136.tmp

2009-07-10 12:59 . 2009-07-10 12:59	25567	----a-r-	c:\documents and settings\user\local settings\temp\Bit12C.tmp

2009-07-09 16:07 . 2009-07-09 16:07	18146	----a-r-	c:\documents and settings\user\local settings\temp\Bit269.tmp

2009-07-09 16:07 . 2009-07-09 16:07	16384	----a-w-	c:\documents and settings\user\local settings\temp\~DF2121.tmp

2009-07-09 12:28 . 2009-07-09 12:28	57995	----a-r-	c:\documents and settings\user\local settings\temp\BitB9.tmp

2009-07-09 12:26 . 2009-07-09 12:26	68474	----a-r-	c:\documents and settings\user\local settings\temp\BitA9.tmp

2009-07-06 17:04 . 2009-07-06 17:04	16384	----a-w-	c:\documents and settings\user\local settings\temp\~DF7590.tmp

2009-07-06 15:21 . 2009-07-06 15:21	16384	----a-w-	c:\documents and settings\user\local settings\temp\~DFD71B.tmp

2009-07-06 12:08 . 2009-07-06 12:08	16384	----a-w-	c:\documents and settings\user\local settings\temp\~DF9517.tmp

2009-07-06 07:33 . 2009-07-06 07:33	16384	----a-w-	c:\documents and settings\user\local settings\temp\~DF23F1.tmp

2009-07-06 00:11 . 2009-07-06 00:11	50683	----a-r-	c:\documents and settings\user\local settings\temp\Bit5B0.tmp

2009-07-06 00:08 . 2009-07-06 00:08	21745	----a-r-	c:\documents and settings\user\local settings\temp\Bit573.tmp

2009-07-06 00:07 . 2009-07-06 00:07	69233	----a-r-	c:\documents and settings\user\local settings\temp\Bit561.tmp

2009-07-05 14:44 . 2009-07-05 14:44	39312	----a-r-	c:\documents and settings\user\local settings\temp\Bit336.tmp

2009-07-05 14:44 . 2009-07-05 14:44	39312	----a-r-	c:\documents and settings\user\local settings\temp\Забранена Любов - сезон 1 ( епизоди 01-58).torrent

2009-07-05 14:43 . 2009-07-05 14:43	122125	----a-r-	c:\documents and settings\user\local settings\temp\Bit30B.tmp

2009-07-05 14:43 . 2009-07-05 14:43	122125	----a-r-	c:\documents and settings\user\local settings\temp\CSI NY.torrent

2009-07-05 14:39 . 2009-07-05 14:39	47108	----a-r-	c:\documents and settings\user\local settings\temp\Bit29D.tmp

2009-07-05 14:39 . 2009-07-05 14:39	47108	----a-r-	c:\documents and settings\user\local settings\temp\Binbir Gece Season 1.torrent

2009-07-04 19:36 . 2009-07-04 19:36	14519	----a-r-	c:\documents and settings\user\local settings\temp\Bit1CD.tmp

2009-07-04 16:49 . 2009-07-04 16:49	14628	----a-r-	c:\documents and settings\user\local settings\temp\Bit178.tmp

2009-07-04 16:48 . 2009-07-04 16:48	14371	----a-r-	c:\documents and settings\user\local settings\temp\Bit16E.tmp

2009-07-04 16:48 . 2009-07-04 16:48	14396	----a-r-	c:\documents and settings\user\local settings\temp\Bit167.tmp

2009-07-04 16:47 . 2009-07-04 16:47	14671	----a-r-	c:\documents and settings\user\local settings\temp\Bit15F.tmp

2009-07-04 16:47 . 2009-07-04 16:47	14671	----a-r-	c:\documents and settings\user\local settings\temp\Bit15E.tmp

2009-07-04 16:46 . 2009-07-04 16:46	14430	----a-r-	c:\documents and settings\user\local settings\temp\Bit154.tmp

2009-07-03 19:40 . 2009-07-03 19:40	49152	----a-w-	c:\documents and settings\user\local settings\temp\~DF8242.tmp

2009-07-02 19:08 . 2009-07-02 19:08	16384	----a-w-	c:\documents and settings\user\local settings\temp\~DF4775.tmp

2009-07-02 17:03 . 2009-07-02 17:03	16384	----a-w-	c:\documents and settings\user\local settings\temp\~DFD6C7.tmp

2009-07-02 15:20 . 2009-07-02 15:20	28704	---hatw-	c:\documents and settings\user\local settings\temp\etilqs_zc2BN4aGtRTW8C48OWUQ

2009-07-02 13:28 . 2009-07-02 13:28	28664	----a-r-	c:\documents and settings\user\local settings\temp\Bit98.tmp

2009-07-02 13:27 . 2009-07-02 13:27	10483	----a-r-	c:\documents and settings\user\local settings\temp\Bit97.tmp

