Ir ao conteúdo
  • Comunicados

    • diego_moicano

      Gostaria de se tornar um analista em Remoção de Malware?   07-12-2015

      Gostaria de se tornar um analista em Remoção de Malware? O Fórum Clube do Hardware deu início a um programa de treinamento em análises de log. Os interessados deverão enviar um email para aprendizes (arroba) clubedohardware (ponto) com (ponto) br respondendo as seguintes perguntas: Por que você gostaria de aprender a analisar logs? Possui tempo hábil para o treinamento? Tem conhecimentos em informática? Se sim descreva-os. Possui inglês para leitura? Qual seu objetivo após completar o treinamento?   Não se esqueça de incluir no e-mail o seu nome de usuário (fornecer o link também), idade e cidade onde vive. Adicione também qualquer experiência e/ou razão sobre o porquê você seria um bom Analista. É digno de nota que apenas os que forem selecionados receberão resposta por MP (Mensagem Pessoal), não existe um padrão na escolha dos futuros aprendizes, todos os e-mails serão lidos e serão analisados de forma imparcial, portanto não será permitido reclamações neste aspecto. O treinamento é dado no próprio fórum. Quando um aprendiz é selecionado ele é movido para um novo grupo, onde terá acesso a fóruns fechados para os demais usuários onde poderá dar inicio ao seu treinamento. Importante: A cada 30 dias os e-mails não selecionados serão apagados, portanto você pode enviar um novo e-mail após 1 mês, e-mails enviados antes serão desconsiderados.  
    • Gabriel Torres

      Seja um moderador do Clube do Hardware!   12-02-2016

      Prezados membros do Clube do Hardware, Está aberto o processo de seleção de novos moderadores para diversos setores ou áreas do Clube do Hardware. Os requisitos são:   Pelo menos 500 posts e um ano de cadastro; Boa frequência de participação; Ser respeitoso, cordial e educado com os demais membros; Ter bom nível de português; Ter razoável conhecimento da área em que pretende atuar; Saber trabalhar em equipe (com os moderadores, coordenadores e administradores).   Os interessados deverão enviar uma mensagem privada para o usuário @Equipe Clube do Hardware com o título "Candidato a moderador". A mensagem deverá conter respostas às perguntas abaixo:   Qual o seu nome completo? Qual sua data de nascimento? Qual sua formação/profissão? Já atuou como moderador em algo outro fórum, se sim, qual? De forma sucinta, explique o porquê de querer ser moderador do fórum e conte-nos um pouco sobre você.   OBS: Não se trata de função remunerada. Todos que fazem parte do staff são voluntários.
Entre para seguir isso  
Charleimantelli

Meu PC está infectado

Recommended Posts

Não sei nem como começar, pois o meu Antivírus desabilitou, tentei reintalá-lo, não tive exito.. Tentei com o Combofix, dá erro na hora de executá-lo...

Em tempo, o Gerenciador de tarefas e o regedit foram desablitados pelo bichinho, não tenho mais acesso à eles.

Consegui tirar um log do Hijack... segue ele abaixo... se necessitar de mais algo, só pedir, se puderem me ajudar fico muito agradecido:

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 23:37:22, on 2/5/2010

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\csrss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\ARQUIV~1\GbPlugin\GbpSv.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\Arquivos de programas\Panda Security\Panda Internet Security 2009\TPSrv.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\Arquivos de programas\Borland\InterBase\bin\ibguard.exe

C:\Arquivos de programas\Java\jre6\bin\jqs.exe

C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\VS7DEBUG\mdm.exe

C:\Arquivos de programas\Arquivos comuns\Nero\Nero BackItUp 4\NBService.exe

C:\Arquivos de programas\Panda Security\Panda Internet Security 2009\PsCtrls.exe

C:\Arquivos de programas\Arquivos comuns\Protexis\License Service\PSIService.exe

C:\Arquivos de programas\Panda Security\Panda Internet Security 2009\PskSvc.exe

C:\Arquivos de programas\CyberLink\Shared Files\RichVideo.exe

C:\Arquivos de programas\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

C:\Arquivos de programas\Borland\InterBase\bin\ibserver.exe

C:\WINDOWS\system32\rundll32.exe

C:\WINDOWS\system32\ctfmon.exe

C:\WINDOWS\system32\wbem\wmiapsrv.exe

C:\Arquivos de programas\Panda Security\Panda Internet Security 2009\SRVLOAD.EXE

C:\Arquivos de programas\Panda Security\Panda Internet Security 2009\Upgrader.exe

C:\Documents and Settings\Charlei\Configurações locais\Dados de aplicativos\Google\Chrome\Application\chrome.exe

C:\WINDOWS\system32\wbem\wmiprvse.exe

C:\Documents and Settings\Charlei\Configurações locais\Dados de aplicativos\Google\Chrome\Application\chrome.exe

C:\Documents and Settings\Charlei\Configurações locais\Dados de aplicativos\Google\Chrome\Application\chrome.exe

C:\Documents and Settings\Charlei\Configurações locais\Dados de aplicativos\Google\Chrome\Application\chrome.exe

C:\Documents and Settings\Charlei\Configurações locais\Dados de aplicativos\Google\Chrome\Application\chrome.exe

D:\Soft\HiJack\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com/?o=14597&l=dis

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 11.11.1.1:3128

O2 - BHO: DAPHelper Class - {0000CC75-ACF3-4cac-A0A9-DD3868E06852} - C:\Arquivos de programas\DAP\DAPBHO.dll

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Arquivos de programas\Arquivos comuns\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Arquivos de programas\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O2 - BHO: Auxiliar de Conexão do Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Arquivos de programas\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll

O2 - BHO: G-Buster Browser Defense - {C41A1C0E-EA6C-11D4-B1B8-444553540000} - C:\ARQUIVOS DE PROGRAMAS\GBPLUGIN\gbieh.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Arquivos de programas\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Arquivos de programas\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O3 - Toolbar: DAP Bar - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - (no file)

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [bluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent

O4 - HKLM\..\Run: [APVXDWIN] "C:\Arquivos de programas\Panda Security\Panda Internet Security 2009\APVXDWIN.EXE" /s

O4 - HKLM\..\Run: [sCANINICIO] "C:\Arquivos de programas\Panda Security\Panda Internet Security 2009\Inicio.exe"

O4 - HKCU\..\Run: [msnmsgr] "C:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe" /background

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1

O8 - Extra context menu item: &Download with &DAP - C:\ARQUIV~1\DAP\dapextie.htm

O8 - Extra context menu item: Download &all with DAP - C:\ARQUIV~1\DAP\dapextie2.htm

O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://C:\ARQUIV~1\MICROS~2\Office12\EXCEL.EXE/3000

O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Arquivos de programas\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\ARQUIV~1\MICROS~2\Office12\REFIEBAR.DLL

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe (file missing)

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe (file missing)

O14 - IERESET.INF: SEARCH_PAGE_URL=&http://home.microsoft.com/intl/br/access/allinone.asp

O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.3.9.113.cab

O16 - DPF: {DB6BF2CD-4F59-4F1C-AA9C-D08C0B61A931} (GbpDistObj Class) - https://www14.bancobrasil.com.br/plugin/GbpDist.cab

O17 - HKLM\System\CCS\Services\Tcpip\..\{08373663-39A4-4A96-A042-39AC979A8F91}: NameServer = 200.180.239.1,201.10.1.2

O17 - HKLM\System\CS1\Services\Tcpip\..\{08373663-39A4-4A96-A042-39AC979A8F91}: NameServer = 200.180.239.1,201.10.1.2

O17 - HKLM\System\CS2\Services\Tcpip\..\{08373663-39A4-4A96-A042-39AC979A8F91}: NameServer = 200.180.239.1,201.10.1.2

O17 - HKLM\System\CS3\Services\Tcpip\..\{08373663-39A4-4A96-A042-39AC979A8F91}: NameServer = 200.180.239.1,201.10.1.2

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\ARQUIV~1\ARQUIV~1\Skype\SKYPE4~1.DLL

O20 - Winlogon Notify: GbPluginBb - C:\Arquivos de programas\GbPlugin\gbieh.dll

O22 - SharedTaskScheduler: Pré-carregador Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

O22 - SharedTaskScheduler: Daemon de cache de categorias de componente - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

O23 - Service: Gbp Service (GbpSv) - - C:\ARQUIV~1\GbPlugin\GbpSv.exe

O23 - Service: Google Update Service (gupdate1c9db4bb0511eca) (gupdate1c9db4bb0511eca) - Unknown owner - C:\Arquivos de programas\Google\Update\GoogleUpdate.exe (file missing)

O23 - Service: Google Software Updater (gusvc) - Unknown owner - C:\Arquivos de programas\Google\Common\Google Updater\GoogleUpdaterService.exe (file missing)

O23 - Service: InterBase Guardian (InterBaseGuardian) - Borland Software Corporation - C:\Arquivos de programas\Borland\InterBase\bin\ibguard.exe

O23 - Service: InterBase Server (InterBaseServer) - Borland Software Corporation - C:\Arquivos de programas\Borland\InterBase\bin\ibserver.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Arquivos de programas\Java\jre6\bin\jqs.exe

O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Arquivos de programas\Arquivos comuns\Nero\Nero BackItUp 4\NBService.exe

O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: Microsoft Office Diagnostics Service (odserv) - Unknown owner - C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\OFFICE12\ODSERV.EXE (file missing)

O23 - Service: Office Source Engine (ose) - Unknown owner - C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\Source Engine\OSE.EXE (file missing)

O23 - Service: Panda Software Controller - Panda Security, S.L. - C:\Arquivos de programas\Panda Security\Panda Internet Security 2009\PsCtrls.exe

O23 - Service: ProtexisLicensing - Unknown owner - C:\Arquivos de programas\Arquivos comuns\Protexis\License Service\PSIService.exe

O23 - Service: Panda PSK service (PskSvcRetail) - Panda Security, S.L. - C:\Arquivos de programas\Panda Security\Panda Internet Security 2009\PskSvc.exe

O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Arquivos de programas\CyberLink\Shared Files\RichVideo.exe

O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Arquivos de programas\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

O23 - Service: Panda TPSrv (TPSrv) - Panda Security, S.L. - C:\Arquivos de programas\Panda Security\Panda Internet Security 2009\TPSrv.exe

O23 - Service: Visual Studio Analyzer RPC bridge - Unknown owner - C:\Arquivos de programas\Microsoft Visual Studio\Common\Tools\VS-Ent98\Vanalyzr\varpc.exe (file missing)

O23 - Service: Serviço de Compartilhamento de Rede do Windows Media Player (WMPNetworkSvc) - Unknown owner - C:\Arquivos de programas\Windows Media Player\WMPNetwk.exe (file missing)

--

End of file - 10354 bytes

Compartilhar este post


Link para o post
Compartilhar em outros sites
  • Autor do tópico
  • Desculpem, prá variar eu não tinha lido o tópico "Leiam antes de Postar". hehe

    Mas segue os 2 logs do DDS, mas infelizmente não consigo tirar um log do GMER.. ele trava e trava o PC..

    Attach:

    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

    IF REQUESTED, ZIP IT UP & ATTACH IT

    DDS (Ver_10-03-17.01)

    Microsoft Windows XP Professional

    Boot Device: \Device\HarddiskVolume1

    Install Date: 22/5/2009 21:01:36

    System Uptime: 5/5/2010 05:26:10 (0 hours ago)

    Motherboard: ECS | | P4M890T-M

    Processor: Intel® Pentium® Dual CPU E2180 @ 2.00GHz | CPU 1 | 1995/200mhz

    ==== Disk Partitions =========================

    C: is FIXED (NTFS) - 78 GiB total, 49,765 GiB free.

    D: is FIXED (NTFS) - 155 GiB total, 49,405 GiB free.

    E: is CDROM ()

    F: is CDROM ()

    G: is CDROM ()

    H: is CDROM ()

    I: is CDROM ()

    ==== Disabled Device Manager Items =============

    ==== System Restore Points ===================

    RP1: 4/2/2010 13:39:52 - Ponto de verificação do sistema

    RP2: 8/2/2010 21:41:15 - Ponto de verificação do sistema

    RP3: 10/2/2010 08:08:02 - Ponto de verificação do sistema

    RP4: 11/2/2010 08:38:28 - Ponto de verificação do sistema

    RP5: 12/2/2010 09:38:28 - Ponto de verificação do sistema

    RP6: 13/2/2010 11:40:52 - Ponto de verificação do sistema

    RP7: 14/2/2010 09:06:24 - Removed Legend - Hand of God

    RP8: 14/2/2010 09:07:15 - Removed Ask Toolbar.

    RP9: 15/2/2010 10:45:46 - Ponto de verificação do sistema

    RP10: 16/2/2010 13:55:18 - Ponto de verificação do sistema

    RP11: 17/2/2010 18:08:36 - Ponto de verificação do sistema

    RP12: 18/2/2010 00:56:18 - DirectX instalado

    RP13: 19/2/2010 01:26:10 - Ponto de verificação do sistema

    RP14: 20/2/2010 13:48:05 - Ponto de verificação do sistema

    RP15: 21/2/2010 20:50:32 - Ponto de verificação do sistema

    RP16: 22/2/2010 22:51:16 - Ponto de verificação do sistema

    RP17: 23/2/2010 23:03:19 - Ponto de verificação do sistema

    RP18: 28/2/2010 21:36:56 - Ponto de verificação do sistema

    RP19: 2/3/2010 06:51:17 - Ponto de verificação do sistema

    RP20: 5/3/2010 19:40:19 - Ponto de verificação do sistema

    RP21: 6/3/2010 19:59:30 - Ponto de verificação do sistema

    RP22: 7/3/2010 21:40:44 - Ponto de verificação do sistema

    RP23: 9/3/2010 10:55:33 - Ponto de verificação do sistema

    RP24: 10/3/2010 11:56:25 - Ponto de verificação do sistema

    RP25: 11/3/2010 14:15:45 - Ponto de verificação do sistema

    RP26: 13/3/2010 19:07:45 - Ponto de verificação do sistema

    RP27: 15/3/2010 09:52:52 - Ponto de verificação do sistema

    RP28: 16/3/2010 12:00:29 - Ponto de verificação do sistema

    RP29: 17/3/2010 12:04:22 - Ponto de verificação do sistema

    RP30: 18/3/2010 12:31:18 - Ponto de verificação do sistema

    RP31: 19/3/2010 13:01:06 - Ponto de verificação do sistema

    RP32: 21/3/2010 09:29:16 - Ponto de verificação do sistema

    RP33: 26/3/2010 19:36:57 - Ponto de verificação do sistema

    RP34: 28/3/2010 12:14:07 - Ponto de verificação do sistema

    RP35: 29/3/2010 16:23:51 - Ponto de verificação do sistema

    RP36: 30/3/2010 20:53:09 - Ponto de verificação do sistema

    RP37: 1/4/2010 17:48:03 - Ponto de verificação do sistema

    RP38: 2/4/2010 18:41:32 - Ponto de verificação do sistema

    RP39: 3/4/2010 19:56:09 - Ponto de verificação do sistema

    RP40: 5/4/2010 08:51:29 - Ponto de verificação do sistema

    RP41: 6/4/2010 09:04:09 - Ponto de verificação do sistema

    RP42: 7/4/2010 15:39:20 - Ponto de verificação do sistema

    RP43: 8/4/2010 23:30:52 - Ponto de verificação do sistema

    RP44: 10/4/2010 09:29:49 - Ponto de verificação do sistema

    RP45: 11/4/2010 12:13:36 - Ponto de verificação do sistema

    RP46: 12/4/2010 23:31:42 - Ponto de verificação do sistema

    RP47: 14/4/2010 08:12:02 - Ponto de verificação do sistema

    RP48: 15/4/2010 11:36:35 - Ponto de verificação do sistema

    RP49: 16/4/2010 06:23:48 - Removed Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053

    RP50: 16/4/2010 06:24:43 - Removido Microsoft Visual C++ 2005 Redistributable

    RP51: 16/4/2010 13:28:01 - Installed Borland Delphi 7

    RP52: 17/4/2010 19:17:24 - Ponto de verificação do sistema

    RP53: 19/4/2010 06:21:05 - Removed EAX4 Unified Redist

    RP54: 22/4/2010 06:08:19 - Ponto de verificação do sistema

    RP55: 28/4/2010 17:58:42 - Ponto de verificação do sistema

    RP56: 30/4/2010 12:22:00 - Ponto de verificação do sistema

    RP57: 2/5/2010 09:45:47 - Ponto de verificação do sistema

    RP58: 3/5/2010 11:10:59 - Ponto de verificação do sistema

    RP59: 3/5/2010 13:12:40 - avast! Free Antivirus Setup

    ==== Installed Programs ======================

    Adobe Flash Player 10 ActiveX

    Adobe Flash Player 10 Plugin

    Adobe Reader 9.3.2 - Português

    Adobe Shockwave Player 11.5

    Advertising Center

    Age of Mythology

    Assistente de Conexão do Windows Live

    µTorrent

    Atualização de Segurança para o Windows Media Player (KB911564)

    Atualização de Segurança para o Windows Media Player (KB952069)

    Atualização de Segurança para o Windows Media Player (KB968816)

    Atualização de Segurança para o Windows Media Player (KB973540)

    Atualização de Segurança para o Windows Media Player 10 (KB936782)

    Atualização de Segurança para o Windows Media Player 6.4 (KB925398)

    Atualização de Segurança para Windows XP (KB923561)

    Atualização de Segurança para Windows XP (KB923689)

    Atualização de Segurança para Windows XP (KB938464-v2)

    Atualização de Segurança para Windows XP (KB941569)

    Atualização de Segurança para Windows XP (KB946648)

    Atualização de Segurança para Windows XP (KB950760)

    Atualização de Segurança para Windows XP (KB950762)

    Atualização de Segurança para Windows XP (KB950974)

    Atualização de Segurança para Windows XP (KB951376-v2)

    Atualização de Segurança para Windows XP (KB951748)

    Atualização de Segurança para Windows XP (KB952004)

    Atualização de Segurança para Windows XP (KB952954)

    Atualização de Segurança para Windows XP (KB954600)

    Atualização de Segurança para Windows XP (KB955069)

    Atualização de Segurança para Windows XP (KB956572)

    Atualização de Segurança para Windows XP (KB956802)

    Atualização de Segurança para Windows XP (KB956803)

    Atualização de Segurança para Windows XP (KB956844)

    Atualização de Segurança para Windows XP (KB957097)

    Atualização de Segurança para Windows XP (KB958644)

    Atualização de Segurança para Windows XP (KB958687)

    Atualização de Segurança para Windows XP (KB958690)

    Atualização de Segurança para Windows XP (KB959426)

    Atualização de Segurança para Windows XP (KB960225)

    Atualização de Segurança para Windows XP (KB960715)

    Atualização de Segurança para Windows XP (KB960803)

    Atualização de Segurança para Windows XP (KB960859)

    Atualização de Segurança para Windows XP (KB961371)

    Atualização de Segurança para Windows XP (KB961373)

    Atualização de Segurança para Windows XP (KB961501)

    Atualização de Segurança para Windows XP (KB963027)

    Atualização de Segurança para Windows XP (KB968537)

    Atualização de Segurança para Windows XP (KB969897)

    Atualização de Segurança para Windows XP (KB969898)

    Atualização de Segurança para Windows XP (KB970238)

    Atualização de Segurança para Windows XP (KB971557)

    Atualização de Segurança para Windows XP (KB971633)

    Atualização de Segurança para Windows XP (KB971657)

    Atualização de Segurança para Windows XP (KB972260)

    Atualização de Segurança para Windows XP (KB973346)

    Atualização de Segurança para Windows XP (KB973354)

    Atualização de Segurança para Windows XP (KB973507)

    Atualização de Segurança para Windows XP (KB973869)

    Atualização para Windows XP (KB955839)

    Atualização para Windows XP (KB961503)

    Atualização para Windows XP (KB967715)

    Atualização para Windows XP (KB968389)

    Atualização para Windows XP (KB973815)

    aTube Catcher 1.0

    AVI ReComp 1.5.0

    Avira AntiVir Personal - Free Antivirus

    AviSynth 2.5

    Borland Delphi 7

    BS.Player FREE

    CA eTrust EZ Antivirus

    Call of Juarez - Bound in Blood

    CorelDRAW Graphics Suite X3

    DolbyFiles

    Download Accelerator Plus

    DVD Suite

    eMule Plus 1.2e

    EN

    Ferramenta de Carregamento do Windows Live

    FontNav

    FormatFactory 2.20

    Google Chrome

    Google Earth

    Google Update Helper

    Google Updater

    High Definition Audio Driver Package - KB888111

    Hotfix para Windows XP (KB952287)

    Hotfix para Windows XP (KB970653-v3)

    Hábil Empresarial

    ImagXpress

    InterBase 6.5

    Java 6 Update 15

    K-Lite Mega Codec Pack 4.9.5

    K-Nitro 5.1 setup

    L&H Power Translator Pro

    Malwarebytes' Anti-Malware

    Menu Templates - Starter Kit

    Microsoft .NET Framework 2.0

    Microsoft Application Error Reporting

    Microsoft Choice Guard

    Microsoft Compression Client Pack 1.0 for Windows XP

    Microsoft Office Access MUI (Portuguese (Brazil)) 2007

    Microsoft Office Enterprise 2007

    Microsoft Office Excel MUI (Portuguese (Brazil)) 2007

    Microsoft Office Groove MUI (Portuguese (Brazil)) 2007

    Microsoft Office InfoPath MUI (Portuguese (Brazil)) 2007

    Microsoft Office OneNote MUI (Portuguese (Brazil)) 2007

    Microsoft Office Outlook MUI (Portuguese (Brazil)) 2007

    Microsoft Office PowerPoint MUI (Portuguese (Brazil)) 2007

    Microsoft Office Proof (English) 2007

    Microsoft Office Proof (Portuguese (Brazil)) 2007

    Microsoft Office Proof (Spanish) 2007

    Microsoft Office Proofing (Portuguese (Brazil)) 2007

    Microsoft Office Publisher MUI (Portuguese (Brazil)) 2007

    Microsoft Office Shared MUI (Portuguese (Brazil)) 2007

    Microsoft Office Word MUI (Portuguese (Brazil)) 2007

    Microsoft Software Update for Web Folders (Portuguese (Brazil)) 12

    Microsoft User-Mode Driver Framework Feature Pack 1.0

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

    Microsoft VM for Java

    Microsoft Web Publishing Wizard 1.53

    Movie Templates - Starter Kit

    MSVCRT

    MSXML 4.0 SP2 (KB954430)

    MSXML4 Parser

    Nero 9

    Nero BurnRights

    Nero ControlCenter

    Nero CoverDesigner

    Nero DiscSpeed

    Nero DriveSpeed

    Nero InfoTool

    Nero Installer

    Nero Live

    Nero PhotoSnap

    Nero Recode

    Nero Rescue Agent

    Nero ShowTime

    Nero StartSmart

    Nero Vision

    Nero WaveEditor

    NeroBurningROM

    NeroExpress

    NeroLiveGadget

    neroxml

    NVIDIA Drivers

    NVIDIA PhysX

    Platform

    PowerDVD

    Realtek AC'97 Audio

    S.T.A.L.K.E.R. - Call of Pripyat [v1.6.02]

    Security Update for 2007 Microsoft Office System (KB951550)

    Security Update for 2007 Microsoft Office System (KB951944)

    Security Update for 2007 Microsoft Office System (KB960003)

    Security Update for Microsoft Office Excel 2007 (KB959997)

    Security Update for Microsoft Office OneNote 2007 (KB950130)

    Security Update for Microsoft Office PowerPoint 2007 (KB951338)

    Security Update for Microsoft Office Publisher 2007 (KB950114)

    Security Update for Microsoft Office system 2007 (KB954326)

    Security Update for Microsoft Office system 2007 (KB956828)

    Security Update for Microsoft Office Word 2007 (KB956358)

    Segoe UI

    Skype™ 4.0

    Sniper Elite

    SolveigMM AVI Trimmer

    SoundTrax

    SubSync

    System Requirements Lab

    TeamSpeak 2 RC2

    Update for 2007 Microsoft Office System (KB967642)

    Update for Microsoft Office Outlook 2007 (KB952142)

    Update for Office 2007 (KB932080)

    Update for Office 2007 (KB934391)

    Update for Outlook 2007 Junk Email Filter (kb973514)

    Update Manager

    VBA

    VIA Platform Device Manager

    VisiBroker for Cpp 4.5

    VobSub 2.23

    WebFldrs XP

    Winamp

    Winamp: Detectar Aplicação

    Windows Imaging Component

    Windows Live Call

    Windows Live Communications Platform

    Windows Live Essentials

    Windows Live Messenger

    Windows Media Format 11 runtime

    Windows Media Player 11

    Windows XP Service Pack 3

    WinRAR archiver

    Xvid 1.2.2

    XVID Codec Installation

    ==== Event Viewer Messages From Past Week ========

    30/4/2010 15:04:30, Informações: Windows File Protection [64001] - Tentativa de substituição do arquivo no arquivo do sistema protegido rundll32.exe. Esse arquivo foi restaurado para a versão original para manter a estabilidade do sistema. A versão do arquivo inválido é 5.1.2600.5512, a versão do arquivo do sistema é 5.1.2600.5512.

