Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

TDSS infection on my desktop


  • Please log in to reply
16 replies to this topic

#1 ttownfeen

ttownfeen

  • Members
  • 35 posts
  • OFFLINE
  •  
  • Local time:11:41 PM

Posted 24 March 2009 - 06:43 PM

Hello. My computer has been infected with a TDSS infection. Please refer to previous discussion about my system problem at the Am I Infected? What to do? forum where I did an SDFix to figure out the problem.

http://www.bleepingcomputer.com/forums/t/203804/mbam-isnt-working-for-me/

I have run the DDS on the infected system as requested at the other forum and here's what I got.

DDS (Ver_09-03-16.01) - NTFSx86 MINIMAL
Run by admin at 19:28:15.32 on Tue 03/24/2009
Internet Explorer: 7.0.5730.11 BrowserJavaVersion: 1.6.0_11
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1023.785 [GMT -5:00]

AV: McAfee VirusScan *On-access scanning disabled* (Outdated)
FW: McAfee Personal Firewall *enabled*

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
C:\WINDOWS\Explorer.EXE
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
c:\PROGRA~1\mcafee\msc\mcuimgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\admin\Desktop\dds.scr

============== Pseudo HJT Report ===============

uStart Page = hxxp://my.att.net/
uSearch Page = hxxp://www.google.com
uDefault_Page_URL = hxxp://education.dellnet.com/
uSearch Bar = hxxp://www.google.com/ie
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
mDefault_Page_URL = hxxp://education.dellnet.com/
mDefault_Search_URL = hxxp://www.google.com/ie
mSearch Page =
mSearch Bar = hxxp://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html
uInternet Settings,ProxyOverride = localhost
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
mSearchAssistant = hxxp://www.google.com/ie
BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
BHO: scriptproxy: {7db2d5a0-7241-4e79-b68d-6309f01c5231} - c:\program files\mcafee\virusscan\scriptsn.dll
TB: BellSouth Toolbar: {4e7bd74f-2b8d-469e-8cbd-fd60bb9aae2e} - c:\progra~1\blstoo~1\BLSTOO~1.DLL
TB: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
TB: Ask Toolbar: {3041d03e-fd4b-44e0-b742-2d9b88305f98} - c:\program files\askbardis\bar\bin\askBar.dll
TB: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No File
EB: {32683183-48a0-441b-a342-7c2a440a9478} - No File
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [LDM] c:\program files\logitech\desktop messenger\8876480\program\BackWeb-8876480.exe
uRun: [WebCamRT.exe]
uRun: [Aim6]
uRun: [MsnMsgr] "c:\program files\msn messenger\MsnMsgr.Exe" /background
uRun: [Messenger (Yahoo!)] "c:\program files\yahoo!\messenger\YahooMessenger.exe" -quiet
uRun: [eukj05hhd5ohllazvaz7ekr9r9v9xh] c:\docume~1\admin\locals~1\temp\p2nnx2.exe
uRun: [m635rhtua0g1dbc8c2vrboik95eujslevhx68] c:\docume~1\admin\locals~1\temp\v8sdfwh.exe
uRun: [dz1ho4ebhdzcc9jhisn8o7kst2poo5yq1x04uj0dn1ph] c:\docume~1\admin\locals~1\temp\kr1ph7zirf4.exe
uRun: [eu0bjptkmccvlv17] c:\docume~1\admin\locals~1\temp\n4mvjl1pe9.exe
uRun: [zxbc0mxqg3s7ijer3rikhduxsk4] c:\docume~1\admin\locals~1\temp\wp28ygq.exe
uRun: [spvev6e47j1glpnxlghguix9] c:\docume~1\admin\locals~1\temp\hh64ws1r.exe
uRun: [nr35aksqq7wdkep7tzfc0] c:\docume~1\admin\locals~1\temp\d8sa661opa.exe
uRun: [bawcn21odwuhu6wtb8040yodmmc] c:\docume~1\admin\locals~1\temp\hssb332.exe
uRun: [jgsdl8ecf9ivxf30bo66sy3nxeq8] c:\docume~1\admin\locals~1\temp\t99sxt.exe
uRun: [qbga2wvnp71nyfrh8gvylhl56eyjm] c:\docume~1\admin\locals~1\temp\m17bracqs4w.exe
uRun: [jm73gz0n5m9ilt5suc6a7fc50175757l7lpsobfd2] c:\docume~1\admin\locals~1\temp\gzuwi7ockp.exe
uRun: [m9e5yqxsehnk1wu1465j045dd] c:\docume~1\admin\locals~1\temp\ri1iyvt2mgvdz.exe
uRun: [ijap75lac9uccjwr725jg154pvb7b8s] c:\docume~1\admin\locals~1\temp\bgvur0.exe
uRun: [blfsc9p2k9pxmr] c:\docume~1\admin\locals~1\temp\jcqltjy64cv.exe
uRun: [wu4ykpe6mb] c:\docume~1\admin\locals~1\temp\pfdsjooo.exe
uRun: [gt2mi6b7zwf83me1vpw9o6e2vra5o0w7] c:\docume~1\admin\locals~1\temp\xtqs0ggdye.exe
uRun: [f7tskcunb2wkgqqzmubju8jsdew75gf] c:\docume~1\admin\locals~1\temp\a8ba4h5gyg5rv.exe
uRun: [zd76zvn6yjj84vgw9y8712ft9w3jfaelud509klyqi] c:\docume~1\admin\locals~1\temp\epp3z1hipzdo.exe
uRun: [crkqrwboh4mivrgi9q5pz07] c:\docume~1\admin\locals~1\temp\v20dg5a1gt5.exe
uRun: [j25pmt8tpolvxxirnivr6jejg2awj4c1x1ec3pu5qckqm5] c:\docume~1\admin\locals~1\temp\o8cvrhzul69a.exe
uRun: [qzk0yhx1dqjyas2nhybywqt8aoovqkmnquo] c:\docume~1\admin\locals~1\temp\nus446zh.exe
uRun: [j6hdmjrknl4id3nskq02s4tjyrwwy07ox0tcrr002yzw8ig32] c:\docume~1\admin\locals~1\temp\wn02fs0.exe
uRun: [m4okihf0h0zxc0cgjf] c:\docume~1\admin\locals~1\temp\aegi9tm29yup.exe
uRun: [afo9hfp0h9fmav1yfc3quwnmesac] c:\docume~1\admin\locals~1\temp\ruvx9qdz4b8q9.exe
uRun: [ijl2a8jsvp0zo1lah] c:\docume~1\admin\locals~1\temp\g9xxdu4.exe
uRun: [blefag5ojbxzjpt67uweo6xg41bod1] c:\docume~1\admin\locals~1\temp\rsxgj46z.exe
uRun: [i8lg5g0cv2nvm19] c:\docume~1\admin\locals~1\temp\xx0hoqoy58mz.exe
uRun: [f8njq33kzd98ack5tt] c:\docume~1\admin\locals~1\temp\dcb6deh6lx.exe
uRun: [ca3dpmcpegds6c209vnshhcnpg32myareokgcu0b7igr2p6] c:\docume~1\admin\locals~1\temp\pavnlz.exe
uRun: [gcrxx2m6cubjitpstfkswaclbq6] c:\docume~1\admin\locals~1\temp\m5jn50ixh.exe
uRun: [cnm4ww04d7spiw851hnqeogp5sf5jbu2vjyc] c:\docume~1\admin\locals~1\temp\i799ajfudauuc.exe
uRun: [n24czcweekqasfh8yhmfrnsh7z4] c:\docume~1\admin\locals~1\temp\ztifsp.exe
uRun: [ynujhl9nbhrwecmazl7gjpxm9oy6lkq143akzlfrpk8tjaj] c:\docume~1\admin\locals~1\temp\rv57mp4.exe
uRun: [e08nmhd2v71lyggxmbpdh9dhfw01be4cjfwsga1qaefmku] c:\docume~1\admin\locals~1\temp\azlhxox.exe
uRun: [c0gz1b3rm6jtdexasu299fj8ghrhskd8m02engyw] c:\docume~1\admin\locals~1\temp\eoxz6dwsu.exe
uRun: [qnip5rfhr2cyc0r3fvx6q8g] c:\docume~1\admin\locals~1\temp\ckohk6.exe
uRun: [etl8qmytvrujx8wh29bffmk8myhlowm82k] c:\docume~1\admin\locals~1\temp\koh1bw.exe
uRun: [qed5eg23ngwa1va4glvmflno0qobsuy8t4alea60] c:\docume~1\admin\locals~1\temp\g4ozh31whit.exe
uRun: [zja76sm3s7] c:\docume~1\admin\locals~1\temp\sg0v9bbm0eof1.exe
uRun: [wymq7efbzeuzg49hrf23pe63j5nu1udgbd5brbdkzhm5fkl] c:\docume~1\admin\locals~1\temp\hyhjmafpi9w.exe
uRun: [aykgu90yc7eolexywjr] c:\docume~1\admin\locals~1\temp\yrmn6nn.exe
uRun: [eey7a13rufmx0j1jk96ahcgafreuafrtz] c:\docume~1\admin\locals~1\temp\yw57w4.exe
uRun: [z5nmvs7kba8biou6d1k4mreeqqxujo4x1981g8wg2of8] c:\docume~1\admin\locals~1\temp\z289gdd.exe
uRun: [lowcvil8os5t3ugd59vrfeujbfno0p] c:\docume~1\admin\locals~1\temp\n5ozrip6yc.exe
uRun: [jbvyztgkfisccezt70kunk9] c:\docume~1\admin\locals~1\temp\btjiur32.exe
uRun: [ne67jzkq7avvzmtpnd6xxexwgiry] c:\docume~1\admin\locals~1\temp\h64pv3ih9zjg.exe
uRun: [mqv3l2l3hbyfuwfegt2hpkasdcfz5qfz2nehd8yomwk6] c:\docume~1\admin\locals~1\temp\paxofyrqqo7n.exe
uRun: [nfdgtn12vsv9dgvv3nqfkcj0wofykgkk1qml0pqw] c:\docume~1\admin\locals~1\temp\t9n9ya42p0.exe
uRun: [amlhoxf0dvsvviw2j6iachmm6b23n8yvt] c:\docume~1\admin\locals~1\temp\leovxm4nw9xs.exe
uRun: [j1haogrgfz7yp2rq6hnj] c:\docume~1\admin\locals~1\temp\kea1f1w.exe
uRun: [s1lj3srurlb5aygpr1btkp0cs9snmk31q0zxuo7oml] c:\docume~1\admin\locals~1\temp\ld2t2io.exe
uRun: [gk2elaajze29nxsqxaztskmutymp1a6xlxsw6bg65mppg7j2ry] c:\docume~1\admin\locals~1\temp\kz12jx2ra7n.exe
uRun: [jx8bjsonct37lmezjamwun2ganiqxk01r7l94pdck6n] c:\docume~1\admin\locals~1\temp\maqilp.exe
uRun: [mxs1tyxs3rud399rshcfe19hw7y27d0ueay6o2v76nr6271] c:\docume~1\admin\locals~1\temp\ujl1vig4xx53f.exe
uRun: [sef38xzo5hpcutob655mlve61yr47bf] c:\docume~1\admin\locals~1\temp\arn5ndq5cw.exe
uRun: [e5gvchtp3p] c:\docume~1\admin\locals~1\temp\bis3edagd9l.exe
uRun: [gs5rps75pf3la1xh0p0k] c:\docume~1\admin\locals~1\temp\l18bsllqy.exe
uRun: [yryb7cklk1zsppms5vivjf7] c:\docume~1\admin\locals~1\temp\nb0k6zb799.exe
uRun: [qasj7h7a2aoygdod4i4vqo2tfuov75gln] c:\docume~1\admin\locals~1\temp\etnumj.exe
uRun: [rvsc4g5r9zch92t7wovjrk] c:\docume~1\admin\locals~1\temp\pvnd9ti.exe
uRun: [wscr7yg9cai9tw3] c:\docume~1\admin\locals~1\temp\hnflxu72f4bs.exe
uRun: [vaan0i1ly885u44k1hm8krzf5qpv8kokwq623] c:\docume~1\admin\locals~1\temp\aar34zi4zsiqb.exe
uRun: [tbegusrth9dl82zkvemsizkg9vr8amyxcl6r8nmu84xr] c:\docume~1\admin\locals~1\temp\zjm5wiytyy4l.exe
uRun: [jubhrx9onr9p76woyml38aezzrnat9a3d0m] c:\docume~1\admin\locals~1\temp\vceehg.exe
uRun: [rjbpsvvtmqu5rsv1y4eyxiz9g3d] c:\docume~1\admin\locals~1\temp\u7s0gg94ch9g.exe
uRun: [aexlrevuvvhun52maym564ozp6md9izr3lsc4lfmfmd0zlif] c:\docume~1\admin\locals~1\temp\x5zklv2oytl0q.exe
uRun: [bbnmwy8zv2yj938ezwac4edif55ulw] c:\docume~1\admin\locals~1\temp\r2g0jhx.exe
uRun: [wu7igen986sp7ee9sl07ph2] c:\docume~1\admin\locals~1\temp\tc1p4d.exe
uRun: [ylu2u2ae4bpq4e4hw] c:\docume~1\admin\locals~1\temp\z79n32.exe
uRun: [agu65ai1zrhvltr7x1v0o7bml] c:\docume~1\admin\locals~1\temp\hk0zozbn.exe
uRun: [srof7ldhncz054571wo5xojnspebhs1816vo] c:\docume~1\admin\locals~1\temp\aejgz2fp.exe
uRun: [o3ygo9oll9ynv3yesvh87wqo0l5m4ga81365k] c:\docume~1\admin\locals~1\temp\saqhf76z.exe
uRun: [dqkm62qxacw5bxgwbu4wi0a1v6xo] c:\docume~1\admin\locals~1\temp\l7434ra.exe
uRun: [gusxx8187oq0hrhq] c:\docume~1\admin\locals~1\temp\dy9kufw6.exe
uRun: [uqy5rau40d2k1c9k] c:\docume~1\admin\locals~1\temp\he6p69jt.exe
uRun: [mv1qp3ztw70u0akgwp] c:\docume~1\admin\locals~1\temp\r61al21b.exe
uRun: [mrz2822uudnacgcit7z38j3b7yjrs1edzn0nk8w3d9fp] c:\docume~1\admin\locals~1\temp\evx9umr.exe
uRun: [k1eeewsnoijqe] c:\docume~1\admin\locals~1\temp\ad16ebiylnnm9.exe
uRun: [tmmoyo84y7vis9b4k9hpvux6cy2wjfh7eej9u8a44e2ysh7tr8] c:\docume~1\admin\locals~1\temp\jmj0u12rcbrr.exe
uRun: [xiyhqlp3uah3rjfmv3vv1bf3c1nbuagjmup0he0le0vsh1] c:\docume~1\admin\locals~1\temp\zihfvqdc3.exe
uRun: [vwrm38ayvgsztjs7hq36g401gmqufcy0jq] c:\docume~1\admin\locals~1\temp\f3n9vh42ku7.exe
uRun: [rskaqwj2bgys43] c:\docume~1\admin\locals~1\temp\mcpe39fvtcwwd.exe
uRun: [agmlr2un12r49x6qkv4emvioarf412dk45g] c:\docume~1\admin\locals~1\temp\qw8f06gnnc.exe
uRun: [zdck8o45cp89wfa5c4rq5y914o28v5kd3ag821iqcq5yikufig] c:\docume~1\admin\locals~1\temp\l73029jysio.exe
uRun: [rp74698hpx2f5isz59y2zd77j61arr] c:\docume~1\admin\locals~1\temp\mhrytqk9tcjq.exe
uRun: [u89ax833emd1lla7661i7ow] c:\docume~1\admin\locals~1\temp\wtdr9w.exe
uRun: [c2rhw6yv75nemzs2bd6sih0f1u2k3fussmwb3xd6rf6prc] c:\docume~1\admin\locals~1\temp\dskcsr0eolq8.exe
uRun: [ppgl54dxu24kesrevhgp] c:\docume~1\admin\locals~1\temp\dy33kyu7sy.exe
uRun: [zez0u9raihkj2jc08z5zc5] c:\docume~1\admin\locals~1\temp\l20krbere7kuv.exe
uRun: [ybhsv0ihvi05axocgueuadacdih7x1svx] c:\docume~1\admin\locals~1\temp\g4ca5bx2x.exe
uRun: [nm6qe5zpnms43y8tlnv0qzrng3418imt6y5ao9nwhzx92leqe] c:\docume~1\admin\locals~1\temp\nm2v7na.exe
uRun: [ortu6drreblz9nu3burk8mz7q8k] c:\docume~1\admin\locals~1\temp\kocs28.exe
uRun: [qy54xenxd5a46xxgztohct710py30uwykf0539gt13j5eou] c:\docume~1\admin\locals~1\temp\q6sijj8.exe
uRun: [b7uor424uu7i8] c:\docume~1\admin\locals~1\temp\thk9duzlntxpd.exe
uRun: [rtg7ofh84gpphs1t3m] c:\docume~1\admin\locals~1\temp\s23b6e3.exe
uRun: [atucvtjewuab0lhzoccro7orfr2kgu4h4tlizq3vz0pdhm] c:\docume~1\admin\locals~1\temp\mzk840yke.exe
uRun: [zocoe48e8isq8joi3dgo3gxvbjin8ubfzoz8hdfso82vm44hzx] c:\docume~1\admin\locals~1\temp\agauw6tx35d.exe
uRun: [bl8pa7n012] c:\docume~1\admin\locals~1\temp\hfhff169j.exe
uRun: [wnsh9pykn3yqcto2xwtg8hwhoqs9i5zm6kq7iq8xkjkgem] c:\docume~1\admin\locals~1\temp\dmqla18kfu42.exe