2009-07-02 11:13 . 2009-07-02 11:13	10772	----a-r-	c:\documents and settings\user\local settings\temp\BitB.tmp

2009-07-02 11:13 . 2009-07-02 11:13	14297	----a-r-	c:\documents and settings\user\local settings\temp\BitA.tmp

2009-07-02 11:12 . 2009-07-02 11:12	39370	----a-r-	c:\documents and settings\user\local settings\temp\Bit9.tmp

2009-07-02 11:11 . 2009-07-02 11:11	18728	----a-r-	c:\documents and settings\user\local settings\temp\Bit8.tmp

2009-07-02 11:08 . 2009-07-02 11:08	16384	----a-w-	c:\documents and settings\user\local settings\temp\~DFB9D7.tmp

2009-07-01 14:43 . 2009-07-01 14:43	18728	----a-r-	c:\documents and settings\user\local settings\temp\Bit101.tmp

2009-07-01 14:43 . 2009-07-01 14:43	18728	----a-r-	c:\documents and settings\user\local settings\temp\Humping+Iron+%5BRaging+Stallion+-+2006%5D+-+2.36.52h.avi.torrent

2009-07-01 14:42 . 2009-07-01 14:42	39370	----a-r-	c:\documents and settings\user\local settings\temp\BitFF.tmp

2009-07-01 14:42 . 2009-07-01 14:42	39370	----a-r-	c:\documents and settings\user\local settings\temp\%28man2man%29%5BRaging+Stallion%5D+Home+Bodies.torrent

2009-07-01 14:41 . 2009-07-01 14:41	10772	----a-r-	c:\documents and settings\user\local settings\temp\BitFE.tmp

2009-07-01 14:41 . 2009-07-01 14:41	10772	----a-r-	c:\documents and settings\user\local settings\temp\%5BRaging+Stallion%5D+Ink+Stain+%282009%29.avi.torrent

2009-07-01 14:33 . 2009-07-01 14:33	14170	----a-r-	c:\documents and settings\user\local settings\temp\BitE7.tmp

2009-07-01 14:33 . 2009-07-01 14:33	14170	----a-r-	c:\documents and settings\user\local settings\temp\New%21+LOGAN+McCREE+Fucks+ROMAN+RAGAZZI+%7BScene+1-The+4th+Floor%7D+%5BRaging+Stallion%5D.wmv.torrent

2009-07-01 14:33 . 2009-07-01 14:33	14297	----a-r-	c:\documents and settings\user\local settings\temp\BitE6.tmp

2009-07-01 14:33 . 2009-07-01 14:33	14297	----a-r-	c:\documents and settings\user\local settings\temp\Bedroom+Eyes+-+Raging+Stallion+%282006%29.avi.torrent

2009-07-01 14:27 . 2009-07-01 14:27	31327	----a-r-	c:\documents and settings\user\local settings\temp\BitE3.tmp

2009-07-01 14:27 . 2009-07-01 14:27	31327	----a-r-	c:\documents and settings\user\local settings\temp\MUSTANG+-+Afterhours.avi.torrent

2009-07-01 14:26 . 2009-07-01 14:26	11858	----a-r-	c:\documents and settings\user\local settings\temp\BitE2.tmp

2009-07-01 14:26 . 2009-07-01 14:26	11858	----a-r-	c:\documents and settings\user\local settings\temp\%5BCollin+O_Neal%5D+World+of+Men-+best+of-.wmv.torrent

2009-06-29 11:49 . 2009-06-29 11:49	137932	----a-r-	c:\documents and settings\user\local settings\temp\Bit27.tmp

2009-06-29 11:48 . 2009-06-29 11:48	66833	----a-r-	c:\documents and settings\user\local settings\temp\Bit26.tmp

2009-06-29 11:48 . 2009-06-29 11:48	112173	----a-r-	c:\documents and settings\user\local settings\temp\Bit25.tmp

2009-06-28 20:48 . 2009-06-28 20:48	12884	----a-r-	c:\documents and settings\user\local settings\temp\Bit3FF.tmp

2009-06-28 20:47 . 2009-06-28 20:47	38471	----a-r-	c:\documents and settings\user\local settings\temp\Bit3FE.tmp

2009-06-28 20:45 . 2009-06-28 20:45	11339	----a-r-	c:\documents and settings\user\local settings\temp\Bit3FB.tmp

2009-06-28 20:39 . 2009-06-28 20:39	14838	----a-r-	c:\documents and settings\user\local settings\temp\Bit3EA.tmp

2009-06-28 09:24 . 2009-06-28 09:24	5448	----a-r-	c:\documents and settings\user\local settings\temp\Bit30.tmp

2009-06-28 09:24 . 2009-06-28 09:24	5448	----a-r-	c:\documents and settings\user\local settings\temp\Bit2F.tmp