    ==== End Of File ===========================

    DDS:

    DDS (Ver_10-03-17.01) - NTFSx86

    Run by Charlei at 5:36:26,65 on qua 05/05/2010

    Internet Explorer: 6.0.2900.5512 BrowserJavaVersion: 1.6.0_15

    Microsoft Windows XP Professional 5.1.2600.3.1252.55.1046.18.2047.1407 [GMT -3:00]

    AV: eTrust EZ Antivirus *On-access scanning enabled* (Outdated) {17CFD1EA-56CF-40B5-A06B-BD3A27397C93}

    AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}

    ============== Running Processes ===============

    C:\WINDOWS\system32\nvsvc32.exe

    C:\ARQUIV~1\GbPlugin\GbpSv.exe

    C:\WINDOWS\system32\svchost -k DcomLaunch

    svchost.exe

    C:\WINDOWS\System32\svchost.exe -k netsvcs

    C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup

    svchost.exe

    svchost.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\Arquivos de programas\Avira\AntiVir Desktop\sched.exe

    svchost.exe

    svchost.exe

    C:\Arquivos de programas\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\ISafe.exe

    C:\Arquivos de programas\Google\Update\1.2.183.23\GoogleCrashHandler.exe

    C:\Arquivos de programas\Borland\InterBase\bin\ibguard.exe

    C:\Arquivos de programas\Java\jre6\bin\jqs.exe

    C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\VS7DEBUG\mdm.exe

    C:\Arquivos de programas\Arquivos comuns\Nero\Nero BackItUp 4\NBService.exe

    C:\Arquivos de programas\Arquivos comuns\Protexis\License Service\PSIService.exe

    C:\Arquivos de programas\CyberLink\Shared Files\RichVideo.exe

    C:\Arquivos de programas\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

    C:\Arquivos de programas\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\VetMsg.exe

    C:\Arquivos de programas\Borland\InterBase\bin\ibserver.exe

    C:\WINDOWS\system32\wbem\wmiapsrv.exe

    C:\WINDOWS\Explorer.EXE

    C:\WINDOWS\system32\rundll32.exe

    C:\Arquivos de programas\CA\eTrust Internet Security Suite\caissdt.exe

    C:\Arquivos de programas\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVTray.exe

    C:\Arquivos de programas\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVRID.exe

    C:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe

    C:\WINDOWS\system32\ctfmon.exe

    C:\Documents and Settings\Charlei\Configurações locais\Dados de aplicativos\Google\Chrome\Application\chrome.exe

    C:\Documents and Settings\Charlei\Configurações locais\Dados de aplicativos\Google\Chrome\Application\chrome.exe

    C:\Documents and Settings\Charlei\Configurações locais\Dados de aplicativos\Google\Chrome\Application\chrome.exe

    C:\Documents and Settings\Charlei\Configurações locais\Dados de aplicativos\Google\Chrome\Application\chrome.exe

    C:\Documents and Settings\Charlei\Desktop\dds.scr

    ============== Pseudo HJT Report ===============

    uStart Page = hxxp://www.ask.com/?o=14597&l=dis

    uInternet Settings,ProxyServer = 11.11.1.1:3128

    BHO: DAPHelper Class: {0000cc75-acf3-4cac-a0a9-dd3868e06852} - c:\arquivos de programas\dap\DAPBHO.dll

    BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\arquivos de programas\arquivos comuns\adobe\acrobat\activex\AcroIEHelperShim.dll

    BHO: Skype add-on (mastermind): {22bf413b-c6d2-4d91-82a9-a0f997ba588c} - c:\arquivos de programas\skype\toolbars\internet explorer\SkypeIEPlugin.dll

    BHO: WormRadar.com IESiteBlocker.NavFilter: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - AVG Safe Search

    BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File

    BHO: Auxiliar de Conexão do Windows Live: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\arquivos de programas\arquivos comuns\microsoft shared\windows live\WindowsLiveLogin.dll

    BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\arquivos de programas\google\googletoolbarnotifier\5.1.1309.3572\swg.dll

    BHO: GbIehObj Class: {c41a1c0e-ea6c-11d4-b1b8-444553540000} - c:\arquivos de programas\gbplugin\gbieh.dll

    BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\arquivos de programas\java\jre6\bin\jp2ssv.dll

    BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\arquivos de programas\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

    TB: DAP Bar: {62999427-33fc-4baf-9c9c-bce6bd127f08} -

    TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File

    uRun: [msnmsgr] "c:\arquivos de programas\windows live\messenger\msnmsgr.exe" /background

    uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe

    mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup

    mRun: [bluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent

    mRun: [avgnt] "c:\arquivos de programas\avira\antivir desktop\avgnt.exe" /min

    mRun: [CaISSDT] "c:\arquivos de programas\ca\etrust internet security suite\caissdt.exe"

    mRun: [CaAvTray] "c:\arquivos de programas\ca\etrust internet security suite\etrust ez antivirus\CAVTray.exe"

    mRun: [CAVRID] "c:\arquivos de programas\ca\etrust internet security suite\etrust ez antivirus\CAVRID.exe"

    dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE

    uPolicies-explorer: NoPassou = 1 (0x1)

    uPolicies-explorer: NoDesktopCleanupWizard = 1 (0x1)

    uPolicies-explorer: NoSMConfigurePrograms = 1 (0x1)

    uPolicies-explorer: NoFavoritesMenu = 1 (0x1)

    uPolicies-explorer: NoSMBalloonTip = 1 (0x1)

    uPolicies-explorer: NoThumbnailCache = 1 (0x1)

    dPolicies-system: DisableTaskMgr = 1 (0x1)

    dPolicies-system: DisableRegistryTools = 1 (0x1)

    IE: &Download with &DAP - c:\arquiv~1\dap\dapextie.htm

    IE: Download &all with DAP - c:\arquiv~1\dap\dapextie2.htm

    IE: E&xportar para o Microsoft Excel - c:\arquiv~1\micros~2\office12\EXCEL.EXE/3000

    IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe

    IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\arquivos de programas\messenger\msmsgs.exe

    IE: {77BF5300-1474-4EC7-9980-D32B190E9B07} - {77BF5300-1474-4EC7-9980-D32B190E9B07} - c:\arquivos de programas\skype\toolbars\internet explorer\SkypeIEPlugin.dll

    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\arquiv~1\micros~2\office12\REFIEBAR.DLL

    LSP: c:\windows\system32\VetRedir.dll

    Trusted Zone: com.br\www2.bancodobrasil

    DPF: {00000055-9980-0010-8000-00AA00389B71} - hxxp://codecs.microsoft.com/codecs/i386/fhg.CAB

    DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

    DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} - hxxp://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.3.9.113.cab

    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab

    DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab

    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab

    DPF: {DB6BF2CD-4F59-4F1C-AA9C-D08C0B61A931} - hxxps://www14.bancobrasil.com.br/plugin/GbpDist.cab

    TCP: {08373663-39A4-4A96-A042-39AC979A8F91} = 200.180.239.1,201.10.1.2

    Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\arquiv~1\arquiv~1\skype\SKYPE4~1.DLL

    Name-Space Handler: ftp\ZDA - {5BFA1DAF-5EDC-11D2-959E-00C00C02DA5E} - c:\arquiv~1\dap\dapie.dll

    Name-Space Handler: http\ZDA - {5BFA1DAF-5EDC-11D2-959E-00C00C02DA5E} - c:\arquiv~1\dap\dapie.dll

    Name-Space Handler: HTTPS\ZDA - {5BFA1DAF-5EDC-11D2-959E-00C00C02DA5E} - c:\arquiv~1\dap\dapie.dll

    Notify: GbPluginBb - c:\arquivos de programas\gbplugin\gbieh.dll

    SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

    SEH: GbPluginObj Class: {e37cb5f0-51f5-4395-a808-5fa49e399f83} - c:\arquivos de programas\gbplugin\gbieh.dll

    ============= SERVICES / DRIVERS ===============

    R0 GbpKm;Gbp KernelMode;c:\windows\system32\drivers\gbpkm.sys [2009-5-27 30752]

    R0 ViBus;ViBus;c:\windows\system32\drivers\ViBus.sys [2009-5-29 16896]

    R0 ViPrt;VIA SATA IDE Device Driver;c:\windows\system32\drivers\ViPrt.sys [2009-5-29 52224]

    R1 avgio;avgio;c:\arquivos de programas\avira\antivir desktop\avgio.sys [2010-5-4 11608]

    R1 VET-FILT;VET File System Filter;c:\windows\system32\drivers\Vet-Filt.sys [2009-5-4 21011]

    R1 VET-REC;VET File System Recognizer;c:\windows\system32\drivers\Vet-Rec.sys [2009-5-4 15490]

    R1 VETEFILE;VET File Scan Engine;c:\windows\system32\drivers\VetEFile.sys [2009-5-4 879832]

    R1 VETFDDNT;VET Floppy Boot Sector Monitor;c:\windows\system32\drivers\VetFDDNT.sys [2009-5-4 16227]

    R1 VETMONNT;VET File Monitor;c:\windows\system32\drivers\vetmonnt.sys [2009-5-4 26787]

    R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\arquivos de programas\avira\antivir desktop\sched.exe [2010-5-4 135336]

    R2 avgntflt;avgntflt;c:\windows\system32\drivers\avgntflt.sys [2010-5-4 60936]

    R2 CAISafe;CAISafe;c:\arquivos de programas\ca\etrust internet security suite\etrust ez antivirus\iSafe.exe [2009-5-4 140816]

    R2 GbpSv;Gbp Service;c:\arquiv~1\gbplugin\GbpSv.exe [2009-5-27 54048]

    R2 StarWindServiceAE;StarWind AE Service;c:\arquivos de programas\alcohol soft\alcohol 120\starwind\StarWindServiceAE.exe [2007-5-28 275968]

    R2 VETMSGNT;VET Message Service;c:\arquivos de programas\ca\etrust internet security suite\etrust ez antivirus\VetMsg.exe [2009-5-4 202256]

    R3 VETEBOOT;VET Boot Scan Engine;c:\windows\system32\drivers\VetEBoot.sys [2009-5-4 108360]

    S1 oreans32;oreans32;\??\c:\windows\system32\drivers\oreans32.sys --> c:\windows\system32\drivers\oreans32.sys [?]

    S2 AntiVirService;Avira AntiVir Guard;c:\arquivos de programas\avira\antivir desktop\avguard.exe [2010-5-4 267432]

    S2 gupdate1c9db4bb0511eca;Google Update Service (gupdate1c9db4bb0511eca);c:\arquivos de programas\google\update\GoogleUpdate.exe [2009-5-22 127488]

    S3 abp470n5;abp470n5;\??\c:\windows\system32\drivers\ntjdki.sys --> c:\windows\system32\drivers\ntjdki.sys [?]

    S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [2010-4-14 38224]

    =============== Created Last 30 ================

    2010-05-04 10:27:50 0 d-----w- c:\docume~1\charlei\dadosd~1\Avira

    2010-05-04 10:22:49 60936 ----a-w- c:\windows\system32\drivers\avgntflt.sys

    2010-05-04 10:22:48 0 d-----w- c:\docume~1\alluse~1\dadosd~1\Avira

    2010-05-04 10:22:48 0 d-----w- c:\arquivos de programas\Avira

    2010-04-28 23:12:10 8 --sha-r- c:\documents and settings\charlei\ntuser.pol

    2010-04-28 23:11:01 0 d--h--w- c:\windows\system32\GroupPolicy

    2010-04-28 23:02:12 0 d-sha-r- C:\cmdcons

    2010-04-28 23:00:05 0 d-----w- C:\ComboFix

    2010-04-28 22:53:59 98816 ----a-w- c:\windows\sed.exe

    2010-04-28 22:53:59 77312 ----a-w- c:\windows\MBR.exe

    2010-04-28 22:53:59 256512 ----a-w- c:\windows\PEV.exe

    2010-04-28 22:53:59 161792 ----a-w- c:\windows\SWREG.exe

    2010-04-23 09:44:15 0 d-----w- c:\arquivos de programas\MC2

    2010-04-19 15:59:58 77878 ----a-w- c:\windows\system32\temp.006

    2010-04-19 15:59:58 77878 ----a-w- c:\windows\system32\temp.002

    2010-04-19 15:59:58 65024 ----a-w- c:\windows\system32\temp.004

    2010-04-19 15:59:58 65024 ----a-w- c:\windows\system32\temp.000

    2010-04-19 15:59:58 30992 ----a-w- c:\windows\system32\temp.007

    2010-04-19 15:59:58 30992 ----a-w- c:\windows\system32\temp.003

    2010-04-19 15:59:58 152064 ----a-w- c:\windows\system32\temp.005

    2010-04-19 15:59:58 152064 ----a-w- c:\windows\system32\temp.001

    2010-04-19 15:59:53 65536 ----a-w- c:\windows\system32\ZipSFX.bin

    2010-04-19 15:59:53 132096 ----a-w- c:\windows\system32\ZipDLL.dll

    2010-04-19 15:59:53 117760 ----a-w- c:\windows\system32\Unzdll.dll

    2010-04-19 15:59:53 0 d-----w- c:\arquivos de programas\Koinonia Software

    2010-04-19 15:59:53 0 d-----w- c:\arquivos de programas\arquivos comuns\Opus Shared

    2010-04-16 16:33:49 0 d-----w- c:\documents and settings\charlei\.borland

    2010-04-16 16:30:39 0 d-----w- C:\Inprise

    2010-04-16 16:28:04 0 d-----w- c:\arquivos de programas\arquivos comuns\Borland Shared

    2010-04-16 16:24:20 376832 ----a-w- c:\windows\system32\gds32.dll

    2010-04-16 16:24:20 177152 ----a-w- c:\windows\system32\ibinstall.dll

    2010-04-16 16:24:18 430080 ----a-w- c:\windows\system32\ibmgr.cpl

    2010-04-16 16:24:18 28672 ----a-w- c:\windows\system32\ibxml.dll

    2010-04-15 23:07:41 0 d-----w- c:\docume~1\charlei\dadosd~1\Mikrotik

    2010-04-15 23:06:27 0 d-----w- c:\arquivos de programas\Web Publish

    2010-04-14 09:32:27 0 --sha-r- C:\khw

    2010-04-14 09:22:32 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys

    2010-04-14 09:22:31 20824 ----a-w- c:\windows\system32\drivers\mbam.sys

    2010-04-13 02:05:24 0 d-----w- c:\arquivos de programas\eMule

    2010-04-13 02:00:05 947 --shatr- c:\windows\system32\autorun.i

    2010-04-13 02:00:05 854 --shatr- c:\windows\system32\autorun.in

    ==================== Find3M ====================

    2010-05-04 09:32:22 67450 ----a-w- c:\windows\system32\perfc016.dat

    2010-05-04 09:32:22 425426 ----a-w- c:\windows\system32\perfh016.dat

    2010-05-03 01:05:22 2516 --sha-w- c:\windows\system32\KGyGaAvL.sys

    2010-02-17 01:21:19 249856 ------w- c:\windows\Setup1.exe

    2010-02-17 01:21:18 73216 ----a-w- c:\windows\ST6UNST.EXE

    2010-02-10 00:41:04 23232 ----a-w- c:\windows\system32\PavSRK.sys

    2009-06-23 12:30:32 8 --sh--r- c:\windows\system32\1E1075468A.sys

    2009-05-08 05:09:42 395264 --sh--w- c:\windows\system32\picx\m45t3r.exe

    ============= FINISH: 5:37:15,67 ===============

    Brigaduu...

    Compartilhar este post


    Link para o post
    Compartilhar em outros sites
    Desculpem, prá variar eu não tinha lido o tópico "Leiam antes de Postar". hehe

    Veja que neste tópico nós pedimos para NÃO responder o próprio tópico enquanto estiver com 0 resposta para não atrasar a ajuda.

    Configure o Windows para mostrar todos os arquivos

    Acesse este site: http://virustotal.com/

    Em File to upload coloque: C:\windows\explorer.exe

    Em seguida clique em Submit

    Copie e poste o resultado deste exame.

    Compartilhar este post


    Link para o post
    Compartilhar em outros sites
  • Autor do tópico
  • Arquivo explorer.exe recebido em 2010.05.04 18:39:39 (UTC)

    Andamento: terminado

    Resultado: 0/41 (0.00%)

    Modo compacto

    Imprimir resultados

    Antivírus Versão Última Atualização Resultado

    a-squared 4.5.0.50 2010.05.04 -

    AhnLab-V3 2010.05.04.00 2010.05.04 -

    AntiVir 8.2.1.224 2010.05.04 -

    Antiy-AVL 2.0.3.7 2010.04.30 -

    Authentium 5.2.0.5 2010.05.04 -

    Avast 4.8.1351.0 2010.05.04 -

    Avast5 5.0.332.0 2010.05.04 -

    AVG 9.0.0.787 2010.05.04 -

    BitDefender 7.2 2010.05.04 -

    CAT-QuickHeal 10.00 2010.05.04 -

    ClamAV 0.96.0.3-git 2010.05.04 -

    Comodo 4762 2010.05.04 -

    DrWeb 5.0.2.03300 2010.05.04 -

    eSafe 7.0.17.0 2010.05.03 -

    eTrust-Vet 35.2.7468 2010.05.04 -

    F-Prot 4.5.1.85 2010.05.04 -

    F-Secure 9.0.15370.0 2010.05.04 -

    Fortinet 4.0.14.0 2010.05.03 -

    GData 21 2010.05.04 -

    Ikarus T3.1.1.84.0 2010.05.04 -

    Jiangmin 13.0.900 2010.05.04 -

    Kaspersky 7.0.0.125 2010.05.04 -

    McAfee 5.400.0.1158 2010.05.04 -

    McAfee-GW-Edition 2010.1 2010.05.04 -

    Microsoft 1.5703 2010.05.04 -

    NOD32 5086 2010.05.04 -

    Norman 6.04.12 2010.05.04 -

    nProtect 2010-05-04.01 2010.05.04 -

    Panda 10.0.2.7 2010.05.04 -

    PCTools 7.0.3.5 2010.05.04 -

    Prevx 3.0 2010.05.04 -

    Rising 22.46.01.01 2010.05.04 -

    Sophos 4.53.0 2010.05.04 -

    Sunbelt 6260 2010.05.04 -

    Symantec 20091.2.0.41 2010.05.04 -

    TheHacker 6.5.2.0.275 2010.05.03 -

    TrendMicro 9.120.0.1004 2010.05.04 -

    TrendMicro-HouseCall 9.120.0.1004 2010.05.04 -

    VBA32 3.12.12.4 2010.05.04 -

    ViRobot 2010.5.4.2303 2010.05.04 -

    VirusBuster 5.0.27.0 2010.05.04 -

    Informações adicionais

    File size: 1035776 bytes

    MD5 : 064ec7ff5f58b928c3e119402977fa6d

    SHA1 : 0555de161bf0e323f768e262a7e46b1b26647532

    SHA256: 4cc1c4f32146cc28f5e3d7e9562d20017dce82c71f2bba549bbda27a17acc1bb

    PEInfo: PE Structure information

    ( base data )

    entrypointaddress.: 0x101A55F

    timedatestamp.....: 0x48025C30 (Sun Apr 13 21:17:04 2008)

    machinetype.......: 0x14C (Intel I386)

    ( 4 sections )

    name viradd virsiz rawdsiz ntrpy md5

    .text 0x1000 0x44C09 0x44E00 6.38 f3840e3ec19eabcdb289728c9bdce660

    .data 0x46000 0x1DB4 0x1800 1.30 983f35021232560eaaa99fcbc1b7d359

    .rsrc 0x48000 0xB2A88 0xB2C00 6.63 ff49b0412a779ab814e41b53b80574d2

    .reloc 0xFB000 0x374C 0x3800 6.78 ec335057489badbf6d8142b57175fd91

    ( 0 imports )

    ( 0 exports )

    TrID : File type identification

    Win32 Executable Generic (42.3%)

    Win32 Dynamic Link Library (generic) (37.6%)

    Generic Win/DOS Executable (9.9%)

    DOS Executable Generic (9.9%)

    Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)

    ThreatExpert: http://www.threatexpert.com/report.aspx?md5=064ec7ff5f58b928c3e119402977fa6d

    ssdeep: 24576:Dmfty/wAvN7lrWWncPx3TbefTaz/g/J/oi:DmpcN78p3Tbeba1i

    sigcheck: publisher....: Microsoft Corporation

    copyright....: © Microsoft Corporation. Todos os direitos reservados.

    product......: Sistema operacional Microsoft_ Windows_

    description..: Windows Explorer

    original name: EXPLORER.EXE

    internal name: explorer

    file version.: 6.00.2900.5512 (xpsp.080413-2105)

    comments.....: n/a

    signers......: -

    signing date.: -

    verified.....: Unsigned

    PEiD : -

    RDS : NSRL Reference Data Set

    -

    ATENÇÃO: VirusTotal é um serviço gratuito oferecido por Hispasec Sistemas. Não há garantias quanto à disponibilidade e continuidade desse serviço. Apesar da taxa de detecção proporcionada pelo uso de múltiplos mecanismos de antivírus ser muito superior àquela oferecida por um único produto, os resultados NÃO garantem a possibilidade de um arquivo ser inofensivo. Atualmente, não há qualquer solução que ofereça 100% de eficiência na detecção de vírus e arquivos maliciosos..

    Compartilhar este post


    Link para o post
    Compartilhar em outros sites

    Leia as instruções contidas neste link:

    Nas instruções contidas no link acima, poderá verificar quais os fóruns onde os Analistas estão devidamente habilitados a utilizar corretamente a ferramenta:"Fóruns para receber ajuda com logs do ComboFix"

    1. Faça o download do ComboFix de um dos links oficiais listados abaixo e salve no seu desktop:

    [*]Temporariamente e durante a execução destas instruções, é muito importante que mantenha desabilitados os seus programas de proteção (Antivirus, Antispyware e Firewall). Reative as proteções após a execução do(s) procedimento(s) abaixo mencionado(s).[*]Duplo clique no icone desktopicon.png que está no desktop.[*]Leia e aceite as condições, digitando 1 e enter.[*]Computadores com Windows XP deverão instalar o Console de Recuperação:

    • Se o seu computador tem instalado o Windows XP e ainda não tem instalado o Console de Recuperação, por favor certifique-se que está conectado à Internet, e clique em "Sim".
    • Clique em "OK" ao EULA.
    • Quando o Console de Recuperação estiver já instalado, clique em "SIM" para continuar.

    [*]O ComboFix será executado, por favor seja paciente e aguarde. [*]Atenção: Não utilize o mouse nem o teclado enquanto a ferramenta estiver sendo executada, isso pode fazer com que o computador pare.[*]Poderá surgir o aviso que é necessário reiniciar o computador.

    NÃO REINICIE!!! O ComboFix reiniciará o computador automaticamente.[*]Quando a ferramenta terminar de rodar, gerará um log (o arquivo C:\ComboFix.txt). Copie e cole o conteúdo desse arquivo na sua proxima resposta.

    NÃO utilize a ferramenta por conta própria. É uma ferramenta poderosa criada pra lidar com infecções sofisticadas e caso não a utilize corretamente poderá danificar o seu computador.

    • Existem vários malwares que impedem a execução correta da ferramenta e com isso danificar gravemente o computador. Analistas habilitados a utilizar o ComboFix conhecem esses casos e sabem lidar com estas situações.
    • Muitos dos Analistas não respondem a topicos em que vejam que o ComboFix foi utilizado sem supervisão.
    • Existem varias ferramentas anti-malware generalistas em que os autores ao elaborarem a programação das mesmas, estão pensando nos usuários finais e para serem usadas sem supervisão. O Combofix não é uma ferramenta desse tipo, e assim sendo e até por respeito ao autor da ferramenta, não utilize sem supervisão.

    Compartilhar este post


    Link para o post
    Compartilhar em outros sites
  • Autor do tópico
  • ComboFix 10-05-09.04 - Charlei 10/05/2010 6:39.2.2 - x86

    Microsoft Windows XP Professional 5.1.2600.3.1252.55.1046.18.2047.1699 [GMT -3:00]

    Executando de: c:\documents and settings\Charlei\Desktop\ComboFix.exe

    AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}

    .

    ADS - drivers: deleted 204 bytes in 1 streams.

    ((((((((((((((((((((((((((((((((((((( Outras Exclusões )))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    ---- Execuções precedente -------

    .

    c:\windows\system32\AutoRun.inf

    c:\windows\system32\kavo.exe

    c:\windows\system32\kavo0.dll

    c:\windows\system32\vbzlib1.dll

    .

    ((((((((((((((((((((((((((((((((((((((( Drivers/Serviços )))))))))))))))))))))))))))))))))))))))))))))))))

    .

    -------\Legacy_ABP470N5

    -------\Service_abp470n5

    -------\Legacy_ABP470N5

    -------\Service_abp470n5

    (((((((((((((((( Arquivos/Ficheiros criados de 2010-04-10 to 2010-05-10 ))))))))))))))))))))))))))))

    .

    2010-05-04 10:27 . 2010-05-04 10:27 -------- d-----w- c:\documents and settings\Charlei\Dados de aplicativos\Avira

    2010-05-04 10:22 . 2010-03-01 13:05 124784 ----a-w- c:\windows\system32\drivers\avipbb.sys

    2010-05-04 10:22 . 2010-02-16 17:24 60936 ----a-w- c:\windows\system32\drivers\avgntflt.sys

    2010-05-04 10:22 . 2009-05-11 15:49 45416 ----a-w- c:\windows\system32\drivers\avgntdd.sys

    2010-05-04 10:22 . 2009-05-11 15:49 22360 ----a-w- c:\windows\system32\drivers\avgntmgr.sys

    2010-05-04 10:22 . 2010-05-04 10:22 -------- d-----w- c:\documents and settings\All Users\Dados de aplicativos\Avira

    2010-05-04 10:22 . 2010-05-04 10:22 -------- d-----w- c:\arquivos de programas\Avira

    2010-04-28 23:11 . 2010-04-28 23:11 -------- d--h--w- c:\windows\system32\GroupPolicy

    2010-04-23 09:44 . 2010-04-23 09:44 -------- d-----w- c:\arquivos de programas\MC2

    2010-04-19 15:59 . 2010-04-19 15:59 -------- d-----w- c:\arquivos de programas\Koinonia Software

    2010-04-19 15:59 . 2010-04-19 15:59 -------- d-----w- c:\arquivos de programas\Arquivos comuns\Opus Shared

    2010-04-19 15:59 . 2007-04-10 13:00 65536 ----a-w- c:\windows\system32\ZipSFX.bin

    2010-04-19 15:59 . 2001-10-14 15:28 132096 ----a-w- c:\windows\system32\ZipDLL.dll

    2010-04-19 15:59 . 2001-10-14 15:28 117760 ----a-w- c:\windows\system32\Unzdll.dll

    2010-04-16 16:33 . 2010-04-16 16:33 -------- d-----w- c:\documents and settings\Charlei\.borland

    2010-04-16 16:30 . 2010-04-16 16:30 -------- d-----w- C:\Inprise

    2010-04-16 16:28 . 2010-04-16 16:30 -------- d-----w- c:\arquivos de programas\Borland

    2010-04-16 16:28 . 2010-04-16 16:28 -------- d-----w- c:\arquivos de programas\Arquivos comuns\Borland Shared

    2010-04-16 16:24 . 2003-04-10 18:31 177152 ----a-w- c:\windows\system32\ibinstall.dll

    2010-04-16 16:24 . 2003-04-10 18:30 376832 ----a-w- c:\windows\system32\gds32.dll

    2010-04-16 16:24 . 2003-04-10 18:30 28672 ----a-w- c:\windows\system32\ibxml.dll

    2010-04-15 23:07 . 2010-04-15 23:07 -------- d-----w- c:\documents and settings\Charlei\Dados de aplicativos\Mikrotik

    2010-04-15 23:06 . 2010-04-15 23:06 -------- d-----w- c:\arquivos de programas\Web Publish

    2010-04-14 09:22 . 2010-03-30 03:46 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys

    2010-04-14 09:22 . 2010-03-30 03:45 20824 ----a-w- c:\windows\system32\drivers\mbam.sys

    2010-04-13 02:05 . 2010-05-03 02:46 -------- d-----w- c:\arquivos de programas\eMule

    .