uRun: [gu861zyk5d7i] c:\docume~1\admin\locals~1\temp\vxb9534.exe
uRun: [nhwbyw03224f5v24qtziry9lv535nza4gntafbr5b] c:\docume~1\admin\locals~1\temp\me1cx9z2z.exe
uRun: [hiq2fp8x6] c:\docume~1\admin\locals~1\temp\ruib15w8no5b.exe
uRun: [lauvj8t6g89qulegvwnikhmkj7h2v6h4] c:\docume~1\admin\locals~1\temp\vjute1.exe
uRun: [js4z0mg9z6265] c:\docume~1\admin\locals~1\temp\acfiig6qecz9i.exe
uRun: [pf6uxcb8fjh56l9oilwdslmyyezfw38] c:\docume~1\admin\locals~1\temp\bmkgqx.exe
uRun: [we1r6gm4u3yskr4u9kyysv1sk9] c:\docume~1\admin\locals~1\temp\bwf0fd7i8c.exe
uRun: [lnjzwjbo2ki2ef95vr6ovoa2e6lb9nqjtc9m] c:\docume~1\admin\locals~1\temp\puc6hk.exe
uRun: [na03e43ufyfmmekcz337wf8igbwr4d5avjztaruihjsiq1gar8] c:\docume~1\admin\locals~1\temp\hm4e5lkmpd8.exe
uRun: [q3zngrqaxh7s33475uzaqhxryxzrz6t7w] c:\docume~1\admin\locals~1\temp\jrd3t15php95i.exe
uRun: [ux3lt0ecp8hlyah6rk05rl9l] c:\docume~1\admin\locals~1\temp\hkpgfz.exe
uRun: [zkphf14k6g3kekrzpcjo4lb8dlh] c:\docume~1\admin\locals~1\temp\s3wje88qq.exe
uRun: [z5hyotuyxm72t8a0e589tqxagaqxmsv9j] c:\docume~1\admin\locals~1\temp\q3juk5ew0.exe
uRun: [qtv00sy8ean25th2dy0zi082rscx3ce8atg] c:\docume~1\admin\locals~1\temp\useve1rrnm5.exe
uRun: [c8nfa3bjacvoj880iiqw1c8d41gwp6qaqfr4ipxze0b4uzp38] c:\docume~1\admin\locals~1\temp\v2jt51bjog0i.exe
uRun: [k2z5sfpxugy5pfurdbuwahgdzmnnfpobxn3w1srqt8gbro3] c:\docume~1\admin\locals~1\temp\q82xam2a.exe
uRun: [jnbiu5b7ztcx05foah] c:\docume~1\admin\locals~1\temp\r5q3tax.exe
uRun: [zigpcc5i9ezsv3e9tbwxez7jh1qsae] c:\docume~1\admin\locals~1\temp\kb2l0f8x.exe
uRun: [m07o691tk3cwm18l7da731yp7xpa0bybp8hzjerzwskp2i4a] c:\docume~1\admin\locals~1\temp\jwlntzcjvb.exe
uRun: [aw794q76pg9czt3rke7m8] c:\docume~1\admin\locals~1\temp\tbfzml979oc.exe
uRun: [doask60736u0k16dwg0o538drsmgqtny32u4ynk7] c:\docume~1\admin\locals~1\temp\b5dvh01.exe
uRun: [rx3c8f1s8wz] c:\docume~1\admin\locals~1\temp\prm1z6kq5.exe
uRun: [zrolglhgr] c:\docume~1\admin\locals~1\temp\cyb9fi.exe
uRun: [wkd0b8eq6qjxg7fwk8ma0krz015rytbicpy2ig] c:\docume~1\admin\locals~1\temp\rwv763mtxua.exe
uRun: [hdq83899vhk2s7kqu14rrfx5jfzqltj] c:\docume~1\admin\locals~1\temp\dujrabdbk6b2.exe
uRun: [f262q7qgcrj52f0fws] c:\docume~1\admin\locals~1\temp\k2sfrgikxue6.exe
uRun: [bluv6oj5qnk9] c:\docume~1\admin\locals~1\temp\wvc6rz.exe
uRun: [hz21aqwfq8bphogcvry32f2g2fmgk69n8m] c:\docume~1\admin\locals~1\temp\s605ek64yo5h.exe
uRun: [u6juupo458d54n4uidvegm9hs8rv6hmmpdc4a25h0pvb] c:\docume~1\admin\locals~1\temp\r1eawka7gu.exe
uRun: [d858yecqs66tc3tb6cbrec505n8x5sepdn6oxexhlbwp9d3m] c:\docume~1\admin\locals~1\temp\c9gaiw7juge.exe
uRun: [t0jrs59kr9e9m0dzu] c:\docume~1\admin\locals~1\temp\xkidnk.exe
uRun: [q3gww5fs3m74vz4gbf5] c:\docume~1\admin\locals~1\temp\my3p8fxv1.exe
uRun: [sw0d1zjq04uuuw12itg0a3vhj] c:\docume~1\admin\locals~1\temp\ebaq73omk.exe
uRun: [ux6abkcglk5a3xkq263thv2yunkuonboc46dfh06] c:\docume~1\admin\locals~1\temp\mp5c7d7.exe
uRun: [vyfpqgh2pdk6ad7k63u2d71qqhkfnshw0d3kxfpp350qli58] c:\docume~1\admin\locals~1\temp\frff7rj7.exe
uRun: [tzpzbcrozhsqeg] c:\docume~1\admin\locals~1\temp\i1tiw70oil7m.exe
uRun: [borebid6fm5duv7sml7jisntfc6plm92pyf5gxfjhgcqga2k] c:\docume~1\admin\locals~1\temp\mq509m.exe
uRun: [n8y8mkews80y8232yiwv8ef] c:\docume~1\admin\locals~1\temp\fi026p.exe
uRun: [zugy52gyciuq4g6her0yh39v3t9h0edi90vwo2] c:\docume~1\admin\locals~1\temp\by742r41lso.exe
uRun: [hmvqrkkn749tbge2d3k6dutih] c:\docume~1\admin\locals~1\temp\kciyyz0.exe
uRun: [asjx73fc36cuo7foghus2jj0tw2htl1mdw] c:\docume~1\admin\locals~1\temp\sgbezu9.exe
uRun: [bbcee9d9mx5jkhmnbnb] c:\docume~1\admin\locals~1\temp\tvbc6a51gs0yf.exe
uRun: [jcykhssi6wjq3pqj64y5d3zqzv48qp3knm] c:\docume~1\admin\locals~1\temp\sqpy5aq4yys.exe
uRun: [o7gudzvgdvyp4wcglaloqchsy] c:\docume~1\admin\locals~1\temp\cd8jnl.exe
uRun: [m14zlsk5se1k6xt1hxl73nreflhj924] c:\docume~1\admin\locals~1\temp\cn3mt1wj0m.exe
uRun: [jisglo29phptfir0hrzl5zrm3n7z3istt30ok80y7zxg64] c:\docume~1\admin\locals~1\temp\qgo9yq84m.exe
uRun: [h8wf5ve9i2nwy7vn4g67j3topb67hmcn8yhc7] c:\docume~1\admin\locals~1\temp\m24iw5mi4tfeh.exe
uRun: [headz3t5jucok06] c:\docume~1\admin\locals~1\temp\twsjpjbgk58g.exe
uRun: [ify0nm3ucpokxvp] c:\docume~1\admin\locals~1\temp\trg4zfq.exe
uRun: [eq5ryxwqbnr1eghnkzzahwbahuf78r7bngooqgjxhg84] c:\docume~1\admin\locals~1\temp\shb2ik.exe
uRun: [dehvcg86gxhk8s7htq69cfe] c:\docume~1\admin\locals~1\temp\b5njzcp31bj.exe
uRun: [ri3hnffsi6upk99k03071u7l3] c:\docume~1\admin\locals~1\temp\wgt1y0.exe
uRun: [uf5knkf141u146rmj] c:\docume~1\admin\locals~1\temp\ocwrtj.exe
uRun: [uiyse5ergc67srbv8umtstv13bu2ahf6] c:\docume~1\admin\locals~1\temp\p31pkjw.exe
uRun: [ezcj14no4it] c:\docume~1\admin\locals~1\temp\kj5x5jxab.exe
uRun: [o0r3ljotgd9zw5i] c:\docume~1\admin\locals~1\temp\vh23qqly766ay.exe
uRun: [sqvzi8h02xhehvm5] c:\docume~1\admin\locals~1\temp\lzm2v8.exe
uRun: [m7b2omumotr0t0nrtmzhwqce4epo31bqc6jwwb8wbm3au] c:\docume~1\admin\locals~1\temp\retmhns.exe
uRun: [z67iv79kbw3yjckctq4jrum1ftb6dwjrsqpgwaa1wh] c:\docume~1\admin\locals~1\temp\soyk8ncf.exe
uRun: [wkcm9d2ctcxm65p7uzpqu6fjjbo6syu32jz1b90] c:\docume~1\admin\locals~1\temp\fwnz7pqk31q87.exe
uRun: [nqb3i5cktfrx7] c:\docume~1\admin\locals~1\temp\bydltr6hz.exe
uRun: [dpgsl2ut4k5sav4] c:\docume~1\admin\locals~1\temp\mqyozrqg.exe
uRun: [vhuiosyw7f9hkqy8udtv1i7ywgk76b26t8ozokel1] c:\docume~1\admin\locals~1\temp\rpbg4gc.exe
uRun: [cl26x67gh9g2kr8npz5q16nbulfn9a3crn75u4ugka9wob72] c:\docume~1\admin\locals~1\temp\pbovtczj.exe
uRun: [zxcs5qwpvm4tuljdkbxw6y9k4j0nxt] c:\docume~1\admin\locals~1\temp\j8ps5tq.exe
uRun: [elpwm21r9t2m0fjhha5fqrexj8t6yxzb] c:\docume~1\admin\locals~1\temp\u13eh0stgllq.exe
uRun: [dquarhgh35o5feg086] c:\docume~1\admin\locals~1\temp\c9m89gqz9oog.exe
uRun: [gb5cmgdnqiy6f5a75nxo82cwibupwo] c:\docume~1\admin\locals~1\temp\bvygkwa23rys1.exe
uRun: [h5qa0f0dpwvsmjlx68uwl8ggonack] c:\docume~1\admin\locals~1\temp\tr50j11tmlrl2.exe
uRun: [cf0neh7osr9u1lldn5noy561da9r5yziao2fg0gci0dzqzm2] c:\docume~1\admin\locals~1\temp\wge74vnorxwt.exe
uRun: [gsnyfkahfky3ati5g63yyjcjumgfl3fvij0ls4yjk73kcb] c:\docume~1\admin\locals~1\temp\azay3yld2xgaj.exe
uRun: [lvj1x2hi03] c:\docume~1\admin\locals~1\temp\ur8bs3bc.exe
uRun: [hqi0mpnv9rjy4p] c:\docume~1\admin\locals~1\temp\qgu9p7a.exe
uRun: [hgrghk0gakf7vkn421hgnyec] c:\docume~1\admin\locals~1\temp\twh0g0dwfr.exe
uRun: [g09r00i2jfd19n4s8p2] c:\docume~1\admin\locals~1\temp\leeoy4lvofd.exe
uRun: [h3vqycvdqvi9f4khpew4ekeojutg4lb0jjw] c:\docume~1\admin\locals~1\temp\zvlrqag8d98dt.exe
uRun: [n2tbakkwlid50qugi16o7sly8trdvskyosoyxu6djruoa79y] c:\docume~1\admin\locals~1\temp\myy69w1aam61n.exe
uRun: [nrn1im6zbzumruas68lullfvjfoe4n54ufuocrbh6m627] c:\docume~1\admin\locals~1\temp\o86fsfclt.exe
uRun: [j9py3jz64146djuthovrwcvgturymdmujs9eovtzaqr3an7dx] c:\docume~1\admin\locals~1\temp\qdjm3u.exe
uRun: [m5mol93cbk2rojazuvlsfquyzgpktk] c:\docume~1\admin\locals~1\temp\h0lh3w.exe
uRun: [t5lx8qlc2500spi25] c:\docume~1\admin\locals~1\temp\ab9g9hutigyw.exe
uRun: [fud4wk0sq8vu8yihweq36rdnru0l0kjoaxybx] c:\docume~1\admin\locals~1\temp\a2b3pf441z.exe
uRun: [bjo1lng8o8445s9h2] c:\docume~1\admin\locals~1\temp\kcdwgx4ceu5.exe
uRun: [nuj21ri6y4fui37eye9v8ezm47m3xidt6vdx7qoh42] c:\docume~1\admin\locals~1\temp\w51dd7q18krou.exe
uRun: [t386vi53xiu5j0nt85s6ykkzovtl1k6022fxhnxn52dqa1y] c:\docume~1\admin\locals~1\temp\rb3hisyou.exe
uRun: [yl7cxbdwys2freqf6zkrgvv22dgu6vsirc10k2zatl3l2rsqv] c:\docume~1\admin\locals~1\temp\trbhai3s07f.exe
uRun: [rtdsl5oyzxtvwv49mvz] c:\docume~1\admin\locals~1\temp\t684pf.exe
uRun: [bfkvxrsumx6gb4tlm0hs92nf8tlftftu] c:\docume~1\admin\locals~1\temp\hdknsomjp1xp.exe
uRun: [z0wa60imh0lstc66pd8li71z7wkduqbnpja2ly9y2ie] c:\docume~1\admin\locals~1\temp\jeejolc6rh1.exe
uRun: [okd1kvruy5hgh8slg037bxdihee0zdhf0myf] c:\docume~1\admin\locals~1\temp\eqfeoxs6.exe
uRun: [al77pe36xdotenbe2tesvcl3y63rehxuvoqqpt5lh6f4drtg7] c:\docume~1\admin\locals~1\temp\ecyyxex.exe
uRun: [jxam81tp7aodausyik3k] c:\docume~1\admin\locals~1\temp\qf8jof83mlkx.exe
uRun: [r5kn77wq37lvukm5bhjv6zqhv0myvc8tsh1a1xn] c:\docume~1\admin\locals~1\temp\p53lgyoblrp.exe
uRun: [ahulnsq0myq5vco0s05] c:\docume~1\admin\locals~1\temp\ytw2eqyt.exe
uRun: [wt454g10uhh7weqjiqjj] c:\docume~1\admin\locals~1\temp\qp33dvp3.exe
uRun: [q4z8ps4crvd5uhqbe2pb1er7hysaovudc2qtm6n49a2rlo] c:\docume~1\admin\locals~1\temp\dievxjhut4.exe
uRun: [lgroyxvqiwc4s6owqgk27jit21l73] c:\docume~1\admin\locals~1\temp\orjued2.exe
uRun: [emyvxxqwxyf55xpzaud7wcy85t81zxhqwrbbrd] c:\docume~1\admin\locals~1\temp\tvcay8b.exe
uRun: [SpybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe
uRun: [k2h34uolifjw70tdjl5947bkuqv8qn] c:\docume~1\admin\locals~1\temp\pynoalny7ri0.exe
uRun: [cmpu3wbdvttezls6b4e11n0v2a7390vj2k1hga95t] c:\docume~1\admin\locals~1\temp\o7iq243n6xn.exe
uRun: [opxjucw6dy7pe7dsvza2bibmxl8ndqah6od9oi657] c:\docume~1\admin\locals~1\temp\dkwubrnpw405j.exe
uRun: [g7ffci169nul0woqeri0hucfmcumqfi8d9vjc35u16c] c:\docume~1\admin\locals~1\temp\i4jnelun0m.exe
uRun: [zqetwlostgbwyyt] c:\docume~1\admin\locals~1\temp\b1x9k5yh3.exe
uRun: [e1u35q21bko314wcvg7bp1ci871mjecse15p3zci] c:\docume~1\admin\locals~1\temp\eqi2o68.exe
uRun: [x5g8aru1j7z9zllc5sci0lqoooblxkmc77cumcoot] c:\docume~1\admin\locals~1\temp\y8m69kdn2b.exe
uRun: [wsjg62dcivcfptykh6863h0zbi34xijxet1ymflcjh8p2w0cxe] c:\docume~1\admin\locals~1\temp\ov589oh0tt2la.exe
uRun: [xm4e310lhss1f79rir5eg44jhujrl4wjsu46afickczt8ytju] c:\docume~1\admin\locals~1\temp\grc98crrcneeu.exe
uRun: [p1d3iq9w2rcd6xvd8t59aodr5igxybbbeqdkznw9udm2j7j] c:\docume~1\admin\locals~1\temp\tui4yg0ijnb.exe
uRun: [i3475d21zlrn7pf5artad5y0olg49n] c:\docume~1\admin\locals~1\temp\fib2f8aj.exe
uRun: [w2rbq43jwm6aj3rcv2075s9am3vaf1dfvw2] c:\docume~1\admin\locals~1\temp\l08sw011l.exe
uRun: [h36t4sqtsutt7g3ji6vytp8g08nw63hyhu5fnly] c:\docume~1\admin\locals~1\temp\khoy4h.exe
uRun: [dcjx2qcgv8t63i39a0e1iwj41] c:\docume~1\admin\locals~1\temp\o67javg7x6.exe
uRun: [lqmbdqfbxxlm84lsbcnjdkgxk] c:\docume~1\admin\locals~1\temp\zp72xmi00o3.exe
uRun: [ngam7xyjlsb8h1wjl1se1mjze3k97dhe2f6ksz] c:\docume~1\admin\locals~1\temp\l9hn76cj.exe
uRun: [jsknol9njpavq0ag7866864wmgqdrjtu639ee9u] c:\docume~1\admin\locals~1\temp\d5oonb3a.exe
uRun: [zwrs3f6x59ovj8] c:\docume~1\admin\locals~1\temp\o7o7tl57r.exe
uRun: [vq34a1oumhbn6n] c:\docume~1\admin\locals~1\temp\le07xnh.exe
uRun: [fed8zzsbbxde59ka3dro9pya4dg1uvwbl2w637] c:\docume~1\admin\locals~1\temp\k4v9p6.exe
uRun: [xk8mh14hni8cjn4vn8qk] c:\docume~1\admin\locals~1\temp\zmsxor5.exe
uRun: [otff8ubu6nkvw] c:\docume~1\admin\locals~1\temp\u2wosanli.exe
uRun: [u0h9hl3pomjg3ji132t3i9rsgn4dospl23jmk510a] c:\docume~1\admin\locals~1\temp\kgdrcp6ldfq2f.exe
uRun: [ffskq1w181w6x6hdbvwuyxbfbknqw7c4smqbqo71u0] c:\docume~1\admin\locals~1\temp\j1dto9a.exe
uRun: [ieix5ii4o0x05b15n5rlgkp7ca01igapehjzwey0gw00qbm7c] c:\docume~1\admin\locals~1\temp\fqyro1db4.exe
uRun: [qjkb5hbzt6207yxvejzv6d] c:\docume~1\admin\locals~1\temp\lf0ezw.exe
uRun: [rt07mrtv4oe9iaq44099paiddkz0j] c:\docume~1\admin\locals~1\temp\hx4bj2ejcgzp.exe
uRun: [tb558zg8mrcreblsmtgmm8qo6e9rk2h6qrjdn] c:\docume~1\admin\locals~1\temp\cm3fas74w9c.exe
uRun: [ar4ooi0flpezfy55x7pawxcde7jfvi7giu614hxi5r] c:\docume~1\admin\locals~1\temp\v53lko.exe
uRun: [p9n84o1845rfslt7s4p1b6vevq10paoa1zkq4mvdfle0b3ix] c:\docume~1\admin\locals~1\temp\yow1apj7ka4o.exe