2009-06-28 09:22 . 2009-06-28 09:22	13960	----a-r-	c:\documents and settings\user\local settings\temp\Bit2E.tmp

2009-06-27 19:29 . 2009-06-27 19:29	16384	----a-w-	c:\documents and settings\user\local settings\temp\~DF5879.tmp

2009-06-27 19:25 . 2009-06-27 19:25	16384	----a-w-	c:\documents and settings\user\local settings\temp\~DFC705.tmp

2009-06-27 19:21 . 2009-06-27 19:21	16384	----a-w-	c:\documents and settings\user\local settings\temp\~DFC63F.tmp

2009-06-25 22:46 . 2009-06-25 22:46	32768	----a-w-	c:\documents and settings\user\local settings\temp\~DF378B.tmp

2009-06-24 19:40 . 2009-06-24 19:40	122073	----a-r-	c:\documents and settings\user\local settings\temp\Bit37B.tmp

2009-06-24 19:33 . 2009-06-24 19:33	17862	----a-r-	c:\documents and settings\user\local settings\temp\Bit37A.tmp

2009-06-24 19:31 . 2009-06-24 19:27	118006	----a-r-	c:\documents and settings\user\local settings\temp\Bit378.tmp

2009-06-24 19:31 . 2009-06-24 19:27	118006	----a-r-	c:\documents and settings\user\local settings\temp\Bit377.tmp

2009-06-24 19:30 . 2009-06-24 19:30	118006	----a-r-	c:\documents and settings\user\local settings\temp\Bit376.tmp

2009-06-24 19:29 . 2009-06-24 19:29	118006	----a-r-	c:\documents and settings\user\local settings\temp\Bit375.tmp

2009-06-24 19:27 . 2009-06-24 19:27	118006	----a-r-	c:\documents and settings\user\local settings\temp\Bit374.tmp

2009-06-24 09:40 . 2009-06-24 09:40	64823	----a-r-	c:\documents and settings\user\local settings\temp\Bit8D.tmp

2009-06-24 09:39 . 2009-06-24 09:39	76530	----a-r-	c:\documents and settings\user\local settings\temp\Bit8C.tmp

2009-06-24 09:38 . 2009-06-24 09:38	31692	----a-r-	c:\documents and settings\user\local settings\temp\Bit72.tmp

2009-06-24 09:35 . 2009-06-24 09:35	23658	----a-r-	c:\documents and settings\user\local settings\temp\Bit58.tmp

2009-06-22 22:50 . 2009-06-22 22:50	137932	----a-r-	c:\documents and settings\user\local settings\temp\Bit166.tmp

2009-06-22 22:50 . 2009-06-22 22:50	66833	----a-r-	c:\documents and settings\user\local settings\temp\Bit165.tmp

2009-06-22 10:32 . 2009-06-22 10:32	96876	----a-r-	c:\documents and settings\user\local settings\temp\Bit60.tmp

2009-06-21 14:27 . 2009-06-21 14:27	92643	----a-r-	c:\documents and settings\user\local settings\temp\Bit121.tmp

2009-06-21 14:26 . 2009-06-21 14:26	107968	----a-r-	c:\documents and settings\user\local settings\temp\Bit110.tmp

2009-06-21 14:25 . 2009-06-21 14:25	130867	----a-r-	c:\documents and settings\user\local settings\temp\Bit100.tmp

2009-06-21 14:23 . 2009-06-21 14:23	94583	----a-r-	c:\documents and settings\user\local settings\temp\BitC2.tmp

2009-06-21 14:23 . 2009-06-21 14:23	103904	----a-r-	c:\documents and settings\user\local settings\temp\BitB1.tmp

2009-06-21 12:30 . 2009-06-21 12:30	16384	----a-w-	c:\documents and settings\user\local settings\temp\~DF2487.tmp

2009-06-21 04:22 . 2009-06-21 04:22	119891	----a-r-	c:\documents and settings\user\local settings\temp\Bit1A.tmp

2009-06-21 04:22 . 2009-06-21 04:22	119891	----a-r-	c:\documents and settings\user\local settings\temp\Bit19.tmp

2009-06-21 04:21 . 2009-06-21 04:21	104886	----a-r-	c:\documents and settings\user\local settings\temp\Bit16.tmp

2009-06-21 04:13 . 2009-06-21 04:13	109276	----a-r-	c:\documents and settings\user\local settings\temp\BitF.tmp

2009-06-21 04:13 . 2009-06-21 04:13	28398	----a-r-	c:\documents and settings\user\local settings\temp\BitE.tmp

2009-06-21 04:12 . 2009-06-21 04:12	132531	----a-r-	c:\documents and settings\user\local settings\temp\BitD.tmp

2009-06-21 04:12 . 2009-06-21 04:12	96876	----a-r-	c:\documents and settings\user\local settings\temp\BitC.tmp