    ((((((((((((((((((((((((((((((((((((( Relatório Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    2010-05-10 00:30 . 2009-05-27 10:06 -------- d-----w- c:\documents and settings\All Users\Dados de aplicativos\GbPlugin

    2010-05-10 00:30 . 2009-05-27 10:06 -------- d-----w- c:\arquivos de programas\GbPlugin

    2010-05-09 22:39 . 2009-06-12 01:35 -------- d-----w- c:\documents and settings\Charlei\Dados de aplicativos\uTorrent

    2010-05-07 14:02 . 2009-05-23 20:38 -------- d-----w- c:\documents and settings\Charlei\Dados de aplicativos\Skype

    2010-05-07 13:59 . 2009-05-23 20:39 -------- d-----w- c:\documents and settings\Charlei\Dados de aplicativos\skypePM

    2010-05-04 09:32 . 2001-10-28 15:07 67450 ----a-w- c:\windows\system32\perfc016.dat

    2010-05-04 09:32 . 2001-10-28 15:07 425426 ----a-w- c:\windows\system32\perfh016.dat

    2010-05-03 23:27 . 2009-10-19 00:12 -------- d-----w- c:\documents and settings\Charlei\Dados de aplicativos\GetRightToGo

    2010-05-03 09:52 . 2009-05-23 01:41 -------- d--h--w- c:\arquivos de programas\InstallShield Installation Information

    2010-05-03 02:48 . 2010-02-14 15:57 -------- d-----w- c:\arquivos de programas\Arquivos comuns\Solveig Multimedia

    2010-05-03 02:48 . 2010-02-17 15:57 -------- d-----w- c:\arquivos de programas\Xvid

    2010-05-03 02:47 . 2009-09-27 14:41 -------- d-----w- c:\arquivos de programas\Windows Media Connect 2

    2010-05-03 02:47 . 2010-04-03 11:41 -------- d-----w- c:\arquivos de programas\Winamp Detect

    2010-05-03 02:47 . 2010-04-03 11:40 -------- d-----w- c:\arquivos de programas\Winamp

    2010-05-03 02:47 . 2010-02-09 15:46 -------- d-----w- c:\arquivos de programas\SystemRequirementsLab

    2010-05-03 02:47 . 2010-02-17 01:21 -------- d-----w- c:\arquivos de programas\SubSync

    2010-05-03 02:47 . 2009-05-23 14:05 -------- d-----w- c:\arquivos de programas\Realtek AC97

    2010-05-03 02:46 . 2010-01-25 23:42 -------- d-----w- c:\arquivos de programas\Malwarebytes' Anti-Malware

    2010-05-03 02:46 . 2010-02-17 10:19 -------- d-----w- c:\arquivos de programas\K-LiteNitro

    2010-05-03 02:46 . 2009-10-05 01:50 -------- d-----w- c:\arquivos de programas\Eufony

    2010-05-03 02:46 . 2009-05-25 17:00 -------- d-----w- c:\arquivos de programas\DAP

    2010-05-03 02:46 . 2009-05-23 13:39 -------- d-----w- c:\arquivos de programas\DAEMON Tools Lite

    2010-05-03 02:45 . 2009-05-23 14:05 -------- d-----w- c:\arquivos de programas\AvRack

    2010-05-03 02:45 . 2010-02-17 15:57 -------- d-----w- c:\arquivos de programas\AviSynth 2.5

    2010-05-03 02:45 . 2010-02-17 15:57 -------- d-----w- c:\arquivos de programas\AVI ReComp

    2010-05-03 01:05 . 2009-06-23 12:30 2516 --sha-w- c:\windows\system32\KGyGaAvL.sys

    2010-04-30 12:18 . 2009-05-27 10:06 45472 ----a-w- c:\windows\system32\drivers\gbpkm.sys

    2010-04-28 21:05 . 2009-05-30 18:35 -------- d-----w- c:\documents and settings\Charlei\Dados de aplicativos\CyberLink

    2010-04-28 21:05 . 2009-05-30 18:35 -------- d-----w- c:\documents and settings\All Users\Dados de aplicativos\CyberLink

    2010-04-23 09:53 . 2009-05-24 00:38 -------- d-----w- c:\arquivos de programas\GameVicio

    2010-04-15 22:57 . 2010-04-15 22:57 2678 ----a-w- c:\windows\java\Packages\Data\XRHZTZPJ.DAT

    2010-04-15 22:57 . 2010-04-15 22:57 2678 ----a-w- c:\windows\java\Packages\Data\UQ97ZLBR.DAT

    2010-04-15 22:57 . 2010-04-15 22:57 2678 ----a-w- c:\windows\java\Packages\Data\QEJJ7VX3.DAT

    2010-04-15 22:57 . 2010-04-15 22:57 2678 ----a-w- c:\windows\java\Packages\Data\OJ1BZ79N.DAT

    2010-04-11 11:45 . 2010-04-03 11:40 -------- d-----w- c:\documents and settings\Charlei\Dados de aplicativos\Winamp

    2010-04-11 10:39 . 2009-05-23 02:09 -------- d-----w- c:\arquivos de programas\Google

    2010-03-21 12:35 . 2010-03-21 12:35 -------- d-----w- c:\documents and settings\Charlei\Dados de aplicativos\Thinstall

    2010-02-17 01:21 . 2010-02-17 01:21 249856 ------w- c:\windows\Setup1.exe

    2010-02-17 01:21 . 2010-02-17 01:21 73216 ----a-w- c:\windows\ST6UNST.EXE

    2010-02-10 00:41 . 2010-02-10 00:41 23232 ----a-w- c:\windows\system32\PavSRK.sys

    2009-06-23 12:30 . 2009-06-23 12:30 8 --sh--r- c:\windows\system32\1E1075468A.sys

    2009-05-08 05:09 . 2009-12-18 17:23 395264 --sh--w- c:\windows\system32\picx\m45t3r.exe

    .

    (((((((((((((((((((((((((( Pontos de Carregamento do Registro )))))))))))))))))))))))))))))))))))))))

    .

    .

    *Nota* entradas vazias e legítimas por defeito não são mostradas.

    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "msnmsgr"="c:\arquivos de programas\Windows Live\Messenger\msnmsgr.exe" [2009-05-04 3877888]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-05-01 13750272]

    "BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-13 110592]

    "avgnt"="c:\arquivos de programas\Avira\AntiVir Desktop\avgnt.exe" [2010-03-02 282792]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

    "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-13 15360]

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]

    "NoPassou"= 1 (0x1)

    "NoSMConfigurePrograms"= 1 (0x1)

    "NoFavoritesMenu"= 1 (0x1)

    "NoSMBalloonTip"= 1 (0x1)

    "NoThumbnailCache"= 1 (0x1)

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ GbPluginBb]

    2010-04-30 12:18 328992 ----a-w- c:\arquivos de programas\GbPlugin\gbieh.dll

    [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Iniciar^Programas^Inicializar^STK014 PNP Monitor.lnk]

    backup=c:\windows\pss\STK014 PNP Monitor.lnkCommon Startup

    HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]

    2010-03-24 18:17 947200 ----a-w- c:\arquivos de programas\Arquivos comuns\Adobe\ARM\1.0\AdobeARM.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]

    2010-04-04 05:42 30720 ----a-w- c:\arquivos de programas\Adobe\Reader 9.0\Reader\reader_sl.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcoholAutomount]

    2009-04-24 03:21 203928 ----a-w- c:\arquivos de programas\Alcohol Soft\Alcohol 120\AxCmd.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]

    2008-04-13 21:20 15360 ----a-w- c:\windows\system32\ctfmon.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]

    2008-12-29 10:40 687560 ----a-w- c:\arquivos de programas\DAEMON Tools Lite\daemon.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DownloadAccelerator]

    2009-05-25 17:00 1642496 ----a-w- c:\arquiv~1\DAP\DAP.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup]

    2005-02-16 19:15 221184 ----a-w- c:\arquiv~1\ARQUIV~1\INSTAL~1\UPDATE~1\ISUSPM.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]

    2005-02-16 19:15 81920 ----a-w- c:\arquivos de programas\Arquivos comuns\InstallShield\UpdateService\issch.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LanguageShortcut]

    2007-01-09 01:17 49152 ----a-w- c:\arquivos de programas\CyberLink\PowerDVD\Language\Language.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]

    2009-05-04 15:19 3877888 ----a-w- c:\arquivos de programas\Windows Live\Messenger\msnmsgr.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]

    2009-05-01 02:30 13750272 ----a-w- c:\windows\system32\nvcpl.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]

    2009-05-01 02:30 86016 ----a-w- c:\windows\system32\nvmctray.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]

    2009-05-01 02:31 1657376 ----a-w- c:\windows\system32\nwiz.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl]

    2007-03-15 00:01 65536 ----a-w- c:\arquivos de programas\CyberLink\PowerDVD\PDVDServ.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]

    2009-04-21 17:39 24264488 ----a-r- c:\arquivos de programas\Skype\Phone\Skype.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]

    2006-11-17 08:42 577536 ----a-w- c:\windows\soundman.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]

    2009-07-25 08:23 143360 ----a-w- c:\arquivos de programas\Java\jre6\bin\jusched.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrayHabil]

    2009-07-15 12:43 1327104 ----a-w- c:\arquivos de programas\Koinonia Software\Habil for Windows\TrayHabil.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\security center]

    "AntiVirusOverride"=dword:00000001

    "FirewallOverride"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]

    "AntiVirusOverride"=dword:00000001

    "AntiVirusDisableNotify"=dword:00000001

    "FirewallDisableNotify"=dword:00000001

    "FirewallOverride"=dword:00000001

    "UpdatesDisableNotify"=dword:00000001

    "UacDisableNotify"=dword:00000001

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]

    "EnableFirewall"= 0 (0x0)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

    "%windir%\\system32\\sessmgr.exe"=

    "c:\\Arquivos de programas\\CyberLink\\PowerDVD\\PowerDVD.exe"=

    "c:\\Arquivos de programas\\uTorrent\\uTorrent.exe"=

    "c:\\Arquivos de programas\\Windows Live\\Messenger\\wlcsdk.exe"=

    "c:\\Arquivos de programas\\Windows Live\\Messenger\\msnmsgr.exe"=

    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=

    "c:\\Arquivos de programas\\Ubisoft\\Techland\\Call of Juarez - Bound in Blood\\CoJBiBGame_x86.exe"=

    "c:\\Arquivos de programas\\K-LiteNitro\\giFT\\giFTl.exe"=

    "c:\\Arquivos de programas\\bitComposer Games\\S.T.A.L.K.E.R. - Call of Pripyat\\bin\\xrEngine.exe"=

    "c:\\Arquivos de programas\\bitComposer Games\\S.T.A.L.K.E.R. - Call of Pripyat\\bin\\dedicated\\xrEngine.exe"=

    "d:\\Games\\Sniper Elite\\sniper_elite[www.gamevicio.com.br].exe"=

    "c:\\Arquivos de programas\\Adobe\\Reader 9.0\\Reader\\AcroRd32.exe"=

    "c:\\Documents and Settings\\Charlei\\Configurações locais\\Dados de aplicativos\\Google\\Chrome\\Application\\chrome.exe"=

    "c:\\Arquivos de programas\\Koinonia Software\\Habil for Windows\\TrayHabil.exe"=

    "c:\\Arquivos de programas\\Google\\Update\\GoogleUpdate.exe"=

    "c:\\Arquivos de programas\\Google\\Common\\Google Updater\\GoogleUpdaterService.exe"=

    "c:\\Arquivos de programas\\Microsoft Games\\Age of Mythology\\aom.exe"=

    "c:\\Arquivos de programas\\Windows Live\\Contacts\\wlcomm.exe"=

    "c:\\Arquivos de programas\\Malwarebytes' Anti-Malware\\mbam.exe"=

    "c:\\Arquivos de programas\\Alcohol Soft\\Alcohol 120\\StarWind\\StarWindServiceAE.exe"=

    "c:\\Arquivos de programas\\Skype\\Phone\\Skype.exe"=

    R0 GbpKm;Gbp KernelMode;c:\windows\system32\drivers\gbpkm.sys [27/5/2009 07:06 45472]

    R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [23/5/2009 10:37 721904]

    R0 ViBus;ViBus;c:\windows\system32\drivers\ViBus.sys [29/5/2009 13:05 16896]

    R0 ViPrt;VIA SATA IDE Device Driver;c:\windows\system32\drivers\ViPrt.sys [29/5/2009 13:05 52224]

    R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\arquivos de programas\Avira\AntiVir Desktop\sched.exe [4/5/2010 07:22 135336]

    R2 GbpSv;Gbp Service;c:\arquiv~1\GbPlugin\GbpSv.exe [27/5/2009 07:06 55072]

    S1 oreans32;oreans32;\??\c:\windows\system32\drivers\oreans32.sys --> c:\windows\system32\drivers\oreans32.sys [?]

    S2 gupdate1c9db4bb0511eca;Google Update Service (gupdate1c9db4bb0511eca);c:\arquivos de programas\Google\Update\GoogleUpdate.exe [22/5/2009 23:10 127488]

    S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [14/4/2010 06:22 38224]

    .

    Conteúdo da pasta 'Tarefas Agendadas'

    2010-05-10 c:\windows\Tasks\Google Software Updater.job

    - c:\arquivos de programas\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-05-23 02:09]

    2010-05-10 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

    - c:\arquivos de programas\Google\Update\GoogleUpdate.exe [2009-05-23 02:10]

    2010-05-10 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

    - c:\arquivos de programas\Google\Update\GoogleUpdate.exe [2009-05-23 02:10]

    .

    .

    ------- Scan Suplementar -------

    .

    uStart Page = hxxp://www.ask.com/?o=14597&l=dis

    uInternet Settings,ProxyServer = 11.11.1.1:3128

    IE: &Download with &DAP - c:\arquiv~1\DAP\dapextie.htm

    IE: Download &all with DAP - c:\arquiv~1\DAP\dapextie2.htm

    IE: E&xportar para o Microsoft Excel - c:\arquiv~1\MICROS~2\Office12\EXCEL.EXE/3000

    Trusted Zone: com.br\www2.bancodobrasil

    TCP: {08373663-39A4-4A96-A042-39AC979A8F91} = 200.180.239.1,201.10.1.2

    Name-Space Handler: ftp\ZDA - {5BFA1DAF-5EDC-11D2-959E-00C00C02DA5E} - c:\arquiv~1\DAP\dapie.dll

    Name-Space Handler: http\ZDA - {5BFA1DAF-5EDC-11D2-959E-00C00C02DA5E} - c:\arquiv~1\DAP\dapie.dll

    Name-Space Handler: HTTPS\ZDA - {5BFA1DAF-5EDC-11D2-959E-00C00C02DA5E} - c:\arquiv~1\DAP\dapie.dll

    DPF: {DB6BF2CD-4F59-4F1C-AA9C-D08C0B61A931} - hxxps://www14.bancobrasil.com.br/plugin/GbpDist.cab

    .

    - - - - ORFÃOS REMOVIDOS - - - -

    WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)

    MSConfigStartUp-Fraps - c:\fraps\FRAPS.EXE

    MSConfigStartUp-Google Update - c:\documents and settings\Charlei\Configurações locais\Dados de aplicativos\Google\Update\GoogleUpdate.exe

    MSConfigStartUp-igndlm - (no file)

    MSConfigStartUp-MSMSGS - c:\arquivos de programas\Messenger\msmsgs.exe

    AddRemove-InstallShield_{FEFAF112-4DA8-479C-89E2-7DE25091711A} - c:\arquivos de programas\InstallShield Installation Information\{FEFAF112-4DA8-479C-89E2-7DE25091711A}\Setup.exe

    AddRemove-Google Chrome - c:\documents and settings\Charlei\Configurações locais\Dados de aplicativos\Google\Chrome\Application\3.0.195.38\Installer\setup.exe

    **************************************************************************

    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

    Rootkit scan 2010-05-10 06:44

    Windows 5.1.2600 Service Pack 3 NTFS

    Procurando processos ocultos ...

    Procurando entradas auto inicializáveis ocultas ...

    Procurando ficheiros/arquivos ocultos ...

    Varredura completada com sucesso

    arquivos/ficheiros ocultos: 0

    **************************************************************************

    Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

    device: opened successfully

    user: MBR read successfully

    called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll >>UNKNOWN [0x89DE31F8]<<

    kernel: MBR read successfully

    detected MBR rootkit hooks:

    \Driver\Disk -> CLASSPNP.SYS @ 0xb810cf28

    \Driver\ACPI -> ACPI.sys @ 0xb7e66cb8

    \Driver\atapi -> atapi.sys @ 0xb7dfbb40

    IoDeviceObjectType -> DeleteProcedure -> ntkrnlpa.exe @ 0x805836a8

    ParseProcedure -> ntkrnlpa.exe @ 0x805827e8

    \Device\Harddisk0\DR0 -> DeleteProcedure -> ntkrnlpa.exe @ 0x805836a8

    ParseProcedure -> ntkrnlpa.exe @ 0x805827e8

    NDIS: Realtek RTL8139 Family PCI Fast Ethernet NIC -> SendCompleteHandler -> NDIS.sys @ 0xb7cf2bd4

    PacketIndicateHandler -> NDIS.sys @ 0xb7cfea21

    SendHandler -> NDIS.sys @ 0xb7cf2d44

    user & kernel MBR OK

    **************************************************************************

    .

    --------------------- DLLs Carregadas Sob os Processos em Execução ---------------------

    - - - - - - - > 'winlogon.exe'(584)

    c:\arquivos de programas\GBPLUGIN\gbieh.dll

    - - - - - - - > 'explorer.exe'(2652)

    c:\arquiv~1\WINDOW~2\wmpband.dll

    c:\windows\system32\WPDShServiceObj.dll

    c:\windows\system32\PortableDeviceTypes.dll

    c:\windows\system32\PortableDeviceApi.dll

    c:\arquivos de programas\GBPLUGIN\gbieh.dll

    .

    ------------------------ Outros Processos em Execução ------------------------

    .

    c:\windows\system32\nvsvc32.exe

    c:\arquivos de programas\Borland\InterBase\bin\ibguard.exe

    c:\arquivos de programas\Google\Update\1.2.183.23\GoogleCrashHandler.exe

    c:\arquivos de programas\Java\jre6\bin\jqs.exe

    c:\arquivos de programas\Arquivos comuns\Microsoft Shared\VS7DEBUG\mdm.exe

    c:\arquivos de programas\Arquivos comuns\Nero\Nero BackItUp 4\NBService.exe

    c:\arquivos de programas\Arquivos comuns\Protexis\License Service\PSIService.exe

    c:\arquivos de programas\CyberLink\Shared Files\RichVideo.exe

    c:\arquivos de programas\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

    c:\arquivos de programas\Borland\InterBase\bin\ibserver.exe

    c:\windows\system32\wscntfy.exe

    c:\windows\system32\wbem\wmiapsrv.exe

    c:\windows\system32\rundll32.exe

    .

    **************************************************************************

    .

    Tempo para conclusão: 2010-05-10 06:49:20 - Máquina reiniciou

    ComboFix-quarantined-files.txt 2010-05-10 09:49

    Pré-execução: 9 pasta(s) 53.160.943.616 bytes disponíveis

    Pós execução: 10 pasta(s) 53.210.636.288 bytes disponíveis

    - - End Of File - - 98DC8375AB0FA2782A499BF6B2FF22BC

    Compartilhar este post


    Link para o post
    Compartilhar em outros sites

    Por que o ComboFix foi executado duas vezes?

    Compartilhar este post


    Link para o post
    Compartilhar em outros sites
  • Autor do tópico
  • Não foi executado 2 vezes, ele executou inicialmente e ae ele reiniciou a máquina para desativar os drivers virtuais, após o reinício ele executou, mas pelo que eu vi, só fez o processo uma única vez....

    Compartilhar este post


    Link para o post
    Compartilhar em outros sites

    Configure o Windows para mostrar todos os arquivos

    Acesse este site: http://virustotal.com/

    Em File to upload coloque: c:\windows\system32\1E1075468A.sys

    Em seguida clique em Submit

    Repita o mesmo procedimento para o arquivo:

    c:\windows\system32\picx\m45t3r.exe

    Copie e poste o link destes exames.

    Compartilhar este post


    Link para o post
    Compartilhar em outros sites
  • Autor do tópico
  • Arquivo c:\windows\system32\1E1075468A.sys

    http://www.virustotal.com/pt/analisis/9d7d948ef1329cc1db5fb77cbe9ed7bbf7d74cd8be1ad214689ebbe52a2267cb-1273501566

    Arquivo c:\windows\system32\picx\m45t3r.exe não existe no meu computador, ou pelo menos não encontrei ele!!

    Compartilhar este post


    Link para o post
    Compartilhar em outros sites

    Leia atentamente toda a instrução abaixo antes de executar o programa.

    Faça download do Kaspersky Removal Tool e salve em seu desktop.

    • Instale o programa normalmente, seguindo todas as instruções.
    • Uma pasta chamada Virus Removal Tool será criada no desktop.
    • Na tela do programa clique nas opções:
      • Meu computador
      • Hidden Startup objects
      • Disk boot sectors
      • System Memory

      [*]Clique no botão Start Scan.[*]Seja paciente, o scan é demorado![*]Conforme for scaneando provavelmente abrirá algumas janelas pequenas ao lado do relógio, não clique em nada.[*]Também há uma possibilidade de abrir uma janela maior contendo as seguintes opções:

      • Desinfection (quando possível)
      • Delete
      • Skip
    • Quando aparecer, marque primero a opção abaixo Apply to all objects e depois clique numa das opções acima.
    • Após completar tudo, clique no botão Reports, na janela que abrir nas opções acima deixe:
      • Autoscan
      • Group by result
      • All Events

      [*]Expanda Autoscan clicando no sinal ao lado de +[*]Expanda Result: Detected.[*]Clique com o botão direito do mouse e escolha Select all, e depois escolha Copy.[*]Atenção, ao fazer isso parece que o PC travou, mas não, aguarde uns minutos para liberar a memória.[*]Abra o Bloco de Notas e cole (ctrl + v)[*]Dê um nome para o arquivo e salve numa pasta de sua preferência.[*]Feche o resultado clicando no botão Exit.[*]Ao fazer isso será questionado se quer desinstalar a ferramenta, clique em Sim.[*]Reinicie o computador quando for pedido.[*]Poste o conteúdo desse arquivo em sua próxima resposta.

    OBSERVAÇÃO1:
    Atente para as janelas durante o scan elas possuem cores diferentes dependendo do risco. Portanto,

    • verde
      :
      baixo risco
    • amarelo
      :
      médio risco
    • vermelho
      :
      alto risco

    Antes de tomar qualquer medida verifique com cuidado o caminho/nome do arquivo para ver é de seu conhecimento, caso seja clique em
    Skip
    .

    OBSERVAÇÃO2:
    Se no resultado final do scan apenas tiver
    Result:
    OK
    , não precisa gerar um relatório, apenas informe deste.

    OBSERVAÇÃO3:
    Durante o scan pode ser que o Kaspersky acuse a seguinte pasta com vírus:
    c:\
    QooBox
    . Caso isto aconteça escolha a opção
    Skip
    , pois a mesma pertence ao
    ComboFix
    e será removida quando o mesmo for desinstalado.

    Compartilhar este post


    Link para o post
    Compartilhar em outros sites
  • Autor do tópico
  • O resultado ficou grande em demasia para caber em uma única resposta..... Vou fracioná-la....