uRun: [li0ukza6l4joetjrz47] c:\docume~1\admin\locals~1\temp\rgr37sin4yyz.exe
uRun: [qgnhd5fhjeda8c] c:\docume~1\admin\locals~1\temp\rhoavn.exe
uRun: [pinq8nxfsr4jh0wvs2hxr2r4] c:\docume~1\admin\locals~1\temp\z0yupa.exe
uRun: [y9m1ueubiktevolnf] c:\docume~1\admin\locals~1\temp\c1v1u5tf.exe
uRun: [euo5rmkhk1olydnua5] c:\docume~1\admin\locals~1\temp\zl1qadxsphu.exe
uRun: [puviiibjfrp4mj] c:\docume~1\admin\locals~1\temp\qd9n6vcpq0iki.exe
uRun: [kka1b2whgsd80f6fbhwx1s5x5ykmmeown9s5] c:\docume~1\admin\locals~1\temp\an8zj1gau.exe
uRun: [h5u2pq3ry5q9jab555yifycoanw967] c:\docume~1\admin\locals~1\temp\lba2f9nhx.exe
uRun: [uxhnvinvvwsfpp4j8u] c:\docume~1\admin\locals~1\temp\h1cohawhmp.exe
uRun: [rpmt67ba355] c:\docume~1\admin\locals~1\temp\mqbh03yijdja.exe
uRun: [nlvh55px3yihelgsxlhsol9] c:\docume~1\admin\locals~1\temp\llcth8.exe
uRun: [u8zcrqgeh8tvk1oxsjib6718vugjt35pm3693d] c:\docume~1\admin\locals~1\temp\n4vrjok8.exe
uRun: [d49r99or3tr] c:\docume~1\admin\locals~1\temp\btu13a13gv.exe
uRun: [vf9j9b98p1kixxkuy6wkofcl] c:\docume~1\admin\locals~1\temp\i6ijw5q1w.exe
uRun: [zztioftlya1m7u8hkd1v1qbd5yqkci] c:\docume~1\admin\locals~1\temp\edkoy6z1lb.exe
uRun: [xe5mq4a5qubonlw065uh2qq0f9p6qxx5azz3t] c:\docume~1\admin\locals~1\temp\l1q0vu8jd.exe
uRun: [m2xkymdh8v8heh2uv6rb5gcxhg7] c:\docume~1\admin\locals~1\temp\l55tnytdu8ud.exe
uRun: [ejueer5lx] c:\docume~1\admin\locals~1\temp\yf450lef.exe
uRun: [yev7ebikf6fptq5ku6j1rq882ylrtgfsebaigiz96pdxea8n1] c:\docume~1\admin\locals~1\temp\h7vf9hqa.exe
uRun: [imqjghhsmij2b5bep5ntho9333k0gu1fmjwlzol] c:\docume~1\admin\locals~1\temp\ve7yvq.exe
uRun: [zke4b759x1] c:\docume~1\admin\locals~1\temp\w5cw37o.exe
uRun: [f8acjykm336rl] c:\docume~1\admin\locals~1\temp\nsi998y0o3.exe
uRun: [xzekzwjjh0y629f1vhj2rvc2ifybrr2gsycskwxmm46] c:\docume~1\admin\locals~1\temp\m1dbirepn.exe
uRun: [mbb9o5u4gxb0bu2581l29x9mxs4cc1pvgawo2] c:\docume~1\admin\locals~1\temp\ygkc5zo7al.exe
uRun: [a5f36zzmbncgzhh9jtyv] c:\docume~1\admin\locals~1\temp\ntixshnws.exe
uRun: [d9oolcpue4m80ijgit7m34k4gkr2zlzg3] c:\docume~1\admin\locals~1\temp\q4hrfa7g4.exe
uRun: [hc9meyx78lwqytw7f2t07ceknwz6b9e7ficd8yytvcfvr] c:\docume~1\admin\locals~1\temp\awvtukpyp.exe
uRun: [zjguzmcpgpa9bvs46iu0nbz9h6se1lmt2i1t6] c:\docume~1\admin\locals~1\temp\mp0a8ub2tmg.exe
uRun: [fj859nt9bm9hzfg2p7itn8hctqvm5xf3rfzruev] c:\docume~1\admin\locals~1\temp\i0osvfy76.exe
uRun: [kyi5epng5zmpl0otskgm4qgpvusskc9o4ept9ivbtvjj7ufgh5] c:\docume~1\admin\locals~1\temp\st648ljsrn29e.exe
uRun: [qul128owywpmats8l4pxjbk7dhbiau3ihukybeimogq00pyic] c:\docume~1\admin\locals~1\temp\kbw8x7yxahx6.exe
uRun: [riw505nj7vmjwj6jb5tur5qbxnnyeipv] c:\docume~1\admin\locals~1\temp\c7k9wcpotb9z.exe
uRun: [y2zm93m3rinom3kf6rj57lzm836gdk9d5x10wm0u7plqrm737a] c:\docume~1\admin\locals~1\temp\rkyd5z.exe
uRun: [tizpmqwp6cq64c4s0tml9fygl6kzjuakb78o2nqod] c:\docume~1\admin\locals~1\temp\qbx6cvsik.exe
uRun: [iqyugld6z58t654nnawry9s7xlpmdsef1suycx3] c:\docume~1\admin\locals~1\temp\n93sjmrhftsbv.exe
uRun: [ia5o0ig3jmnb2pvir4wlty9sdnp2k926v32vg0ew47dx8] c:\docume~1\admin\locals~1\temp\icna1h7n.exe
uRun: [kzckgx5bqgplk8k9986hsujah5xsf] c:\docume~1\admin\locals~1\temp\enbsol.exe
uRun: [o3pql21cled] c:\docume~1\admin\locals~1\temp\zztnoih6n1s.exe
uRun: [wdpi4ro2pva1zolud2fx8s9f9dl8h158piln9j2wog6y6lwik] c:\docume~1\admin\locals~1\temp\r7oo7o.exe
uRun: [k6il3iaghsul47ih4xisb] c:\docume~1\admin\locals~1\temp\dipe62feyic5.exe
uRun: [wqv502nkb7j] c:\docume~1\admin\locals~1\temp\ii61to.exe
uRun: [t99p2llpr5rfg8p1whqzq9zj] c:\docume~1\admin\locals~1\temp\smpmsi7vz.exe
uRun: [hd5r2klbfm9wud6htwjodfd9kwbastur0l1a15z9lm9j] c:\docume~1\admin\locals~1\temp\t16kgyk.exe
uRun: [xjmtsy692t0zhsrw7mxmyv089485v] c:\docume~1\admin\locals~1\temp\s1mq7wtqbjka.exe
uRun: [nnahrydcv] c:\docume~1\admin\locals~1\temp\ly0cdgx3vq1.exe
uRun: [y6t0a2h4amc7asyve99xxxsxlpva9ea] c:\docume~1\admin\locals~1\temp\ixyndk4royj.exe
uRun: [hz4t0yy8cmkp7fppe02cbtm8eucm7heidscsl9t] c:\docume~1\admin\locals~1\temp\pw58fwh34.exe
uRun: [peh20jfrc2ivg0u] c:\docume~1\admin\locals~1\temp\fepokecpng.exe
uRun: [bb60h7r9lexo3h] c:\docume~1\admin\locals~1\temp\mnrcs66iwyha.exe
uRun: [anvwjasmvf08yr32jn23yvtg36l4og] c:\docume~1\admin\locals~1\temp\ua3st1frdn5h.exe
uRun: [o5ifsr76esn22jyzq0ikqtbgv] c:\docume~1\admin\locals~1\temp\et00797kyb.exe
uRun: [y3ie170gvwwer2657rzvkr60lvnlueob75pepz3mk9omdlg1j] c:\docume~1\admin\locals~1\temp\iivikokflhaz.exe
uRun: [rrhth7ryjot52ac6466chl3z] c:\docume~1\admin\locals~1\temp\h3vkdp.exe
uRun: [cbomihb63ba5wcvgt7o91xmchvfrn] c:\docume~1\admin\locals~1\temp\iuji468.exe
uRun: [oxjdcoygqtapwd3a08uz2yskoa168hnikw4] c:\docume~1\admin\locals~1\temp\ly6c4gzj9.exe
uRun: [kbnvv6so55ak40w9970owpdh1sd7x6dncs1] c:\docume~1\admin\locals~1\temp\riwgzcx0v.exe
uRun: [rq6bkh0yy1v4dyu2jr8in] c:\docume~1\admin\locals~1\temp\bb78j0pr9ic.exe
uRun: [rh95t4o7nbimkqyht6mfzax8dul736wrd6scnf61lo] c:\docume~1\admin\locals~1\temp\hbu4oxviw61bi.exe
uRun: [k28gmqdmxmlst6] c:\docume~1\admin\locals~1\temp\s9yuj3ch17y.exe
uRun: [wudun6mz3m8vmdhb] c:\docume~1\admin\locals~1\temp\v5chyh.exe
uRun: [pjihnryhyio4n5amao65ngpsnngamytgbzdxlzp8004dv4k] c:\docume~1\admin\locals~1\temp\qzqljk1.exe
uRun: [dv208jsol71miolwqzb29hridy95] c:\docume~1\admin\locals~1\temp\kw7i2h05w.exe
uRun: [xuxp2mgqkcb0lghsj9u9jqy79oh9kklz1kvr39aakrc6r7cw7g] c:\docume~1\admin\locals~1\temp\xubaht0d.exe
uRun: [zc3pdqxkvhp8cbd7ejas0x0b1qhao5ejs857upls5hpwcqj] c:\docume~1\admin\locals~1\temp\uxbyoma9.exe
uRun: [e9xoajg4oltt3esr42mr3p5t36l4ravgxc38l] c:\docume~1\admin\locals~1\temp\fe849ad7v3np.exe
uRun: [x7fzv8907tl08u] c:\docume~1\admin\locals~1\temp\mdfps57jbf.exe
uRun: [lbeiu2hf2tg8v43mfp3z] c:\docume~1\admin\locals~1\temp\px5tnio0gr.exe
uRun: [ddvt9dn4xi3fiwq5iq6gxyoh51zk1w4akd2ccrs] c:\docume~1\admin\locals~1\temp\oiovg2smmr4h.exe
uRun: [htrzv7zi36f5uq4f3t83rc9tyrb1coam9wmvu7p09bzs4x53] c:\docume~1\admin\locals~1\temp\h50drehwr48rv.exe
uRun: [a57qtddbo0256hfxzaibsyvx31pl3n7x] c:\docume~1\admin\locals~1\temp\ku9kr1p0bax6.exe
uRun: [v3o1wa1vo6b3cyh188] c:\docume~1\admin\locals~1\temp\cqgl76grupzu.exe
uRun: [mv6z5zgxqkgpbpgt90r] c:\docume~1\admin\locals~1\temp\f56u5a.exe
uRun: [qxosansa18t6zsn4bp] c:\docume~1\admin\locals~1\temp\ys67t8do.exe
uRun: [wnt22pxo2p24w1h6cpp7s7qamwgbxw9] c:\docume~1\admin\locals~1\temp\emrxu1bm5g1j.exe
uRun: [pk46bl3zjfp081al6] c:\docume~1\admin\locals~1\temp\g7d3ef9gjwci.exe
uRun: [spub39hg1rs5lq5x9k9wx4t] c:\docume~1\admin\locals~1\temp\nf6ff55o8to2d.exe
uRun: [ueqd6ru72dc0evu78gcokypf] c:\docume~1\admin\locals~1\temp\vjzez0expzcsc.exe
uRun: [xvuqsksuervbf] c:\docume~1\admin\locals~1\temp\cjm6nqi1h0b22.exe
uRun: [ooc16v92dvivxwn5sar9iwfc] c:\docume~1\admin\locals~1\temp\hmif27himhz.exe
uRun: [a0690gm812m5ful9gl] c:\docume~1\admin\locals~1\temp\xzqerqj.exe
uRun: [bqy5nk19zs4yqtgpmj86od8dc2nero072h] c:\docume~1\admin\locals~1\temp\sxuteiqg.exe
uRun: [zany8eqg2r5an6tsc7qanahwaon] c:\docume~1\admin\locals~1\temp\ifuso5pf2vb2.exe
uRun: [wm6r3fxl4u] c:\docume~1\admin\locals~1\temp\u6fbzoy7.exe
uRun: [xov8ryvtpc420c] c:\docume~1\admin\locals~1\temp\wv5xscz.exe
uRun: [vv4ko8xxs7fw2ornqcazh00kcj1p89] c:\docume~1\admin\locals~1\temp\oja2vx4ut2su.exe
uRun: [ap8vo91dcamsrt] c:\docume~1\admin\locals~1\temp\zxyllpuk.exe
uRun: [czu15e0qs96kzl40enxfsaagcoxpddj9im] c:\docume~1\admin\locals~1\temp\m3qmd6s1dvid.exe
uRun: [aaic0rm63uozfhl1hh1ghs2rnllk86d] c:\docume~1\admin\locals~1\temp\t3xvyrb9x.exe
uRun: [m33q6sznz04bwnvjs5ndmfknggvie2fdr8jvvc2v8gd63nf] c:\docume~1\admin\locals~1\temp\t9wmc3qfs9.exe
uRun: [f9yxql1vfh6ncsg6kattrybg3v43mxo5fey3tw5x] c:\docume~1\admin\locals~1\temp\kvmsu9q6h3u.exe
uRun: [irclxvj8s3fd83zrys3z] c:\docume~1\admin\locals~1\temp\vjovqhgw3lh.exe
uRun: [h80w1tg7fcea58p5qzn3vvoyfwtsc6pf3kwq7ibgqp21hu3z] c:\docume~1\admin\locals~1\temp\nfvfpm7nmft.exe
uRun: [pc5xuvee085acrgsj4gj9pfy2jywgeif] c:\docume~1\admin\locals~1\temp\yug5kb7m8.exe
uRun: [h13c60c5784xkptd75ni6w304jgtf75g4f3nje5kkxoz0hd7] c:\docume~1\admin\locals~1\temp\bis50a.exe
uRun: [a72so372b0] c:\docume~1\admin\locals~1\temp\wtm9ozodel.exe
uRun: [mlvxf0bgviw44s0b14n2m1m1agne1lwlqgnkofvjtvp36y9] c:\docume~1\admin\locals~1\temp\m1bonkl.exe
uRun: [maoatgm9q3u7d6p81h2cxpx4a4chh56bp] c:\docume~1\admin\locals~1\temp\dnhuacpm1ro.exe
uRun: [beob7h8zwv5janfxlbhcz8hi] c:\docume~1\admin\locals~1\temp\x3b7tbnb.exe
uRun: [r56ei6icx7s0b5wxqirqttc6fp2gmqy2ihcwmg] c:\docume~1\admin\locals~1\temp\qqn60gydr.exe
uRun: [tla6h2dekug1yfp4j2cuwz] c:\docume~1\admin\locals~1\temp\uanoxd.exe
uRun: [g8fu3rr2qqczrkhs8bvplapzr4gydsr88hn7gvf3q887jhzd] c:\docume~1\admin\locals~1\temp\kxjn1dpuxm22.exe
uRun: [uhucqouyztibs5cfq33id4wpdp58] c:\docume~1\admin\locals~1\temp\yvgt31d1.exe
uRun: [mpnz2eyxc21zroo87hxjsarryjer8] c:\docume~1\admin\locals~1\temp\gjpgsrwjm5.exe
uRun: [ccs4q8e9ueu1vr241z6sn2633dducf] c:\docume~1\admin\locals~1\temp\qn81rl2yvnq7w.exe
uRun: [vcwd1rg8x0akt37419jt3g63g8zny7oij2] c:\docume~1\admin\locals~1\temp\x6vtywwge9vey.exe
uRun: [mcovtlf9995p8q9hgpb6kc0rk4i0fdyj] c:\docume~1\admin\locals~1\temp\wdxf0t.exe
uRun: [neg9xytxd032297fz5ealxg66tsungfa9ruxypo28btd] c:\docume~1\admin\locals~1\temp\hfxyn3l.exe
uRun: [mh7d13kchylrsh3hie1ud] c:\docume~1\admin\locals~1\temp\zb4im8r.exe
uRun: [gmu4k5l9snnlye8g9cqhwsamj78xtgnb2l1bc7q3zj] c:\docume~1\admin\locals~1\temp\vmsh9cerbb0oa.exe
uRun: [cuxi15t97v0cvpl945riipylwnanad2nqm31c1ua2va] c:\docume~1\admin\locals~1\temp\c0dp76.exe
uRun: [q1oorpritfy0ao35f3ge28e6enph0mz6cx6d9t7wqv] c:\docume~1\admin\locals~1\temp\bmtyo08cli.exe
uRun: [o952e1sgbkuwqagm4c0hth1w17ilmo25mic0] c:\docume~1\admin\locals~1\temp\tz7jx4beup8a.exe
uRun: [ytayax7kyefl9ntz3] c:\docume~1\admin\locals~1\temp\l59n28j5.exe
uRun: [u8t0y53eghuzujffs3g6d2908sdrqlsbl04x86yj3e7kl3kk] c:\docume~1\admin\locals~1\temp\ebl59uu7q.exe
uRun: [guveoyx3s5wb] c:\docume~1\admin\locals~1\temp\jc8yco.exe
uRun: [tld8bribqt0sedfi77qzlpcejnofu5cosbkr9tcm] c:\docume~1\admin\locals~1\temp\nkkgp3eh.exe
uRun: [k8re4dtap9ucgbieha7dc7w9k29bgx4j8xh] c:\docume~1\admin\locals~1\temp\krpw0nx0ovv6.exe
uRun: [grdzaxxurhghv2ov3f] c:\docume~1\admin\locals~1\temp\oz54rr.exe
uRun: [j3ga6gung] c:\docume~1\admin\locals~1\temp\se1vkz6951jd.exe
uRun: [wsyioqdppzrnzva38ekoz1shd] c:\docume~1\admin\locals~1\temp\l6geeg1ch.exe
uRun: [n43fgol2yuf5d8rwna5z46h4d0he07d6ftxz] c:\docume~1\admin\locals~1\temp\qmxuzxowwhcl.exe
uRun: [xn6dr533lj0perd2u2fgxasxovg2s5hgkwxvth2y091o0] c:\docume~1\admin\locals~1\temp\tk4xlrr2r8zpz.exe
uRun: [gkkwjoaqbpvjxby0pp64f3xep3c89apy9p3n92l] c:\docume~1\admin\locals~1\temp\j17p70g.exe
uRun: [encma2qbf2we9] c:\docume~1\admin\locals~1\temp\gdfpo09.exe
uRun: [vzxlmw0wi9ukcfcovye7i1xy] c:\docume~1\admin\locals~1\temp\fe9218.exe
uRun: [vgg7pwl26agnkyir1opoggxr0hcxje7xfh9d5yy4dimv] c:\docume~1\admin\locals~1\temp\bug4xtb4cri.exe
uRun: [vy5pvn4y04djagszwrhapekqwmlxn] c:\docume~1\admin\locals~1\temp\uhs34fm6wfpp.exe
uRun: [q9ixtf8fvus166] c:\docume~1\admin\locals~1\temp\t7n5dy6l9tf.exe
uRun: [sg6kbzdazbixugilotloc6z4iyb6bhkg4wola6] c:\docume~1\admin\locals~1\temp\apuqwaf7u.exe
uRun: [u5ynizyl4bx9vf5gb5vsu48nhhm3fiumcc2] c:\docume~1\admin\locals~1\temp\sxpafguvkl0w.exe
uRun: [mgncwwu7lz4hzpz0g8laefa2jk00y7nkb4r] c:\docume~1\admin\locals~1\temp\t2b5xz.exe
uRun: [hdabj3xsqcuphg1i1p] c:\docume~1\admin\locals~1\temp\s351tb91wa6ne.exe