2009-06-21 04:10 . 2009-06-21 04:10	16384	----a-w-	c:\documents and settings\user\local settings\temp\~DF1123.tmp

2009-06-20 23:28 . 2009-06-20 23:28	96876	----a-r-	c:\documents and settings\user\local settings\temp\Bit29.tmp

2009-06-20 23:27 . 2009-06-20 23:27	109276	----a-r-	c:\documents and settings\user\local settings\temp\Bit28.tmp

2009-06-20 23:26 . 2009-06-20 23:26	104886	----a-r-	c:\documents and settings\user\local settings\temp\Bit22.tmp

2009-06-19 11:20 . 2009-06-19 11:20	1935	----a-r-	c:\documents and settings\user\local settings\temp\Bit15.tmp

2009-06-18 14:50 . 2009-06-18 14:50	3534	----a-r-	c:\documents and settings\user\local settings\temp\Bit262.tmp

2009-06-17 11:42 . 2009-06-17 11:42	1935	----a-r-	c:\documents and settings\user\local settings\temp\Bit9A.tmp

2009-06-16 08:01 . 2009-06-16 08:01	28704	---hatw-	c:\documents and settings\user\local settings\temp\etilqs_K2BK8uKeW1bpperdoKGw

2009-06-15 19:09 . 2009-06-15 19:09	14466	----a-r-	c:\documents and settings\user\local settings\temp\Bit41A.tmp

2009-06-15 19:08 . 2009-06-15 19:08	14536	----a-r-	c:\documents and settings\user\local settings\temp\Bit401.tmp

2009-06-15 19:08 . 2009-06-15 19:08	14740	----a-r-	c:\documents and settings\user\local settings\temp\Bit3EE.tmp

2009-06-15 19:07 . 2009-06-15 19:07	14454	----a-r-	c:\documents and settings\user\local settings\temp\Bit3D5.tmp

2009-06-15 19:06 . 2009-06-15 19:06	14431	----a-r-	c:\documents and settings\user\local settings\temp\Bit3B9.tmp

2009-06-15 19:05 . 2009-06-15 19:05	7590	----a-r-	c:\documents and settings\user\local settings\temp\Bit39F.tmp

2009-06-15 19:04 . 2009-06-15 19:04	28396	----a-r-	c:\documents and settings\user\local settings\temp\Bit395.tmp

2009-06-15 19:04 . 2009-06-15 19:04	14397	----a-r-	c:\documents and settings\user\local settings\temp\Bit38B.tmp

2009-06-15 19:03 . 2009-06-15 19:03	14348	----a-r-	c:\documents and settings\user\local settings\temp\Bit379.tmp

2009-06-15 19:02 . 2009-06-15 19:02	56623	----a-r-	c:\documents and settings\user\local settings\temp\Bit370.tmp

2009-06-15 19:01 . 2009-06-15 19:01	14571	----a-r-	c:\documents and settings\user\local settings\temp\Bit366.tmp

2009-06-15 18:59 . 2009-06-15 18:59	14655	----a-r-	c:\documents and settings\user\local settings\temp\Bit335.tmp

2009-06-15 18:58 . 2009-06-15 18:58	56934	----a-r-	c:\documents and settings\user\local settings\temp\Bit32B.tmp

2009-06-15 18:44 . 2009-06-15 18:44	15755	----a-r-	c:\documents and settings\user\local settings\temp\Bit310.tmp

2009-06-15 18:42 . 2009-06-15 18:42	14323	----a-r-	c:\documents and settings\user\local settings\temp\Bit30E.tmp

2009-06-15 18:40 . 2009-06-15 18:40	14746	----a-r-	c:\documents and settings\user\local settings\temp\Bit2EF.tmp

2009-06-15 18:40 . 2009-06-15 18:40	14423	----a-r-	c:\documents and settings\user\local settings\temp\Bit2E7.tmp

2009-06-15 11:08 . 2009-06-15 11:08	18633	----a-r-	c:\documents and settings\user\local settings\temp\Bit11A.tmp

2009-06-15 11:08 . 2009-06-15 11:08	14528	----a-r-	c:\documents and settings\user\local settings\temp\Bit119.tmp

2009-06-15 11:07 . 2009-06-15 11:07	26028	----a-r-	c:\documents and settings\user\local settings\temp\Bit118.tmp

2009-06-15 11:07 . 2009-06-15 11:07	28917	----a-r-	c:\documents and settings\user\local settings\temp\Bit117.tmp

2009-06-15 11:06 . 2009-06-15 11:06	39029	----a-r-	c:\documents and settings\user\local settings\temp\Bit116.tmp

2009-06-15 11:05 . 2009-06-15 11:05	30987	----a-r-	c:\documents and settings\user\local settings\temp\Bit115.tmp

2009-06-15 11:05 . 2009-06-15 11:04	23704	----a-r-	c:\documents and settings\user\local settings\temp\Bit114.tmp