    Autoscan: completed 1 hour ago (events: 485109, objects: 528533, time: 1 day 01:25:17)

    Result: OK (events: 438571)

    Result: Detected (events: 4866)

    13/5/2010 14:20:00 C:\Documents and Settings\Charlei\Dados de aplicativos\Sun\Java\Deployment\cache\6.0\14\522a7e8e-67630a0a/dev/s/AdgredY.class

    13/5/2010 14:24:53 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0009861.exe

    13/5/2010 14:24:54 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0009864.exe

    13/5/2010 18:03:29 C:\Documents and Settings\Charlei\Dados de aplicativos\Sun\Java\Deployment\cache\6.0\14\522a7e8e-67630a0a/dev/s/DyesyasZ.class

    13/5/2010 18:03:34 C:\Documents and Settings\Charlei\Dados de aplicativos\Sun\Java\Deployment\cache\6.0\14\522a7e8e-67630a0a/dev/s/LoaderX.class

    13/5/2010 18:03:37 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0009867.exe

    13/5/2010 18:03:38 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0009869.exe

    13/5/2010 18:03:38 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0009870.exe

    13/5/2010 18:03:47 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0009871.EXE

    13/5/2010 18:03:49 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0009873.exe

    13/5/2010 18:03:57 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0009875.EXE

    13/5/2010 18:03:59 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0009872.EXE

    13/5/2010 18:04:04 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0009876.exe

    13/5/2010 18:04:11 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0009877.exe

    13/5/2010 18:04:26 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0009878.exe

    13/5/2010 18:04:40 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0009882.EXE

    13/5/2010 18:04:49 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0009883.EXE

    13/5/2010 18:04:52 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0009889.exe

    13/5/2010 18:04:54 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0009890.exe

    13/5/2010 18:05:01 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0009892.exe

    13/5/2010 18:05:04 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0009893.exe

    13/5/2010 18:05:05 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0009894.exe

    13/5/2010 18:05:14 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0009895.exe

    13/5/2010 18:05:16 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0009896.exe

    13/5/2010 18:05:19 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0009897.exe

    13/5/2010 18:05:28 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0009899.exe

    13/5/2010 18:05:30 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0009900.exe

    13/5/2010 18:05:33 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0009903.exe

    13/5/2010 18:05:38 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0009905.exe

    13/5/2010 18:05:39 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0009906.exe

    13/5/2010 18:05:41 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0009907.exe

    13/5/2010 18:05:50 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0009908.exe

    13/5/2010 18:05:51 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0009909.exe

    13/5/2010 18:05:51 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0009911.exe

    13/5/2010 18:06:00 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0009914.exe

    13/5/2010 18:06:01 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0009916.exe

    13/5/2010 18:06:01 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0009919.exe

    13/5/2010 18:06:09 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0009927.exe

    13/5/2010 18:06:10 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0009940.exe

    13/5/2010 18:06:13 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0009942.exe

    13/5/2010 18:06:24 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0009944.exe

    13/5/2010 18:06:24 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0009946.exe

    13/5/2010 18:06:31 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0009964.exe

    13/5/2010 18:06:32 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0009951.exe

    13/5/2010 18:06:37 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010006.exe

    13/5/2010 18:06:37 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010029.exe

    13/5/2010 18:06:44 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010036.exe

    13/5/2010 18:06:44 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010037.exe

    13/5/2010 18:06:51 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010040.exe

    13/5/2010 18:06:51 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010038.exe

    13/5/2010 18:06:51 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010039.exe

    13/5/2010 18:06:56 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010079.EXE

    13/5/2010 18:07:03 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010080.exe

    13/5/2010 18:07:03 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010081.exe

    13/5/2010 18:07:03 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010083.exe

    13/5/2010 18:07:09 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010085.exe

    13/5/2010 18:07:14 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010086.exe

    13/5/2010 18:07:20 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010089.exe

    13/5/2010 18:07:20 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010087.exe

    13/5/2010 18:07:27 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010090.exe

    13/5/2010 18:07:27 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010091.exe

    13/5/2010 18:07:32 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010092.exe

    13/5/2010 18:07:38 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010093.exe

    13/5/2010 18:07:39 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010094.exe

    13/5/2010 18:07:39 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010095.exe

    13/5/2010 18:07:45 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010096.exe

    13/5/2010 18:07:47 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010097.exe

    13/5/2010 18:07:50 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010099.exe

    13/5/2010 18:07:50 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010098.exe

    13/5/2010 18:07:58 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010100.exe

    13/5/2010 18:07:58 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010101.exe

    13/5/2010 18:08:01 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010102.exe

    13/5/2010 18:08:06 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010103.exe

    13/5/2010 18:08:06 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010104.exe

    13/5/2010 18:08:13 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010105.exe

    13/5/2010 18:08:14 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010106.exe

    13/5/2010 18:08:16 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010172.exe

    13/5/2010 18:08:24 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010178.exe

    13/5/2010 18:08:24 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010179.exe

    13/5/2010 18:08:30 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010180.exe

    13/5/2010 18:08:33 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010181.exe

    13/5/2010 18:08:35 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010183.exe

    13/5/2010 18:08:36 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010184.exe

    13/5/2010 18:08:39 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010185.exe

    13/5/2010 18:08:41 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010186.exe

    13/5/2010 18:08:46 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010191.exe

    13/5/2010 18:08:50 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010194.exe

    13/5/2010 18:08:50 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010195.exe

    13/5/2010 18:08:51 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010197.exe

    13/5/2010 18:08:58 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010199.exe

    13/5/2010 18:08:58 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010198.exe

    13/5/2010 18:08:59 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010201.exe

    13/5/2010 18:09:04 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010202.exe

    13/5/2010 18:09:06 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010203.exe

    13/5/2010 18:09:10 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010204.exe

    13/5/2010 18:09:10 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010216.exe

    13/5/2010 18:09:16 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010217.exe

    13/5/2010 18:09:18 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010219.exe

    13/5/2010 18:09:22 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010220.exe

    13/5/2010 18:09:24 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010222.exe

    13/5/2010 18:09:27 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010224.exe

    13/5/2010 18:09:29 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010226.exe

    13/5/2010 18:09:35 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010229.exe

    13/5/2010 18:09:36 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010231.exe

    13/5/2010 18:09:39 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010233.exe

    13/5/2010 18:09:41 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010235.exe

    13/5/2010 18:09:43 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010237.exe

    13/5/2010 18:09:48 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010239.exe

    13/5/2010 18:09:48 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010238.exe

    13/5/2010 18:09:52 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010241.exe

    13/5/2010 18:09:56 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010242.exe

    13/5/2010 18:10:01 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010243.exe

    13/5/2010 18:10:01 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010245.exe

    13/5/2010 18:10:01 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010246.exe

    13/5/2010 18:10:09 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010247.exe

    13/5/2010 18:10:09 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010248.exe

    13/5/2010 18:10:09 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010249.exe

    13/5/2010 18:10:15 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010251.exe

    13/5/2010 18:10:18 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010250.exe

    13/5/2010 18:10:21 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010261.exe

    13/5/2010 18:10:24 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010274.exe

    13/5/2010 18:10:27 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010278.exe

    13/5/2010 18:10:28 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010279.exe

    13/5/2010 18:10:35 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010282.exe

    13/5/2010 18:10:35 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010286.exe

    13/5/2010 18:10:42 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010305.exe

    13/5/2010 18:10:42 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010310.exe

    13/5/2010 18:10:49 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010317.exe

    13/5/2010 18:10:49 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010316.exe

    13/5/2010 18:10:52 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010318.exe

    13/5/2010 18:10:58 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010319.exe

    13/5/2010 18:10:58 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010320.exe

    13/5/2010 18:10:58 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010321.exe

    13/5/2010 18:11:03 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010322.exe

    13/5/2010 18:11:06 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010323.exe

    13/5/2010 18:11:12 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010325.exe

    13/5/2010 18:11:12 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010326.exe

    13/5/2010 18:11:12 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010327.exe

    13/5/2010 18:11:18 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010328.exe

    13/5/2010 18:11:18 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010329.exe

    13/5/2010 18:11:26 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010331.exe

    13/5/2010 18:11:26 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010330.exe

    13/5/2010 18:11:26 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010332.exe

    13/5/2010 18:11:34 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010334.exe

    13/5/2010 18:11:35 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010336.exe

    13/5/2010 18:11:37 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010337.exe

    13/5/2010 18:11:40 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010338.exe

    13/5/2010 18:11:47 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010340.exe

    13/5/2010 18:11:47 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010341.exe

    13/5/2010 18:11:47 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010342.exe

    13/5/2010 18:11:58 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010343.exe

    13/5/2010 18:11:59 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010344.exe

    13/5/2010 18:12:01 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010345.exe

    13/5/2010 18:12:04 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010346.EXE

    13/5/2010 18:12:12 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010349.EXE

    13/5/2010 18:12:12 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010348.EXE

    13/5/2010 18:12:12 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010350.exe

    13/5/2010 18:12:18 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010351.EXE

    13/5/2010 18:12:19 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010352.EXE

    13/5/2010 18:12:27 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010353.EXE

    13/5/2010 18:12:27 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010354.EXE

    13/5/2010 18:12:37 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010356.EXE

    13/5/2010 18:12:42 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010355.EXE

    13/5/2010 18:12:54 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010357.EXE

    13/5/2010 18:12:54 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010358.EXE

    13/5/2010 18:12:55 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010359.EXE

    13/5/2010 18:13:04 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010360.EXE

    13/5/2010 18:13:06 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010362.EXE

    13/5/2010 18:13:07 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010363.EXE

    13/5/2010 18:13:11 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010364.EXE

    13/5/2010 18:13:20 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010365.EXE

    13/5/2010 18:13:25 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010366.exe

    13/5/2010 18:13:25 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010368.exe

    13/5/2010 18:13:25 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010369.exe

    13/5/2010 18:13:31 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010370.exe

    13/5/2010 18:13:35 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010371.exe

    13/5/2010 18:13:36 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010372.exe

    13/5/2010 18:13:37 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010373.exe

    13/5/2010 18:13:45 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010374.exe

    13/5/2010 18:13:45 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010376.exe

    13/5/2010 18:13:48 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010377.exe

    13/5/2010 18:13:53 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010378.exe

    13/5/2010 18:13:54 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010379.exe

    13/5/2010 18:13:57 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010380.exe

    13/5/2010 18:14:02 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010381.exe

    13/5/2010 18:14:06 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010384.exe

    13/5/2010 18:14:06 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010382.exe

    13/5/2010 18:14:12 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010385.exe

    13/5/2010 18:14:13 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010386.exe

    13/5/2010 18:14:17 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010387.exe

    13/5/2010 18:14:21 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010388.exe

    13/5/2010 18:14:23 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010389.exe

    13/5/2010 18:14:30 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010391.exe

    13/5/2010 18:14:31 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010390.exe

    13/5/2010 18:14:34 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010392.exe

    13/5/2010 18:14:40 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010393.exe

    13/5/2010 18:14:45 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010394.exe

    13/5/2010 18:14:45 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010395.exe

    13/5/2010 18:14:48 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010396.exe

    13/5/2010 18:14:55 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010397.exe

    13/5/2010 18:14:55 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010399.exe

    13/5/2010 18:14:55 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010398.exe

    13/5/2010 18:15:00 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010400.exe

    13/5/2010 18:15:06 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010401.exe

    13/5/2010 18:15:06 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010406.exe

    13/5/2010 18:15:06 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010407.exe

    13/5/2010 18:15:16 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010409.exe

    13/5/2010 18:15:16 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010412.exe

    13/5/2010 18:15:16 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010415.exe

    13/5/2010 18:15:21 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010417.exe

    13/5/2010 18:15:27 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010418.exe

    13/5/2010 18:15:28 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010419.exe

    13/5/2010 18:15:33 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010430.exe

    13/5/2010 18:15:34 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010432.exe

    13/5/2010 18:15:34 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010433.exe

    13/5/2010 18:15:45 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010434.exe

    13/5/2010 18:15:45 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010438.exe

    13/5/2010 18:15:45 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010437.EXE

    13/5/2010 18:15:53 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010439.exe

    13/5/2010 18:15:54 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010440.exe

    13/5/2010 18:15:54 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010441.exe

    13/5/2010 18:15:59 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010442.exe

    13/5/2010 18:16:00 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010443.exe

    13/5/2010 18:16:05 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010444.exe

    13/5/2010 18:16:07 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010445.exe

    13/5/2010 18:16:13 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010446.exe

    13/5/2010 18:16:14 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010447.exe

    13/5/2010 18:16:14 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010448.exe

    13/5/2010 18:16:20 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010449.exe

    13/5/2010 18:16:21 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010450.exe

    13/5/2010 18:16:27 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010451.exe

    13/5/2010 18:16:27 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010452.exe

    13/5/2010 18:16:28 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010453.exe

    13/5/2010 18:16:35 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010454.exe

    13/5/2010 18:16:35 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010457.exe

    13/5/2010 18:16:37 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010458.exe

    13/5/2010 18:16:44 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010460.exe

    13/5/2010 18:16:45 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010461.exe

    13/5/2010 18:16:48 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010466.exe

    13/5/2010 18:16:56 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP55\A0010468.exe

    13/5/2010 18:16:58 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012066.exe

    13/5/2010 18:17:03 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012067.exe

    13/5/2010 18:17:03 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012065.exe

    13/5/2010 18:17:04 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012068.exe

    13/5/2010 18:17:10 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012069.exe

    13/5/2010 18:17:12 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012070.exe

    13/5/2010 18:17:18 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012071.exe

    13/5/2010 18:17:18 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012072.exe

    13/5/2010 18:17:25 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012073.exe

    13/5/2010 18:17:26 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012075.exe

    13/5/2010 18:17:29 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012077.exe

    13/5/2010 18:17:34 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012078.exe

    13/5/2010 18:17:40 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012082.exe

    13/5/2010 18:17:43 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012084.exe

    13/5/2010 18:17:44 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012085.exe

    13/5/2010 18:17:50 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012086.EXE

    13/5/2010 18:17:54 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012088.exe

    13/5/2010 18:17:59 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012087.EXE

    13/5/2010 18:18:04 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012089.exe

    13/5/2010 18:18:08 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012091.EXE

    13/5/2010 18:18:16 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012092.exe

    13/5/2010 18:18:17 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012094.exe

    13/5/2010 18:18:19 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012095.exe

    13/5/2010 18:18:26 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012098.exe

    13/5/2010 18:18:28 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012096.exe

    13/5/2010 18:18:41 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012102.exe

    13/5/2010 18:18:45 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012104.EXE

    13/5/2010 18:18:49 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012105.exe

    13/5/2010 18:18:52 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012106.exe

    13/5/2010 18:18:52 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012107.exe

    13/5/2010 18:18:57 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012110.exe

    13/5/2010 18:18:59 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012112.exe

    13/5/2010 18:18:59 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012111.exe

    13/5/2010 18:19:08 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012114.exe

    13/5/2010 18:19:08 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012116.exe

    13/5/2010 18:19:08 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012115.exe

    13/5/2010 18:19:17 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012127.exe

    13/5/2010 18:19:17 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012125.exe

    13/5/2010 18:19:17 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012128.exe

    13/5/2010 18:19:28 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012129.exe

    13/5/2010 18:19:29 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012132.EXE

    13/5/2010 18:19:30 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012133.exe

    13/5/2010 18:19:32 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012134.exe

    13/5/2010 18:19:40 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012136.exe

    13/5/2010 18:19:40 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012135.exe

    13/5/2010 18:19:40 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012137.exe

    13/5/2010 18:19:45 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012138.exe

    13/5/2010 18:19:59 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012139.exe

    13/5/2010 18:19:59 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012140.exe

    13/5/2010 18:20:00 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012141.exe

    13/5/2010 18:20:12 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012142.exe

    13/5/2010 18:20:12 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012143.exe

    13/5/2010 18:20:19 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012144.exe

    13/5/2010 18:20:20 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012145.exe

    13/5/2010 18:20:25 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012146.exe

    13/5/2010 18:20:32 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012148.exe

    13/5/2010 18:20:33 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012147.exe

    13/5/2010 18:20:34 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012149.exe

    13/5/2010 18:20:43 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012150.exe

    13/5/2010 18:20:43 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012153.exe

    13/5/2010 18:20:44 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012154.exe

    13/5/2010 18:20:54 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012156.exe

    13/5/2010 18:20:54 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012157.exe

    13/5/2010 18:20:59 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012162.exe

    13/5/2010 18:21:00 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012164.exe

    13/5/2010 18:21:11 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012166.exe

    13/5/2010 18:21:19 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012172.exe

    13/5/2010 18:21:19 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012171.exe

    13/5/2010 18:21:32 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012173.exe

    13/5/2010 18:21:34 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012174.exe

    13/5/2010 18:21:36 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012175.exe

    13/5/2010 18:21:39 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012176.exe

    13/5/2010 18:21:43 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012177.exe

    13/5/2010 18:21:45 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012178.exe

    13/5/2010 18:21:48 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012179.exe

    13/5/2010 18:21:54 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012180.exe

    13/5/2010 18:21:56 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012181.exe

    13/5/2010 18:21:57 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012182.exe

    13/5/2010 18:22:06 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012183.exe

    13/5/2010 18:22:06 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012185.exe

    13/5/2010 18:22:06 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012184.exe

    13/5/2010 18:22:13 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012187.exe

    13/5/2010 18:22:15 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012188.exe

    13/5/2010 18:22:20 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012189.exe

    13/5/2010 18:22:20 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012191.exe

    13/5/2010 18:22:20 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012190.exe

    13/5/2010 18:22:26 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012192.exe

    13/5/2010 18:22:28 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012193.exe

    13/5/2010 18:22:28 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012194.exe

    13/5/2010 18:22:34 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012195.exe

    13/5/2010 18:22:35 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012196.exe

    13/5/2010 18:22:40 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012197.exe

    13/5/2010 18:22:42 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012198.exe

    13/5/2010 18:22:45 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012199.exe

    13/5/2010 18:22:47 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012200.exe

    13/5/2010 18:22:47 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012201.exe

    13/5/2010 18:22:55 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012203.exe

    13/5/2010 18:22:55 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012202.exe

    13/5/2010 18:22:55 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012205.exe

    13/5/2010 18:23:00 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012206.exe

    13/5/2010 18:23:01 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012207.EXE

    13/5/2010 18:23:06 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012208.exe

    13/5/2010 18:23:14 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012210.exe

    13/5/2010 18:23:14 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012209.exe

    13/5/2010 18:23:14 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012211.exe

    13/5/2010 18:23:30 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012213.exe

    13/5/2010 18:23:41 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP56\A0012212.exe

    13/5/2010 18:23:42 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013809.exe

    13/5/2010 18:23:42 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013807.exe

    13/5/2010 18:23:54 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013811.exe

    13/5/2010 18:23:54 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013812.exe

    13/5/2010 18:23:59 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013813.exe

    13/5/2010 18:24:04 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013816.exe

    13/5/2010 18:24:04 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013815.exe

    13/5/2010 18:24:07 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013817.exe

    13/5/2010 18:24:12 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013818.exe

    13/5/2010 18:24:14 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013819.exe

    13/5/2010 18:24:18 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013821.exe

    13/5/2010 18:24:26 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013822.exe

    13/5/2010 18:24:26 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013823.exe

    13/5/2010 18:24:27 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013827.exe

    13/5/2010 18:24:33 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013829.exe

    13/5/2010 18:24:36 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013830.exe

    13/5/2010 18:24:39 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013831.EXE

    13/5/2010 18:24:43 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013833.exe

    13/5/2010 18:24:45 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013832.EXE

    13/5/2010 18:24:49 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013835.EXE

    13/5/2010 18:24:49 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013836.exe

    13/5/2010 18:25:01 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013837.exe

    13/5/2010 18:25:04 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013843.exe

    13/5/2010 18:25:04 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013842.exe

    13/5/2010 18:25:04 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013841.EXE

    13/5/2010 18:25:09 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013844.exe

    13/5/2010 18:25:16 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013846.exe

    13/5/2010 18:25:16 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013847.exe

    13/5/2010 18:25:16 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013848.exe

    13/5/2010 18:25:22 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013849.EXE

    13/5/2010 18:25:26 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013851.EXE

    13/5/2010 18:25:29 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013852.EXE

    13/5/2010 18:25:32 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013853.exe

    13/5/2010 18:25:34 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013854.EXE

    13/5/2010 18:25:38 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013855.EXE

    13/5/2010 18:25:45 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013857.EXE

    13/5/2010 18:25:49 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013858.EXE

    13/5/2010 18:25:49 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013856.EXE

    13/5/2010 18:25:50 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013859.EXE

    13/5/2010 18:25:58 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013860.EXE

    13/5/2010 18:26:01 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013861.EXE

    13/5/2010 18:26:01 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013862.EXE

    13/5/2010 18:26:06 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013863.EXE

    13/5/2010 18:26:08 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013865.EXE

    13/5/2010 18:26:11 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013866.EXE

    13/5/2010 18:26:13 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013867.EXE

    13/5/2010 18:26:17 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013868.EXE

    13/5/2010 18:26:18 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013869.exe

    13/5/2010 18:26:23 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013871.exe

    13/5/2010 18:26:23 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013872.exe

    13/5/2010 18:26:31 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013873.exe

    13/5/2010 18:26:31 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013874.exe

    13/5/2010 18:26:33 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013875.exe

    13/5/2010 18:26:40 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013876.exe

    13/5/2010 18:26:40 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013877.exe

    13/5/2010 18:26:46 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013879.exe

    13/5/2010 18:26:46 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013880.exe

    13/5/2010 18:26:46 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013881.exe

    13/5/2010 18:26:55 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013883.exe

    13/5/2010 18:26:55 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013882.exe

    13/5/2010 18:26:57 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013884.exe

    13/5/2010 18:27:02 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013885.exe

    13/5/2010 18:27:03 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013887.exe

    13/5/2010 18:27:11 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013888.exe

    13/5/2010 18:27:12 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013889.exe

    13/5/2010 18:27:18 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013890.exe

    13/5/2010 18:27:18 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014490.exe

    13/5/2010 18:27:19 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013891.exe

    13/5/2010 18:27:19 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013892.exe

    13/5/2010 18:27:29 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013893.exe

    13/5/2010 18:27:33 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013894.exe

    13/5/2010 18:27:34 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013895.exe

    13/5/2010 18:27:41 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013897.exe

    13/5/2010 18:27:45 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013898.exe

    13/5/2010 18:27:45 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013896.exe

    13/5/2010 18:27:50 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013899.exe

    13/5/2010 18:27:52 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013900.exe

    13/5/2010 18:27:58 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013901.exe

    13/5/2010 18:27:58 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013902.exe

    13/5/2010 18:28:01 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013903.exe

    13/5/2010 18:28:06 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013904.exe

    13/5/2010 18:28:07 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013905.exe

    13/5/2010 18:28:07 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013906.exe

    13/5/2010 18:28:16 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013908.exe

    13/5/2010 18:28:16 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013911.exe

    13/5/2010 18:28:16 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013913.exe

    13/5/2010 18:28:22 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013915.exe

    13/5/2010 18:28:28 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013917.exe

    13/5/2010 18:28:28 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013916.exe

    13/5/2010 18:28:28 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013926.exe

    13/5/2010 18:28:35 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013928.exe

    13/5/2010 18:28:37 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013929.exe

    13/5/2010 18:28:45 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013930.exe

    13/5/2010 18:28:46 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013933.EXE

    13/5/2010 18:28:47 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013934.exe

    13/5/2010 18:28:51 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013935.exe

    13/5/2010 18:28:54 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013936.exe

    13/5/2010 18:28:57 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013937.exe

    13/5/2010 18:28:58 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013938.exe

    13/5/2010 18:29:02 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013939.exe

    13/5/2010 18:29:04 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013940.exe

    13/5/2010 18:29:10 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013941.exe

    13/5/2010 18:29:10 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013942.exe

    13/5/2010 18:29:12 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013943.exe

    13/5/2010 18:29:19 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013944.exe

    13/5/2010 18:29:20 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013945.exe

    13/5/2010 18:29:20 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013946.exe

    13/5/2010 18:29:27 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013947.exe

    13/5/2010 18:29:28 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013948.exe

    13/5/2010 18:29:30 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013949.exe

    13/5/2010 18:29:36 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013950.exe

    13/5/2010 18:29:36 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013951.exe

    13/5/2010 18:29:39 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013954.exe

    13/5/2010 18:29:44 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013955.exe

    13/5/2010 18:29:44 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013957.exe

    13/5/2010 18:29:50 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013958.exe

    13/5/2010 18:29:54 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013963.exe

    13/5/2010 18:29:54 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013965.exe

    13/5/2010 18:29:54 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013967.exe

    13/5/2010 18:30:04 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013972.exe

    13/5/2010 18:30:04 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013973.exe

    13/5/2010 18:30:04 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013974.exe

    13/5/2010 18:30:13 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013975.exe

    13/5/2010 18:30:13 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013976.exe

    13/5/2010 18:30:14 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013977.exe

    13/5/2010 18:30:21 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013978.exe

    13/5/2010 18:30:21 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013980.exe

    13/5/2010 18:30:21 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013979.exe

    13/5/2010 18:30:26 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013981.exe

    13/5/2010 18:30:30 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013982.exe

    13/5/2010 18:30:30 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013983.exe

    13/5/2010 18:30:35 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013984.exe

    13/5/2010 18:30:35 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013985.exe

    13/5/2010 18:30:40 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013986.exe

    13/5/2010 18:30:41 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013988.exe

    13/5/2010 18:30:49 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013998.exe

    13/5/2010 18:30:49 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0013999.exe

    13/5/2010 18:30:50 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0014001.exe

    13/5/2010 18:30:50 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014625.exe

    13/5/2010 18:30:57 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0014002.exe

    13/5/2010 18:31:07 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0014003.exe

    13/5/2010 18:31:08 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0014004.exe

    13/5/2010 18:31:09 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0014005.exe

    13/5/2010 18:31:13 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0014006.exe

    13/5/2010 18:31:19 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0014008.exe

    13/5/2010 18:31:19 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0014007.exe

    13/5/2010 18:31:20 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0014009.exe

    13/5/2010 18:31:27 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0014010.exe

    13/5/2010 18:31:28 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0014011.exe

    13/5/2010 18:31:30 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0014012.exe

    13/5/2010 18:31:36 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0014013.exe

    13/5/2010 18:31:36 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0014014.exe

    13/5/2010 18:31:36 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0014016.exe

    13/5/2010 18:31:45 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0014017.exe

    13/5/2010 18:31:45 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0014018.EXE

    13/5/2010 18:31:45 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0014019.exe

    13/5/2010 18:31:55 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0014020.exe

    13/5/2010 18:31:55 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0014021.exe

    13/5/2010 18:31:55 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0014022.exe

    13/5/2010 18:32:10 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0014024.exe

    13/5/2010 18:32:14 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014474.exe

    13/5/2010 18:32:14 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014475.exe

    13/5/2010 18:32:18 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP57\A0014023.exe

    13/5/2010 18:32:19 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014476.exe

    13/5/2010 18:32:25 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014477.exe

    13/5/2010 18:32:31 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014478.exe

    13/5/2010 18:32:35 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014479.exe

    13/5/2010 18:32:36 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014485.exe

    13/5/2010 18:32:50 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014488.exe

    13/5/2010 18:32:50 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014491.exe

    13/5/2010 18:32:50 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014487.exe

    13/5/2010 18:33:01 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014494.exe

    13/5/2010 18:33:01 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014496.exe

    13/5/2010 18:33:04 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014497.exe

    13/5/2010 18:33:09 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014500.exe

    13/5/2010 18:33:11 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014501.exe

    13/5/2010 18:33:14 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014502.exe

    13/5/2010 18:33:19 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014503.exe

    13/5/2010 18:33:21 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014504.exe

    13/5/2010 18:33:22 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014509.exe

    13/5/2010 18:33:32 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014530.EXE

    13/5/2010 18:33:36 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014540.exe

    13/5/2010 18:33:36 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014533.exe

    13/5/2010 18:33:36 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014541.exe

    13/5/2010 18:33:44 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014542.exe

    13/5/2010 18:33:44 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014544.exe

    13/5/2010 18:33:44 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014543.exe

    13/5/2010 18:33:50 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014546.exe

    13/5/2010 18:33:50 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014547.exe

    13/5/2010 18:33:58 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014550.exe

    13/5/2010 18:33:58 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014552.exe

    13/5/2010 18:33:58 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014553.exe

    13/5/2010 18:34:04 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014554.exe

    13/5/2010 18:34:07 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014556.exe

    13/5/2010 18:34:09 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014557.exe

    13/5/2010 18:34:14 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014558.exe

    13/5/2010 18:34:16 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014559.exe

    13/5/2010 18:34:17 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014561.exe

    13/5/2010 18:34:24 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014563.exe

    13/5/2010 18:34:24 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014564.exe

    13/5/2010 18:34:24 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014565.exe

    13/5/2010 18:34:31 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014572.exe

    13/5/2010 18:34:32 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014581.exe

    13/5/2010 18:34:34 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014582.exe

    13/5/2010 18:34:42 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014584.exe

    13/5/2010 18:34:42 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014583.exe

    13/5/2010 18:34:47 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014586.exe

    13/5/2010 18:34:53 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014588.exe

    13/5/2010 18:34:53 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014589.exe

    13/5/2010 18:34:56 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014590.exe

    13/5/2010 18:35:02 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014591.exe

    13/5/2010 18:35:02 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014628.exe

    13/5/2010 18:35:02 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014627.exe

    13/5/2010 18:35:11 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014629.exe

    13/5/2010 18:35:11 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014631.exe

    13/5/2010 18:35:11 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014632.exe

    13/5/2010 18:35:17 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014633.exe

    13/5/2010 18:35:18 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014634.exe

    13/5/2010 18:35:23 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014635.exe

    13/5/2010 18:35:25 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014636.exe

    13/5/2010 18:35:31 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014640.exe

    13/5/2010 18:35:32 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014642.exe

    13/5/2010 18:35:35 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014645.exe

    13/5/2010 18:35:38 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014646.exe

    13/5/2010 18:35:41 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014647.exe

    13/5/2010 18:35:45 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014648.exe

    13/5/2010 18:35:47 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014651.exe