uRun: [jvakdbbybbghidvi3v12rguvuiiaxgx7] c:\docume~1\admin\locals~1\temp\gfj45isbsy.exe
uRun: [n3sdq2fvftyb2vopjpflcagftb78wevh3ird6j] c:\docume~1\admin\locals~1\temp\s8olj9efwath.exe
uRun: [v1fmqt33s] c:\docume~1\admin\locals~1\temp\dhckj3zr6.exe
uRun: [w83lx3i5emwc21a] c:\docume~1\admin\locals~1\temp\yx98u47gu.exe
uRun: [qgja9py380imxs6s3] c:\docume~1\admin\locals~1\temp\dwaocv09v.exe
uRun: [y7g5xwjlff6ispm0b9i3f0w3s00x] c:\docume~1\admin\locals~1\temp\esh6ttpyb.exe
uRun: [t7xucns6g9tsbkt2] c:\docume~1\admin\locals~1\temp\n4zn5wz.exe
uRun: [n4zskuk8rdscvgf19hbml4dm4cpvikhupfxp] c:\docume~1\admin\locals~1\temp\ext69s.exe
uRun: [k4zmy8caymj26dw605ckt5h] c:\docume~1\admin\locals~1\temp\iqca2idqvs04v.exe
uRun: [nqczy8z8dshd2u1j75ii8ic0sjwuj12j8cqmuofmqexdx3] c:\docume~1\admin\locals~1\temp\ua15yu3kuz.exe
uRun: [rllnpa5xckcnpurorlg73vf9] c:\docume~1\admin\locals~1\temp\n6s061luvnwpq.exe
uRun: [uk08m8p7swrl233twu35iffp6717vtr1u5tb3] c:\docume~1\admin\locals~1\temp\a95f846ws0udk.exe
uRun: [amswunot85sc4x7dvaxcoogl9q7qucbhrjrnilpp7] c:\docume~1\admin\locals~1\temp\m75w2u43pibm.exe
uRun: [ckmnbwn8thw] c:\docume~1\admin\locals~1\temp\aj0zekndl.exe
uRun: [qco1bf4aijooahggm7x041kh6xxg] c:\docume~1\admin\locals~1\temp\twhef9.exe
uRun: [lf6ofim769y6nulpckrj8f2rcl3z3u2gppy] c:\docume~1\admin\locals~1\temp\e30hbh.exe
uRun: [l2ctbg1kl9xesqvft9wuod3] c:\docume~1\admin\locals~1\temp\g46tebv3jol.exe
uRun: [m2oi7142y0y0c45ki2c9cv49cf0kpc5p62hvk] c:\docume~1\admin\locals~1\temp\o8z9f64c0d9.exe
uRun: [b5cyh2zsku6h] c:\docume~1\admin\locals~1\temp\s115j664zxvru.exe
uRun: [ujug1kp20j11b2siq47] c:\docume~1\admin\locals~1\temp\dtvjk04uectro.exe
uRun: [jkauh8mplvprzam] c:\docume~1\admin\locals~1\temp\dkx6jyx5xc3.exe
uRun: [dfvm7p3z8ja8] c:\docume~1\admin\locals~1\temp\jtf0zohfoj.exe
uRun: [s53cphk5y0fe5e5fry0xchk2fyoca5y6l2nd1spg3gr43q] c:\docume~1\admin\locals~1\temp\vm3hwf3jsvlz.exe
uRun: [ah39wu9qoiqygt] c:\docume~1\admin\locals~1\temp\tgylyzndx19c5.exe
uRun: [fvacfc11cfz] c:\docume~1\admin\locals~1\temp\qx55rhz.exe
uRun: [v8u6f1xfc8y6ajmueqpe74ui] c:\docume~1\admin\locals~1\temp\s2xbfe18f.exe
uRun: [ehzp0idyuv4npecsgnorgx7e57] c:\docume~1\admin\locals~1\temp\gftuaqfz.exe
uRun: [kzcrit1w7607kzo8hypfym7i8pwkrz9swrf8] c:\docume~1\admin\locals~1\temp\bpm1yt8p7d.exe
uRun: [x3itftjn555mv8z8z8qc7xmqjpoxowmivgojy61u7mkskk] c:\docume~1\admin\locals~1\temp\nna2l1z7up1.exe
uRun: [u3tdjv7hjoiljcoisfnlbs4n8pe55mv6rmaoja] c:\docume~1\admin\locals~1\temp\x2ey2jnt7kl.exe
uRun: [qpe9vhzda92ch34rxsqialerkq83fga] c:\docume~1\admin\locals~1\temp\m5ei5qqe4.exe
uRun: [rd2p2aejm3pgo4ucd5qek915pp8cd2gpj5yxr] c:\docume~1\admin\locals~1\temp\hlb6grf3s.exe
uRun: [s3zsvcs8yz3uvd3jcdctgo6nnlx9fhnai47bg7] c:\docume~1\admin\locals~1\temp\okirz3s.exe
uRun: [oj4vvdirh7m0j79os212nw3kl2d04ndjdq2] c:\docume~1\admin\locals~1\temp\ob3vyi27r39z7.exe
uRun: [edfl0nojmc31] c:\docume~1\admin\locals~1\temp\r9aykg.exe
uRun: [j6hfdc1oo] c:\docume~1\admin\locals~1\temp\ytjwt0ol8egr.exe
uRun: [qquaocclxh651dm6631qw02bldshkwt5x] c:\docume~1\admin\locals~1\temp\ac918z4.exe
uRun: [hv1sntwxazsmg2ufil8u] c:\docume~1\admin\locals~1\temp\ihzoxp4st.exe
uRun: [t6yzasjfov7h9nl7nr8w] c:\docume~1\admin\locals~1\temp\u4oeg4bql8.exe
uRun: [hrwsw0w5frfuvk0qhdo290jnu] c:\docume~1\admin\locals~1\temp\ew2zvecrnw.exe
uRun: [dkyvkujovozbtjcwvxm6eq9p8epnxvhkxlbv] c:\docume~1\admin\locals~1\temp\w38ufcnj1f.exe
uRun: [dr3mmj608r9dri] c:\docume~1\admin\locals~1\temp\opkb8k.exe
uRun: [dicwqis0gl] c:\docume~1\admin\locals~1\temp\oj7k7u.exe
uRun: [of8anchv76tcg1ehdau6d12qiot871xgliglgygujeasnz5] c:\docume~1\admin\locals~1\temp\k4qmjv9l.exe
uRun: [g9aqbsigp25a6p8] c:\docume~1\admin\locals~1\temp\ob9v8i46mpe.exe
uRun: [nrllpc67zx0jin] c:\docume~1\admin\locals~1\temp\r5kmjtvfv.exe
uRun: [usipqdfe9c4m24lv8g1esfywtdrib7vc95eydebvg4pg6] c:\docume~1\admin\locals~1\temp\bemrrlp8j2c.exe
uRun: [vjn9thgilsc1zj] c:\docume~1\admin\locals~1\temp\uky9yqha3qj3.exe
uRun: [fskevlb0z4jc] c:\docume~1\admin\locals~1\temp\ii5cqf.exe
uRun: [qwvtbix7pi8zy1ng1] c:\docume~1\admin\locals~1\temp\gn1rfsz.exe
uRun: [wj12vsuz416pmomsnl5s532mnsu2lslkyu0t] c:\docume~1\admin\locals~1\temp\dudrjubc63632.exe
uRun: [nxc7fufwifjlndhr5tfs6grnc8va14j5loco8w] c:\docume~1\admin\locals~1\temp\jtay05.exe
uRun: [hexo82d2azo9oqtzsvm0j1f3s06ckpm9yv3w69f1jhnws0o] c:\docume~1\admin\locals~1\temp\rxmx1h.exe
uRun: [nxjn2nx2zwlts62lfqajdxa0s81wmc5ij2csl58dfynw5je8mt] c:\docume~1\admin\locals~1\temp\qs0jjhfpd3xx.exe
uRun: [xw0udjnevm4qswltdt58ltmrn2wa64popwgustl0] c:\docume~1\admin\locals~1\temp\bu02prhiglgob.exe
uRun: [vsbgtxz6ro6opzi7agtk6nhlyp9efxokxer5hlkwt4dzbys98t] c:\docume~1\admin\locals~1\temp\uc0kgegh7.exe
uRun: [wzgw07ec3ztsw0] c:\docume~1\admin\locals~1\temp\psx8rfo6v.exe
uRun: [dy34n69xtdi51yf38ix0bq666sws1zfct037] c:\docume~1\admin\locals~1\temp\bd0na3jpa096.exe
uRun: [bbtz3f6vfr8cyt9am] c:\docume~1\admin\locals~1\temp\ji0dn6r52dpec.exe
uRun: [qpuedjv8nro6] c:\docume~1\admin\locals~1\temp\xvbnnrk7a7hq.exe
uRun: [mo53euydyk5biuprtsf1fvgs] c:\docume~1\admin\locals~1\temp\lo6qzy3h6.exe
uRun: [ira093suteamuai9rpn58zvz5o22wl7djadr5plsi1a] c:\docume~1\admin\locals~1\temp\kyyzdvtyhq.exe
uRun: [zq3zihhtc8cz1guiwyg0b5mwx23q8i788hj1ldoehv3x3wjeu] c:\docume~1\admin\locals~1\temp\ozh0asu.exe
uRun: [df8mzxilgbm8cwuyjqpehige44zsbxz33zr9y0k5p8xaawi1zt] c:\docume~1\admin\locals~1\temp\qs26eo.exe
uRun: [diz4quhuatohpenea3] c:\docume~1\admin\locals~1\temp\tyigsj6.exe
uRun: [z9diwtx1ma7dcst4qp728rpslv65vlf0acttfa572m849] c:\docume~1\admin\locals~1\temp\rpxf7dy.exe
uRun: [sbg1wk6rg5iw78ohuk898ocwnuqa54wzho9698yzjsc7] c:\docume~1\admin\locals~1\temp\k02xuylx436t5.exe
uRun: [jfopk94b1gj39i93aduitnmrtke9gseh5l] c:\docume~1\admin\locals~1\temp\m5u31en.exe
uRun: [t7v4zcs8hokz2b2s4t92u4b1j7] c:\docume~1\admin\locals~1\temp\iqu5ufaml.exe
uRun: [bqfiulkke792p0edqi2nipq75eekfevynk76xpx9vw0e92v8f] c:\docume~1\admin\locals~1\temp\qfshzd.exe
uRun: [nx1lhrqnbn1qwd0uejsefoxbjmg] c:\docume~1\admin\locals~1\temp\bys0mng.exe
uRun: [g2cj2w0db34u0kuj37cewbu1rh06t041w40f7dwlnd1ke51] c:\docume~1\admin\locals~1\temp\wftyv1r20mw.exe
uRun: [dfivx6wrowbdre3bo5q] c:\docume~1\admin\locals~1\temp\kila8drgnp9gl.exe
uRun: [dcssq2m36jxzurfb1no4gccf9wqz6u9n5mh59eugha] c:\docume~1\admin\locals~1\temp\zuq2ay.exe
uRun: [nmy6fsjl3gd0gi7t3xx5zib4d9ng1s9l5gpkhraut5uef] c:\docume~1\admin\locals~1\temp\rlvj05z.exe
uRun: [x6ma8wddbqvc6pt4vifkj16phmz3hb5j0] c:\docume~1\admin\locals~1\temp\zd0i0gkmmy8q.exe
uRun: [nrlj36bryti1w7499agacird6vnf4gdwb4dza1qn165rn5y9] c:\docume~1\admin\locals~1\temp\ob0zupitjgt.exe
uRun: [cyt3db7zv3jj6jqiq60wd] c:\docume~1\admin\locals~1\temp\ht0ylch.exe
uRun: [p3b4isi1hc0s1bvy78f9e1tku8xxkkfgxqn9d4mx] c:\docume~1\admin\locals~1\temp\xbkx9dce.exe
uRun: [lflozxt5f9zfaasecytklltr7uzc7ed01xucj03o6] c:\docume~1\admin\locals~1\temp\p78hpim5.exe
uRun: [dplp55mye1yomllxpwfdr7kbnfvg8rjpg3gmi] c:\docume~1\admin\locals~1\temp\furjpmqimzn.exe
uRun: [f5et0fmsonecbc] c:\docume~1\admin\locals~1\temp\af7r9434a5.exe
uRun: [y4x5pbov6093sn3nlwgyzfolmfha4xnc1] c:\docume~1\admin\locals~1\temp\ijjqaztdrb.exe
uRun: [kjpwo8mu0es0] c:\docume~1\admin\locals~1\temp\koswywexj6a6.exe
uRun: [jeesqb47rwekrakexkilwgzaaukz] c:\docume~1\admin\locals~1\temp\sslvirn60cyw.exe
uRun: [q5cfqt1iru58kxbn79f5vhhfr2s2uptuxkxy3ad4ag] c:\docume~1\admin\locals~1\temp\rsbhx7k.exe
uRun: [ht4qj1ur61yf4gsq3rbnp0o63kbijp6tstmalt9unamlwc5] c:\docume~1\admin\locals~1\temp\ucrollu44.exe
uRun: [yia9bdrb6r5pmfivog349cj1mr8gjf7rtii] c:\docume~1\admin\locals~1\temp\qocddkrit.exe
uRun: [gtn5hkdv52rprm69ym59i277bvdpdvjah4o6jkz1at4sdo] c:\docume~1\admin\locals~1\temp\asvfcvxg2cqr.exe
uRun: [r0y9r0st3zip3soozjnsdsbnz4sy8h] c:\docume~1\admin\locals~1\temp\hwl34of61.exe
uRun: [taiqfbdr0y5y264a6eyzxd8vcawietnkfaca] c:\docume~1\admin\locals~1\temp\zss4kc6xk.exe
uRun: [c208t5rl1c3mzywcq] c:\docume~1\admin\locals~1\temp\t3qhshdw5jk2.exe
uRun: [lneugo1a0xvzpruje] c:\docume~1\admin\locals~1\temp\zcpb87x6w75.exe
uRun: [xlgq1s1kl] c:\docume~1\admin\locals~1\temp\rti89y22.exe
uRun: [hk9hyl8fv0o98lgmxwfprjxh9v29aw1krr51vdfvia50d] c:\docume~1\admin\locals~1\temp\qkh1zfb8cmz.exe
uRun: [p740zl1onpqu8jmig6] c:\docume~1\admin\locals~1\temp\u9tjtqypr70vd.exe
uRun: [cvgrp95kc863qotob5] c:\docume~1\admin\locals~1\temp\pfvnybpx3.exe
uRun: [rdjcfa6cavccl3ds7jx3t46m760] c:\docume~1\admin\locals~1\temp\xojmy5.exe
uRun: [utg9bmejcp6ks2vevdeb1sbov3bumf6t1xybsc23qai6d46] c:\docume~1\admin\locals~1\temp\o1bwfq3blw4r5.exe
uRun: [urpj5uycpfbnx6rjfjmb0q5ppfzriq7gz4ni0fzpqy8nopy] c:\docume~1\admin\locals~1\temp\o6dg578p4wrl.exe
uRun: [qlxae3t5m659alsd1o0x0gycnhtxy7s3l3t] c:\docume~1\admin\locals~1\temp\xp7dad9z.exe
uRun: [vgupgaoxqcozs4h061w3i6a6avht5zw6q] c:\docume~1\admin\locals~1\temp\kxcsv3rh.exe
uRun: [h8l6eqx1187lusfohzaqgh5299rbm3hc6fu612a6tcov0tl] c:\docume~1\admin\locals~1\temp\jn7u437.exe
uRun: [wi3a8gq0f] c:\docume~1\admin\locals~1\temp\qwgjmduak3b.exe
uRun: [z39ppln0nduz1mvevepy5] c:\docume~1\admin\locals~1\temp\jx9y310y4rvdu.exe
uRun: [tacz0fapb0enbb85vhks940wnmt] c:\docume~1\admin\locals~1\temp\ie6nbzqfmx.exe
uRun: [eljd89o0ga4je2e0dx6ibmtuw] c:\docume~1\admin\locals~1\temp\wqkqnps.exe
uRun: [abt4bj8mtnnm8ruvqsacd189tqdtwglak0twnx4iyxlebqvxe8] c:\docume~1\admin\locals~1\temp\aadoa4hp5r.exe
uRun: [nf30mc2i8cw5ii3rwhg13lo7eoqtwsk] c:\docume~1\admin\locals~1\temp\lo17hf.exe
uRun: [txuh05ku1joee5qlqi] c:\docume~1\admin\locals~1\temp\g9hy1xki39hn5.exe
uRun: [smqj36x4258sorye6ep] c:\docume~1\admin\locals~1\temp\odtelstrkf5d4.exe
uRun: [vitkyk9jihnklxnntvyxttumnaviygr89hdj2] c:\docume~1\admin\locals~1\temp\ri5eir5udl.exe
uRun: [oqtfh04h6p2iv7yr6lmww1rffuuuf] c:\docume~1\admin\locals~1\temp\ibri24.exe
uRun: [ca9czyiksufkufphwatjkbwuu34if60j3n1ye8j69kts3] c:\docume~1\admin\locals~1\temp\zshlut8w.exe
uRun: [yezqo53ogn8u6q8u4ix] c:\docume~1\admin\locals~1\temp\gro6d5.exe
uRun: [b2sy1oka96qpotgzo5vua] c:\docume~1\admin\locals~1\temp\iga2slie9t2bo.exe
uRun: [opkl5jcgjuo4gyv] c:\docume~1\admin\locals~1\temp\hwakvohq.exe
uRun: [zsruj2126ibnhqnhgw5umh] c:\docume~1\admin\locals~1\temp\a75mbrxl.exe
uRun: [pv5ev4m05jax73iv72sj3hnupjjh] c:\docume~1\admin\locals~1\temp\ovh5x0.exe
uRun: [enxm0apid24c7xu8d95x0] c:\docume~1\admin\locals~1\temp\zx0okad.exe
uRun: [q8pfzq1mazmj2jtiavt1ifx5myvgn97rej55nh2ha32] c:\docume~1\admin\locals~1\temp\m5pkjcrf5nhn.exe
uRun: [h0eacvhat5yy44] c:\docume~1\admin\locals~1\temp\b8p4mjd0l5.exe
uRun: [ejuoahov14o5oog74x17tefzyrmw08hh7r12ywx] c:\docume~1\admin\locals~1\temp\wjashlqmxoa3a.exe
uRun: [otrxdexpga1jmo5avkrv88g5zmkbxkb] c:\docume~1\admin\locals~1\temp\n1dljaz4p0z5.exe
uRun: [ahch1557rzdr] c:\docume~1\admin\locals~1\temp\p6mr7q.exe
uRun: [htu7ybzcwh8i2mptnntqrfyo1e1jpeluqnaf94i] c:\docume~1\admin\locals~1\temp\pk37y9w.exe
uRun: [a8cs1czbzdlo5em6d1wvgzwffopb9p6o9yrtp14h6shxmxq] c:\docume~1\admin\locals~1\temp\qb85pqgl.exe
uRun: [a3afq6ofrlsujjr64hxmxz0ibm76n1yyl3ngpaey1uu9durrzh] c:\docume~1\admin\locals~1\temp\o6jgfoaoziw.exe
uRun: [qbdsy77mdzc44k7c5pqctm7j64qxi9s3jof71dbcvojfu9s4] c:\docume~1\admin\locals~1\temp\v07y82zmfu.exe
uRun: [u00onv01fwtmzsypjey9blkgjq7] c:\docume~1\admin\locals~1\temp\eojf6u9.exe
uRun: [didpe44aocyx5f91fjfpry526iu] c:\docume~1\admin\locals~1\temp\tfezp0ow62.exe