2009-06-14 22:14 . 2009-06-14 22:14	16914	----a-r-	c:\documents and settings\user\local settings\temp\Bit408.tmp

2009-06-13 20:58 . 2009-06-13 20:58	25079	----a-r-	c:\documents and settings\user\local settings\temp\Bit22E.tmp

2009-06-13 20:57 . 2009-06-13 20:57	28664	----a-r-	c:\documents and settings\user\local settings\temp\Bit22D.tmp

2009-06-13 20:56 . 2009-06-13 20:56	18201	----a-r-	c:\documents and settings\user\local settings\temp\Bit22C.tmp

2009-06-13 20:55 . 2009-06-13 20:55	18633	----a-r-	c:\documents and settings\user\local settings\temp\Bit22B.tmp

2009-06-13 20:50 . 2009-06-13 20:50	20860	----a-r-	c:\documents and settings\user\local settings\temp\Bit229.tmp

2009-06-13 20:42 . 2009-06-13 20:42	11560	----a-r-	c:\documents and settings\user\local settings\temp\Bit222.tmp

2009-06-13 20:39 . 2009-06-13 20:39	17123	----a-r-	c:\documents and settings\user\local settings\temp\Bit220.tmp

2009-06-13 20:39 . 2009-06-13 20:39	20040	----a-r-	c:\documents and settings\user\local settings\temp\Bit21F.tmp

2009-06-13 20:34 . 2009-06-13 20:34	11616	----a-r-	c:\documents and settings\user\local settings\temp\Bit21E.tmp

2009-06-13 20:34 . 2009-06-13 20:34	29703	----a-r-	c:\documents and settings\user\local settings\temp\Bit21D.tmp

2009-06-13 20:28 . 2009-06-13 20:28	17121	----a-r-	c:\documents and settings\user\local settings\temp\Bit219.tmp

2009-06-13 20:24 . 2009-06-13 20:24	11320	----a-r-	c:\documents and settings\user\local settings\temp\Bit217.tmp

2009-06-10 09:46 . 2009-06-10 09:46	62461	----a-r-	c:\documents and settings\user\local settings\temp\Bit2A.tmp

2009-06-10 09:44 . 2009-06-10 09:44	81037	----a-r-	c:\documents and settings\user\local settings\temp\Bit21.tmp

2009-06-10 09:43 . 2009-06-10 09:43	65673	----a-r-	c:\documents and settings\user\local settings\temp\Bit20.tmp

2009-06-08 19:36 . 2009-06-08 19:36	24515	----a-r-	c:\documents and settings\user\local settings\temp\Bit551.tmp

2009-06-08 18:43 . 2009-06-08 18:43	14721	----a-r-	c:\documents and settings\user\local settings\temp\Bit4AD.tmp

2009-06-08 17:39 . 2009-06-08 17:39	15922	----a-r-	c:\documents and settings\user\local settings\temp\Bit41E.tmp

2009-06-08 17:37 . 2009-06-08 17:37	14703	----a-r-	c:\documents and settings\user\local settings\temp\Bit41D.tmp

2009-06-08 17:35 . 2009-06-08 17:35	19140	----a-r-	c:\documents and settings\user\local settings\temp\Bit41C.tmp

2009-06-08 17:25 . 2009-06-08 17:25	56696	----a-r-	c:\documents and settings\user\local settings\temp\Bit31C.tmp

2009-06-08 17:24 . 2009-06-08 17:24	56696	----a-r-	c:\documents and settings\user\local settings\temp\Bare.Witness.DVDRip.DivX 3.Low-Motion.torrent

2009-06-03 19:39 . 2006-05-17 16:21	164784	----a-r-	c:\documents and settings\user\local settings\temp\{20A5BF8E-1ED8-4FF4-B2C9-0A32A0850DF8}\_Setup.dll

2009-06-03 19:39 . 2006-05-24 17:10	455600	----a-r-	c:\documents and settings\user\local settings\temp\_is9.exe

2009-06-03 19:39 . 2007-09-19 03:54	552214	----a-r-	c:\documents and settings\user\local settings\temp\{20A5BF8E-1ED8-4FF4-B2C9-0A32A0850DF8}\ISSetup.dll

2009-06-03 19:37 . 2006-05-17 16:21	164784	----a-r-	c:\documents and settings\user\local settings\temp\{93120721-05DF-4C3E-840B-DA181CE8F2D5}\_Setup.dll

2009-06-03 19:37 . 2006-05-24 17:10	455600	----a-r-	c:\documents and settings\user\local settings\temp\_is8.exe

2009-06-03 19:37 . 2007-09-19 03:54	552214	----a-r-	c:\documents and settings\user\local settings\temp\{93120721-05DF-4C3E-840B-DA181CE8F2D5}\ISSetup.dll