    13/5/2010 18:35:50 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014652.exe

    13/5/2010 18:35:53 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014653.exe

    13/5/2010 18:35:56 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014654.exe

    13/5/2010 18:35:56 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014655.exe

    13/5/2010 18:36:05 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014659.exe

    13/5/2010 18:36:05 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014656.exe

    13/5/2010 18:36:09 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014660.exe

    13/5/2010 18:36:11 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014661.exe

    13/5/2010 18:36:11 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014662.exe

    13/5/2010 18:36:18 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014663.exe

    13/5/2010 18:36:19 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014664.exe

    13/5/2010 18:36:22 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014665.exe

    13/5/2010 18:36:25 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014666.exe

    13/5/2010 18:36:29 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014667.exe

    13/5/2010 18:36:33 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014668.exe

    13/5/2010 18:36:33 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014670.exe

    13/5/2010 18:36:33 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014675.exe

    13/5/2010 18:36:39 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014676.exe

    13/5/2010 18:36:40 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014678.exe

    13/5/2010 18:36:47 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014679.exe

    13/5/2010 18:36:47 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014680.exe

    13/5/2010 18:36:50 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014681.exe

    13/5/2010 18:36:53 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014682.exe

    13/5/2010 18:36:57 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014683.exe

    13/5/2010 18:36:57 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014684.exe

    13/5/2010 18:37:05 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014686.exe

    13/5/2010 18:37:05 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014687.exe

    13/5/2010 18:37:05 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014688.exe

    13/5/2010 18:37:09 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014689.exe

    13/5/2010 18:37:16 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014692.exe

    13/5/2010 18:37:16 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014695.exe

    13/5/2010 18:37:16 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014696.exe

    13/5/2010 18:37:22 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014697.exe

    13/5/2010 18:37:25 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014698.exe

    13/5/2010 18:37:28 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014699.exe

    13/5/2010 18:37:30 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014700.exe

    13/5/2010 18:37:33 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014701.exe

    13/5/2010 18:37:41 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014728.EXE

    13/5/2010 18:37:42 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014729.exe

    13/5/2010 18:37:44 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014730.exe

    13/5/2010 18:37:57 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014732.exe

    13/5/2010 18:38:00 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014733.exe

    13/5/2010 18:38:01 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014735.exe

    13/5/2010 18:38:12 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014736.exe

    13/5/2010 18:38:22 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014737.exe

    13/5/2010 18:38:22 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014739.exe

    13/5/2010 18:38:28 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014740.exe

    13/5/2010 18:38:32 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014741.exe

    13/5/2010 18:38:35 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014742.exe

    13/5/2010 18:38:42 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014743.exe

    13/5/2010 18:38:43 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014744.exe

    13/5/2010 18:38:47 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014746.exe

    13/5/2010 18:38:47 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014745.exe

    13/5/2010 18:38:52 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014747.exe

    13/5/2010 18:38:52 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014748.exe

    13/5/2010 18:38:59 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014749.exe

    13/5/2010 18:38:59 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014750.exe

    13/5/2010 18:38:59 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014751.exe

    13/5/2010 18:39:07 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014752.exe

    13/5/2010 18:39:08 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014755.exe

    13/5/2010 18:39:08 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014754.exe

    13/5/2010 18:39:15 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014757.exe

    13/5/2010 18:39:20 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP58\A0014756.exe

    13/5/2010 18:39:35 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014826.exe

    13/5/2010 18:39:35 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014827.exe

    13/5/2010 18:39:35 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014828.exe

    13/5/2010 18:39:41 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014829.exe

    13/5/2010 18:39:46 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014830.exe

    13/5/2010 18:39:46 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014833.exe

    13/5/2010 18:39:46 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014834.exe

    13/5/2010 18:39:52 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014835.exe

    13/5/2010 18:39:56 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014836.exe

    13/5/2010 18:39:56 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014837.exe

    13/5/2010 18:40:00 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014838.exe

    13/5/2010 18:40:05 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014839.exe

    13/5/2010 18:40:05 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014840.exe

    13/5/2010 18:40:09 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014841.exe

    13/5/2010 18:40:10 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014842.exe

    13/5/2010 18:40:16 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014844.exe

    13/5/2010 18:40:18 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014850.exe

    13/5/2010 18:40:18 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014849.exe

    13/5/2010 18:40:24 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014852.exe

    13/5/2010 18:40:26 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014853.exe

    13/5/2010 18:40:29 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014854.exe

    13/5/2010 18:40:34 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014855.exe

    13/5/2010 18:40:34 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014856.exe

    13/5/2010 18:40:40 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014857.exe

    13/5/2010 18:40:40 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014858.exe

    13/5/2010 18:40:46 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014860.exe

    13/5/2010 18:40:46 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014861.exe

    13/5/2010 18:40:51 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014862.exe

    13/5/2010 18:40:52 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014863.exe

    13/5/2010 18:40:55 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014864.exe

    13/5/2010 18:40:57 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014866.exe

    13/5/2010 18:40:57 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014865.exe

    13/5/2010 18:41:04 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014867.exe

    13/5/2010 18:41:05 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014868.exe

    13/5/2010 18:41:12 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014869.exe

    13/5/2010 18:41:12 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014870.exe

    13/5/2010 18:41:12 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014871.exe

    13/5/2010 18:41:24 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014876.exe

    13/5/2010 18:41:24 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014877.exe

    13/5/2010 18:41:24 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014874.exe

    13/5/2010 18:41:33 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014880.exe

    13/5/2010 18:41:33 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014881.exe

    13/5/2010 18:41:34 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014882.exe

    13/5/2010 18:41:42 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014883.exe

    13/5/2010 18:41:43 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014884.exe

    13/5/2010 18:41:44 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014889.exe

    13/5/2010 18:41:54 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014910.EXE

    13/5/2010 18:41:54 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014916.exe

    13/5/2010 18:41:57 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014923.exe

    13/5/2010 18:42:00 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014924.exe

    13/5/2010 18:42:01 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014925.exe

    13/5/2010 18:42:08 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014927.exe

    13/5/2010 18:42:08 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014926.exe

    13/5/2010 18:42:09 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014929.exe

    13/5/2010 18:42:13 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014930.exe

    13/5/2010 18:42:20 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014933.exe

    13/5/2010 18:42:20 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014935.exe

    13/5/2010 18:42:20 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014937.exe

    13/5/2010 18:42:28 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014938.exe

    13/5/2010 18:42:28 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014939.exe

    13/5/2010 18:42:31 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014940.exe

    13/5/2010 18:42:36 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014941.exe

    13/5/2010 18:42:37 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014943.exe

    13/5/2010 18:42:37 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014947.exe

    13/5/2010 18:42:40 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014949.exe

    13/5/2010 18:42:46 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014950.exe

    13/5/2010 18:42:47 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014952.exe

    13/5/2010 18:42:53 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014961.exe

    13/5/2010 18:42:53 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014977.exe

    13/5/2010 18:42:54 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014979.exe

    13/5/2010 18:43:00 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014981.exe

    13/5/2010 18:43:08 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014983.exe

    13/5/2010 18:43:08 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014993.exe

    13/5/2010 18:43:08 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014989.exe

    13/5/2010 18:43:17 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014996.exe

    13/5/2010 18:43:17 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0014995.exe

    13/5/2010 18:43:20 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015000.exe

    13/5/2010 18:43:23 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015067.exe

    13/5/2010 18:43:24 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015077.exe

    13/5/2010 18:43:31 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015078.exe

    13/5/2010 18:43:31 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015080.exe

    13/5/2010 18:43:31 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015081.exe

    13/5/2010 18:43:40 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015082.exe

    13/5/2010 18:43:40 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015084.exe

    13/5/2010 18:43:40 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015083.exe

    13/5/2010 18:43:46 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015115.EXE

    13/5/2010 18:43:49 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015116.exe

    13/5/2010 18:43:51 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015117.exe

    13/5/2010 18:43:56 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015119.exe

    13/5/2010 18:43:58 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015120.exe

    13/5/2010 18:44:01 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015122.exe

    13/5/2010 18:44:07 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015123.exe

    13/5/2010 18:44:12 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015124.exe

    13/5/2010 18:44:12 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015126.exe

    13/5/2010 18:44:17 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015127.exe

    13/5/2010 18:44:22 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015128.exe

    13/5/2010 18:44:27 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015129.exe

    13/5/2010 18:44:27 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015130.exe

    13/5/2010 18:44:35 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015131.exe

    13/5/2010 18:44:35 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015132.exe

    13/5/2010 18:44:35 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015133.exe

    13/5/2010 18:44:42 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015134.exe

    13/5/2010 18:44:43 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015135.exe

    13/5/2010 18:44:43 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015136.exe

    13/5/2010 18:44:48 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015137.exe

    13/5/2010 18:44:51 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015138.exe

    13/5/2010 18:44:57 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015139.exe

    13/5/2010 18:44:57 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015141.exe

    13/5/2010 18:44:59 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015142.exe

    13/5/2010 18:45:06 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015144.exe

    13/5/2010 18:45:07 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015143.exe

    13/5/2010 18:45:07 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015220.exe

    13/5/2010 18:45:13 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015239.exe

    13/5/2010 18:45:21 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015243.exe

    13/5/2010 18:45:21 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015245.exe

    13/5/2010 18:45:21 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015241.exe

    13/5/2010 18:45:27 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015249.exe

    13/5/2010 18:45:28 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015250.exe

    13/5/2010 18:45:32 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015251.exe

    13/5/2010 18:45:37 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015253.exe

    13/5/2010 18:45:37 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015252.exe

    13/5/2010 18:45:37 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015255.exe

    13/5/2010 18:45:43 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015263.exe

    13/5/2010 18:45:45 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015265.exe

    13/5/2010 18:45:48 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015267.exe

    13/5/2010 18:45:53 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015269.exe

    13/5/2010 18:45:57 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015271.exe

    13/5/2010 18:45:57 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015273.exe

    13/5/2010 18:45:57 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015274.exe

    13/5/2010 18:46:02 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015275.exe

    13/5/2010 18:46:02 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015277.exe

    13/5/2010 18:46:11 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015278.exe

    13/5/2010 18:46:11 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015279.exe

    13/5/2010 18:46:11 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015281.exe

    13/5/2010 18:46:16 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015282.exe

    13/5/2010 18:46:21 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015284.exe

    13/5/2010 18:46:22 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015286.exe

    13/5/2010 18:46:25 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015288.exe

    13/5/2010 18:46:27 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015289.exe

    13/5/2010 18:46:30 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015291.exe

    13/5/2010 18:46:33 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015293.exe

    13/5/2010 18:46:33 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015294.exe

    13/5/2010 18:46:41 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015296.exe

    13/5/2010 18:46:41 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015297.exe

    13/5/2010 18:46:41 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015299.exe

    13/5/2010 18:46:48 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015301.exe

    13/5/2010 18:46:49 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015324.exe

    13/5/2010 18:46:55 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015325.exe

    13/5/2010 18:46:56 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015328.exe

    13/5/2010 18:46:56 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015330.exe

    13/5/2010 18:47:05 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015331.exe

    13/5/2010 18:47:05 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015332.exe

    13/5/2010 18:47:05 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015334.exe

    13/5/2010 18:47:16 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015339.exe

    13/5/2010 18:47:16 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015342.exe

    13/5/2010 18:47:23 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015347.exe

    13/5/2010 18:47:23 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015348.exe

    13/5/2010 18:47:23 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015349.exe

    13/5/2010 18:47:30 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015350.exe

    13/5/2010 18:47:31 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015351.exe

    13/5/2010 18:47:33 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015352.exe

    13/5/2010 18:47:40 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015353.exe

    13/5/2010 18:47:40 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015354.exe

    13/5/2010 18:47:44 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015356.exe

    13/5/2010 18:47:45 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015357.exe

    13/5/2010 18:47:52 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015358.exe

    13/5/2010 18:47:52 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015359.exe

    13/5/2010 18:47:52 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015360.exe

    13/5/2010 18:47:58 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015361.exe

    13/5/2010 18:48:00 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015362.exe

    13/5/2010 18:48:03 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015363.exe

    13/5/2010 18:48:08 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015365.exe

    13/5/2010 18:48:09 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015367.exe

    13/5/2010 18:48:10 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015368.exe

    13/5/2010 18:48:18 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015369.exe

    13/5/2010 18:48:19 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015372.exe

    13/5/2010 18:48:19 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015371.exe

    13/5/2010 18:48:25 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015373.exe

    13/5/2010 18:48:33 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015374.exe

    13/5/2010 18:48:36 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015376.exe

    13/5/2010 18:48:36 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015375.exe

    13/5/2010 18:48:36 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015377.exe

    13/5/2010 18:48:42 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015378.EXE

    13/5/2010 18:48:47 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015380.EXE

    13/5/2010 18:48:47 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015381.EXE

    13/5/2010 18:48:55 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015382.EXE

    13/5/2010 18:49:01 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015383.exe

    13/5/2010 18:49:02 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015384.EXE

    13/5/2010 18:49:14 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015385.EXE

    13/5/2010 18:49:21 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015386.EXE

    13/5/2010 18:49:21 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015387.EXE

    13/5/2010 18:49:26 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015388.EXE

    13/5/2010 18:49:32 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015390.EXE

    13/5/2010 18:49:32 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015389.EXE

    13/5/2010 18:49:41 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015394.EXE

    13/5/2010 18:49:41 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015391.EXE

    13/5/2010 18:49:47 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015395.EXE

    13/5/2010 18:49:48 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015396.EXE

    13/5/2010 18:49:53 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015398.EXE

    13/5/2010 18:49:54 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015399.EXE

    13/5/2010 18:49:55 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015400.EXE

    13/5/2010 18:50:01 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015402.EXE

    13/5/2010 18:50:01 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015401.EXE

    13/5/2010 18:50:05 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015403.exe

    13/5/2010 18:50:11 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015405.exe

    13/5/2010 18:50:11 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015406.exe

    13/5/2010 18:50:15 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015407.exe

    13/5/2010 18:50:22 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015408.exe

    13/5/2010 18:50:22 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015410.exe

    13/5/2010 18:50:22 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015409.exe

    13/5/2010 18:50:27 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015411.exe

    13/5/2010 18:50:30 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015413.exe

    13/5/2010 18:50:34 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015414.exe

    13/5/2010 18:50:40 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015415.exe

    13/5/2010 18:50:41 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015416.exe

    13/5/2010 18:50:41 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015417.exe

    13/5/2010 18:50:50 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015418.exe

    13/5/2010 18:50:50 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015419.exe

    13/5/2010 18:50:50 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015421.exe

    13/5/2010 18:50:55 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015422.exe

    13/5/2010 18:51:05 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015423.exe

    13/5/2010 18:51:06 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015425.exe

    13/5/2010 18:51:06 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015424.exe

    13/5/2010 18:51:15 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015426.exe

    13/5/2010 18:51:16 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015427.exe

    13/5/2010 18:51:20 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015428.exe

    13/5/2010 18:51:22 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015429.exe

    13/5/2010 18:51:31 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015431.exe

    13/5/2010 18:51:32 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015430.exe

    13/5/2010 18:51:35 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015432.exe

    13/5/2010 18:51:36 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015433.exe

    13/5/2010 18:51:47 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015434.exe

    13/5/2010 18:51:47 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015435.exe

    13/5/2010 18:51:47 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015436.exe

    13/5/2010 18:51:50 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015437.exe

    13/5/2010 18:51:58 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015438.exe

    13/5/2010 18:51:58 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015439.exe

    13/5/2010 18:51:58 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015440.exe

    13/5/2010 18:52:04 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015442.exe

    13/5/2010 18:52:10 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015445.exe

    13/5/2010 18:52:10 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015448.exe

    13/5/2010 18:52:16 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015450.exe

    13/5/2010 18:52:18 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015451.exe

    13/5/2010 18:52:23 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015452.exe

    13/5/2010 18:52:27 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015461.exe

    13/5/2010 18:52:27 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015463.exe

    13/5/2010 18:52:28 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015464.exe

    13/5/2010 18:52:39 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015465.exe

    13/5/2010 18:52:39 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015468.EXE

    13/5/2010 18:52:39 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015469.exe

    13/5/2010 18:52:47 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015470.exe

    13/5/2010 18:52:47 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015472.exe

    13/5/2010 18:52:47 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015471.exe

    13/5/2010 18:52:56 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015474.exe

    13/5/2010 18:52:56 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015473.exe

    13/5/2010 18:52:56 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015475.exe

    13/5/2010 18:53:02 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015476.exe

    13/5/2010 18:53:05 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015477.exe

    13/5/2010 18:53:08 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015478.exe

    13/5/2010 18:53:08 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015479.exe

    13/5/2010 18:53:16 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015480.exe

    13/5/2010 18:53:16 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015481.exe

    13/5/2010 18:53:16 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015482.exe

    13/5/2010 18:53:22 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015483.exe

    13/5/2010 18:53:23 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015484.exe

    13/5/2010 18:53:30 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015488.exe

    13/5/2010 18:53:30 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015485.exe

    13/5/2010 18:53:35 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015489.exe

    13/5/2010 18:53:36 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015491.exe

    13/5/2010 18:53:39 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015492.exe

    13/5/2010 18:53:43 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015497.exe

    13/5/2010 18:53:45 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015499.exe

    13/5/2010 18:53:48 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015500.exe

    13/5/2010 18:53:51 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015502.exe

    13/5/2010 18:53:55 C:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP59\A0015504.exe

    13/5/2010 20:03:46 C:\WINDOWS\system32\picx\m45t3r.exe

    13/5/2010 21:05:22 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\SMSINST.EXE

    13/5/2010 21:05:25 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\SETUP.EXE

    13/5/2010 21:05:27 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\Common\TOOLS\BIND.EXE

    13/5/2010 21:05:35 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\Common\TOOLS\DEPENDS.EXE

    13/5/2010 21:05:38 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\Common\TOOLS\ERRLOOK.EXE

    13/5/2010 21:05:38 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\Common\TOOLS\DFVIEW.EXE

    13/5/2010 21:05:47 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\Common\TOOLS\HCRTF.EXE

    13/5/2010 21:05:49 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\Common\TOOLS\HCW.EXE

    13/5/2010 21:05:50 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\Common\TOOLS\IROTVIEW.EXE

    13/5/2010 21:05:54 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\Common\TOOLS\OLEVIEW.EXE

    13/5/2010 21:06:01 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\Common\TOOLS\TSTCON32.EXE

    13/5/2010 21:06:04 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\Common\TOOLS\UNDNAME.EXE

    13/5/2010 21:06:05 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\Common\TOOLS\WINDIFF.EXE

    13/5/2010 21:06:10 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\Common\TOOLS\APE\AECLIENT.EXE

    13/5/2010 21:06:29 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\Common\TOOLS\APE\AEQUEUE.EXE

    13/5/2010 21:06:56 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\Common\TOOLS\APE\AEWORKER.EXE

    13/5/2010 21:07:14 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\Common\TOOLS\APE\APEMREG.EXE

    13/5/2010 21:07:22 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\Common\TOOLS\CLIREG\CLIREG32.EXE

    13/5/2010 21:07:24 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\Common\TOOLS\VJ98\UNSUPPRT\TOOLS\ALL\JPMVIEW\JPMVIEW.EXE

    13/5/2010 21:07:24 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\Common\TOOLS\VS-ENT98\VANALYZR\KILLLEC.EXE

    13/5/2010 21:07:27 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\Common\TOOLS\VS-ENT98\VANALYZR\VALEC.EXE

    13/5/2010 21:07:33 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\Common\TOOLS\VS-ENT98\VANALYZR\VARPC.EXE

    13/5/2010 21:08:37 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\Common\TOOLS\VS-ENT98\VMODELER\MSVM.EXE

    13/5/2010 21:10:53 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\Common\TOOLS\VS-ENT98\VMODELER\RVBDILOG.EXE

    13/5/2010 21:11:46 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\Common\TOOLS\VS-ENT98\VMODELER\RVBREWIZ.EXE

    13/5/2010 21:12:08 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\Common\TOOLS\VS-ENT98\VMODELER\RVSINTMG.EXE

    13/5/2010 21:12:14 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\Common\TOOLS\VS-ENT98\VMODELER\RVSPRGDG.EXE

    13/5/2010 21:12:35 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\Common\TOOLS\WIN95\AVIEDIT.EXE

    13/5/2010 21:12:39 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\Common\TOOLS\WIN95\PVIEW95.EXE

    13/5/2010 21:12:47 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\Common\TOOLS\WINAPI\APILOAD.EXE

    13/5/2010 21:13:45 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\Keygen\Visual Studio 6 Keygen.exe

    13/5/2010 21:14:19 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\OS\MSAPPS\MSINFO\MSINFO32.EXE

    13/5/2010 21:14:33 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\OS\MSAPPS\REPOSTRY\MIGREPV2.EXE

    13/5/2010 21:14:53 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\OS\MSAPPS\REPOSTRY\REPBROWS.EXE

    13/5/2010 21:15:41 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\OS\MSAPPS\VBA\MSQRY32.EXE

    13/5/2010 21:19:31 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\SETUP\ACMSETUP.EXE

    13/5/2010 21:19:31 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\SETUP\ACOST.EXE

    13/5/2010 21:19:31 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\SETUP\ODBCCONF.EXE

    13/5/2010 21:19:31 D:\Documentos\Downloads\winamp.exe

    13/5/2010 21:19:47 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\SETUP\PKGINST.EXE

    13/5/2010 21:19:48 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\SETUP\WFCCLEAN.EXE

    13/5/2010 21:19:54 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\VB98\C2.exe

    13/5/2010 21:20:01 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\VB98\cvpack.exe

    13/5/2010 21:20:09 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\VB98\link.exe

    13/5/2010 21:20:10 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\VB98\TSQL\VBSDICLI.EXE

    13/5/2010 21:20:15 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\VB98\WIZARDS\PDWIZARD\MAKECAB.EXE

    13/5/2010 21:20:29 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\VB98\WIZARDS\PDWIZARD\PDCMDLN.EXE

    13/5/2010 21:20:33 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\VB98\WIZARDS\PDWIZARD\SETUP.EXE

    13/5/2010 21:20:54 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\VB98\WIZARDS\PDWIZARD\SETUP1.EXE

    13/5/2010 21:21:07 D:\Documentos\Charlei\Programação\Visual Basic\V_B_6\Visual Basic 6\VB98\WIZARDS\PDWIZARD\ST6UNST.EXE

    13/5/2010 21:22:10 D:\Documentos\Downloads\ComboFix.exe

    13/5/2010 21:23:42 D:\Documentos\Minhas músicas\por quem cantam os cardeais.wma

    13/5/2010 21:23:42 D:\Documentos\Minhas músicas\ave sonora.wma

    13/5/2010 21:32:25 D:\Drivers\Olinda\Chip Set\ChipSet\SETUP.exe

    13/5/2010 21:32:28 D:\Drivers\Olinda\Chip Set\ChipSet\INSTMSIA.exe

    13/5/2010 21:32:28 D:\Drivers\Olinda\Chip Set\ChipSet\INSTMSIW.exe

    13/5/2010 21:32:46 D:\Drivers\Olinda\Vídeo\32\s3minset.exe

    13/5/2010 21:32:47 D:\Drivers\Olinda\Vídeo\32\S3TrayP.exe

    13/5/2010 21:32:54 D:\Games\call_of_juarez[www.gamevicio.com.br].exe

    13/5/2010 21:33:03 D:\Drivers\Olinda\Vídeo\32\setup.exe

    13/5/2010 21:33:04 D:\Drivers\Olinda\Vídeo\32\VTTimer.exe

    13/5/2010 21:33:04 D:\Drivers\Olinda\Áudio\5211_whql\ChCfg.exe

    13/5/2010 21:34:00 D:\Drivers\Olinda\Áudio\5211_whql\kb888111_srv03.exe

    13/5/2010 21:34:08 D:\Drivers\Olinda\Áudio\5211_whql\RtlUpd_exe.exe

    13/5/2010 21:34:09 D:\Drivers\Olinda\Áudio\5211_whql\SetCDfmt.exe

    13/5/2010 21:34:44 D:\Drivers\Olinda\Áudio\5211_whql\Setup.exe

    13/5/2010 21:35:21 D:\Drivers\Olinda\Áudio\5211_whql\WindowsServer2003-KB901105-v3-x86-ENU.exe

    13/5/2010 21:35:27 D:\Drivers\Olinda\Áudio\5211_whql\WindowsServer2003.WindowsXP-KB901105-v3-x64-ENU.exe

    13/5/2010 21:35:28 D:\Drivers\Olinda\Áudio\5211_whql\MSHDQFE\Win2K3\us\kb888111srvrtm.exe

    13/5/2010 21:36:21 D:\Drivers\Olinda\Áudio\5211_whql\MSHDQFE\Win2K_XP\us\kb888111w2ksp4.exe

    13/5/2010 21:37:49 D:\Drivers\Olinda\Áudio\5211_whql\WDM\Alcmtr.exe

    13/5/2010 21:38:45 D:\Drivers\Olinda\Áudio\5211_whql\WDM\RtlUpd.exe

    13/5/2010 21:38:51 D:\Drivers\Olinda\Áudio\5211_whql\WDM\SoundMan.exe

    13/5/2010 21:38:53 D:\Games\Age Of Mythology\MD5Checker.exe

    13/5/2010 21:39:15 D:\Games\Crysis\AutoRunCD.exe

    13/5/2010 21:39:18 D:\Games\Crysis\crysis[www.gamevicio.com.br].exe

    13/5/2010 21:40:28 D:\Games\Crysis\setup.exe

    13/5/2010 21:40:53 D:\Games\Crysis\punkbustersvc\pbsvc.exe

    13/5/2010 21:47:42 D:\Games\Sniper Elite\sniper_elite[www.gamevicio.com.br].exe

    13/5/2010 21:48:31 D:\Games\Crysis\tools\Crysis_code.exe

    13/5/2010 21:58:00 D:\Soft\ChromeSetup.exe

    13/5/2010 21:58:36 D:\Soft\Daemon tools lite.exe

    13/5/2010 21:58:44 D:\Soft\daemon4304-lite.exe

    13/5/2010 22:01:12 D:\Soft\download-ComboFix-baixaki.exe

    13/5/2010 22:42:15 D:\Games\Crysis\Crysis.part1.rar/Crysis/AutoRunCD.exe

    13/5/2010 22:43:33 D:\Soft\Adobe Reader 9\Setup.exe

    13/5/2010 22:43:34 D:\Soft\Alcohol 120% Final Retail Vs. 1.9.8.7612 + Crack\RmK FreE Loader.exe

    13/5/2010 22:43:40 D:\Soft\Alcohol 120% Final Retail Vs. 1.9.8.7612 + Crack\Alcohol120_retail_1.9.8.7612.exe

    13/5/2010 22:51:34 D:\Games\Crysis\Crysis.part2.rar/Crysis/punkbustersvc/pbsvc.exe