uRun: [jmd0piftmoecu3s6leipsachesc4tv9kedxgplmqb7rdah] c:\docume~1\admin\locals~1\temp\svvysknjmomsx.exe
uRun: [tbitkjla27] c:\docume~1\admin\locals~1\temp\rmdrzg6s.exe
uRun: [og4e1cb8c9ak] c:\docume~1\admin\locals~1\temp\be8ce9oa.exe
uRun: [lyvah6bj6i7ogxd7ytb7eugbrs3l07kle89x] c:\docume~1\admin\locals~1\temp\y0yzxp5if.exe
uRun: [s1hmieh0t3ivq11wfurth1f474llklrodt1btu6j8w8pjy] c:\docume~1\admin\locals~1\temp\u63eucnu.exe
uRun: [s1x8abjf0ghne8qyv2x4i2aah4bpvvgcqgz5h8yh6z91eg2y] c:\docume~1\admin\locals~1\temp\isckcin0h.exe
uRun: [lvgpx95kvmibo24c7quuks8ys92] c:\docume~1\admin\locals~1\temp\p375fv594p.exe
uRun: [slyfnj2zt8w9d5tvtjwswttqinou8xjjb2nkse5xefpl7skr] c:\docume~1\admin\locals~1\temp\myvmiwt6bjj9h.exe
uRun: [qrwr5hfh3huefbtc57meyyd24y756j0p2umj3ov9iz] c:\docume~1\admin\locals~1\temp\qw50wuw9y.exe
uRun: [d27uo1oa40zfel2ndibye043ggcrj8deo7kxh2xxxbjf3mvmao] c:\docume~1\admin\locals~1\temp\vxscg7.exe
uRun: [wiz0q6pk4tstnssxwibewn3hzaqjuquf1] c:\docume~1\admin\locals~1\temp\lysbqu2nt8.exe
uRun: [n3xtvele23rry5ju54pilhjose4hrkwbeaytsu] c:\docume~1\admin\locals~1\temp\vqnw54kovd.exe
uRun: [y5p0s4pos79xry7] c:\docume~1\admin\locals~1\temp\g4ufvf.exe
uRun: [tuotep6y8w] c:\docume~1\admin\locals~1\temp\nyix5tzcl1tu9.exe
uRun: [fwqp7z4scv1i290ejsfnl6inhq0ghxk1v] c:\docume~1\admin\locals~1\temp\xr0sig3if.exe
uRun: [sa0t8ryb49] c:\docume~1\admin\locals~1\temp\pjlgwigj18q5.exe
uRun: [fl25777ch5vzvvvexpnfafhfg] c:\docume~1\admin\locals~1\temp\jfm66uri15ya.exe
uRun: [lwglye4i3gr2eu7pgha5oehl] c:\docume~1\admin\locals~1\temp\haxhwov.exe
uRun: [op5rx1j0rb8xstygbhf] c:\docume~1\admin\locals~1\temp\abqwdc1vb.exe
uRun: [szkbvv7i3fkvc5c38e9u6v9r83an3] c:\docume~1\admin\locals~1\temp\f058ia.exe
uRun: [k22ygy8fr5udpihcyvariuxyqovnfvkjblon] c:\docume~1\admin\locals~1\temp\qo7be1.exe
uRun: [edx9jpq92d5srpm2ktoqfqefhqrjnp9s89jugrvahq78z458q] c:\docume~1\admin\locals~1\temp\s3in1w.exe
uRun: [wtmebnq8o8b8yqu0g2xq6mq] c:\docume~1\admin\locals~1\temp\x1vc7wkeieri3.exe
uRun: [t3yt0pdnar5y9rxshvzjzc7n59s1f72jvo9lqj] c:\docume~1\admin\locals~1\temp\szwrgac6p.exe
uRun: [dmnbtg0ee0d9ethu6aq5] c:\docume~1\admin\locals~1\temp\dd3a6llwzf2hg.exe
uRun: [vxj7l1q5fn1d3torwbt9hrahb1ye6u8efb5sz2u244d2] c:\docume~1\admin\locals~1\temp\fwtflki2.exe
uRun: [mrcu59rlazf1drsr52772rectl6v0dwrb64] c:\docume~1\admin\locals~1\temp\vetec7h1i9i4.exe
uRun: [lz9bibpwmbzcyrh8f5clueh2e4kuqgvp] c:\docume~1\admin\locals~1\temp\mae4jah9j.exe
uRun: [n8028jk3prgul5t8evct] c:\docume~1\admin\locals~1\temp\ihgqlbqs89.exe
uRun: [t736205r0pib45r5obz69x36edfq7z6ss0ul36fctts0vlmoqr] c:\docume~1\admin\locals~1\temp\ens8sx1usgm.exe
uRun: [m2xldimkr3c7ja35ixpwr9brc3bu85igg74l45hx9m9m6s] c:\docume~1\admin\locals~1\temp\xkzaoitd.exe
uRun: [hlmittautji4rg18i8qxvjpycthbwyon0acvqla29] c:\docume~1\admin\locals~1\temp\e26c7u.exe
uRun: [lqyh7x9wbuqjmgwg51p6u8esmxeoeapt4amf1tf] c:\docume~1\admin\locals~1\temp\hmfz2q.exe
uRun: [nymvz4qt449iofp59wptbdh2xd9xtr4zs6yjk38nyqzqw] c:\docume~1\admin\locals~1\temp\smm2izzr0.exe
uRun: [g7zgljzo7pgkxp92gf3uwrfhz] c:\docume~1\admin\locals~1\temp\g3coaodnp4w.exe
uRun: [vmhufip2a] c:\docume~1\admin\locals~1\temp\z4cn1uc.exe
uRun: [au06yh1qskgfvtq5rphlsynzctv39lt73jlwo3bttyu86j] c:\docume~1\admin\locals~1\temp\g1fa3kxzsl.exe
uRun: [ejwf7glztcxp0x2kgpujiyrdq7] c:\docume~1\admin\locals~1\temp\fteacpmne42l.exe
uRun: [raecce9pdsi8auhnahotyrafs3oh9vmw] c:\docume~1\admin\locals~1\temp\a38qh5lw6.exe
uRun: [hr1lbqd1nj67q32tyr387nwuow18cf3p06pn] c:\docume~1\admin\locals~1\temp\kroi4u.exe
uRun: [kvnf3sr7s0vwm4aeqi1sdmfowuhb6363gyrq8jys0n7yq] c:\docume~1\admin\locals~1\temp\swh5ofzrcga5o.exe
uRun: [ji1kzx1siofoae7m0gab] c:\docume~1\admin\locals~1\temp\z4m3rc0s9sgu5.exe
uRun: [o7kz31yyag] c:\docume~1\admin\locals~1\temp\rr2bzed5iz3ub.exe
uRun: [e6ic6sdfzsli3u7u5w] c:\docume~1\admin\locals~1\temp\y429za9sry.exe
uRun: [r8trcbe9xun6gt3qelhgcjbprv1gij18w8] c:\docume~1\admin\locals~1\temp\iinhxj8zjzo.exe
uRun: [tizghnt2sh35fej9jk0] c:\docume~1\admin\locals~1\temp\rmjrqg.exe
uRun: [i7712uj4b8xw8xn2v2f6mfitt8q9] c:\docume~1\admin\locals~1\temp\ncldsyl.exe
uRun: [dxjph05ukiq8pdb7tdtpapzyynov] c:\docume~1\admin\locals~1\temp\a0dlm54n2t.exe
uRun: [vzf191x18u1tzp26m4ltar2jqz1h] c:\docume~1\admin\locals~1\temp\jo623xe.exe
uRun: [z89v9ywwvnc60w1112j2esp1] c:\docume~1\admin\locals~1\temp\i6aznm5v6vm2a.exe
uRun: [qjksatfuff9qryc4eg3mu16n] c:\docume~1\admin\locals~1\temp\s0szjiwc.exe
uRun: [u5pkozosn0j71718wyzb0bow59ykvswdyfkxi36x5931ai3il] c:\docume~1\admin\locals~1\temp\g6tbdz6s1tlmp.exe
uRun: [hooqn3jtnmiqpdh1hv45g98z9pj9m8rqczxjxf10fd4tgwytuo] c:\docume~1\admin\locals~1\temp\a8mr8kd8fhql.exe
uRun: [agu12kp59mm61wryhg6jcmlstmozru76bc3qske0z3x5hp] c:\docume~1\admin\locals~1\temp\oamaeuf1iz9c5.exe
uRun: [yhyfjp3q1hq] c:\docume~1\admin\locals~1\temp\vj7fmmq.exe
uRun: [g62bbo2rntu2qmh] c:\docume~1\admin\locals~1\temp\pbpsp5v.exe
uRun: [ec0un619arqa3is1ldb33lepvghsjs7am9e8ngkgqie5gbb] c:\docume~1\admin\locals~1\temp\do02pq.exe
uRun: [v7ua7r2ks] c:\docume~1\admin\locals~1\temp\s6xqobd.exe
uRun: [eutwjhhci3zo8t2u56948fuetrcq37o8kfxqw] c:\docume~1\admin\locals~1\temp\kx9r70smbv.exe
uRun: [dlj3jw2g7fyzzwavmij83h1tano0m] c:\docume~1\admin\locals~1\temp\jn4tg0rba.exe
uRun: [xwvcoo216gu1muuxvw] c:\docume~1\admin\locals~1\temp\yvzdz66z0pf1.exe
uRun: [zismtwnoc73v9jntin5i3gz4] c:\docume~1\admin\locals~1\temp\fd6yi10uz1.exe
uRun: [xo8refmqanqjvkfouq2igbueqtp6lcioucqr1duinqursml] c:\docume~1\admin\locals~1\temp\b5ux5mnz.exe
uRun: [n597qu0p3jqmdk4kiu0ndgrvxibi00r4yogqvx5rahp] c:\docume~1\admin\locals~1\temp\qdw1yavy9dfo7.exe
uRun: [k7azjqphnxlehwvoy6dqv6tbfcvkw4lkunra8eypfjllo5] c:\docume~1\admin\locals~1\temp\eu34qz9.exe
uRun: [ld31u39bbnmx6h3w] c:\docume~1\admin\locals~1\temp\f4csv7z1.exe
uRun: [mtzh87ducs3g0vwawp45a7emy] c:\docume~1\admin\locals~1\temp\b1f4d1l5vvl9a.exe
uRun: [zv4r2ryuq96s7s50evpg] c:\docume~1\admin\locals~1\temp\xmy662p.exe
uRun: [yffrjvn4v2xdd9h6jeng1uo5] c:\docume~1\admin\locals~1\temp\idxj1s5.exe
uRun: [ob2bct7crgdx1z6qi3qpy4x71rfgmh3lvyp9zldyp25n] c:\docume~1\admin\locals~1\temp\qbgpys1r8ilp.exe
uRun: [j0y5dcofvszv1hupik2r4slc1nmyqcpg1ozo9a51lreisr] c:\docume~1\admin\locals~1\temp\qhwzt4gxk78xc.exe
uRun: [yqilw9984x0v17ofh7vwx9pn5k0ddgj1vlobu7mnwf] c:\docume~1\admin\locals~1\temp\eorifdutgvd.exe
uRun: [jjp7d3aupi7lw581kcwdm1mms19hag9w36k6] c:\docume~1\admin\locals~1\temp\n74w12.exe
uRun: [wiwvihpil9uzm9rm9urbgcak6] c:\docume~1\admin\locals~1\temp\br1mc775y.exe
uRun: [rpceu64koa7qncbh2gz] c:\docume~1\admin\locals~1\temp\jed2w2gef.exe
uRun: [del2qvj95l98iqo0k2cbh2cgifalzwgwsngcueeq] c:\docume~1\admin\locals~1\temp\mz0wwto4d3f.exe
uRun: [ksdtbfgifhdson03ucwardqhqg91fatvinb6] c:\docume~1\admin\locals~1\temp\gri9zttq79j.exe
uRun: [smx2ihdi4i7gv8y] c:\docume~1\admin\locals~1\temp\uuyzay.exe
uRun: [kynyv3syxiboa6wckgv3208oyp] c:\docume~1\admin\locals~1\temp\jlt0t4kgv.exe
uRun: [fbge74wtxfaglf8boeqxtsxtnatv5y] c:\docume~1\admin\locals~1\temp\q6j5lx.exe
uRun: [xd4japdm2n6a] c:\docume~1\admin\locals~1\temp\ayxq0q.exe
uRun: [chnbaom8trsl90ou35v6zq019hxdxm0eftx8sem0bl3086f7mn] c:\docume~1\admin\locals~1\temp\krw2uw5shs.exe
uRun: [e9yu8guz27ry2f0igs94v41o] c:\docume~1\admin\locals~1\temp\czrmd2kg7ghqn.exe
uRun: [mkz57orfenq5g6iz9o1hwkafi63y6k8tuxbzvywhbl] c:\docume~1\admin\locals~1\temp\u0h72oglqaxd.exe
uRun: [fh25tfvksemscbbr6prk9sfbziw96xaxz7yw0ixc00fj] c:\docume~1\admin\locals~1\temp\ejefgwrz1c.exe
uRun: [bz9ksvjzdn5nuq] c:\docume~1\admin\locals~1\temp\tmxgj3uz.exe
uRun: [wf548xf33bx986lgu6p5iyeabte8edwekbhfsw3qw9czh20] c:\docume~1\admin\locals~1\temp\avzl8v5s0h.exe
uRun: [meogxth64o7au9g9gvilx1n] c:\docume~1\admin\locals~1\temp\iibksqe1hn.exe
uRun: [k08dn3njpqxdfqqjreb5] c:\docume~1\admin\locals~1\temp\q3o07g2.exe
uRun: [n7u02tyjhejubgqbspt5fnt4e37fpcxmn8x6dgdu55u6a8ohij] c:\docume~1\admin\locals~1\temp\zmhxfr7k16dlb.exe
uRun: [lh96enlnof9fat77n3ba5bqpq4w75u7] c:\docume~1\admin\locals~1\temp\x2el9sw96cosz.exe
uRun: [rvy3jwwr4pcknr] c:\docume~1\admin\locals~1\temp\p8n9ovgs86a.exe
uRun: [m8j5cgt59z5e9w8gvuvom6uehxrpx7rqkigvxv0l] c:\docume~1\admin\locals~1\temp\fllop1ad.exe
uRun: [y10d3dowt8xw2z2ywf9jl71] c:\docume~1\admin\locals~1\temp\lfpvqdpbe6g4.exe
uRun: [xadgfyj3pi9crbs1o5bajdqwv7b8nmbls0qy] c:\docume~1\admin\locals~1\temp\eqkx6g5rhdaf.exe
uRun: [zveq1xtzhptgtkk5xnn3wi9kptprpci64byvt6gvshtk] c:\docume~1\admin\locals~1\temp\dgwzfz4gg0f.exe
uRun: [l7tvd5a93h8y5nx2dh5u] c:\docume~1\admin\locals~1\temp\m48gwreh.exe
uRun: [q9qvzq5x6mr6e7mtkog1v3olm78mozelm4d17] c:\docume~1\admin\locals~1\temp\wdalljpa07.exe
uRun: [n8qihrjsv9upzqcctscpzftlhydm7be9x9d4ta] c:\docume~1\admin\locals~1\temp\z22s6wbqv.exe
uRun: [rbymwpyxywwlglt] c:\docume~1\admin\locals~1\temp\b2se4c8bxvw6.exe
uRun: [lgodv3jmu905jatowtr6m2zl421adrnrn31eh34kystzt5] c:\docume~1\admin\locals~1\temp\u4i0qeo8.exe
uRun: [jewehthczl8juw0dowsivjvf5et1guu9j] c:\docume~1\admin\locals~1\temp\hnf84m.exe
uRun: [oa92l6ratj1339uh] c:\docume~1\admin\locals~1\temp\xof7v9fh5e.exe
uRun: [lpfd3p4k9vtaxcwu5l9ckiot43kxoqk6swpgj] c:\docume~1\admin\locals~1\temp\sljyzsg00eb9.exe
uRun: [lxsfz3h9s9ndx0ftasohqmavr6yfrnshadpg54] c:\docume~1\admin\locals~1\temp\f26qzfkd7el.exe
uRun: [xd5xf0iosoi9phu6ttt77kqrmh4f8] c:\docume~1\admin\locals~1\temp\r7z7g7ue.exe
uRun: [ylj3ghivq9nlzs33x1bckd4ul4g1mvsk] c:\docume~1\admin\locals~1\temp\u6my7hx7gl8.exe
uRun: [wv0u7ut45lgrvas5hc5jen8cqklir7buv2htum1gzwkn1l2ujz] c:\docume~1\admin\locals~1\temp\ts27owb.exe
uRun: [wlt5yn8odfd0ivfebs8p7xvy9me0o0e41a88] c:\docume~1\admin\locals~1\temp\gqwjh18q.exe
uRun: [x1ev5vxdgu2mifj5ht0qyo80kg6dx] c:\docume~1\admin\locals~1\temp\j5a6dyd4oah.exe
uRun: [pput79ew2ejf] c:\docume~1\admin\locals~1\temp\a6qw006figbjb.exe
uRun: [uybz2erpyyz] c:\docume~1\admin\locals~1\temp\fvcsfgm4danp.exe
uRun: [hc2ry4zccmhsh46ezamnta9521mcl49l0sb3u14jlb] c:\docume~1\admin\locals~1\temp\rtwq61zy.exe
uRun: [pq2ohmrur1trfrc0lgdyb0] c:\docume~1\admin\locals~1\temp\s31oe1j9k.exe
uRun: [tiv9plo2s2v20sc10sc65eqtxo3o0ecqj8te07xm1o0jh7e8gh] c:\docume~1\admin\locals~1\temp\g1yuzp7xzh3i7.exe
uRun: [ynt7ytl8m] c:\docume~1\admin\locals~1\temp\kqavc4k.exe
uRun: [fh50za9jm1nnzj2tnht3bx8ounacv8tqhsri2q034i] c:\docume~1\admin\locals~1\temp\cmhws9b.exe
uRun: [gcc25xrkif904k1ti] c:\docume~1\admin\locals~1\temp\illn2jev3z.exe
uRun: [ti6wqhmz11nijakdf338] c:\docume~1\admin\locals~1\temp\wjit4q.exe
uRun: [jofhda5to1h] c:\docume~1\admin\locals~1\temp\h2ica0n.exe
uRun: [u64oc0bvi6dv1rlyo3fejtg0laznq9twlphfepph1baouki] c:\docume~1\admin\locals~1\temp\lruunw078.exe
uRun: [gc4znseecuzhrkrg1nakq9skpghjalcoiw4rxxzo9urg7eyr1] c:\docume~1\admin\locals~1\temp\jhxvb33.exe
uRun: [fzupi0y809x62lgc3gsxysimuw5ze] c:\docume~1\admin\locals~1\temp\vahmum4b0.exe
uRun: [yqbjz5djqv6s6d9e5vt5wgkllqqj] c:\docume~1\admin\locals~1\temp\u0co3mk0.exe
uRun: [rkm2jeq52gki24luu7j8o6mv2wfnk46nqgec1tpfnicincpb8] c:\docume~1\admin\locals~1\temp\ns7qj80g.exe
uRun: [qlrpfag7l9l2llfvmbz] c:\docume~1\admin\locals~1\temp\cj2rjef4sda.exe
uRun: [loidiwchbs4cgt4tkr201lc82maj3zx] c:\docume~1\admin\locals~1\temp\h3p3m852.exe
uRun: [z0mdbfoxs84gv95w7pfm] c:\docume~1\admin\locals~1\temp\i985smb8qvf7.exe
uRun: [mfvypp6cn43d989icrtjgc3xs4] c:\docume~1\admin\locals~1\temp\hur7ln.exe
uRun: [obzj2xih7w] c:\docume~1\admin\locals~1\temp\w75buazf.exe
uRun: [kns32ltl5t7] c:\docume~1\admin\locals~1\temp\o3ccty96.exe