2009-06-03 19:37 . 2006-05-17 16:21	164784	----a-r-	c:\documents and settings\user\local settings\temp\{2BA356E7-4F89-4EB6-8560-F8D063CF7218}\_Setup.dll

2009-06-03 19:37 . 2007-09-19 03:54	552214	----a-r-	c:\documents and settings\user\local settings\temp\{2BA356E7-4F89-4EB6-8560-F8D063CF7218}\ISSetup.dll

2009-06-03 19:37 . 2006-05-24 17:10	455600	----a-r-	c:\documents and settings\user\local settings\temp\_is7.exe

2009-06-03 19:36 . 2006-05-17 11:21	164784	----a-r-	c:\documents and settings\user\local settings\temp\{888E34C3-8AA8-43CF-84F3-00A574A25341}\_Setup.dll

2009-06-03 19:36 . 2007-07-05 13:30	552214	----a-r-	c:\documents and settings\user\local settings\temp\{888E34C3-8AA8-43CF-84F3-00A574A25341}\ISSetup.dll

2009-06-03 19:36 . 2006-05-24 12:10	455600	----a-r-	c:\documents and settings\user\local settings\temp\_is6.exe

2009-06-03 19:31 . 2006-05-17 16:21	164784	----a-r-	c:\documents and settings\user\local settings\temp\{6F50E3C5-95FA-4640-8FE4-DF0430AE4E2E}\_Setup.dll

2009-06-03 19:31 . 2007-09-19 03:54	552214	----a-r-	c:\documents and settings\user\local settings\temp\{6F50E3C5-95FA-4640-8FE4-DF0430AE4E2E}\ISSetup.dll

2009-06-03 19:31 . 2006-05-24 17:10	455600	----a-r-	c:\documents and settings\user\local settings\temp\_is3D.exe

2008-05-02 18:54 . 2008-05-02 18:54	5576311	---ha-r-	c:\documents and settings\user\local settings\temp\Stella-run_and_hide.mp3

2008-01-02 23:30 . 2008-01-02 23:30	4272892	----a-r-	c:\documents and settings\user\local settings\temp\09.Nepriateli ot deca ft. Ivan.mp3



(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* empty entries & legit default entries are not shown 

REGEDIT4


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-06-01 142104]

"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-06-01 162584]

"Persistence"="c:\windows\system32\igfxpers.exe" [2007-06-01 138008]

"SMSERIAL"="c:\program files\Motorola\SMSERIAL\sm56hlpr.exe" [2006-11-23 630784]

"DAEMON Tools-1033"="c:\program files\D-Tools\daemon.exe" [2004-08-22 81920]

"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-05-22 8433664]

"IFXSPMGT"="c:\windows\system32\IFXSPMGT.exe" [2006-12-13 661024]

"GNConfig"="c:\program files\GIGABYTE\Gigabyte Super Wireless LAN Card\GNConfig.exe" [2007-09-19 393216]

"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-08-17 81000]

"flockbox"="c:\program files\My Lockbox\flockbox.exe" [2007-12-14 1071472]

"Sony Ericsson PC Suite"="c:\program files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" [2005-10-26 159744]

"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2009-09-10 1312080]

"RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.exe [2007-06-13 16377344]

"nwiz"="nwiz.exe" - c:\windows\system32\nwiz.exe [2007-05-22 1626112]

"BluetoothAuthenticationAgent"="bthprops.cpl" - c:\windows\system32\bthprops.cpl [2004-08-03 110592]


[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-03 15360]


[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]

path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk

backup=c:\windows\pss\Adobe Reader Speed Launch.lnkCommon Startup


[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Synchronizer.lnk]

path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Adobe Reader Synchronizer.lnk

backup=c:\windows\pss\Adobe Reader Synchronizer.lnkCommon Startup


[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"c:\\Program Files\\Grisoft\\AVG7\\avgamsvr.exe"=

"c:\\Program Files\\Grisoft\\AVG7\\avgemc.exe"=

"c:\\Program Files\\uTorrent\\uTorrent.exe"=

"c:\\Program Files\\BitComet\\BitComet.exe"=

"c:\\Documents and Settings\\User\\Desktop\\filezilla.exe"=

"c:\\Documents and Settings\\User\\Desktop\\BitComet.exe"=

"c:\\Program Files\\Skype\\Phone\\Skype.exe"=


R0 MPRIFL;MPRIFL;c:\windows\system32\drivers\mprifl.sys [08.6.2009 г. 02:04 17264]

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [04.6.2009 г. 13:43 114768]

R1 PersonalSecureDrive;PersonalSecureDrive;c:\windows\system32\drivers\psd.sys [13.12.2006 г. 11:34 39080]

R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [04.6.2009 г. 13:43 20560]

R3 IFXTPM;IFXTPM;c:\windows\system32\drivers\ifxtpm.sys [03.6.2009 г. 22:27 36608]

R3 WSIMD;wsimd Service;c:\windows\system32\drivers\wsimd.sys [03.6.2009 г. 22:39 57216]

.