    14/5/2010 06:07:32 D:\Soft\Corel\cdrsuitkg.com.exe

    14/5/2010 06:10:02 D:\Soft\Delphi 7.0\Delphi 7\ib6.5\ADOBE\RS40ENG.exe

    14/5/2010 06:10:03 D:\Games\Crysis\Crysis.part2.rar/Crysis/setup.exe

    14/5/2010 06:10:05 D:\Soft\Delphi 7.0\Delphi 7\ib6.5\CLIENT\BIN\GBAK.exe

    14/5/2010 06:10:16 D:\Soft\Delphi 7.0\Delphi 7\ib6.5\CLIENT\BIN\GFIX.exe

    14/5/2010 06:10:18 D:\Soft\Delphi 7.0\Delphi 7\ib6.5\CLIENT\BIN\GPRE.exe

    14/5/2010 06:11:41 D:\Soft\Delphi 7.0\Delphi 7\ib6.5\CLIENT\BIN\GSEC.exe

    14/5/2010 06:12:02 D:\Soft\Delphi 7.0\Delphi 7\ib6.5\CLIENT\BIN\iblicense.exe

    14/5/2010 06:18:52 D:\Soft\Delphi 7.0\Delphi 7\ib6.5\IBX\IBXBCB463Upd.exe

    14/5/2010 06:18:53 D:\Soft\Delphi 7.0\Delphi 7\ib6.5\IBX\IBXDP463Upd.exe

    14/5/2010 06:19:04 D:\Soft\Delphi 7.0\Delphi 7\ib6.5\IBX\IBXDP601aUpd.exe

    14/5/2010 06:19:38 D:\Soft\Delphi 7.0\Delphi 7\ib6.5\IBX\IBXDP602Upd.exe

    14/5/2010 06:21:42 D:\Soft\Delphi 7.0\Delphi 7\ib6.5\ODBC\SETUP.exe

    14/5/2010 06:21:43 D:\Soft\Delphi 7.0\Delphi 7\ib6.5\SERVER\BIN\GFIX.exe

    14/5/2010 06:21:43 D:\Soft\Delphi 7.0\Delphi 7\ib6.5\SERVER\BIN\GBAK.exe

    14/5/2010 06:21:55 D:\Soft\Delphi 7.0\Delphi 7\ib6.5\SERVER\BIN\GPRE.exe

    14/5/2010 06:22:03 D:\Soft\Delphi 7.0\Delphi 7\ib6.5\SERVER\BIN\GSEC.exe

    14/5/2010 06:22:06 D:\Soft\Delphi 7.0\Delphi 7\ib6.5\SERVER\BIN\GSTAT.exe

    14/5/2010 06:22:17 D:\Soft\Delphi 7.0\Delphi 7\ib6.5\SERVER\BIN\IBGUARD.exe

    14/5/2010 06:22:20 D:\Soft\Delphi 7.0\Delphi 7\ib6.5\SERVER\BIN\iblicense.exe

    14/5/2010 06:22:24 D:\Soft\Delphi 7.0\Delphi 7\ib6.5\SERVER\BIN\IBLOCKPR.exe

    14/5/2010 06:22:34 D:\Soft\Delphi 7.0\Delphi 7\ib6.5\SERVER\BIN\ISQL.exe

    14/5/2010 06:22:51 D:\Soft\Delphi 7.0\Delphi 7\Info\Extras\jre1-2-2.exe

    14/5/2010 06:22:59 D:\Soft\Delphi 7.0\Delphi 7\Info\Extras\visibroker45\vbver.exe

    14/5/2010 06:22:59 D:\Soft\Delphi 7.0\Delphi 7\Info\Extras\visibroker45\Setup.exe

    14/5/2010 06:23:04 D:\Soft\Delphi 7.0\Delphi 7\Info\Extras\visibroker45\_ISDel.exe

    14/5/2010 06:23:19 D:\Soft\Delphi 7.0\Delphi 7\Install\setup.exe

    14/5/2010 06:23:21 D:\Soft\Delphi 7.0\Delphi 7\Install\instmsia.exe

    14/5/2010 06:23:22 D:\Soft\Delphi 7.0\Delphi 7\Install\instmsiw.exe

    14/5/2010 06:24:02 D:\Soft\Delphi 7.0\Delphi 7\Install\program files\Borland\Delphi7\Bin\CABARC.exe

    14/5/2010 06:38:17 D:\Games\Crysis\Crysis.part1.rar/Crysis/comrade/ComradeSetup.exe

    14/5/2010 06:44:09 D:\Games\Crysis\Crysis.part1.rar/Crysis/crysis[www.gamevicio.com.br].exe

    14/5/2010 06:45:00 D:\Soft\Delphi 7.0\Delphi 7\ISxpress\setup.exe

    14/5/2010 06:45:01 D:\Soft\Delphi 7.0\Delphi 7\rdebug\Setup.exe

    14/5/2010 06:45:01 D:\Soft\Delphi 7.0\Delphi 7\ISxpress\instmsia.exe

    14/5/2010 06:45:08 D:\Soft\Delphi 7.0\Delphi 7\rdebug\_ISDel.exe

    14/5/2010 06:45:11 D:\Soft\Delphi 7.0\Delphi 7\TeamSource\TeamSource.exe

    14/5/2010 06:45:21 D:\Soft\Drivers\Computador Cristiane\Audio\AUDIO\RTL653\alcupd.exe

    14/5/2010 06:45:22 D:\Soft\Drivers\Computador Cristiane\Audio\AUDIO\RTL653\ChCfg.exe

    14/5/2010 06:45:29 D:\Soft\Drivers\Computador Cristiane\Audio\AUDIO\RTL653\GETDXVER.exe

    14/5/2010 06:45:31 D:\Soft\Drivers\Computador Cristiane\Audio\AUDIO\RTL653\SetCDfmt.exe

    14/5/2010 06:45:35 D:\Soft\Drivers\Computador Cristiane\Audio\AUDIO\RTL653\setup.exe

    14/5/2010 06:45:40 D:\Soft\Drivers\Computador Cristiane\Audio\AUDIO\RTL653\Ap\AvRack2.exe

    14/5/2010 06:45:57 D:\Soft\Drivers\Computador Cristiane\Audio\AUDIO\RTL653\Ap\RtlRack.exe

    14/5/2010 06:45:59 D:\Soft\Drivers\Computador Cristiane\Audio\AUDIO\RTL653\WDM\SoundMan.exe

    14/5/2010 06:46:11 D:\Soft\Drivers\Computador Cristiane\Rede\LAN\NICSET\NICSET-2.12.exe

    14/5/2010 06:48:18 D:\Games\Crysis\Crysis.part1.rar/Crysis/directx9c/DXSETUP.exe

    14/5/2010 06:57:16 D:\Soft\E-trust\ComboFix.exe

    14/5/2010 07:49:51 D:\Games\Crysis\Crysis.part1.rar/Crysis/instmsi30.exe

    14/5/2010 07:57:08 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP39\A0001712.EXE

    14/5/2010 07:57:19 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP39\A0001751.exe

    14/5/2010 07:57:47 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP42\A0001813.EXE

    14/5/2010 07:58:06 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP42\A0001852.exe

    14/5/2010 07:59:01 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP42\A0001968.exe

    14/5/2010 07:59:37 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP43\A0002005.EXE

    14/5/2010 07:59:42 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP44\A0002038.EXE

    14/5/2010 07:59:46 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP44\A0002054.exe

    14/5/2010 07:59:50 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP44\A0002077.exe

    14/5/2010 08:00:38 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP44\A0002193.exe

    14/5/2010 08:01:16 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP45\A0002233.exe/script.au3

    14/5/2010 08:01:16 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002241.EXE

    14/5/2010 08:01:17 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002243.exe

    14/5/2010 08:01:18 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002291.exe

    14/5/2010 10:19:05 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP45\A0002233.exe/8F7BEFBB53E60320.au3.tbl.decoded

    14/5/2010 10:19:06 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002245.EXE

    14/5/2010 10:19:17 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002250.exe

    14/5/2010 10:19:17 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002251.exe

    14/5/2010 10:19:17 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002252.exe

    14/5/2010 10:19:37 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002255.exe

    14/5/2010 10:19:37 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002258.exe

    14/5/2010 10:19:39 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002259.exe

    14/5/2010 10:19:44 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002260.exe

    14/5/2010 10:19:55 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002261.exe

    14/5/2010 10:19:56 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002262.exe

    14/5/2010 10:20:34 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002264.exe

    14/5/2010 10:20:34 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002265.exe

    14/5/2010 10:20:34 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002266.exe

    14/5/2010 10:20:53 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002272.exe

    14/5/2010 10:20:54 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002275.exe

    14/5/2010 10:20:57 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002276.exe

    14/5/2010 10:21:10 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002277.exe

    14/5/2010 10:21:14 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002278.exe

    14/5/2010 10:21:30 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002281.exe

    14/5/2010 10:22:00 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002283.exe

    14/5/2010 10:22:01 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002284.exe

    14/5/2010 10:22:08 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002279.exe

    14/5/2010 10:22:28 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002297.exe

    14/5/2010 10:22:44 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002285.exe

    14/5/2010 10:22:46 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002286.exe

    14/5/2010 10:23:18 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002295.exe

    14/5/2010 10:23:22 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002294.exe

    14/5/2010 10:23:32 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002298.exe

    14/5/2010 10:23:51 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002299.exe

    14/5/2010 10:24:32 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002302.exe

    14/5/2010 10:24:34 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002303.exe

    14/5/2010 10:24:36 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002304.exe

    14/5/2010 10:25:00 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002305.exe

    14/5/2010 10:25:00 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002308.exe

    14/5/2010 10:25:01 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002311.exe

    14/5/2010 10:25:26 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002316.exe

    14/5/2010 10:25:26 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002317.EXE

    14/5/2010 10:25:26 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002314.exe

    14/5/2010 10:25:36 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002318.exe

    14/5/2010 10:25:51 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002319.exe

    14/5/2010 10:26:01 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002322.exe

    14/5/2010 10:26:02 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002401.exe

    14/5/2010 10:26:08 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002330.exe

    14/5/2010 10:26:11 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002329.exe

    14/5/2010 10:26:21 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002331.exe

    14/5/2010 10:26:34 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002335.exe

    14/5/2010 10:26:51 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002336.exe

    14/5/2010 10:26:51 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002337.exe

    14/5/2010 10:27:03 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002338.exe

    14/5/2010 10:27:04 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002339.exe

    14/5/2010 10:27:05 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002342.exe

    14/5/2010 10:27:23 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002344.exe

    14/5/2010 10:27:23 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002346.EXE

    14/5/2010 10:27:23 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002347.EXE

    14/5/2010 10:27:38 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002351.EXE

    14/5/2010 10:27:48 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002355.exe

    14/5/2010 10:28:01 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002357.EXE

    14/5/2010 10:28:05 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002358.EXE

    14/5/2010 10:28:13 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002359.exe

    14/5/2010 10:28:29 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002360.EXE

    14/5/2010 10:28:31 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002368.exe

    14/5/2010 10:28:37 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002371.exe

    14/5/2010 10:28:50 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002374.exe

    14/5/2010 10:29:01 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002375.exe

    14/5/2010 10:29:01 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002376.EXE

    14/5/2010 10:29:15 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002377.exe

    14/5/2010 10:29:15 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002378.exe

    14/5/2010 10:29:32 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002381.exe

    14/5/2010 10:29:33 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002385.exe

    14/5/2010 10:29:47 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002386.exe

    14/5/2010 10:29:47 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP46\A0002387.exe

    14/5/2010 10:30:29 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002494.exe

    14/5/2010 10:31:00 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002443.EXE

    14/5/2010 10:31:01 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002444.EXE

    14/5/2010 10:31:21 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002446.exe

    14/5/2010 10:31:31 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002448.EXE

    14/5/2010 10:31:40 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002453.exe

    14/5/2010 10:31:40 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002454.exe

    14/5/2010 10:31:40 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002455.exe

    14/5/2010 10:31:56 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002456.exe

    14/5/2010 10:31:56 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002458.exe

    14/5/2010 10:31:56 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002459.exe

    14/5/2010 10:32:04 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002460.exe

    14/5/2010 10:32:19 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002461.exe

    14/5/2010 10:32:21 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002462.exe

    14/5/2010 10:32:28 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002463.exe

    14/5/2010 10:32:37 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002464.exe

    14/5/2010 10:32:37 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002465.exe

    14/5/2010 10:32:43 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002500.exe

    14/5/2010 10:32:56 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002467.exe

    14/5/2010 10:32:56 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002468.exe

    14/5/2010 10:32:57 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002469.exe

    14/5/2010 10:33:17 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002475.exe

    14/5/2010 10:33:23 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002477.exe

    14/5/2010 10:33:23 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002478.exe

    14/5/2010 10:33:36 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002479.exe

    14/5/2010 10:33:36 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002480.exe

    14/5/2010 10:33:39 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002501.exe

    14/5/2010 10:33:51 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002481.exe

    14/5/2010 10:34:09 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002484.exe

    14/5/2010 10:34:15 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002485.exe

    14/5/2010 10:34:24 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002482.exe

    14/5/2010 10:34:30 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002486.exe

    14/5/2010 10:34:33 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002487.exe

    14/5/2010 10:34:55 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002488.exe

    14/5/2010 10:35:11 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002489.exe

    14/5/2010 10:35:25 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002507.exe

    14/5/2010 10:35:35 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002497.exe

    14/5/2010 10:35:35 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002498.exe

    14/5/2010 10:35:37 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002502.exe

    14/5/2010 10:35:57 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002505.exe

    14/5/2010 10:36:10 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002506.exe

    14/5/2010 10:36:10 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002508.exe

    14/5/2010 10:36:26 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002509.exe

    14/5/2010 10:36:28 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002511.exe

    14/5/2010 10:36:43 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002514.exe

    14/5/2010 10:36:44 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002604.exe

    14/5/2010 10:36:48 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002517.exe

    14/5/2010 10:37:01 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002519.exe

    14/5/2010 10:37:01 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002520.EXE

    14/5/2010 10:37:19 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002521.exe

    14/5/2010 10:37:19 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002522.exe

    14/5/2010 10:37:35 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002525.exe

    14/5/2010 10:37:37 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002533.exe

    14/5/2010 10:37:37 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002532.exe

    14/5/2010 10:37:50 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002534.exe

    14/5/2010 10:37:51 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002538.exe

    14/5/2010 10:38:06 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002539.exe

    14/5/2010 10:38:06 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002540.exe

    14/5/2010 10:38:11 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002541.exe

    14/5/2010 10:38:27 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002542.exe

    14/5/2010 10:38:28 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002545.exe

    14/5/2010 10:38:28 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002546.exe

    14/5/2010 10:38:45 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002547.exe

    14/5/2010 10:38:47 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002549.EXE

    14/5/2010 10:38:52 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002550.EXE

    14/5/2010 10:39:03 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002554.EXE

    14/5/2010 10:39:22 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002558.exe

    14/5/2010 10:39:26 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002560.EXE

    14/5/2010 10:39:26 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002561.EXE

    14/5/2010 10:39:36 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002562.exe

    14/5/2010 10:40:07 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002563.EXE

    14/5/2010 10:40:08 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002571.exe

    14/5/2010 10:40:14 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002574.exe

    14/5/2010 10:40:26 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002577.exe

    14/5/2010 10:40:27 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002674.exe

    14/5/2010 10:40:27 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002578.exe

    14/5/2010 10:40:46 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002579.EXE

    14/5/2010 10:40:50 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002580.exe

    14/5/2010 10:40:51 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002581.exe

    14/5/2010 10:41:09 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002584.exe

    14/5/2010 10:41:11 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002587.exe

    14/5/2010 10:41:15 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002588.exe

    14/5/2010 10:41:17 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002589.exe

    14/5/2010 10:41:23 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002590.exe

    14/5/2010 10:42:17 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002680.exe

    14/5/2010 10:42:24 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002623.EXE

    14/5/2010 10:42:25 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002624.EXE

    14/5/2010 10:42:38 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002681.exe

    14/5/2010 10:42:44 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002626.exe

    14/5/2010 10:42:45 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002628.EXE

    14/5/2010 10:43:02 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002634.exe

    14/5/2010 10:43:02 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002633.exe

    14/5/2010 10:43:02 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002635.exe

    14/5/2010 10:43:05 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002636.exe

    14/5/2010 10:43:14 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002638.exe

    14/5/2010 10:43:15 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002639.exe

    14/5/2010 10:43:21 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002640.exe

    14/5/2010 10:43:26 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002641.exe

    14/5/2010 10:43:39 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002642.exe

    14/5/2010 10:43:41 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002643.exe

    14/5/2010 10:43:53 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002644.exe

    14/5/2010 10:44:00 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002645.exe

    14/5/2010 10:44:02 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002647.exe

    14/5/2010 10:44:09 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002648.exe

    14/5/2010 10:44:10 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002649.exe

    14/5/2010 10:44:12 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002687.exe

    14/5/2010 10:44:20 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002655.exe

    14/5/2010 10:44:21 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002657.exe

    14/5/2010 10:44:27 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002658.exe

    14/5/2010 10:44:27 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002659.exe

    14/5/2010 10:44:30 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002660.exe

    14/5/2010 10:44:40 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002661.exe

    14/5/2010 10:44:46 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002664.exe

    14/5/2010 10:44:49 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002665.exe

    14/5/2010 10:45:11 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002662.exe

    14/5/2010 10:45:14 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002666.exe

    14/5/2010 10:45:14 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002667.exe

    14/5/2010 10:45:16 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002787.exe

    14/5/2010 10:45:28 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002668.exe

    14/5/2010 10:45:37 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002669.exe

    14/5/2010 10:45:48 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002677.exe

    14/5/2010 10:45:52 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002678.exe

    14/5/2010 10:45:52 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002682.exe

    14/5/2010 10:46:09 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002685.exe

    14/5/2010 10:46:10 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002688.exe

    14/5/2010 10:46:13 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002686.exe

    14/5/2010 10:46:13 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002689.exe

    14/5/2010 10:46:15 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002691.exe

    14/5/2010 10:46:21 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002694.exe

    14/5/2010 10:46:26 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002699.exe

    14/5/2010 10:46:27 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002697.exe

    14/5/2010 10:46:29 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002700.EXE

    14/5/2010 10:46:32 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002701.exe

    14/5/2010 10:46:34 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002702.exe

    14/5/2010 10:46:37 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002705.exe

    14/5/2010 10:46:39 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002712.exe

    14/5/2010 10:46:41 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002713.exe

    14/5/2010 10:46:41 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002714.exe

    14/5/2010 10:46:46 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002718.exe

    14/5/2010 10:46:47 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002719.exe

    14/5/2010 10:46:50 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002720.exe

    14/5/2010 10:46:51 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002721.exe

    14/5/2010 10:46:51 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002722.exe

    14/5/2010 10:46:55 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002725.exe

    14/5/2010 10:46:57 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002726.exe

    14/5/2010 10:46:59 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002727.exe

    14/5/2010 10:47:01 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002729.EXE

    14/5/2010 10:47:03 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002730.EXE

    14/5/2010 10:47:05 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002734.EXE

    14/5/2010 10:47:07 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002738.exe

    14/5/2010 10:47:10 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002740.EXE

    14/5/2010 10:47:12 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002742.exe

    14/5/2010 10:47:12 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002741.EXE

    14/5/2010 10:47:18 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002743.EXE

    14/5/2010 10:47:31 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002751.exe

    14/5/2010 10:47:32 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002754.exe

    14/5/2010 10:47:35 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002757.exe

    14/5/2010 10:47:44 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002758.exe

    14/5/2010 10:47:44 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002759.EXE

    14/5/2010 10:47:49 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002760.exe

    14/5/2010 10:47:54 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002761.exe

    14/5/2010 10:47:54 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002764.exe

    14/5/2010 10:48:05 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002767.exe

    14/5/2010 10:48:05 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002768.exe

    14/5/2010 10:48:05 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002867.exe

    14/5/2010 10:48:07 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002769.exe

    14/5/2010 10:48:08 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP47\A0002770.exe

    14/5/2010 10:49:06 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002816.EXE

    14/5/2010 10:49:09 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002817.EXE

    14/5/2010 10:49:12 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002819.exe

    14/5/2010 10:49:14 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002821.EXE

    14/5/2010 10:49:18 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002826.exe

    14/5/2010 10:49:18 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002827.exe

    14/5/2010 10:49:18 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002828.exe

    14/5/2010 10:49:20 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002873.exe

    14/5/2010 10:49:24 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002829.exe

    14/5/2010 10:49:25 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002831.exe

    14/5/2010 10:49:25 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002832.exe

    14/5/2010 10:49:32 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002833.exe

    14/5/2010 10:49:33 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002834.exe

    14/5/2010 10:49:33 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002835.exe

    14/5/2010 10:49:37 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002836.exe

    14/5/2010 10:49:39 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002837.exe

    14/5/2010 10:49:41 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002838.exe

    14/5/2010 10:49:44 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002840.exe

    14/5/2010 10:49:44 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002841.exe

    14/5/2010 10:49:48 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002842.exe

    14/5/2010 10:49:52 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002848.exe

    14/5/2010 10:49:53 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002874.exe

    14/5/2010 10:49:55 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002850.exe

    14/5/2010 10:49:56 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002851.exe

    14/5/2010 10:49:56 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002852.exe

    14/5/2010 10:50:02 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002853.exe

    14/5/2010 10:50:05 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002854.exe

    14/5/2010 10:50:07 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002857.exe

    14/5/2010 10:50:11 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002858.exe

    14/5/2010 10:50:13 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002859.exe

    14/5/2010 10:50:15 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002860.exe

    14/5/2010 10:50:20 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002861.exe

    14/5/2010 10:50:20 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002862.exe

    14/5/2010 10:50:21 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002855.exe

    14/5/2010 10:50:29 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002870.exe

    14/5/2010 10:50:36 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002871.exe

    14/5/2010 10:50:44 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002875.exe

    14/5/2010 10:50:56 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002880.exe

    14/5/2010 10:51:03 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002878.exe

    14/5/2010 10:51:09 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002879.exe

    14/5/2010 10:51:10 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002881.exe

    14/5/2010 10:51:10 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002882.exe

    14/5/2010 10:51:24 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002884.exe

    14/5/2010 10:51:24 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002887.exe

    14/5/2010 10:51:34 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002892.exe

    14/5/2010 10:51:34 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002890.exe

    14/5/2010 10:51:35 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002977.exe

    14/5/2010 10:51:46 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002893.EXE

    14/5/2010 10:51:47 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002894.exe

    14/5/2010 10:51:58 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002895.exe

    14/5/2010 10:52:01 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002898.exe

    14/5/2010 10:52:06 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002906.exe

    14/5/2010 10:52:07 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002905.exe

    14/5/2010 10:52:08 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002907.exe

    14/5/2010 10:52:14 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002911.exe

    14/5/2010 10:52:15 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002912.exe

    14/5/2010 10:52:20 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002913.exe

    14/5/2010 10:52:26 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002914.exe

    14/5/2010 10:52:27 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002915.exe

    14/5/2010 10:52:28 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002918.exe

    14/5/2010 10:52:33 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002919.exe

    14/5/2010 10:52:37 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002920.exe

    14/5/2010 10:52:39 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002922.EXE

    14/5/2010 10:52:43 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002923.EXE

    14/5/2010 10:52:44 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002927.EXE

    14/5/2010 10:52:54 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002931.exe

    14/5/2010 10:52:55 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002933.EXE

    14/5/2010 10:53:00 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002934.EXE

    14/5/2010 10:53:01 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002935.exe

    14/5/2010 10:53:13 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002936.EXE

    14/5/2010 10:53:20 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002944.exe

    14/5/2010 10:53:20 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002947.exe

    14/5/2010 10:53:23 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002950.exe

    14/5/2010 10:53:25 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002951.exe

    14/5/2010 10:53:27 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002952.EXE

    14/5/2010 10:53:31 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002953.exe

    14/5/2010 10:53:31 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002954.exe

    14/5/2010 10:53:35 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002957.exe

    14/5/2010 10:53:36 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002960.exe

    14/5/2010 10:53:39 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002961.exe

    14/5/2010 10:53:40 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002962.exe

    14/5/2010 10:53:42 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP48\A0002963.exe

    14/5/2010 10:54:47 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004074.EXE

    14/5/2010 10:54:47 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004075.EXE

    14/5/2010 10:54:47 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004077.exe

    14/5/2010 10:54:52 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004079.EXE

    14/5/2010 10:54:55 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004084.exe

    14/5/2010 10:54:55 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004085.exe

    14/5/2010 10:54:56 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004086.exe

    14/5/2010 10:54:59 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004087.exe

    14/5/2010 10:55:01 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004089.exe

    14/5/2010 10:55:02 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004090.exe

    14/5/2010 10:55:05 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004125.exe

    14/5/2010 10:55:05 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004091.exe

    14/5/2010 10:55:06 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004092.exe

    14/5/2010 10:55:09 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004093.exe

    14/5/2010 10:55:14 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004094.exe

    14/5/2010 10:55:16 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004095.exe

    14/5/2010 10:55:18 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004096.exe

    14/5/2010 10:55:21 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004098.exe

    14/5/2010 10:55:24 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004099.exe

    14/5/2010 10:55:24 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004100.exe

    14/5/2010 10:55:28 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004106.exe

    14/5/2010 10:55:30 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004108.exe

    14/5/2010 10:55:31 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004109.exe

    14/5/2010 10:55:33 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004110.exe

    14/5/2010 10:55:36 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004111.exe

    14/5/2010 10:55:40 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004112.exe

    14/5/2010 10:55:41 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004115.exe

    14/5/2010 10:55:48 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004116.exe

    14/5/2010 10:55:49 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004117.exe

    14/5/2010 10:55:52 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004118.exe

    14/5/2010 10:55:56 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004119.exe

    14/5/2010 10:55:57 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004120.exe

    14/5/2010 10:56:00 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004113.exe

    14/5/2010 10:56:04 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004127.exe

    14/5/2010 10:56:05 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004131.exe

    14/5/2010 10:56:10 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004128.exe

    14/5/2010 10:56:15 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004129.exe

    14/5/2010 10:56:25 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004132.exe

    14/5/2010 10:56:28 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004133.exe

    14/5/2010 10:56:42 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004136.exe

    14/5/2010 10:56:44 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004138.exe

    14/5/2010 10:56:45 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004137.exe

    14/5/2010 10:57:16 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004238.exe

    14/5/2010 10:57:17 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004239.exe

    14/5/2010 10:57:19 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004241.exe

    14/5/2010 10:57:22 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004244.exe

    14/5/2010 10:57:26 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004249.exe

    14/5/2010 10:57:26 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004247.exe

    14/5/2010 10:57:27 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004250.EXE