uRun: [dqq9sz76yvesufe8yaxd4t9bek8d83lsl03izu1] c:\docume~1\admin\locals~1\temp\gq208i.exe
uRun: [salrdv03y1rpzcmcctazg9ydbxgv3vafqp7dlbk8w] c:\docume~1\admin\locals~1\temp\flg5qiespwih.exe
uRun: [tfq2hmqhrsys] c:\docume~1\admin\locals~1\temp\cl6p00.exe
uRun: [frhe6wu9l] c:\docume~1\admin\locals~1\temp\qjkvlovabx.exe
uRun: [hwj09vrh1sls1dabiy466257vegxi136bsec2fj5] c:\docume~1\admin\locals~1\temp\w8mzdjo.exe
uRun: [ph9bc4pf05p1tcjdt5lafx] c:\docume~1\admin\locals~1\temp\klxsd4.exe
uRun: [kcirepdg80h853kz5mjatfb1z71d5zmpsxdp7w] c:\docume~1\admin\locals~1\temp\chni5yp.exe
uRun: [luqime2pm25q163q2hkux5y0at5xu2kqocvthlxq] c:\docume~1\admin\locals~1\temp\n5dziirm.exe
uRun: [mec3zh4f2rhdkfx2dk] c:\docume~1\admin\locals~1\temp\xiyfodyk.exe
uRun: [cstdqxa9wgigbxccisnt90r7d7ayvxvj] c:\docume~1\admin\locals~1\temp\fn3k74n.exe
uRun: [xqgwi7hu61521s2yg6z6oy0s6lec2x6] c:\docume~1\admin\locals~1\temp\mma5qghmb49s2.exe
uRun: [h6j232dt1z4dr50noof54p2x16b1x8bgx9dhnnkeu] c:\docume~1\admin\locals~1\temp\f110hnid.exe
uRun: [vpykmp90ab2wt3] c:\docume~1\admin\locals~1\temp\zk4hjl.exe
uRun: [e2xr3glmmz9529575iivn5ab1u7o] c:\docume~1\admin\locals~1\temp\ln41ms0cmgop.exe
uRun: [m648toscz7nzugpku41thy] c:\docume~1\admin\locals~1\temp\hoxg3x.exe
uRun: [vjnoz0riwnb8dxcpr4] c:\docume~1\admin\locals~1\temp\qvmu5l.exe
uRun: [ahjnuhvj2tdg2cek23sk5gw] c:\docume~1\admin\locals~1\temp\rmrsd23.exe
uRun: [gvjlsek7hc2t] c:\docume~1\admin\locals~1\temp\ltn9ezb5qt.exe
uRun: [c2zsrxs4js6nou8xcs5zrr2tuw2f6afr7knuk0ox73akku] c:\docume~1\admin\locals~1\temp\o3ickf.exe
uRun: [jprdx53wk0rycnppi6pdqzheetp83v3snoy] c:\docume~1\admin\locals~1\temp\u253bpey0.exe
uRun: [b0te6zpr5ehumz5euws5g18] c:\docume~1\admin\locals~1\temp\nuh5rbuek.exe
uRun: [iru6o9zbrx0puv] c:\docume~1\admin\locals~1\temp\ab4xryyr.exe
uRun: [mf1m7lo7t012p] c:\docume~1\admin\locals~1\temp\ifxdbt70.exe
uRun: [tqj02x31ej280y0aw717acd5j8my] c:\docume~1\admin\locals~1\temp\qs7pdqny60.exe
uRun: [plo8cvtxy1zzyvdlbh24ibw] c:\docume~1\admin\locals~1\temp\eqlvye.exe
uRun: [n6efnekko8usjt5qv8kua9amjllmmxyubj] c:\docume~1\admin\locals~1\temp\o913cmmf6cnm.exe
uRun: [eaozizzixjdeh0475jkyklp1] c:\docume~1\admin\locals~1\temp\ys92ekb8vpjb.exe
uRun: [z702nkkjpakiy9js5zvbz8qxpu4bf259j0lte7bi7bxjb] c:\docume~1\admin\locals~1\temp\v4cc3de.exe
uRun: [wljt4su2lpuxqssawqbjv109by3knbtbamsp8p6x6jht7dzbsd] c:\docume~1\admin\locals~1\temp\ch0dd8.exe
uRun: [fjigrjmijienkw6qim7vog5ed9eyuqrnq6cj0fmbe3w] c:\docume~1\admin\locals~1\temp\yo2zf9v.exe
uRun: [d5tst8x5pn1kf26g] c:\docume~1\admin\locals~1\temp\owreeb9jh2jh.exe
uRun: [jmwxpi8vqnfnft6zwfgh1jzoy] c:\docume~1\admin\locals~1\temp\hcyxaw12u.exe
uRun: [jqdn0a3hidmg] c:\docume~1\admin\locals~1\temp\dn3fxho.exe
uRun: [wnlg9vfhjd4dftsdw15] c:\docume~1\admin\locals~1\temp\ee8doh8i.exe
uRun: [f8f1pkwgsbqxl1d870c] c:\docume~1\admin\locals~1\temp\ob5it8e.exe
uRun: [dqgy36f5r0sso22tfju] c:\docume~1\admin\locals~1\temp\s0hj64r9g.exe
uRun: [ufmhvic8rqzj6ish08mxv118hi4hcgqqh5tec321nc5qgp1itk] c:\docume~1\admin\locals~1\temp\rc2py35n5.exe
uRun: [autfnq084vq6epgmlekn9kgruz8z58a760tqzbgaugazzcyo] c:\docume~1\admin\locals~1\temp\vfvnl1d49kia.exe
uRun: [cpk2m9h3zq855ffq4g6crsms] c:\docume~1\admin\locals~1\temp\x66wzf3lkf60s.exe
uRun: [p89z8yiy8jv7jflf1k5lky9faq86dbgdzoun9gl93mipit] c:\docume~1\admin\locals~1\temp\etphh990.exe
uRun: [x4mqtjyzk4b97uy1o4ioai2i] c:\docume~1\admin\locals~1\temp\t1k7tlobhutu.exe
uRun: [p5oc3w6q0lss4e3qtngro] c:\docume~1\admin\locals~1\temp\yq6xwc4def.exe
uRun: [yssg9eqhx70xarkanek5i4heg3lj2bxwm] c:\docume~1\admin\locals~1\temp\n34i2u32f.exe
uRun: [cyuwdmve5hkapl9wz] c:\docume~1\admin\locals~1\temp\lyvtex1.exe
uRun: [mcik7jd57jt88jztejjnnklwywy5cn] c:\docume~1\admin\locals~1\temp\xc6nr5xeos1.exe
uRun: [hbj5zwvdffadtrujd5lwjpnqzlulcwjj2d421ytirdw] c:\docume~1\admin\locals~1\temp\yhs195tspm96t.exe
uRun: [iu6qzafwy56fdpwdi2kodk9a9vxi1] c:\docume~1\admin\locals~1\temp\xhp7032s7s.exe
uRun: [id7ztdahcc26pqb3gq1ur8mgfe4sk] c:\docume~1\admin\locals~1\temp\q9k9xpi8rg.exe
uRun: [shihdoati5hp2a68ud1ft4losz0dmpe0c] c:\docume~1\admin\locals~1\temp\xmc04bsv4.exe
uRun: [avqj54akra934hgs4f9] c:\docume~1\admin\locals~1\temp\hfjja8zglmz.exe
uRun: [j0urwx0qf7m0imtr7za] c:\docume~1\admin\locals~1\temp\tdq3xgqyph0b.exe
uRun: [itgzsrh0xoxw9j2d43ipobahs3v7] c:\docume~1\admin\locals~1\temp\gmlocqrgr55e.exe
uRun: [bksfnt3jk0mk1c877yqz0xla52ehpxwuj1tpx] c:\docume~1\admin\locals~1\temp\kqut4ngkh.exe
uRun: [g93hao6dxmt2ju5xsoyha7n1a9x7ctny2koaod1y3mlpgp] c:\docume~1\admin\locals~1\temp\udde3dflzzaw.exe
uRun: [qqwbt9zxbml92sktp6vbba4md5w] c:\docume~1\admin\locals~1\temp\v4icuugw0t51h.exe
uRun: [pehnczp6jtw24] c:\docume~1\admin\locals~1\temp\kvddd0vk.exe
uRun: [mvhjapycviovl5melwmcg4i7] c:\docume~1\admin\locals~1\temp\sy9590.exe
uRun: [zjnuhuxj5xu7f] c:\docume~1\admin\locals~1\temp\ne6tk1.exe
uRun: [gnr736j72vjfddqbryl5g7z9r96rzpc8v8p9ecwdlnx] c:\docume~1\admin\locals~1\temp\f1fhzlmblhgh.exe
uRun: [semlbmc2k] c:\docume~1\admin\locals~1\temp\gskfql63mbb5k.exe
uRun: [knc1g5eeolojnelqj] c:\docume~1\admin\locals~1\temp\ixt4ei8.exe
uRun: [tex5l7475of6xa8u0ev46hjthdd5acyjepqgp] c:\docume~1\admin\locals~1\temp\iqoo3y8nqt2.exe
uRun: [yg40dba9vl8htym5l3cwc] c:\docume~1\admin\locals~1\temp\yyt3oo755ox.exe
uRun: [zba1zs1p7ior5arls7mkiee] c:\docume~1\admin\locals~1\temp\xt7pn5b8n.exe
uRun: [wmakzq0byvd2phz1cqbhavl5303] c:\docume~1\admin\locals~1\temp\rvkmfleba62en.exe
uRun: [y7tvfzuxurknxud2wxg] c:\docume~1\admin\locals~1\temp\s2ayx727yw.exe
uRun: [i1aku67rlrrxlsvri986z9bq4u4se1oqgz138p7ybl] c:\docume~1\admin\locals~1\temp\y1epo050wexjk.exe
uRun: [qzsrx6uoqcibymbv5xe1lrctwntk] c:\docume~1\admin\locals~1\temp\i5ganbby.exe
uRun: [yh2s96nr0s77ij0tlgz1a1j9unm] c:\docume~1\admin\locals~1\temp\agiy1d7k0wo.exe
uRun: [cxgnfr5rqsqq5ot3usb02nb4xbdn9idc] c:\docume~1\admin\locals~1\temp\ovmowj7jm.exe
uRun: [ygtnz3d49] c:\docume~1\admin\locals~1\temp\chvuep7tur.exe
uRun: [c2va0wi7wpljhsj3h7e1ll5accip2is8] c:\docume~1\admin\locals~1\temp\gx9zqjdghx.exe
uRun: [vftfb5nhu970q4kka0inkqbpfkwzijq6iwisjhtu69k6jmi5c] c:\docume~1\admin\locals~1\temp\ki956p.exe
uRun: [xxuku57qcb7tmhhfatayhy0xvl97k1acrayic1xz78kfonx] c:\docume~1\admin\locals~1\temp\bdd7u2ezcgy5.exe
uRun: [cvrhrp2mdihh1h9ldb1whef1fibxxqwncav2jhqmaz69il5] c:\docume~1\admin\locals~1\temp\tzi4b9.exe
uRun: [xjk75c044xc910yrnn721v4atmcu5iohrqxv3j3par8bv0] c:\docume~1\admin\locals~1\temp\a38932uobm3.exe
uRun: [v8dowardd9znq3cq6mmo51u9xt1fxphuljg4lvc4c] c:\docume~1\admin\locals~1\temp\fob9babvaa.exe
uRun: [i1ctlo91svr7s] c:\docume~1\admin\locals~1\temp\qgpo4ro9.exe
uRun: [mytgicv0zfsf1uisxgv6qxs2d4zo5jzk8b2idz] c:\docume~1\admin\locals~1\temp\g3s7iq79.exe
uRun: [saexqd3yrgex20k2wpee7bsfmxy9yjvt9qt4qr0t] c:\docume~1\admin\locals~1\temp\yg6brdrbuh.exe
uRun: [h9w7066rrudm6k4b1ajn] c:\docume~1\admin\locals~1\temp\iz3j5l24.exe
uRun: [aq6hyu2upplumub8lcgjpjmaaafcu3k4el] c:\docume~1\admin\locals~1\temp\weqbcup.exe
uRun: [puikcjigjjvmu4k30r] c:\docume~1\admin\locals~1\temp\cea9ri2waxkt.exe
uRun: [g2ebuuydhu6d5b] c:\docume~1\admin\locals~1\temp\zu4mah0lx.exe
uRun: [poccw1e4futgs] c:\docume~1\admin\locals~1\temp\snwvvyqatmn.exe
uRun: [m311xe6n03k0vl7s8hc4vo22] c:\docume~1\admin\locals~1\temp\r8fx7zuwim6qm.exe
uRun: [upvf4coulc2js241y9teei6mcgubc3al6o1f5e0oykh2] c:\docume~1\admin\locals~1\temp\cbvnin6h.exe
uRun: [s4i9cpnnwyhdozxevywk9i9xer2kjweok48hhr] c:\docume~1\admin\locals~1\temp\ebl9x3mnpmk.exe
uRun: [dvwr7sq1y667p5kzzxb6jd] c:\docume~1\admin\locals~1\temp\flq7o3nyqgy2.exe
uRun: [f2p6d4ko2dqxrlezvs67o3rxoie4] c:\docume~1\admin\locals~1\temp\a1nvz4vnvm99.exe
uRun: [v4isykz08sbr6lm] c:\docume~1\admin\locals~1\temp\elnww1wf8.exe
uRun: [zau7leuqqi5vysn9sxckgzc0h7ts8eg] c:\docume~1\admin\locals~1\temp\rfvv4kyyy51ze.exe
uRun: [yeo627bvp3] c:\docume~1\admin\locals~1\temp\nv2e05ql1d.exe
uRun: [gq6oct8hbit6erp883cj3kfhwma7vzebax5xm] c:\docume~1\admin\locals~1\temp\lhyc6idcbuy.exe
uRun: [zq0akx7djyefgjn224n1voggxxqveht17we67kv0w91b] c:\docume~1\admin\locals~1\temp\k7aey1tka0.exe
uRun: [yk4alhu4gpurbxpe4m2c75f5srqrw00w2p8b] c:\docume~1\admin\locals~1\temp\svj1nrt2o25q.exe
uRun: [cn8t02cc8wqf72gq0] c:\docume~1\admin\locals~1\temp\b4ubaikk4.exe
uRun: [jn1fo22sbvt4iswhf] c:\docume~1\admin\locals~1\temp\iypwdvltav.exe
uRun: [xrjhnda76coc5lvqe2gtk30] c:\docume~1\admin\locals~1\temp\lif08rjrw7.exe
uRun: [grcwn1oab] c:\docume~1\admin\locals~1\temp\dk2b28poa75.exe
uRun: [yw0p8jysvanxqsbhpck83wssnh1iz6sbl] c:\docume~1\admin\locals~1\temp\b1mqbm0.exe
uRun: [vb8fs7ac9y7vfpi1tha] c:\docume~1\admin\locals~1\temp\db4y16iga.exe
uRun: [caji341x8cn65j6fd6mx6tfyeth] c:\docume~1\admin\locals~1\temp\hv7xcyfvwe8.exe
uRun: [t8uoxrh9ec] c:\docume~1\admin\locals~1\temp\lkjypusqj3yzo.exe
uRun: [u7n6ki6r0h4mr70rko34ey7ysoku5swrkpmwwi] c:\docume~1\admin\locals~1\temp\em9kbw8nf.exe
uRun: [yblaf7votafiait3mmy36x1gxwid59758o3z9x6onw5t] c:\docume~1\admin\locals~1\temp\synnn3.exe
uRun: [v9hd226rtvk] c:\docume~1\admin\locals~1\temp\llz5u82.exe
uRun: [j9i4fddh2qcpl9qh5jgeolk] c:\docume~1\admin\locals~1\temp\ynpayykh93v.exe
uRun: [l5q27o555duz0vruii5awnpvvydzp9rcy3jxinursws1xxu] c:\docume~1\admin\locals~1\temp\jfu9fs5t.exe
uRun: [dsbmp2tvfv7c54h7c1qovxv21hp] c:\docume~1\admin\locals~1\temp\u3wcbjc0.exe
uRun: [e9obde7o8537zwr398qqlmdz9lkq] c:\docume~1\admin\locals~1\temp\c7pbvzbn.exe
uRun: [jxtt8igwxsf65ludmct821sunu2ro] c:\docume~1\admin\locals~1\temp\ibo22n0o.exe
uRun: [oua70ohomat20ev6lsren] c:\docume~1\admin\locals~1\temp\i2qp1l.exe
uRun: [r5hhmjq0u] c:\docume~1\admin\locals~1\temp\w56wcqmi9.exe
uRun: [fomi3febja0s593h7ugyv1aru6tl0b6ru9] c:\docume~1\admin\locals~1\temp\kh1iog.exe
uRun: [m6bfe6el9e0sm4elaevph67mcqeaqxyuhdqp0zhz94tqd] c:\docume~1\admin\locals~1\temp\jcf46x9ensas.exe
uRun: [ib0n1eyfv7kas5gx59aite8smw9hmo8eh2ec2vnwto] c:\docume~1\admin\locals~1\temp\yafl0n7lkar.exe
uRun: [wu8i9l4sq178s3vr7ygolyrsscz6hl] c:\docume~1\admin\locals~1\temp\ids0j99nhnp.exe
uRun: [g9g916uiavfrfas5pi0f78li89ucuyl2] c:\docume~1\admin\locals~1\temp\b0lz9vkp1bwn.exe
uRun: [hrz9g06p27d5mx2fzecvbr8ubpg] c:\docume~1\admin\locals~1\temp\twz3ii.exe
uRun: [ztnxjhengu] c:\docume~1\admin\locals~1\temp\d5doxb.exe
uRun: [nw6e668fdvlgqvzl2qjnkp9jdmv3v49epc1msx1xyglh7] c:\docume~1\admin\locals~1\temp\qilnmuosj6.exe
uRun: [twrtl9kghl5jxpt8uk5s] c:\docume~1\admin\locals~1\temp\rsqldu83k0z.exe
uRun: [mc1a36bo74wodk4a2vhuyz1leghgt50l1] c:\docume~1\admin\locals~1\temp\kt00uzer4oj6e.exe
uRun: [bf0ofhg6rppgfknb4ywtjewsr0x5bwj031diexcbp8sds] c:\docume~1\admin\locals~1\temp\mkb98d.exe
uRun: [gcwgbyfhzbp84l8f4eexz4] c:\docume~1\admin\locals~1\temp\zw31b1wz.exe
uRun: [pg3dqt9opbvdhkdzxx2odnqehsmm4lcy0asts] c:\docume~1\admin\locals~1\temp\dlyj5g9ugj.exe
uRun: [j68hb0vftsmx5] c:\docume~1\admin\locals~1\temp\lpripbi3xp.exe
uRun: [ici1f0ixazudqb1q4ifeatdthbcdi8bt13nr] c:\docume~1\admin\locals~1\temp\gr7q9av6l.exe
uRun: [c9csceuf0aypc4w0wziz3gynjpwo4t] c:\docume~1\admin\locals~1\temp\ov0pa5lf2.exe
uRun: [cgljto8qsc7ig1xkn3twkzki0n1u1l] c:\docume~1\admin\locals~1\temp\ryqt512wo.exe
uRun: [uw5cr0p7kmksjux] c:\docume~1\admin\locals~1\temp\u84wbhjdhjknn.exe
uRun: [i91wk6za06aqrbgpp6x9ffw5d7krlhzkvtl] c:\docume~1\admin\locals~1\temp\b3pl9q.exe
uRun: [ay6vii1w6q7079sc4gv6nv6v35] c:\docume~1\admin\locals~1\temp\fnpm6njcmk0.exe