.

------- Supplementary Scan -------

.

uStart Page = about:blank

mStart Page = hxxp://www.yahoo.com

IE: Download All by FlashGet - c:\docume~1\User\Desktop\jc_all.htm

IE: Download using FlashGet - c:\docume~1\User\Desktop\jc_link.htm

IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

TCP: {6E42196F-76FC-4ABB-AB98-DB51E35EE73F} = 192.168.1.1,192.168.1.2

DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab

FF - ProfilePath - c:\documents and settings\User\Application Data\Mozilla\Firefox\Profiles\y2tbs4sn.default\

FF - prefs.js: browser.search.selectedEngine - Google

FF - prefs.js: browser.startup.homepage - 

FF - component: c:\documents and settings\User\Application Data\Mozilla\Firefox\Profiles\y2tbs4sn.default\extensions\[email protected]\components\DTToolbarFF.dll

.


**************************************************************************


catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2009-09-12 05:36

Windows 5.1.2600 Service Pack 2 NTFS


scanning hidden processes ...  


scanning hidden autostart entries ... 


scanning hidden files ...  


scan completed successfully

hidden files: 0


**************************************************************************

.

--------------------- DLLs Loaded Under Running Processes ---------------------


- - - - - - - > 'explorer.exe'(1924)

c:\windows\system32\msi.dll

.

------------------------ Other Running Processes ------------------------

.

c:\program files\Alwil Software\Avast4\aswUpdSv.exe

c:\program files\Alwil Software\Avast4\ashServ.exe

c:\windows\system32\acs.exe

c:\windows\system32\rundll32.exe

c:\windows\system32\IFXTCS.exe

c:\windows\system32\nvsvc32.exe

c:\windows\system32\IfxPsdSv.exe

c:\program files\Common Files\Teleca Shared\CapabilityManager.exe

c:\program files\Alwil Software\Avast4\ashMaiSv.exe

c:\program files\Alwil Software\Avast4\ashWebSv.exe

c:\windows\system32\wscntfy.exe

c:\program files\Infineon\Security Platform Software\PSDrt.exe

c:\program files\Infineon\Security Platform Software\SpTNA.exe

c:\program files\Common Files\Teleca Shared\Generic.exe

c:\program files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe

.

**************************************************************************

.

Completion time: 2009-09-12  5:39 - machine was rebooted

ComboFix-quarantined-files.txt  2009-09-12 02:39


Pre-Run: 79 846 121 472 bytes free

Post-Run: 79 753 519 104 bytes free


564

Редактирано 12 септември 200917 г. от crazymonster (преглед на промените)

СТЪПКА 1

Отвори Notepad и въведи с copy/paste следната информация:

@echo off

del /f /s /q %systemdrive%\recycled\*.*

del /f /s /q "%userprofile%\Local Settings\Temporary Internet Files\*.*"

del /f /s /q "%userprofile%\Local Settings\Temp\*.*"

echo Deleting Completed！！

echo. & pause

Запази файла с име fix.bat и го стартирай.

СТЪПКА 2

Изтегли SecurityCheck от screen317 от тук и го запамети на десктопа.

• Стартирай файла SecurityCheck.exe
  
• Следвай инструкциите от новопоявилия се диалогов прозорец.
  
• Автоматично ще се отвори текстов документ наречен checkup.txt
  
• Постави съдържанието му в следващия си пост.
  

СТЪПКА 3

Автоматичните актуализации може да ги включиш при условие, че Windows-a ти е оригинален. В противен случай няма да можеш да минеш проверката на Microsoft - Genuine System и е по-добре да си набавяш актуализациите ръчно, чрез софтуер от рода на: Plus Windows Vulnerability Scanner 1.37

Но няма да е зле след като почистим системата ти да инсталираш - Windows XP Service Pack 3 RTM Build 5512

Отзад-напред:

Results of screen317's Security Check version 0.98.9  

 Windows XP Service Pack 2  

 [color=red][b]Out of date service pack!![/b][/color] 

[b]`````````````````````````````` 

[u]Antivirus/Firewall Check:[/u][/b] 

 Windows Firewall Enabled!  

 avast! Antivirus     

[color=blue] 

[/color] 

 Antivirus up to date!  