    14/5/2010 10:57:29 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004251.exe

    14/5/2010 10:57:34 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004252.exe

    14/5/2010 10:57:34 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004255.exe

    14/5/2010 10:57:39 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004263.exe

    14/5/2010 10:57:41 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004264.exe

    14/5/2010 10:57:41 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004262.exe

    14/5/2010 10:57:45 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004268.exe

    14/5/2010 10:57:46 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004269.exe

    14/5/2010 10:57:50 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004270.exe

    14/5/2010 10:57:52 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004271.exe

    14/5/2010 10:57:53 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004272.exe

    14/5/2010 10:57:54 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004275.exe

    14/5/2010 10:57:57 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004334.exe

    14/5/2010 10:57:59 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004276.exe

    14/5/2010 10:58:00 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004277.exe

    14/5/2010 10:58:02 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004279.EXE

    14/5/2010 10:58:08 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004280.EXE

    14/5/2010 10:58:12 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004282.exe

    14/5/2010 10:58:13 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004284.EXE

    14/5/2010 10:58:16 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004288.exe

    14/5/2010 10:58:20 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004290.EXE

    14/5/2010 10:58:21 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004291.EXE

    14/5/2010 10:58:25 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004292.exe

    14/5/2010 10:58:25 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004293.EXE

    14/5/2010 10:58:29 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004301.exe

    14/5/2010 10:58:29 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004304.exe

    14/5/2010 10:58:33 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004308.exe

    14/5/2010 10:58:34 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004307.exe

    14/5/2010 10:58:36 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004309.EXE

    14/5/2010 10:58:36 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004310.exe

    14/5/2010 10:58:41 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004311.exe

    14/5/2010 10:58:42 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004314.exe

    14/5/2010 10:58:46 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004317.exe

    14/5/2010 10:58:47 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004318.exe

    14/5/2010 10:58:50 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004319.exe

    14/5/2010 10:58:52 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP51\A0004320.exe

    14/5/2010 10:59:29 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004421.EXE

    14/5/2010 10:59:29 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004422.EXE

    14/5/2010 10:59:29 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004424.exe

    14/5/2010 10:59:34 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004426.EXE

    14/5/2010 10:59:35 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004431.exe

    14/5/2010 10:59:38 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004432.exe

    14/5/2010 10:59:39 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004433.exe

    14/5/2010 10:59:39 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004434.exe

    14/5/2010 10:59:43 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004436.exe

    14/5/2010 10:59:44 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004472.exe

    14/5/2010 10:59:45 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004437.exe

    14/5/2010 10:59:48 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004438.exe

    14/5/2010 10:59:50 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004439.exe

    14/5/2010 10:59:54 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004440.exe

    14/5/2010 10:59:55 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004441.exe

    14/5/2010 10:59:57 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004442.exe

    14/5/2010 11:00:02 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004443.exe

    14/5/2010 11:00:03 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004445.exe

    14/5/2010 11:00:04 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004446.exe

    14/5/2010 11:00:07 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004447.exe

    14/5/2010 11:00:11 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004453.exe

    14/5/2010 11:00:14 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004455.exe

    14/5/2010 11:00:15 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004456.exe

    14/5/2010 11:00:15 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004457.exe

    14/5/2010 11:00:19 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004458.exe

    14/5/2010 11:00:23 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004459.exe

    14/5/2010 11:00:24 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004462.exe

    14/5/2010 11:00:32 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004463.exe

    14/5/2010 11:00:34 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004464.exe

    14/5/2010 11:00:36 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004465.exe

    14/5/2010 11:00:41 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004466.exe

    14/5/2010 11:00:43 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004460.exe

    14/5/2010 11:00:43 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004467.exe

    14/5/2010 11:00:44 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004478.exe

    14/5/2010 11:00:48 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004474.exe

    14/5/2010 11:00:55 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004476.exe

    14/5/2010 11:00:59 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004475.exe

    14/5/2010 11:01:11 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004479.exe

    14/5/2010 11:01:14 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004480.exe

    14/5/2010 11:01:28 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004483.exe

    14/5/2010 11:01:30 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004485.exe

    14/5/2010 11:01:31 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004484.exe

    14/5/2010 11:01:38 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004487.EXE

    14/5/2010 11:01:40 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004489.EXE

    14/5/2010 11:01:45 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004510.EXE

    14/5/2010 11:01:51 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0004532.exe

    14/5/2010 11:01:59 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005421.EXE

    14/5/2010 11:01:59 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005422.EXE

    14/5/2010 11:01:59 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005424.exe

    14/5/2010 11:02:05 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005426.EXE

    14/5/2010 11:02:07 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005431.exe

    14/5/2010 11:02:08 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005432.exe

    14/5/2010 11:02:10 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005433.exe

    14/5/2010 11:02:12 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005434.exe

    14/5/2010 11:02:13 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005436.exe

    14/5/2010 11:02:14 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005472.exe

    14/5/2010 11:02:15 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005437.exe

    14/5/2010 11:02:18 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005438.exe

    14/5/2010 11:02:19 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005439.exe

    14/5/2010 11:02:21 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005473.exe

    14/5/2010 11:02:27 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005440.exe

    14/5/2010 11:02:29 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005441.exe

    14/5/2010 11:02:29 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005442.exe

    14/5/2010 11:02:35 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005443.exe

    14/5/2010 11:02:35 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005445.exe

    14/5/2010 11:02:37 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005446.exe

    14/5/2010 11:02:40 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005447.exe

    14/5/2010 11:02:45 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005453.exe

    14/5/2010 11:02:47 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005455.exe

    14/5/2010 11:02:48 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005456.exe

    14/5/2010 11:02:49 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005457.exe

    14/5/2010 11:02:51 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005458.exe

    14/5/2010 11:02:57 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005462.exe

    14/5/2010 11:02:57 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005459.exe

    14/5/2010 11:03:02 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005463.exe

    14/5/2010 11:03:06 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005464.exe

    14/5/2010 11:03:07 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005465.exe

    14/5/2010 11:03:15 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005466.exe

    14/5/2010 11:03:17 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005467.exe

    14/5/2010 11:03:18 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005460.exe

    14/5/2010 11:03:25 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005475.exe

    14/5/2010 11:03:26 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005476.exe

    14/5/2010 11:03:27 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005479.exe

    14/5/2010 11:03:30 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005477.exe

    14/5/2010 11:03:45 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005480.exe

    14/5/2010 11:03:49 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005481.exe

    14/5/2010 11:04:04 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005484.exe

    14/5/2010 11:04:05 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005486.exe

    14/5/2010 11:04:07 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005485.exe

    14/5/2010 11:04:13 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005488.EXE

    14/5/2010 11:04:14 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005490.EXE

    14/5/2010 11:04:21 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005511.EXE

    14/5/2010 11:04:27 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP53\A0005533.exe

    14/5/2010 11:04:35 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006573.EXE

    14/5/2010 11:04:36 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006576.exe

    14/5/2010 11:04:36 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006574.EXE

    14/5/2010 11:04:40 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006578.EXE

    14/5/2010 11:04:41 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006583.exe

    14/5/2010 11:04:45 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006584.exe

    14/5/2010 11:04:45 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006585.exe

    14/5/2010 11:04:46 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006586.exe

    14/5/2010 11:04:50 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006588.exe

    14/5/2010 11:04:51 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006624.exe

    14/5/2010 11:04:52 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006589.exe

    14/5/2010 11:04:52 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006590.exe

    14/5/2010 11:04:55 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006591.exe

    14/5/2010 11:04:59 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006625.exe

    14/5/2010 11:05:00 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006592.exe

    14/5/2010 11:05:03 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006593.exe

    14/5/2010 11:05:05 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006594.exe

    14/5/2010 11:05:08 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006595.exe

    14/5/2010 11:05:09 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006597.exe

    14/5/2010 11:05:12 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006598.exe

    14/5/2010 11:05:13 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006599.exe

    14/5/2010 11:05:18 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006605.exe

    14/5/2010 11:05:21 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006607.exe

    14/5/2010 11:05:22 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006608.exe

    14/5/2010 11:05:23 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006609.exe

    14/5/2010 11:05:27 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006610.exe

    14/5/2010 11:05:30 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006611.exe

    14/5/2010 11:05:32 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006614.exe

    14/5/2010 11:05:36 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006615.exe

    14/5/2010 11:05:37 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006616.exe

    14/5/2010 11:05:42 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006617.exe

    14/5/2010 11:05:48 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006618.exe

    14/5/2010 11:05:49 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006612.exe

    14/5/2010 11:05:49 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006619.exe

    14/5/2010 11:05:55 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006627.exe

    14/5/2010 11:05:56 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006631.exe

    14/5/2010 11:06:02 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006629.exe

    14/5/2010 11:06:06 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006628.exe

    14/5/2010 11:06:19 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006632.exe

    14/5/2010 11:06:21 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006633.exe

    14/5/2010 11:06:35 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006636.exe

    14/5/2010 11:06:36 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006638.exe

    14/5/2010 11:06:38 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006637.exe

    14/5/2010 11:06:44 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006640.EXE

    14/5/2010 11:06:46 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006642.EXE

    14/5/2010 11:06:51 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006663.EXE

    14/5/2010 11:06:54 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006685.exe

    14/5/2010 11:07:02 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006720.EXE

    14/5/2010 11:07:02 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006723.exe

    14/5/2010 11:07:02 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006721.EXE

    14/5/2010 11:07:09 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006725.EXE

    14/5/2010 11:07:09 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006730.exe

    14/5/2010 11:07:09 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006731.exe

    14/5/2010 11:07:14 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006732.exe

    14/5/2010 11:07:15 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006733.exe

    14/5/2010 11:07:15 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006735.exe

    14/5/2010 11:07:19 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006771.exe

    14/5/2010 11:07:19 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006736.exe

    14/5/2010 11:07:22 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006737.exe

    14/5/2010 11:07:22 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006738.exe

    14/5/2010 11:07:26 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006772.exe

    14/5/2010 11:07:28 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006739.exe

    14/5/2010 11:07:30 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006740.exe

    14/5/2010 11:07:32 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006741.exe

    14/5/2010 11:07:35 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006742.exe

    14/5/2010 11:07:37 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006744.exe

    14/5/2010 11:07:40 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006745.exe

    14/5/2010 11:07:41 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006746.exe

    14/5/2010 11:07:46 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006752.exe

    14/5/2010 11:07:48 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006754.exe

    14/5/2010 11:07:49 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006755.exe

    14/5/2010 11:07:50 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006756.exe

    14/5/2010 11:07:53 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006757.exe

    14/5/2010 11:07:58 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006758.exe

    14/5/2010 11:07:58 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006761.exe

    14/5/2010 11:08:04 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006762.exe

    14/5/2010 11:08:06 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006763.exe

    14/5/2010 11:08:08 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006764.exe

    14/5/2010 11:08:14 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006765.exe

    14/5/2010 11:08:15 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006766.exe

    14/5/2010 11:08:17 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006759.exe

    14/5/2010 11:08:24 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006775.exe

    14/5/2010 11:08:28 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006776.exe

    14/5/2010 11:08:32 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006777.exe

    14/5/2010 11:08:33 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006779.exe

    14/5/2010 11:08:48 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006780.exe

    14/5/2010 11:08:51 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006781.exe

    14/5/2010 11:09:04 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006784.exe

    14/5/2010 11:09:06 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006786.exe

    14/5/2010 11:09:07 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006785.exe

    14/5/2010 11:09:15 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006788.EXE

    14/5/2010 11:09:15 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006790.EXE

    14/5/2010 11:09:21 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006811.EXE

    14/5/2010 11:09:26 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006833.exe

    14/5/2010 11:09:36 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006886.exe

    14/5/2010 11:09:37 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006887.exe

    14/5/2010 11:09:39 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006889.exe

    14/5/2010 11:09:43 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006892.exe

    14/5/2010 11:09:44 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006897.exe

    14/5/2010 11:09:46 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006895.exe

    14/5/2010 11:09:48 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006898.EXE

    14/5/2010 11:09:48 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006899.exe

    14/5/2010 11:09:53 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006900.exe

    14/5/2010 11:09:56 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006903.exe

    14/5/2010 11:09:59 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006911.exe

    14/5/2010 11:10:01 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006910.exe

    14/5/2010 11:10:01 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006912.exe

    14/5/2010 11:10:03 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006916.exe

    14/5/2010 11:10:09 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006917.exe

    14/5/2010 11:10:10 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006918.exe

    14/5/2010 11:10:13 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006919.exe

    14/5/2010 11:10:14 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006920.exe

    14/5/2010 11:10:14 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006923.exe

    14/5/2010 11:10:19 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006924.exe

    14/5/2010 11:10:20 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006925.exe

    14/5/2010 11:10:22 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006927.EXE

    14/5/2010 11:10:25 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006928.EXE

    14/5/2010 11:10:28 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006930.exe

    14/5/2010 11:10:30 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006932.EXE

    14/5/2010 11:10:31 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006936.exe

    14/5/2010 11:10:36 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006938.EXE

    14/5/2010 11:10:38 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006939.EXE

    14/5/2010 11:10:42 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006940.exe

    14/5/2010 11:10:43 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006941.EXE

    14/5/2010 11:10:47 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006949.exe

    14/5/2010 11:10:47 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006952.exe

    14/5/2010 11:10:52 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006955.exe

    14/5/2010 11:10:52 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006956.exe

    14/5/2010 11:10:52 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006983.exe

    14/5/2010 11:10:53 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006957.EXE

    14/5/2010 11:11:00 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006958.exe

    14/5/2010 11:11:02 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006959.exe

    14/5/2010 11:11:06 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006962.exe

    14/5/2010 11:11:08 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006965.exe

    14/5/2010 11:11:10 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006966.exe

    14/5/2010 11:11:10 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006967.exe

    14/5/2010 11:11:14 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0006968.exe

    14/5/2010 11:11:53 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0007014.EXE

    14/5/2010 11:11:54 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0007017.exe

    14/5/2010 11:11:54 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0007015.EXE

    14/5/2010 11:11:59 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0007019.EXE

    14/5/2010 11:12:01 D:\System Volume Information\_restore{C9680F4E-A1CF-4520-97E5-2138520B58F7}\RP54\A0007024.exe

    (Continua...)

    Compartilhar este post


    Link para o post
    Compartilhar em outros sites

    Configure o Windows para mostrar todos os arquivos

    Acesse este site: http://virustotal.com/

    Em File to upload coloque: C:\WINDOWS\system32\picx\m45t3r.exe

    Em seguida clique em Submit

    Copie e poste o resultado deste exame.

    Compartilhar este post


    Link para o post
    Compartilhar em outros sites
  • Autor do tópico
  • Arquivo .picasaoriginals.exe recebido em 2010.03.26 23:19:04 (UTC)

    Andamento: terminado

    Resultado: 27/42 (64.29%)

    Antivírus Versão Última Atualização Resultado

    a-squared 4.5.0.50 2010.03.26 -

    AhnLab-V3 5.0.0.2 2010.03.26 -

    AntiVir 7.10.5.241 2010.03.26 TR/ATRAPS.Gen

    Antiy-AVL 2.0.3.7 2010.03.26 -

    Authentium 5.2.0.5 2010.03.26 -

    Avast 4.8.1351.0 2010.03.26 Win32:Rootkit-gen

    Avast5 5.0.332.0 2010.03.26 Win32:Rootkit-gen

    AVG 9.0.0.787 2010.03.27 Worm/Delf.JBH

    BitDefender 7.2 2010.03.26 Gen:Trojan.Heur.yGW@tz94GwnGb

    CAT-QuickHeal 10.00 2010.03.26 Trojan.Agent.ATV

    ClamAV 0.96.0.0-git 2010.03.26 -

    Comodo 4396 2010.03.26 UnclassifiedMalware

    DrWeb 5.0.1.12222 2010.03.26 -

    eSafe 7.0.17.0 2010.03.25 -

    eTrust-Vet 35.2.7391 2010.03.26 Win32/Tnega.XI

    F-Prot 4.5.1.85 2010.03.26 -

    F-Secure 9.0.15370.0 2010.03.27 Trojan:W32/Agent.LWF

    Fortinet 4.0.14.0 2010.03.26 W32/Dx.CPU!tr

    GData 19 2010.03.26 Gen:Trojan.Heur.yGW@tz94GwnGb

    Ikarus T3.1.1.80.0 2010.03.26 -

    Jiangmin 13.0.900 2010.03.26 -

    K7AntiVirus 7.10.1004 2010.03.22 Trojan.Win32.Malware.4

    Kaspersky 7.0.0.125 2010.03.26 -

    McAfee 5932 2010.03.26 Generic.dx!mwp

    McAfee+Artemis 5932 2010.03.26 Generic.dx!mwp

    McAfee-GW-Edition 6.8.5 2010.03.26 Heuristic.LooksLike.Win32.Suspicious.I

    Microsoft 1.5605 2010.03.26 Trojan:Win32/Delf

    NOD32 4978 2010.03.26 Win32/Delf.OWI

    Norman 6.04.10 2010.03.26 W32/Obfuscated.H!genr

    nProtect 2009.1.8.0 2010.03.26 Trojan/W32.Agent.395264.AD

    Panda 10.0.2.2 2010.03.26 Generic Trojan

    PCTools 7.0.3.5 2010.03.26 Trojan.Generic

    Prevx 3.0 2010.03.27 Medium Risk Malware

    Rising 22.40.04.04 2010.03.26 -

    Sophos 4.52.0 2010.03.26 Mal/Generic-L

    Sunbelt 6101 2010.03.26 Trojan.Win32.Generic!BT

    Symantec 20091.2.0.41 2010.03.26 Trojan Horse

    TheHacker 6.5.2.0.245 2010.03.26 -

    TrendMicro 9.120.0.1004 2010.03.26 WORM_AUTORUN.GPA

    VBA32 3.12.12.2 2010.03.25 -

    ViRobot 2010.3.26.2246 2010.03.26 -

    VirusBuster 5.0.27.0 2010.03.26 Trojan.Delf.DNEL

    Informações adicionais

    File size: 395264 bytes

    MD5 : cdeb0034d79a25f174bf7895b0d5a6a9

    SHA1 : 990da5e5593d1c4c8c09b599b98792d7a06af39e

    SHA256: b2ae9d99e67fe9d97cddeaa80af6512f0b670167a2e738f451d1770afa0c4879

    PEInfo: PE Structure information

    ( base data )

    entrypointaddress.: 0x4D470

    timedatestamp.....: 0x0 (Thu Jan 1 01:00:00 1970)

    machinetype.......: 0x14C (Intel I386)

    ( 8 sections )

    name viradd virsiz rawdsiz ntrpy md5

    CODE 0x1000 0x4C4B8 0x4C600 6.53 a5b0e3f4747e7347b6f32eb0df531e49

    DATA 0x4E000 0x112C 0x1200 4.08 dee05de0f33e3253c193d6058250bb18

    BSS 0x50000 0xBF1 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e

    .idata 0x51000 0x1FCE 0x2000 5.02 6a4e285e795308f7c98eaf52e91b2ce0

    .tls 0x53000 0x10 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e

    .rdata 0x54000 0x18 0x200 0.21 de85a91d4020adeb5b34c6aceb8dee5e

    .reloc 0x55000 0x55F0 0x5600 6.69 02574673d0afbc2db3d54f937da62221

    .rsrc 0x5B000 0x13400 0xB400 4.63 03c6fb5d4869a4764ebc9a578aa63fcc

    ( 8 imports )

    > advapi32.dll: RegQueryValueExA, RegOpenKeyExA, RegCloseKey, RegQueryValueExA, RegOpenKeyExA, RegFlushKey, RegCreateKeyExA, RegCloseKey

    > comctl32.dll: ImageList_SetIconSize, ImageList_GetIconSize, ImageList_Write, ImageList_Read, ImageList_GetDragImage, ImageList_DragShowNolock, ImageList_SetDragCursorImage, ImageList_DragMove, ImageList_DragLeave, ImageList_DragEnter, ImageList_EndDrag, ImageList_BeginDrag, ImageList_Remove, ImageList_DrawEx, ImageList_Draw, ImageList_GetBkColor, ImageList_SetBkColor, ImageList_ReplaceIcon, ImageList_Add, ImageList_GetImageCount, ImageList_Destroy, ImageList_Create

    > gdi32.dll: UnrealizeObject, StretchBlt, SetWindowOrgEx, SetViewportOrgEx, SetTextColor, SetStretchBltMode, SetROP2, SetPixel, SetDIBColorTable, SetBrushOrgEx, SetBkMode, SetBkColor, SelectPalette, SelectObject, SaveDC, RestoreDC, RectVisible, RealizePalette, PatBlt, MoveToEx, MaskBlt, LineTo, IntersectClipRect, GetWindowOrgEx, GetTextMetricsA, GetTextExtentPoint32A, GetSystemPaletteEntries, GetStockObject, GetPixel, GetPaletteEntries, GetObjectA, GetDeviceCaps, GetDIBits, GetDIBColorTable, GetDCOrgEx, GetCurrentPositionEx, GetClipBox, GetBrushOrgEx, GetBitmapBits, ExcludeClipRect, DeleteObject, DeleteDC, CreateSolidBrush, CreatePenIndirect, CreatePalette, CreateHalftonePalette, CreateFontIndirectA, CreateDIBitmap, CreateDIBSection, CreateCompatibleDC, CreateCompatibleBitmap, CreateBrushIndirect, CreateBitmap, BitBlt

    > kernel32.dll: DeleteCriticalSection, LeaveCriticalSection, EnterCriticalSection, InitializeCriticalSection, VirtualFree, VirtualAlloc, LocalFree, LocalAlloc, GetVersion, GetCurrentThreadId, InterlockedDecrement, InterlockedIncrement, VirtualQuery, WideCharToMultiByte, SetCurrentDirectoryA, MultiByteToWideChar, lstrlenA, lstrcpynA, LoadLibraryExA, GetThreadLocale, GetStartupInfoA, GetProcAddress, GetModuleHandleA, GetModuleFileNameA, GetLocaleInfoA, GetCurrentDirectoryA, GetCommandLineA, FreeLibrary, FindFirstFileA, FindClose, ExitProcess, WriteFile, UnhandledExceptionFilter, RtlUnwind, RaiseException, GetStdHandle, TlsSetValue, TlsGetValue, LocalAlloc, GetModuleHandleA, lstrcpyA, WriteFile, WinExec, WaitForSingleObject, VirtualQuery, VirtualAlloc, Sleep, SizeofResource, SetThreadLocale, SetFilePointer, SetEvent, SetErrorMode, SetEndOfFile, ResetEvent, ReadFile, MulDiv, LockResource, LoadResource, LoadLibraryA, LeaveCriticalSection, InitializeCriticalSection, GlobalUnlock, GlobalReAlloc, GlobalHandle, GlobalLock, GlobalFree, GlobalFindAtomA, GlobalDeleteAtom, GlobalAlloc, GlobalAddAtomA, GetVersionExA, GetVersion, GetTickCount, GetThreadLocale, GetSystemInfo, GetStringTypeExA, GetStdHandle, GetProcAddress, GetModuleHandleA, GetModuleFileNameA, GetLocaleInfoA, GetLocalTime, GetLastError, GetFullPathNameA, GetDiskFreeSpaceA, GetDateFormatA, GetCurrentThreadId, GetCurrentProcessId, GetCPInfo, GetACP, FreeResource, InterlockedExchange, FreeLibrary, FormatMessageA, FindResourceA, EnumCalendarInfoA, EnterCriticalSection, DeleteCriticalSection, CreateThread, CreateFileA, CreateEventA, CompareStringA, CloseHandle, Sleep

    > oleaut32.dll: SysFreeString, SysReAllocStringLen, SysAllocStringLen, SafeArrayPtrOfIndex, SafeArrayGetUBound, SafeArrayGetLBound, SafeArrayCreate, VariantChangeType, VariantCopy, VariantClear, VariantInit

    > user32.dll: GetKeyboardType, LoadStringA, MessageBoxA, CharNextA, CreateWindowExA, WindowFromPoint, WinHelpA, WaitMessage, UpdateWindow, UnregisterClassA, UnhookWindowsHookEx, TranslateMessage, TranslateMDISysAccel, TrackPopupMenu, SystemParametersInfoA, ShowWindow, ShowScrollBar, ShowOwnedPopups, ShowCursor, SetWindowsHookExA, SetWindowPos, SetWindowPlacement, SetWindowLongA, SetTimer, SetScrollRange, SetScrollPos, SetScrollInfo, SetRect, SetPropA, SetParent, SetMenuItemInfoA, SetMenu, SetForegroundWindow, SetFocus, SetCursor, SetClassLongA, SetCapture, SetActiveWindow, SendMessageA, ScrollWindow, ScreenToClient, RemovePropA, RemoveMenu, ReleaseDC, ReleaseCapture, RegisterWindowMessageA, RegisterClipboardFormatA, RegisterClassA, RedrawWindow, PtInRect, PostQuitMessage, PostMessageA, PeekMessageA, OffsetRect, OemToCharA, MessageBoxA, MapWindowPoints, MapVirtualKeyA, LoadStringA, LoadKeyboardLayoutA, LoadIconA, LoadCursorA, LoadBitmapA, KillTimer, IsZoomed, IsWindowVisible, IsWindowEnabled, IsWindow, IsRectEmpty, IsIconic, IsDialogMessageA, IsChild, InvalidateRect, IntersectRect, InsertMenuItemA, InsertMenuA, InflateRect, GetWindowThreadProcessId, GetWindowTextA, GetWindowRect, GetWindowPlacement, GetWindowLongA, GetWindowDC, GetTopWindow, GetSystemMetrics, GetSystemMenu, GetSysColorBrush, GetSysColor, GetSubMenu, GetScrollRange, GetScrollPos, GetScrollInfo, GetPropA, GetParent, GetWindow, GetMenuStringA, GetMenuState, GetMenuItemInfoA, GetMenuItemID, GetMenuItemCount, GetMenu, GetLastActivePopup, GetKeyboardState, GetKeyboardLayoutList, GetKeyboardLayout, GetKeyState, GetKeyNameTextA, GetIconInfo, GetForegroundWindow, GetFocus, GetDesktopWindow, GetDCEx, GetDC, GetCursorPos, GetCursor, GetClientRect, GetClassNameA, GetClassInfoA, GetCapture, GetActiveWindow, FrameRect, FindWindowA, FillRect, EqualRect, EnumWindows, EnumThreadWindows, EndPaint, EnableWindow, EnableScrollBar, EnableMenuItem, DrawTextA, DrawMenuBar, DrawIconEx, DrawIcon, DrawFrameControl, DrawEdge, DispatchMessageA, DestroyWindow, DestroyMenu, DestroyIcon, DestroyCursor, DeleteMenu, DefWindowProcA, DefMDIChildProcA, DefFrameProcA, CreatePopupMenu, CreateMenu, CreateIcon, ClientToScreen, CheckMenuItem, CallWindowProcA, CallNextHookEx, BeginPaint, CharNextA, CharLowerA, CharToOemA, AdjustWindowRectEx, ActivateKeyboardLayout

    > version.dll: VerQueryValueA, GetFileVersionInfoSizeA, GetFileVersionInfoA

    > winmm.dll: sndPlaySoundA

    ( 0 exports )

    TrID : File type identification

    InstallShield setup (53.8%)

    Win32 Executable Delphi generic (18.3%)

    Win32 Executable Generic (10.6%)

    Win32 Dynamic Link Library (generic) (9.4%)

    Win16/32 Executable Delphi generic (2.5%)

    ssdeep: 6144:d9PUaNMMGYi+8MuyaOpkcT9G+n5MOYLDu3p0DozImuYDmdiGMVNRHRln:rPN2MGR/+RUciOYHu31uU8rMVNRfn

    sigcheck: publisher....: n/a

    copyright....: n/a

    product......: n/a

    description..: n/a

    original name: n/a

    internal name: n/a

    file version.: n/a

    comments.....: n/a

    signers......: -

    signing date.: -

    verified.....: Unsigned

    Prevx Info: http://info.prevx.com/aboutprogramtext.asp?PX5=C6989EE3008B32360805065741C29000E5E3E50C

    PEiD : -

    RDS : NSRL Reference Data Set

    -

    Compartilhar este post


    Link para o post
    Compartilhar em outros sites
    .picasaoriginals.exe

    Que arquivo é esse? Não foi esse que pedi para fazer upload!