uRun: [eklf5odx0y7o3kl2ypgfjc1zmqlf0f08xzip48] c:\docume~1\admin\locals~1\temp\atr7b8r.exe
uRun: [lijk3mhjnmrnn] c:\docume~1\admin\locals~1\temp\h2cvj0lw7.exe
uRun: [y6oclxw7ivwvmhkc7hoe6mblzsf] c:\docume~1\admin\locals~1\temp\zo5ct8v6xqu4i.exe
uRun: [uq5rvztod3xcjpj0gwecyrc5tsrvdmr8izwv2wfm0ms1rlyegp] c:\docume~1\admin\locals~1\temp\z3jg8mh1.exe
uRun: [z3zr90b368az2ocyela8a0qeuv0zb98db6u6cxb07cl0h67zsm] c:\docume~1\admin\locals~1\temp\g291rh.exe
uRun: [u6edrji1g4vnp] c:\docume~1\admin\locals~1\temp\o620st.exe
uRun: [jyqg5v2esefq416ul3u75pxdf5sq1i] c:\docume~1\admin\locals~1\temp\czg34jmw22m.exe
uRun: [m9r0ujzj2qwqzedtiytc76bzro7ib7b0zya9m] c:\docume~1\admin\locals~1\temp\fopa8wpr7x.exe
uRun: [cro6knxflx0sp7opyx509iyxnkztv6jd] c:\docume~1\admin\locals~1\temp\iykuex.exe
uRun: [fqj0kg0eisg2m5es] c:\docume~1\admin\locals~1\temp\pxrfxojkzfxj.exe
uRun: [jk5pdokdoijakgc8tlbomqb80m2qrzr] c:\docume~1\admin\locals~1\temp\p7q8hclq.exe
uRun: [xfas6g2jbx68y41e7qawj16zyl511rd6c7hgs9fghh] c:\docume~1\admin\locals~1\temp\bjaz0vm5wx.exe
uRun: [hoq22vie5b5lpscqd8jdook] c:\docume~1\admin\locals~1\temp\lsgu3v1nlrn8.exe
uRun: [pnrbe10guwimafbave3yte1qpt] c:\docume~1\admin\locals~1\temp\knuglvm93x.exe
uRun: [cd7m21d6hzv727eu1v30] c:\docume~1\admin\locals~1\temp\hpj6lp801.exe
uRun: [edjb0o9byt23cjvu9s9mjy56dvhe9sm] c:\docume~1\admin\locals~1\temp\oy4bthjtarv.exe
uRun: [kfy2kqxt1kv8oug0c07e40114gmjmdq6] c:\docume~1\admin\locals~1\temp\gkxs3pt.exe
uRun: [x6z2ze1ioz0125gtsc] c:\docume~1\admin\locals~1\temp\j0r3nhpqoau0.exe
uRun: [phtc6h9ydoaoicxt6rbs4yf] c:\docume~1\admin\locals~1\temp\i9m5w0ofngz.exe
uRun: [owfnvyrsvutucgx883x5dhpv2u2ruzr] c:\docume~1\admin\locals~1\temp\fqt8pzhqua0c6.exe
uRun: [wgmvwmkkznzryt0] c:\docume~1\admin\locals~1\temp\i50sbe.exe
uRun: [arimxee21uza3l3] c:\docume~1\admin\locals~1\temp\ny1h1ysa.exe
uRun: [vyd50sba9aeeb5fx1hyhgwp16ko4yo9ck] c:\docume~1\admin\locals~1\temp\u37tym1.exe
uRun: [r24ih62ynyz42runxw6qbr] c:\docume~1\admin\locals~1\temp\tc2v75.exe
uRun: [vmm30b9coxd7cgjwggxa2f07xsjh25uxifazh] c:\docume~1\admin\locals~1\temp\xrjteldvw4zz.exe
uRun: [khtbcry7pynxs93uxc8ejzoczsr5] c:\docume~1\admin\locals~1\temp\grdq0ax.exe
uRun: [i4oc5rik7gq8f9myr2xugsk] c:\docume~1\admin\locals~1\temp\sj409n9.exe
uRun: [p1qs8wozhuy809xv7ctjagu3py7je2mho9] c:\docume~1\admin\locals~1\temp\cc3cmtu2cbw.exe
uRun: [jb56eryn9e6wo08u] c:\docume~1\admin\locals~1\temp\dr3at9qg6.exe
uRun: [yyg1h746zmxls7wsmj7tcexgi4imm9cmttir1rjyay5p] c:\docume~1\admin\locals~1\temp\m02lqia9.exe
uRun: [usaf1wb6z3lnz5cxv6dbc26e9psggdm] c:\docume~1\admin\locals~1\temp\bhviaqf54nepc.exe
uRun: [ll1zn5mg8ckippk3q9y] c:\docume~1\admin\locals~1\temp\ue94ga0z7uvu.exe
uRun: [o8hmo65q16twqcyjsrvgvj0a] c:\docume~1\admin\locals~1\temp\tv6tshn7a.exe
uRun: [xuwdzcsbh6kb9oqz0oghrgc9tezja6uip8t] c:\docume~1\admin\locals~1\temp\l1fhmba.exe
uRun: [iwcu9f9afabrcjtvfjaj6ul53hjr2opbw8nlaqifat1821ix] c:\docume~1\admin\locals~1\temp\bivv55lo690cs.exe
uRun: [fjacexvnmix4816yabl8ktclu7wqiqkhmbez] c:\docume~1\admin\locals~1\temp\ce07txaq9un8.exe
uRun: [hsep6b26x8kf1zdhtukniwfu729jka72c5j] c:\docume~1\admin\locals~1\temp\n6o6arv2j.exe
uRun: [wr74k7setiuqrp1bfukcbqp2e1if2kp9k0zghvg4yd34m0kud] c:\docume~1\admin\locals~1\temp\qqea5nc4e.exe
uRun: [yi8xf8uliy2jd4ia81zzrb6cjas6evfxnx8soa9jo03yy] c:\docume~1\admin\locals~1\temp\xfqbijpz12u.exe
uRun: [dzxdwuk0mgtai] c:\docume~1\admin\locals~1\temp\tmsxk1yeh7s7.exe
uRun: [j7751seccyxv7du7o94mngsj8wav] c:\docume~1\admin\locals~1\temp\yzqtfgqn.exe
uRun: [g1vtbf49ztgutbp1eshd2sotneqy5yq3qo9wd25] c:\docume~1\admin\locals~1\temp\mnlcip.exe
uRun: [cmg6jnya5ocr7325srtt7t186aavlz5xjehhd5odi] c:\docume~1\admin\locals~1\temp\mj6jqlj8kv9.exe
uRun: [a5xh9c6k17iw0gjoe9jjqp8trw11a235k4uxkyl7uqf9c] c:\docume~1\admin\locals~1\temp\a5fp8r2zspr0.exe
uRun: [b3l0nlv9seb54p9jkhux4kveaug7] c:\docume~1\admin\locals~1\temp\efd369tz3p2.exe
uRun: [n1gp6908ixkc0x59veuqj4] c:\docume~1\admin\locals~1\temp\j0g3eyr6jw.exe
uRun: [u2xdhdy5hktbxdv64x5karbncan8vb3up8qkmld70kt6c5] c:\docume~1\admin\locals~1\temp\bw44dm1x2q.exe
uRun: [qsaa21gm6qw9c] c:\docume~1\admin\locals~1\temp\cbl212eb.exe
uRun: [nlj90c4izsy1] c:\docume~1\admin\locals~1\temp\mynnjd3q58u.exe
uRun: [v54siqsx2y9z9bqh73] c:\docume~1\admin\locals~1\temp\nubo0bsfp2c.exe
uRun: [n4xr1jhc4ivzvwhx5ig9ja9y8dbfay9] c:\docume~1\admin\locals~1\temp\p9fxu7uza.exe
uRun: [zyker6756max4hbi8c75m6dxe7pm5ym1xksvbo9b80xnt] c:\docume~1\admin\locals~1\temp\uhuqz5.exe
uRun: [mwqb3cg548l2umbc9ajhellv0j] c:\docume~1\admin\locals~1\temp\aw1tlkr.exe
uRun: [dqy4l9fk8nutmh1y] c:\docume~1\admin\locals~1\temp\peyh35zd.exe
uRun: [he5k444gtqv6wi4] c:\docume~1\admin\locals~1\temp\xiax408m.exe
uRun: [xq8tlf17m] c:\docume~1\admin\locals~1\temp\bs8b2ig.exe
uRun: [qncdf6jo2mpowpke72ktq7qi8z1] c:\docume~1\admin\locals~1\temp\as50tgp33fnv.exe
uRun: [vw2o3n3r1576r7ru4ls3ivxy1yn8kydbo9fme] c:\docume~1\admin\locals~1\temp\a20kzw6k.exe
uRun: [kn21vhk6qcwcvu232445azwd49a8me61u7la191ft98] c:\docume~1\admin\locals~1\temp\vdl8uy2prll.exe
uRun: [tie15ak580dlwlef8cy] c:\docume~1\admin\locals~1\temp\hfolsvl.exe
uRun: [t6dds1kwg3eb4znsuloh5ufkk7p898cfitgqg3cdlyq6] c:\docume~1\admin\locals~1\temp\rp6x5xg3gle.exe
uRun: [gyfzjk8rp1r4upe4axkshyy99ndyxu3] c:\docume~1\admin\locals~1\temp\sp98ez.exe
uRun: [jjmwfjgvl1f0gb7kjaxwbq2] c:\docume~1\admin\locals~1\temp\cr6gs71wj3xc.exe
uRun: [p6b9b96nivgzwvxolw8ga4zr22o] c:\docume~1\admin\locals~1\temp\yjuffb9rro.exe
uRun: [z6yyrjb0hfyc3dimifrtz26vep6t3od7aqoq2evlf5yjz8opp] c:\docume~1\admin\locals~1\temp\nvscjkyuaf.exe
uRun: [ksi93i0u2wt7amdtyzi8baz84jolfedg37jhotzfdsh] c:\docume~1\admin\locals~1\temp\t9tqpr61.exe
uRun: [b77o0czhn8l] c:\docume~1\admin\locals~1\temp\tlhqssuyrgp.exe
uRun: [jbytij62cjeq4wwc] c:\docume~1\admin\locals~1\temp\b3rm36ft8mq1.exe
uRun: [f0yrx2qpyeid3do1suzf6hlwwukrps17liizwu6gr] c:\docume~1\admin\locals~1\temp\a8jbr3.exe
uRun: [cymt4wo1ce6kwvm6si3mak] c:\docume~1\admin\locals~1\temp\hxvt4id8.exe
uRun: [v0v2u14yd2vn] c:\docume~1\admin\locals~1\temp\h27t1hpbgakg7.exe
uRun: [ysxv55inozkv1067pa5mht7215705quzkxo8iwj8d4f] c:\docume~1\admin\locals~1\temp\apqv1lto.exe
uRun: [knuuzg2thzpr] c:\docume~1\admin\locals~1\temp\p2ogo3s.exe
uRun: [zmo2451iatmy11qjmzf] c:\docume~1\admin\locals~1\temp\b0c0bbjz.exe
uRun: [ziksldtzmgmsck8rt3y6qincj095ksfhk49ayecstzvanw6] c:\docume~1\admin\locals~1\temp\cewrdw50utt7.exe
uRun: [ytuqlzpua4si9h46l7m87coh0xgyd8crd07b] c:\docume~1\admin\locals~1\temp\t12l0xy.exe
uRun: [v1sunka0frty6sbr06fkmcububx] c:\docume~1\admin\locals~1\temp\i8hye83f.exe
uRun: [rdle48l4doblfr8o5wtctwy8lo3y] c:\docume~1\admin\locals~1\temp\a4ozudup.exe
uRun: [wn1qefjz3vtvytc] c:\docume~1\admin\locals~1\temp\hzzrlpcl1lf.exe
uRun: [hqa1iyn1r1gv1erfwwj53ctwy44l17g5lxvbzxjukryg5y] c:\docume~1\admin\locals~1\temp\zvns19dytb2.exe
uRun: [iimeqcoq86nu5mz4jt8hc4g9o59nc] c:\docume~1\admin\locals~1\temp\zm8f0o6qc.exe
uRun: [lr0e4arwyxq7y335zo97utgl2iy3vlftsavgv48] c:\docume~1\admin\locals~1\temp\sniuhccewiw.exe
uRun: [whdsodp983] c:\docume~1\admin\locals~1\temp\yc3hs7my.exe
uRun: [f047zil4c4mfgh2feapv9hzmzx9ckt7ey245ew0kxs2vr04] c:\docume~1\admin\locals~1\temp\yhm1ior.exe
uRun: [birsj0zsjx4s] c:\docume~1\admin\locals~1\temp\j55newh.exe
uRun: [l05cq0htlemt4l3ps72zkb11vhi3e0vh] c:\docume~1\admin\locals~1\temp\b5eo4t.exe
uRun: [a9ynh10o5bd33mfrb8suiw] c:\docume~1\admin\locals~1\temp\a6sxbzmoyi5.exe
uRun: [p4flfzpka07z] c:\docume~1\admin\locals~1\temp\lpbghqoh10o8.exe
uRun: [o3kw0axjkgoz] c:\docume~1\admin\locals~1\temp\p9bye6p9v.exe
uRun: [m32nbbn1ohp8ndem4zs8reupgri708dorfq] c:\docume~1\admin\locals~1\temp\dc5uaktp0p.exe
uRun: [p05dyz6j5a4parjl3jc8qykwv3rd] c:\docume~1\admin\locals~1\temp\s3w5fznot10oq.exe
uRun: [lebc8aob6i4m0nufub8m1tn8qz2sncdu8mz] c:\docume~1\admin\locals~1\temp\sfk5z0bl.exe
uRun: [fa711m231j8f0i23rm0qf1gurzy4tmhvis0jg] c:\docume~1\admin\locals~1\temp\a26kqd.exe
uRun: [rn6evo0jm6azlum9oz4bmblek5r2utsih8] c:\docume~1\admin\locals~1\temp\jbov6msc1vmnx.exe
uRun: [tc2gypdtn9udvgb2nv73950uvtbf67fwm74] c:\docume~1\admin\locals~1\temp\rfhuqh1li1tdw.exe
uRun: [te6ytvvp3r1afvj9h995xcjrzx3q44c65rdr6ui] c:\docume~1\admin\locals~1\temp\xe4lhr4e.exe
uRun: [xm4zsmkt2i6xh3hec8rsivluqxsaj2dhfi6ce39tp39cfts] c:\docume~1\admin\locals~1\temp\te1appdey83ur.exe
uRun: [vxpepl721f32ohs4wco0c1pef98e75q3a29k2323vqfro0] c:\docume~1\admin\locals~1\temp\oa8bod45h2wnb.exe
uRun: [ivhuv1ohuqtz1aeds2guu5zohnrz6rgcgunwx0ekg] c:\docume~1\admin\locals~1\temp\b8smamt.exe
uRun: [atax8mle7sq6jjgx7pfck5gki45x5wjb9xhb8heap] c:\docume~1\admin\locals~1\temp\lmwb8vs2.exe
uRun: [hbgaie26j2cru4cn3velkjn1zxtnvto1z8y] c:\docume~1\admin\locals~1\temp\d9mzny.exe
uRun: [blgtb5mip4eqpdqjtoiwbxrnx57or9m0t0o] c:\docume~1\admin\locals~1\temp\c4045yxopwoz.exe
uRun: [o2mp231491rsj4kvinl12px5n20ys07o9ga1mkx] c:\docume~1\admin\locals~1\temp\ua9s31hqrq.exe
uRun: [ttbh8g0ia9wj] c:\docume~1\admin\locals~1\temp\w1k1hf7o2ly.exe
uRun: [jt36naf9z02o1gm5fx555mfqlvgr] c:\docume~1\admin\locals~1\temp\mokkhj.exe
uRun: [th9huyegsf80v3qcg] c:\docume~1\admin\locals~1\temp\h4h8sk.exe
uRun: [scxiguwxa40l03c4tdr] c:\docume~1\admin\locals~1\temp\ekr4xo.exe
uRun: [gmlblh2mvq8o4gnfa73lswj33bzveghu3ki7s165gyio7ww8l3] c:\docume~1\admin\locals~1\temp\w70svrmuerp6.exe
uRun: [o9u0rk8dcchj5k9u6dqtyag9gws3bp6ay366] c:\docume~1\admin\locals~1\temp\hiyo23v.exe
uRun: [iatahlxdzpzmpzh] c:\docume~1\admin\locals~1\temp\rilgqtz.exe
uRun: [x7nfndvw8fwxez8sta3418ea] c:\docume~1\admin\locals~1\temp\y541p45vis.exe
uRun: [ibf0r5lxb] c:\docume~1\admin\locals~1\temp\f4umrgiq.exe
uRun: [sdvh6jxrfkd2j0gl6iynsa53gyt] c:\docume~1\admin\locals~1\temp\yrnlyltsi.exe
uRun: [n9rcfncaxv6b4yecjf6wbcj] c:\docume~1\admin\locals~1\temp\gvzkzgn8d.exe
uRun: [zssk75mu32hp9v88vuhwap4q1huo4jpg39hwb] c:\docume~1\admin\locals~1\temp\y188xj3.exe
uRun: [intvyj186pxjr6gk3zx] c:\docume~1\admin\locals~1\temp\kt9fdxml343lq.exe
uRun: [odsasd1bkfm7iy0gen59mfe8ib346vtdzgx] c:\docume~1\admin\locals~1\temp\zw9zg4p6jmq.exe
uRun: [iah6vl8xy] c:\docume~1\admin\locals~1\temp\whqmmsw.exe
uRun: [kapqbul1ovlo83ikrvr6ckxdv1or0bm] c:\docume~1\admin\locals~1\temp\p4yvf6mb.exe
uRun: [euqh2tza9hk2y99] c:\docume~1\admin\locals~1\temp\dq71gcmly.exe
uRun: [j361mfndthwno38dpp4oj4] c:\docume~1\admin\locals~1\temp\i6oh1pj8mzu7.exe
uRun: [bytzghpkru] c:\docume~1\admin\locals~1\temp\oe94ckcs1.exe
uRun: [bel1tc7de75i3s] c:\docume~1\admin\locals~1\temp\gwg8168x.exe
uRun: [z5qr5e8kmtuzq1o] c:\docume~1\admin\locals~1\temp\lll4gmo.exe
uRun: [uzogkkq5gjukp] c:\docume~1\admin\locals~1\temp\bckgmp9gyb.exe
uRun: [nf7bqgb8ywllb4y3fvvq86z214cw8396] c:\docume~1\admin\locals~1\temp\jgwf6ki6fh.exe
uRun: [sxt7grajou913a1gtmsk] c:\docume~1\admin\locals~1\temp\c3ped6t8z54.exe
uRun: [cx6zvnzmtrh7vl1oc0u1vrxpplkih71z1h4uc0arhfv] c:\docume~1\admin\locals~1\temp\i2conz.exe
uRun: [y5yicvz8jnt9nqto3] c:\docume~1\admin\locals~1\temp\pbetcr7d.exe
uRun: [ysuhhjhkug9s0l6gp7vsw28vfhn5k4e1xgfvdipg667b] c:\docume~1\admin\locals~1\temp\cim1s3.exe
uRun: [ysecylu4yk] c:\docume~1\admin\locals~1\temp\d9bzxyeklck9.exe
uRun: [pek2t3s0mke] c:\docume~1\admin\locals~1\temp\zpi1a063y.exe
uRun: [a4r8w1zcw5wcjyir20krr1qarpt8ceyqyxisqxo] c:\docume~1\admin\locals~1\temp\zu1ljhbh.exe
uRun: [wfd2dgrzpv1h4xv00] c:\docume~1\admin\locals~1\temp\ihqbjwifq.exe