[b]`````````````````````````````` 

[u]Anti-malware/Other Utilities Check:[/u][/b] 

 Ad-Aware 

 Malwarebytes' Anti-Malware    

 HijackThis 2.0.2    

 Adobe Flash Player 10  

Adobe Reader 8 

[color=red][b]Out of date Adobe Reader installed![/b][/color] 

[b]`````````````````````````````` 

Process Check:  

[u]objlist.exe by Laurent[/u][/b] 

 [color=red][b]Ad-Aware AAWService.exe is disabled![/b][/color] 

 [color=red][b]Ad-Aware AAWTray.exe is disabled![/b][/color] 

 Alwil Software Avast4 aswUpdSv.exe 

 Alwil Software Avast4 ashServ.exe 

 Alwil Software Avast4 ashDisp.exe 

 Alwil Software Avast4 ashMaiSv.exe 

 Alwil Software Avast4 ashWebSv.exe 

[color=blue] 

[/color] 

[b]``````````````````````````````

[u]DNS Vulnerability Check:[/u][/b]

 GREAT! (Not vulnerable to DNS cache poisoning) 


[b]`````````End of Log```````````[/b]

Windows XP ми е оригинален и стартирах ъпдейтите.

Аз да попитам защо ги правиш с обратен ред. Първо трябва да сме сигурни че компютъра е чист и чак тогава да иинсталираш каквито и да е актуализации.

Задължително обнови Adobe Reader 8 до версия 9 =>

* Adobe Reader 9.1

или го замени с по-безопасния =>

* Foxit Reader 3.1.1 Build 0901

След като приключиш със стъпките (особено стъпка 1), направи нова проверка с avast! (като преди това изтрий файловете в карантината на avast!)

Не, не ги правя в обратен ред. Просто резултатът е от последното изследване.

Сега ще пусна и проверката с Аvast!

Да инсталирам ли Windows XP Service Pack 3 RTM Build 5512 и има ли значение къде ще го инсталирам?

Не, не ги правя в обратен ред. Просто резултатът е от последното изследване.

Ами беше споменал:

Отзад-напред:

Както и да е...

Сега ще пусна и проверката с Аvast!

Не забравяй преди това да изпълниш стъпка 1 и да изтриеш файловете от "клетката" (virus chest) на avast!

Да инсталирам ли Windows XP Service Pack 3 RTM Build 5512 и има ли значение къде ще го инсталирам?

Това ще го направиш накрая...и той ще си се инсталира, където трябва...

Изпълних всичко. Остана само инсталацията на Windows XP Service Pack 3 RTM Build 5512.

Avast! не откри нищо заразено или повредено при сканиране.

Изпълних всичко. Остана само инсталацията на Windows XP Service Pack 3 RTM Build 5512.

Avast! не откри нищо заразено или повредено при сканиране.

Това е много добра новина. Време е да деинсталирате ComboFix.

Стъпка 1

Start => Run => въведете =>

combofix /u

Натиснете Enter.

Стъпка 2

Изтеглете OTM.exe от oldtimer

Стартирайте файла OTM.exe и натиснете CleanUp! (както е показано на снимката)

Позволете на компютъра Ви да се рестартира ако програмата Ви попита.

Стъпка 3

Най-добре си изтеглете Secunia Personal Software Inspector.и проверете и обновете всичките си стари и уязвими програми.

Стартирайте приложението и от INTERFACE MODE (под името Secunia Personal Software Inspector) се придвижете до Advanced Mode => Scan и натиснете Start Scan.

След края на проверката ще видите статистика с резултатите относно програмите които е добре да деинсталирате или обновите.

Безопасно сърфиране !

Тук обаче леко прецаках работата. Изтрих единия файл на combofix. И сега чрез start->Run не открива ComboFix?

Какво правим сега?

Тук обаче леко прецаках работата. Изтрих единия файл на combofix. И сега чрез start->Run не открива ComboFix?

Какво правим сега?

Продължете със стъпка #2 => тя ще премахне остатъците от ComboFix (така че няма място за паника).

Със Secunia Personal Software Inspector

окрих,че доста програми са опасни. Само,че не разбирам защо Adobe Reader и почти всички програми на WINXP са рискови. Опитах да ги подновя, но нещо не успях?

Със Secunia Personal Software Inspector

окрих,че доста програми са опасни. Само,че не разбирам защо Adobe Reader и почти всички програми на WINXP са рискови. Опитах да ги подновя, но нещо не успях?

Сложете нова версия на Mozilla Firefox.

http://www.kaldata.com/comments.php?id=49291&catid=1&highlight=mozilla

Деинсталирайте Adobe Reader и го заменете с Foxit Reader.

http://www.kaldata.com/comments.php?id=49114&catid=1&highlight=foxit+reader

Инсталирайте нова версия на плъгина Adobe Flash Player. => инсталирайте я за всички браузъри които ползвате. Преди да я инсталирате, затворете браузърите.

http://www.kaldata.com/comments.php?id=47908&catid=1&highlight=adobe+flash

Ето ви нова версия на плеъра Windows Media Player 11.

http://www.kaldata.com/comments.php?id=19071&catid=1&highlight=windows+media+player

Деинсталирайте Ask Toolbar.

а на останалите няма ли нужда от ъпдейт?

Редактирано 12 септември 200917 г. от crazymonster (преглед на промените)