    Na verdade havia pedido um arquivo que já havia pedido anteriormente, mas que você disse que não existia em seu computador, porém ele foi detectado novamente, o que me força a crer que você não configurou para mostrar todos os arquivos.

    Compartilhar este post


    Link para o post
    Compartilhar em outros sites
  • Autor do tópico
  • configurei sim, mas ele mesmo assim não aparece.. ele fez a análise desse arquivo por engano, pois até mesmo a pasta da qual você pediu para analisar o arquivo está oculta, mesmo pedindo para mostrar, mas se eu forçar na barra de endereços ela abre, mas o arquivo em questão não aparece, ae eu forcei digitando o nome dele e mandei abrir, ele encontrou mas parece que na verdade não era ele, pois agora que eu percebi que o nome do arquivo está errado....

    Mas esse arquivo realmente não existe no PC, ou pelo menos eu não encontro ele, nem no DOS eu vejo ele...

    Compartilhar este post


    Link para o post
    Compartilhar em outros sites
  • Autor do tópico
  • DDS

    DDS (Ver_10-03-17.01) - NTFSx86

    Run by Charlei at 18:12:31,04 on dom 23/05/2010

    Internet Explorer: 6.0.2900.5512 BrowserJavaVersion: 1.6.0_15

    Microsoft Windows XP Professional 5.1.2600.3.1252.55.1046.18.2047.1497 [GMT -3:00]

    AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}

    ============== Running Processes ===============

    C:\WINDOWS\system32\nvsvc32.exe

    C:\ARQUIV~1\GbPlugin\GbpSv.exe

    C:\WINDOWS\system32\svchost -k DcomLaunch

    C:\WINDOWS\system32\svchost -k rpcss

    C:\WINDOWS\System32\svchost.exe -k netsvcs

    C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup

    C:\WINDOWS\system32\svchost.exe -k NetworkService

    C:\WINDOWS\system32\svchost.exe -k LocalService

    C:\WINDOWS\system32\spoolsv.exe

    C:\Arquivos de programas\Avira\AntiVir Desktop\sched.exe

    C:\WINDOWS\system32\svchost.exe -k LocalService

    C:\WINDOWS\system32\svchost.exe -k bthsvcs

    C:\Arquivos de programas\Borland\InterBase\bin\ibguard.exe

    C:\Arquivos de programas\Java\jre6\bin\jqs.exe

    C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\VS7DEBUG\mdm.exe

    C:\Arquivos de programas\Google\Update\1.2.183.23\GoogleCrashHandler.exe

    C:\Arquivos de programas\Arquivos comuns\Nero\Nero BackItUp 4\NBService.exe

    C:\Arquivos de programas\Arquivos comuns\Protexis\License Service\PSIService.exe

    C:\Arquivos de programas\CyberLink\Shared Files\RichVideo.exe

    C:\Arquivos de programas\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

    C:\Arquivos de programas\Borland\InterBase\bin\ibserver.exe

    C:\WINDOWS\system32\wbem\wmiapsrv.exe

    C:\WINDOWS\Explorer.EXE

    C:\WINDOWS\system32\rundll32.exe

    C:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe

    C:\WINDOWS\system32\ctfmon.exe

    C:\Documents and Settings\Charlei\Configurações locais\Dados de aplicativos\Google\Chrome\Application\chrome.exe

    C:\Documents and Settings\Charlei\Configurações locais\Dados de aplicativos\Google\Chrome\Application\chrome.exe

    C:\Documents and Settings\Charlei\Configurações locais\Dados de aplicativos\Google\Chrome\Application\chrome.exe

    C:\Documents and Settings\Charlei\Configurações locais\Dados de aplicativos\Google\Chrome\Application\chrome.exe

    C:\Documents and Settings\Charlei\Desktop\dds.scr

    C:\WINDOWS\system32\wbem\wmiprvse.exe

    ============== Pseudo HJT Report ===============

    uStart Page = hxxp://www.ask.com/?o=14597&l=dis

    uInternet Settings,ProxyServer = 11.11.1.1:3128

    BHO: DAPHelper Class: {0000cc75-acf3-4cac-a0a9-dd3868e06852} - c:\arquivos de programas\dap\DAPBHO.dll

    BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\arquivos de programas\arquivos comuns\adobe\acrobat\activex\AcroIEHelperShim.dll

    BHO: Skype add-on (mastermind): {22bf413b-c6d2-4d91-82a9-a0f997ba588c} - c:\arquivos de programas\skype\toolbars\internet explorer\SkypeIEPlugin.dll

    BHO: WormRadar.com IESiteBlocker.NavFilter: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - AVG Safe Search

    BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File

    BHO: Auxiliar de Conexão do Windows Live: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\arquivos de programas\arquivos comuns\microsoft shared\windows live\WindowsLiveLogin.dll

    BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\arquivos de programas\google\googletoolbarnotifier\5.1.1309.3572\swg.dll

    BHO: GbIehObj Class: {c41a1c0e-ea6c-11d4-b1b8-444553540000} - c:\arquivos de programas\gbplugin\gbieh.dll

    BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\arquivos de programas\java\jre6\bin\jp2ssv.dll

    BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\arquivos de programas\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

    TB: DAP Bar: {62999427-33fc-4baf-9c9c-bce6bd127f08} -

    uRun: [msnmsgr] "c:\arquivos de programas\windows live\messenger\msnmsgr.exe" /background

    uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe

    mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup

    mRun: [bluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent

    dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE

    uPolicies-explorer: NoPassou = 1 (0x1)

    uPolicies-explorer: NoDesktopCleanupWizard = 1 (0x1)

    uPolicies-explorer: NoSMConfigurePrograms = 1 (0x1)

    uPolicies-explorer: NoFavoritesMenu = 1 (0x1)

    uPolicies-explorer: NoSMBalloonTip = 1 (0x1)

    uPolicies-explorer: NoThumbnailCache = 1 (0x1)

    IE: &Download with &DAP - c:\arquiv~1\dap\dapextie.htm

    IE: Download &all with DAP - c:\arquiv~1\dap\dapextie2.htm

    IE: E&xportar para o Microsoft Excel - c:\arquiv~1\micros~2\office12\EXCEL.EXE/3000

    IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe

    IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\arquivos de programas\messenger\msmsgs.exe

    IE: {77BF5300-1474-4EC7-9980-D32B190E9B07} - {77BF5300-1474-4EC7-9980-D32B190E9B07} - c:\arquivos de programas\skype\toolbars\internet explorer\SkypeIEPlugin.dll

    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\arquiv~1\micros~2\office12\REFIEBAR.DLL

    Trusted Zone: com.br\www2.bancodobrasil

    DPF: {00000055-9980-0010-8000-00AA00389B71} - hxxp://codecs.microsoft.com/codecs/i386/fhg.CAB

    DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

    DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} - hxxp://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.3.9.113.cab

    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab

    DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab

    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab

    DPF: {DB6BF2CD-4F59-4F1C-AA9C-D08C0B61A931} - hxxps://www14.bancobrasil.com.br/plugin/GbpDist.cab

    TCP: {08373663-39A4-4A96-A042-39AC979A8F91} = 200.180.239.1,201.10.1.2

    Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\arquiv~1\arquiv~1\skype\SKYPE4~1.DLL

    Name-Space Handler: ftp\ZDA - {5BFA1DAF-5EDC-11D2-959E-00C00C02DA5E} - c:\arquiv~1\dap\dapie.dll

    Name-Space Handler: http\ZDA - {5BFA1DAF-5EDC-11D2-959E-00C00C02DA5E} - c:\arquiv~1\dap\dapie.dll

    Name-Space Handler: HTTPS\ZDA - {5BFA1DAF-5EDC-11D2-959E-00C00C02DA5E} - c:\arquiv~1\dap\dapie.dll

    Notify: GbPluginBb - c:\arquivos de programas\gbplugin\gbieh.dll

    SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

    SEH: GbPluginObj Class: {e37cb5f0-51f5-4395-a808-5fa49e399f83} - c:\arquivos de programas\gbplugin\gbieh.dll

    ============= SERVICES / DRIVERS ===============

    R0 GbpKm;Gbp KernelMode;c:\windows\system32\drivers\gbpkm.sys [2009-5-27 45472]

    R0 ViBus;ViBus;c:\windows\system32\drivers\ViBus.sys [2009-5-29 16896]

    R0 ViPrt;VIA SATA IDE Device Driver;c:\windows\system32\drivers\ViPrt.sys [2009-5-29 52224]

    R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\arquivos de programas\avira\antivir desktop\sched.exe [2010-5-4 135336]

    R2 avgntflt;avgntflt;c:\windows\system32\drivers\avgntflt.sys [2010-5-4 60936]

    R2 GbpSv;Gbp Service;c:\arquiv~1\gbplugin\GbpSv.exe [2009-5-27 55072]

    R2 StarWindServiceAE;StarWind AE Service;c:\arquivos de programas\alcohol soft\alcohol 120\starwind\StarWindServiceAE.exe [2007-5-28 275968]

    S1 avgio;avgio; [x]

    S1 oreans32;oreans32;\??\c:\windows\system32\drivers\oreans32.sys --> c:\windows\system32\drivers\oreans32.sys [?]

    S2 AntiVirService;Avira AntiVir Guard;c:\arquivos de programas\avira\antivir desktop\avguard.exe [2010-5-4 267432]

    S2 gupdate1c9db4bb0511eca;Google Update Service (gupdate1c9db4bb0511eca);c:\arquivos de programas\google\update\GoogleUpdate.exe [2009-5-22 127488]

    S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [2010-4-14 38224]

    =============== Created Last 30 ================

    2010-05-17 21:25:50 0 d-----w- c:\arquivos de programas\Analogue Vista Clock

    2010-05-14 00:25:16 138 --sha-w- c:\windows\setup_9.0.0.722_13.05.2010_17-30drv.spi

    2010-05-11 21:42:05 0 d-----w- c:\docume~1\charlei\dadosd~1\NeroDigital

    2010-05-10 09:37:34 0 d-----w- C:\ComboFix

    2010-05-04 10:27:50 0 d-----w- c:\docume~1\charlei\dadosd~1\Avira

    2010-05-04 10:22:49 60936 ----a-w- c:\windows\system32\drivers\avgntflt.sys

    2010-05-04 10:22:48 0 d-----w- c:\docume~1\alluse~1\dadosd~1\Avira

    2010-05-04 10:22:48 0 d-----w- c:\arquivos de programas\Avira

    2010-04-28 23:12:10 8 --sha-r- c:\documents and settings\charlei\ntuser.pol

    2010-04-28 23:11:01 0 d--h--w- c:\windows\system32\GroupPolicy

    2010-04-28 23:02:12 0 d-sha-r- C:\cmdcons

    2010-04-28 22:53:59 98816 ----a-w- c:\windows\sed.exe

    2010-04-28 22:53:59 77312 ----a-w- c:\windows\MBR.exe

    2010-04-28 22:53:59 256512 ----a-w- c:\windows\PEV.exe

    2010-04-28 22:53:59 161792 ----a-w- c:\windows\SWREG.exe

    ==================== Find3M ====================

    2010-05-04 09:32:22 67450 ----a-w- c:\windows\system32\perfc016.dat

    2010-05-04 09:32:22 425426 ----a-w- c:\windows\system32\perfh016.dat

    2010-05-03 01:05:22 2516 --sha-w- c:\windows\system32\KGyGaAvL.sys

    2010-04-30 12:18:34 45472 ----a-w- c:\windows\system32\drivers\gbpkm.sys

    2010-03-30 03:46:30 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys

    2010-03-30 03:45:52 20824 ----a-w- c:\windows\system32\drivers\mbam.sys

    2009-06-23 12:30:32 8 --sh--r- c:\windows\system32\1E1075468A.sys

    2009-05-08 05:09:42 395264 --sh--w- c:\windows\system32\picx\m45t3r.exe

    ============= FINISH: 18:12:51,07 ===============

    Attach

    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

    IF REQUESTED, ZIP IT UP & ATTACH IT

    DDS (Ver_10-03-17.01)

    Microsoft Windows XP Professional

    Boot Device: \Device\HarddiskVolume1

    Install Date: 22/5/2009 21:01:36

    System Uptime: 23/5/2010 17:51:43 (1 hours ago)

    Motherboard: ECS | | P4M890T-M

    Processor: Intel® Pentium® Dual CPU E2180 @ 2.00GHz | CPU 1 | 1995/200mhz

    ==== Disk Partitions =========================

    C: is FIXED (NTFS) - 78 GiB total, 51,267 GiB free.

    D: is FIXED (NTFS) - 155 GiB total, 50,986 GiB free.

    E: is CDROM (UDF)

    F: is CDROM ()

    G: is CDROM ()

    H: is CDROM ()

    I: is CDROM ()

    ==== Disabled Device Manager Items =============

    ==== System Restore Points ===================

    RP49: 16/4/2010 06:23:48 - Removed Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053

    RP50: 16/4/2010 06:24:43 - Removido Microsoft Visual C++ 2005 Redistributable

    RP51: 16/4/2010 13:28:01 - Installed Borland Delphi 7

    RP52: 17/4/2010 19:17:24 - Ponto de verificação do sistema

    RP53: 19/4/2010 06:21:05 - Removed EAX4 Unified Redist

    RP54: 22/4/2010 06:08:19 - Ponto de verificação do sistema

    RP55: 28/4/2010 17:58:42 - Ponto de verificação do sistema

    RP56: 30/4/2010 12:22:00 - Ponto de verificação do sistema

    RP57: 2/5/2010 09:45:47 - Ponto de verificação do sistema

    RP58: 3/5/2010 11:10:59 - Ponto de verificação do sistema

    RP59: 3/5/2010 13:12:40 - avast! Free Antivirus Setup

    RP60: 5/5/2010 17:13:55 - Ponto de verificação do sistema

    RP61: 7/5/2010 17:02:29 - Ponto de verificação do sistema

    RP62: 8/5/2010 17:32:39 - Ponto de verificação do sistema

    RP63: 9/5/2010 16:30:16 - Instalado Microsoft Visual C++ 2005 Redistributable

    RP64: 10/5/2010 19:33:36 - Ponto de verificação do sistema

    RP65: 11/5/2010 21:48:25 - Ponto de verificação do sistema

    RP66: 13/5/2010 12:11:59 - Ponto de verificação do sistema

    RP67: 14/5/2010 15:36:17 - Ponto de verificação do sistema

    RP68: 15/5/2010 15:43:01 - Ponto de verificação do sistema

    RP69: 18/5/2010 00:10:16 - Ponto de verificação do sistema

    RP70: 19/5/2010 21:39:05 - Ponto de verificação do sistema

    RP71: 21/5/2010 15:06:02 - Ponto de verificação do sistema

    ==== Installed Programs ======================

    Adobe Flash Player 10 ActiveX

    Adobe Flash Player 10 Plugin

    Adobe Reader 9.3.2 - Português

    Adobe Shockwave Player 11.5

    Advertising Center

    Age of Mythology

    Analogue Vista Clock 1.23

    Assistente de Conexão do Windows Live

    µTorrent

    Atualização de Segurança para o Windows Media Player (KB911564)

    Atualização de Segurança para o Windows Media Player (KB952069)

    Atualização de Segurança para o Windows Media Player (KB968816)

    Atualização de Segurança para o Windows Media Player (KB973540)

    Atualização de Segurança para o Windows Media Player 10 (KB936782)

    Atualização de Segurança para o Windows Media Player 6.4 (KB925398)

    Atualização de Segurança para Windows XP (KB923561)

    Atualização de Segurança para Windows XP (KB923689)

    Atualização de Segurança para Windows XP (KB938464-v2)

    Atualização de Segurança para Windows XP (KB941569)

    Atualização de Segurança para Windows XP (KB946648)

    Atualização de Segurança para Windows XP (KB950760)

    Atualização de Segurança para Windows XP (KB950762)

    Atualização de Segurança para Windows XP (KB950974)

    Atualização de Segurança para Windows XP (KB951376-v2)

    Atualização de Segurança para Windows XP (KB951748)

    Atualização de Segurança para Windows XP (KB952004)

    Atualização de Segurança para Windows XP (KB952954)

    Atualização de Segurança para Windows XP (KB954600)

    Atualização de Segurança para Windows XP (KB955069)

    Atualização de Segurança para Windows XP (KB956572)

    Atualização de Segurança para Windows XP (KB956802)

    Atualização de Segurança para Windows XP (KB956803)

    Atualização de Segurança para Windows XP (KB956844)

    Atualização de Segurança para Windows XP (KB957097)

    Atualização de Segurança para Windows XP (KB958644)

    Atualização de Segurança para Windows XP (KB958687)

    Atualização de Segurança para Windows XP (KB958690)

    Atualização de Segurança para Windows XP (KB959426)

    Atualização de Segurança para Windows XP (KB960225)

    Atualização de Segurança para Windows XP (KB960715)

    Atualização de Segurança para Windows XP (KB960803)

    Atualização de Segurança para Windows XP (KB960859)

    Atualização de Segurança para Windows XP (KB961371)

    Atualização de Segurança para Windows XP (KB961373)

    Atualização de Segurança para Windows XP (KB961501)

    Atualização de Segurança para Windows XP (KB963027)

    Atualização de Segurança para Windows XP (KB968537)

    Atualização de Segurança para Windows XP (KB969897)

    Atualização de Segurança para Windows XP (KB969898)

    Atualização de Segurança para Windows XP (KB970238)

    Atualização de Segurança para Windows XP (KB971557)

    Atualização de Segurança para Windows XP (KB971633)

    Atualização de Segurança para Windows XP (KB971657)

    Atualização de Segurança para Windows XP (KB972260)

    Atualização de Segurança para Windows XP (KB973346)

    Atualização de Segurança para Windows XP (KB973354)

    Atualização de Segurança para Windows XP (KB973507)

    Atualização de Segurança para Windows XP (KB973869)

    Atualização para Windows XP (KB955839)

    Atualização para Windows XP (KB961503)

    Atualização para Windows XP (KB967715)

    Atualização para Windows XP (KB968389)

    Atualização para Windows XP (KB973815)

    aTube Catcher 1.0

    AVI ReComp 1.5.0

    AviSynth 2.5

    Borland Delphi 7

    BS.Player FREE

    Call of Juarez - Bound in Blood

    CorelDRAW Graphics Suite X3

    DolbyFiles

    Download Accelerator Plus

    DVD Suite

    eMule Plus 1.2e

    EN

    Ferramenta de Carregamento do Windows Live

    FontNav

    FormatFactory 2.20

    Google Earth

    Google Update Helper

    Google Updater

    High Definition Audio Driver Package - KB888111

    Hotfix para Windows XP (KB952287)

    Hotfix para Windows XP (KB970653-v3)

    Hábil Empresarial

    ImagXpress

    InterBase 6.5

    Java 6 Update 15

    K-Lite Mega Codec Pack 4.9.5

    K-Nitro 5.1 setup

    L&H Power Translator Pro

    Malwarebytes' Anti-Malware

    Menu Templates - Starter Kit

    Microsoft .NET Framework 2.0

    Microsoft Application Error Reporting

    Microsoft Choice Guard

    Microsoft Compression Client Pack 1.0 for Windows XP

    Microsoft Office Access MUI (Portuguese (Brazil)) 2007

    Microsoft Office Enterprise 2007

    Microsoft Office Excel MUI (Portuguese (Brazil)) 2007

    Microsoft Office Groove MUI (Portuguese (Brazil)) 2007

    Microsoft Office InfoPath MUI (Portuguese (Brazil)) 2007

    Microsoft Office OneNote MUI (Portuguese (Brazil)) 2007

    Microsoft Office Outlook MUI (Portuguese (Brazil)) 2007

    Microsoft Office PowerPoint MUI (Portuguese (Brazil)) 2007

    Microsoft Office Proof (English) 2007

    Microsoft Office Proof (Portuguese (Brazil)) 2007

    Microsoft Office Proof (Spanish) 2007

    Microsoft Office Proofing (Portuguese (Brazil)) 2007

    Microsoft Office Publisher MUI (Portuguese (Brazil)) 2007

    Microsoft Office Shared MUI (Portuguese (Brazil)) 2007

    Microsoft Office Word MUI (Portuguese (Brazil)) 2007

    Microsoft Software Update for Web Folders (Portuguese (Brazil)) 12

    Microsoft User-Mode Driver Framework Feature Pack 1.0

    Microsoft Visual C++ 2005 Redistributable

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

    Microsoft VM for Java

    Microsoft Web Publishing Wizard 1.53

    Movie Templates - Starter Kit

    MSVCRT

    MSXML 4.0 SP2 (KB954430)

    MSXML4 Parser

    Nero 9

    Nero BurnRights

    Nero ControlCenter

    Nero CoverDesigner

    Nero DiscSpeed

    Nero DriveSpeed

    Nero InfoTool

    Nero Installer

    Nero Live

    Nero PhotoSnap

    Nero Recode

    Nero Rescue Agent

    Nero ShowTime

    Nero StartSmart

    Nero Vision

    Nero WaveEditor

    NeroBurningROM

    NeroExpress

    NeroLiveGadget

    neroxml

    NVIDIA Drivers

    NVIDIA PhysX

    Platform

    PowerDVD

    Realtek AC'97 Audio

    S.T.A.L.K.E.R. - Call of Pripyat [v1.6.02]

    Security Update for 2007 Microsoft Office System (KB951550)

    Security Update for 2007 Microsoft Office System (KB951944)

    Security Update for 2007 Microsoft Office System (KB960003)

    Security Update for Microsoft Office Excel 2007 (KB959997)

    Security Update for Microsoft Office OneNote 2007 (KB950130)

    Security Update for Microsoft Office PowerPoint 2007 (KB951338)

    Security Update for Microsoft Office Publisher 2007 (KB950114)

    Security Update for Microsoft Office system 2007 (KB954326)

    Security Update for Microsoft Office system 2007 (KB956828)

    Security Update for Microsoft Office Word 2007 (KB956358)

    Segoe UI

    Skype™ 4.0

    Sniper Elite

    SolveigMM AVI Trimmer

    SoundTrax

    SubSync

    System Requirements Lab

    TeamSpeak 2 RC2

    Update for 2007 Microsoft Office System (KB967642)

    Update for Microsoft Office Outlook 2007 (KB952142)

    Update for Office 2007 (KB932080)

    Update for Office 2007 (KB934391)

    Update for Outlook 2007 Junk Email Filter (kb973514)

    Update Manager

    VBA

    VIA Platform Device Manager

    VisiBroker for Cpp 4.5

    VobSub 2.23

    WebFldrs XP

    Winamp

    Winamp: Detectar Aplicação

    Windows Imaging Component

    Windows Live Call

    Windows Live Communications Platform

    Windows Live Essentials

    Windows Live Messenger

    Windows Media Format 11 runtime

    Windows Media Player 11

    Windows XP Service Pack 3

    WinRAR archiver

    Xvid 1.2.2

    XVID Codec Installation

    ==== End Of File ===========================

    Compartilhar este post


    Link para o post
    Compartilhar em outros sites

    Baixe nova versão do ComboFix, substituindo o existente e poste novo log.

    Compartilhar este post


    Link para o post
    Compartilhar em outros sites
  • Autor do tópico
  • Que ótimo, não consigo mais fazer a varredura com o Combofix, ele não executa.. inicia e simplesmente some sem nada fazer!!

    Compartilhar este post


    Link para o post
    Compartilhar em outros sites
  • Autor do tópico
  • Renato.. Não consigo executar o Combofix... Desinstalei, removi a pasta de instalação, tentei instalar ele novamente e nada... ele faz aquela barrinha bem no início enche e some e nada mais acontece!!! O que devo fazer???

    Compartilhar este post


    Link para o post
    Compartilhar em outros sites

    Exclua o executável do ComboFix. Baixe-o novamente, quando pedir para fazer o download renomeie ele para user.exe.

    Feito isso tente uma nova execução.

    Compartilhar este post


    Link para o post
    Compartilhar em outros sites
  • Autor do tópico
  • Olha só Renato... consegue fazer o processo todo, faz a varredura totalmente, na hora de gerar o relatório ele faz o processo de geração, avisa que o arquivo estará pronto no c: e pede para aguardar que o arguivo de log será aberto, ae simplesmente fecha a tela do DOS do combo e congela o PC, percebi que ele fecha o explorer.exe, pois se eu der Ctrl + Alt + Del e pedir para executar o explorer novamente ele volta ao normal, mas o log do Combo não está em nenhum local do PC....

    Compartilhar este post


    Link para o post
    Compartilhar em outros sites

    Reinicie em Modo de Segurança (Pressione intermitentemente F8 durante a inicialização, no menu que aparecer escolha através da seta de navegação, Modo Seguro).

    Tente novamente. E quando o desktop sumir não faça nada, apenas espere voltar sozinho.

    Compartilhar este post


    Link para o post
    Compartilhar em outros sites
    Visitante
    Este tópico está impedido de receber novos posts.
    Entre para seguir isso  





    Sobre o Clube do Hardware

    No ar desde 1996, o Clube do Hardware é uma das maiores, mais antigas e mais respeitadas publicações sobre tecnologia do Brasil. Leia mais

    Direitos autorais

    Não permitimos a cópia ou reprodução do conteúdo do nosso site, fórum, newsletters e redes sociais, mesmo citando-se a fonte. Leia mais

    ×