uRun: [azwwklq7p7] c:\docume~1\admin\locals~1\temp\knfovourduwpp.exe
uRun: [gidyuyu195gfih3s9u67cx2k1nfcgvi5udvkuw] c:\docume~1\admin\locals~1\temp\envqg006.exe
uRun: [iwr29qaijs8wtsgzef6ehxm5dtvt04azrwzl0dkpl2leqwh] c:\docume~1\admin\locals~1\temp\nxa814u86.exe
uRun: [nf29q22i2zedyyyrx4ej0po9o77wp1zj3kdltgj3kx5foj5] c:\docume~1\admin\locals~1\temp\gyk6ishwqo6.exe
uRun: [wm9aotylu05hzfuc] c:\docume~1\admin\locals~1\temp\g33q895aq7.exe
uRun: [iheif76mn4nbphfe6bjdpe5dptq95f5z55m8460zvb3ck] c:\docume~1\admin\locals~1\temp\hrwj4qptnl1o.exe
uRun: [itd513fh8fwlwfx9s7xishnfxz56953boj631x] c:\docume~1\admin\locals~1\temp\a73l0b0cj.exe
uRun: [fashht9y6bye6xy5jm9v] c:\docume~1\admin\locals~1\temp\kdqlg8f.exe
uRun: [kjgh7vu1bc14mzchyl0f45] c:\docume~1\admin\locals~1\temp\fjsplt6hrau.exe
uRun: [ektlsk5g9q7k] c:\docume~1\admin\locals~1\temp\rqi4wlyz0.exe
uRun: [tdwnnyrbbbh9zj40s57v3tqls4m55su8i6m9on2u2s12h] c:\docume~1\admin\locals~1\temp\jiza450tq.exe
uRun: [ul3i0hxsvdkpfi7syc0njsqlrxpyu8ca03fp] c:\docume~1\admin\locals~1\temp\ji6uxnt4xzu.exe
uRun: [enw4ao3q2izpfg4v6ycdaylqr1t77cp4dmwuk95nay5wdv] c:\docume~1\admin\locals~1\temp\db4e51pz3uhne.exe
uRun: [bniolqo24fkcqvzq8fkdh2mra65rrb51p7g283sa1] c:\docume~1\admin\locals~1\temp\whxdvn.exe
uRun: [u731je56cas6g0gqznsiiz] c:\docume~1\admin\locals~1\temp\s2gfo74n.exe
uRun: [w13ivkru2] c:\docume~1\admin\locals~1\temp\ktbz7djfs1o.exe
uRun: [i6h51g40kpn6b830fwr77tx909q9l3c2bwn1x782u5lu8] c:\docume~1\admin\locals~1\temp\ymp2j3l4.exe
uRun: [n8kpmd4yool] c:\docume~1\admin\locals~1\temp\jopl6unx1.exe
uRun: [hu1ar8c1rdrq124hloywzccbs0mzj5hwvpji68eh0guyyiy] c:\docume~1\admin\locals~1\temp\g0dl9vbu863v.exe
uRun: [izce65bo0co6nsisb8jtqpzfc6yfnt] c:\docume~1\admin\locals~1\temp\ywkmp02lr0fo.exe
uRun: [gax57dgq0v] c:\docume~1\admin\locals~1\temp\r2d4w5dnbomm2.exe
uRun: [e0s72py3fa1w7ifgn8hazjz] c:\docume~1\admin\locals~1\temp\re14g61k.exe
uRun: [srk037gq08itr9eoua8f4d9l95yan9u0f9i] c:\docume~1\admin\locals~1\temp\mu8u8sif.exe
uRun: [rs73nxx6ijgowki4ynrsb6tkqf745d5a6j7b] c:\docume~1\admin\locals~1\temp\wi7mcyy39ft7l.exe
uRun: [yqwqkvogp4] c:\docume~1\admin\locals~1\temp\jqw1f99zk4.exe
uRun: [a9aamu94092jwwyli83x8378cmq1p4zc728dn0jws2v9] c:\docume~1\admin\locals~1\temp\u4k11u.exe
uRun: [pbff8f7xmhfdd6xjtluuhp4ckz] c:\docume~1\admin\locals~1\temp\ewfmg4.exe
uRun: [v1kufauyhq5v59p0e4pbur1h7nm0cz] c:\docume~1\admin\locals~1\temp\eihppl8duy223.exe
uRun: [wxbzmy8a283lbjjzult54zji9tz6memz6x] c:\docume~1\admin\locals~1\temp\c3ugc8p.exe
uRun: [c0h6qhwxfvix7or2fd0hradugmr4z5p2g55kwnjkn] c:\docume~1\admin\locals~1\temp\ay5r26jw7s.exe
uRun: [kzostw0aj] c:\docume~1\admin\locals~1\temp\a3s1pv9zn.exe
uRun: [gabo1w7oooxcjohgm96] c:\docume~1\admin\locals~1\temp\zy6nocu.exe
uRun: [qx0x3ynvkt1kak9zrr2bzef07fi5x3fg95py8gexwppb0] c:\docume~1\admin\locals~1\temp\khlggeb6.exe
uRun: [ggku4x6jfgcuix6vg45rz025xwlejfnsdx9h8ejl0lt] c:\docume~1\admin\locals~1\temp\km40pcz.exe
uRun: [brijipochl] c:\docume~1\admin\locals~1\temp\zuzkpieri4.exe
uRun: [onycrxs3vtjaqfo8asi7j] c:\docume~1\admin\locals~1\temp\zzi4yzj51.exe
uRun: [iapcwrqbsrebl928i3694m020lwfjiqzevm8r7w87it55boo4] c:\docume~1\admin\locals~1\temp\yuwqgz4.exe
uRun: [wf0x8x1pzra0] c:\docume~1\admin\locals~1\temp\c4u4ey.exe
uRun: [mb0o163pf6yowxyf0naqadillnxomulg0de69xoueo4z2] c:\docume~1\admin\locals~1\temp\xkyv37az.exe
uRun: [z8zt6fgwhuubgtxbezk9ws9emy] c:\docume~1\admin\locals~1\temp\qctefkco.exe
uRun: [y064bpdt0mmr2lrj615jqr182v0vv1hv6jeulvp8eskcf0] c:\docume~1\admin\locals~1\temp\t6elgwam7zgk.exe
uRun: [wj5f24ptvu9k1uq8vvfnn4j131] c:\docume~1\admin\locals~1\temp\zq48bs8ktbfh.exe
uRun: [xb0bo03i0eavmmdfy1ot04kwmxjhoagdmzzsgmibdm0] c:\docume~1\admin\locals~1\temp\ep47fo5.exe
uRun: [z5h89mcg94j77b5uwl9zh4ocm1cbi] c:\docume~1\admin\locals~1\temp\o2l5f11dqt9d.exe
uRun: [hgkur5s0sbg24hqent8d81vw5va6ngws8o4e6htdsad2f] c:\docume~1\admin\locals~1\temp\lob9y0z2x6gqh.exe
uRun: [y2jkfw24p62rns7e3qmi54yvaonun70vas77rl9qi] c:\docume~1\admin\locals~1\temp\c1fz53zty6.exe
uRun: [giymwh7gmu423ct61g6rvzpgb890cc71o1hvug5v] c:\docume~1\admin\locals~1\temp\ktkymxk.exe
uRun: [tdu3uothbjy2q1d4y] c:\docume~1\admin\locals~1\temp\qit57a.exe
uRun: [o4yv6rdgilgvgpjt8urzf4jqe3uv9nv9] c:\docume~1\admin\locals~1\temp\jjmkoyt5.exe
uRun: [m01jxdmnxli76hd59kto7fwhv0gaza4k7ss9p2] c:\docume~1\admin\locals~1\temp\lk9wrsj3101e0.exe
uRun: [j2uwjuc9nx12g8nme1xe406rs7pb2ic] c:\docume~1\admin\locals~1\temp\muxuz9.exe
uRun: [lx2gpylymd2pd4a] c:\docume~1\admin\locals~1\temp\h0gf4ubmeu.exe
uRun: [v65dtf5fexyyaw1dbo3t4sd] c:\docume~1\admin\locals~1\temp\z16jtg7rx.exe
uRun: [c80ms9f056lqw2oq0xm43tfbb35ls9] c:\docume~1\admin\locals~1\temp\dqik6ckmku4.exe
uRun: [s0kud5vgzq7ymh4juag0ovt4ch484ywvft8er37] c:\docume~1\admin\locals~1\temp\soi10lithc.exe
uRun: [jwj0f5br9sre0lisx06y69jpz3pkgvvb3lqf] c:\docume~1\admin\locals~1\temp\gmfol9.exe
uRun: [fdzwkvk0bci8q8x7y2qd34o1jkronr4v89hjd3q2iggq0w7p] c:\docume~1\admin\locals~1\temp\jljyc2stu.exe
uRun: [qur8juwffm1] c:\docume~1\admin\locals~1\temp\lvr7vl34dpbz9.exe
uRun: [jtw8shs4prfl27g7m8ssxfuyxfz710flnej97yfdgoum] c:\docume~1\admin\locals~1\temp\spf8ogs2t1ni.exe
uRun: [ec7aw0bnjbarxs1qncq1tfeecnetnzv672ls0jcymn8ejgl] c:\docume~1\admin\locals~1\temp\ilg430.exe
uRun: [ma25tfduxmexgi2svzz4kth] c:\docume~1\admin\locals~1\temp\ytljo7.exe
uRun: [r9lf7wwme3l9qtq9cw743cmop432h5p] c:\docume~1\admin\locals~1\temp\q1g3owfg0.exe
uRun: [wjmfc7hkb28i87nvjriungjw2r7mnh5xic4h] c:\docume~1\admin\locals~1\temp\ix44n167j.exe
uRun: [b5lkyf6py4c3ycsg5eh3nva] c:\docume~1\admin\locals~1\temp\wjda5oph8e.exe
uRun: [c0iovbfizo4navs5y0h7ho8zvtt8y6u6] c:\docume~1\admin\locals~1\temp\t0kuy6isy8qo.exe
uRun: [cwgnl2uhy3b2465lek340] c:\docume~1\admin\locals~1\temp\lrfvycx.exe
uRun: [bomts11acuruashsv09tp58] c:\docume~1\admin\locals~1\temp\pb8cla5xb2.exe
uRun: [m2rb91krw9] c:\docume~1\admin\locals~1\temp\g7c2sd5.exe
uRun: [abjghu5f9d5ex] c:\docume~1\admin\locals~1\temp\gojm2vygj.exe
uRun: [a38tapn8tq9flwnd6qtc1x99903dgfke22k2] c:\docume~1\admin\locals~1\temp\deo2wfhzqq24h.exe
uRun: [llnyf6w8nrn2v19789drngvbc6xstb4ngnn1rx4] c:\docume~1\admin\locals~1\temp\n24b04x6bx.exe
uRun: [ptq0306bt0g9kwtjlc3e06mz9w8xegjodyhkdf] c:\docume~1\admin\locals~1\temp\nxlranssbxh.exe
uRun: [wcfrw2k2zk9qd4qgn976j1d83mv7uc4yjghppgo1vo462xc] c:\docume~1\admin\locals~1\temp\p7d0o1iqm95n.exe
uRun: [coea1lhh7d1p4sc04nmnjaf8kw1fcr8mkxowooshcm11p84c] c:\docume~1\admin\locals~1\temp\aqwjubkjpr5ew.exe
uRun: [ysz5j01kcgl7lbgrqhi070p3soe6qtvqm83on3d8p9ri47729] c:\docume~1\admin\locals~1\temp\m210cs1.exe
uRun: [d1hmmzodhpytq477o917az2q4hu9g12] c:\docume~1\admin\locals~1\temp\t1rlae0z9fzpf.exe
uRun: [mv9by5mzk1ekpzrhpybiii1qpax] c:\docume~1\admin\locals~1\temp\wcjcl8r8ear.exe
uRun: [r7jpsnzl21yry6aij7frjs8yu9r] c:\docume~1\admin\locals~1\temp\otc95gd4.exe
uRun: [eszvkmb16zhz2lq956w7i8] c:\docume~1\admin\locals~1\temp\c64jm16.exe
uRun: [d6oyzsrnzwf94za] c:\docume~1\admin\locals~1\temp\z1w9kty9zy.exe
uRun: [itxiuqnwp1eozn8hcdtbywwoks5m] c:\docume~1\admin\locals~1\temp\g0i48x7f.exe
uRun: [ngx6s3fzbfb6ju6jrle] c:\docume~1\admin\locals~1\temp\ia3tctl.exe
uRun: [mbu42fx6jzxxjijlr5btolfl984ht] c:\docume~1\admin\locals~1\temp\mu3b9qmuxg1i.exe
uRun: [o3eaw15xd9fzr8h5lq3py] c:\docume~1\admin\locals~1\temp\hwqm3qbrszjja.exe
uRun: [t9cjpuswc8n3hb27nglq0vnfvpul5xymjpy226dz] c:\docume~1\admin\locals~1\temp\h6l696s84.exe
uRun: [qrlkeitn8b2f22ojcsz4wdqbyd1qgi1d9zveh57gn61yl] c:\docume~1\admin\locals~1\temp\skspzyiyeh6nd.exe
uRun: [nuf13iipulh87kf1pkz8a1blv1ycajj8vf] c:\docume~1\admin\locals~1\temp\sun9oezf7.exe
uRun: [ffxcxosb9beoz9v1jzb4fjkjgaocacgbk81z0tnenj1] c:\docume~1\admin\locals~1\temp\c8k35umy7.exe
uRun: [h1l7dddwtb9f91tpuc8tys1v7xf7e04pka3] c:\docume~1\admin\locals~1\temp\yjwg9rlr.exe
uRun: [tb6y2zllx0a4srgor93k8cik9aocz02nhxayaf9e4r3r7h] c:\docume~1\admin\locals~1\temp\dnswohq662snk.exe
uRun: [xcrgdl669t0ahmlqdtf0kwmyc3p3gumddmpwsws45602u3y3] c:\docume~1\admin\locals~1\temp\h7sxlerffc.exe
uRun: [wghn0ovhj] c:\docume~1\admin\locals~1\temp\lw4fyaneswz1.exe
uRun: [a6yw97h2i8ozkf2oiatknu54vlvi6wylmka7yy808spo6r] c:\docume~1\admin\locals~1\temp\a4zzhg2.exe
uRun: [unem0dms4l4xgyuita] c:\docume~1\admin\locals~1\temp\obbiofbl9j0cg.exe
uRun: [sgcwgl0fcqoaqumo848n] c:\docume~1\admin\locals~1\temp\ypf71y.exe
uRun: [ya0uh3dgo] c:\docume~1\admin\locals~1\temp\fj38bc4iwopzq.exe
uRun: [j7rx6yvz24nuao9rbfqlw2icx] c:\docume~1\admin\locals~1\temp\qlmrh7.exe
uRun: [jx1knk4hbnxb3udsx9i9oznzi9r8] c:\docume~1\admin\locals~1\temp\gt862t.exe
uRun: [rr4jejl75hg6xn1qbk304z] c:\docume~1\admin\locals~1\temp\qmjymhx3.exe
uRun: [d6aocjct2lvf542akgjmvm6pv6ql5eawwr68co5s] c:\docume~1\admin\locals~1\temp\rr5tnhchtp.exe
uRun: [e0jq8415lmm40vlmn5xitejxakdx8nfoj2xc] c:\docume~1\admin\locals~1\temp\rha9yk.exe
uRun: [xs2krc5rvt2aisf8yhfrf88ju9xsoswtydnnxlzqfg] c:\docume~1\admin\locals~1\temp\h8slnngu0.exe
uRun: [nlf2fsyah2bwtedn0wtmwpzxpldpskqrp5rwpcy2ph] c:\docume~1\admin\locals~1\temp\jeeh2kwj.exe
uRun: [xwmqez8pne50xlewlc63b3dy] c:\docume~1\admin\locals~1\temp\hub5dll8.exe
uRun: [vuv1ben8ali81e4895gmxusnawp4gvyj9nlbz49897x2s7wdk] c:\docume~1\admin\locals~1\temp\qdl2lf.exe
uRun: [tqx9f8lbzzjqtvqtaowat7na0e26699650fgldqnje0b] c:\docume~1\admin\locals~1\temp\a567t71o.exe
uRun: [a8c51rigpmg7oupz3mbkjtsfqx04ztiuxoilkhbapk] c:\docume~1\admin\locals~1\temp\dbfee1n.exe
uRun: [h2oyl8rlx66gxcepf8xnkyxywwa5xv7fu] c:\docume~1\admin\locals~1\temp\v7mydpe.exe
uRun: [a2jzmmj3uzdwsjzsjrgufqkgx8zjgkg8c9x0w3u06x6n04] c:\docume~1\admin\locals~1\temp\z0kcbo.exe
uRun: [h8d0ughh3s19033tyxsllbaiyxfqfktlc3j] c:\docume~1\admin\locals~1\temp\c6tjw18m7e4ue.exe
uRun: [lv9sb58s2jazjapvzs34lnfxbef] c:\docume~1\admin\locals~1\temp\glahkh401el.exe
uRun: [yt7ows6hgqfk2sdlzhen52w68kmyua87u4vox68piw05h3xqr] c:\docume~1\admin\locals~1\temp\xhe7r348.exe
uRun: [bk48b9crgev9] c:\docume~1\admin\locals~1\temp\cqqq1wi.exe
uRun: [i5005l9rj0rlh] c:\docume~1\admin\locals~1\temp\a6z0v4.exe
uRun: [pzwgag2utxyt73q8vneq7l84] c:\docume~1\admin\locals~1\temp\jkx8ua.exe
uRun: [rf0qz3jf6cu5hyd1pkt7p5e3] c:\docume~1\admin\locals~1\temp\sod3rx.exe
uRun: [l7qlsn2agygqfg9prtoirow8mnjbdl] c:\docume~1\admin\locals~1\temp\as6yle.exe
uRun: [kob2rv1rj4x7dvyym6fjhvaynpzynax3rdzch4pionpeeykc] c:\docume~1\admin\locals~1\temp\p96ff4to48218.exe
uRun: [jf9nz449tkw7osntj88chqj1khc5kgd6dn9i97] c:\docume~1\admin\locals~1\temp\xnuy5fjee.exe
uRun: [x2aczlu1zyzeyxkbv9xr] c:\docume~1\admin\locals~1\temp\qestxn8.exe
uRun: [djc5dsbjbx9cx10nltmbrdq7kt1mktn7] c:\docume~1\admin\locals~1\temp\ibw116ql0.exe
uRun: [ey6vw8tzy] c:\docume~1\admin\locals~1\temp\lp6xi7sw.exe
uRun: [dxzlgetmboqhhhyurwrw90b0vgi6rzd] c:\docume~1\admin\locals~1\temp\s8a6pxw0.exe
uRun: [ptnb3fv58nwgxe7b1ws2qudc91v8p97p6xcy] c:\docume~1\admin\locals~1\temp\g1os14fayx6xj.exe
uRun: [tm36qk2bqighnnjrfh3h] c:\docume~1\admin\locals~1\temp\kq7uoi4gb.exe
uRun: [kirswj5dkoywl143rwt4jgtd7zydx2brk2jnmitc2gx3a8miuh] c:\docume~1\admin\locals~1\temp\kg5qp3bosxn.exe
uRun: [ck2c275j7llainty4fozp2s5wwugdzbb] c:\docume~1\admin\locals~1\temp\zy2e77j41ln2.exe
uRun: [g3pbgalcqp4r9n1ghelj4hsh8n184r8sfgic] c:\docume~1\admin\locals~1\temp\jllz6ip.exe
uRun: [ntmc544t8a4n37an2yaz8si] c:\docume~1\admin\locals~1\temp\j74jwz.exe
uRun: [k0qlpjwkbecefhmwlw9d3] c:\docume~1\admin\locals~1\temp\xoumoot4.exe
uRun: [yo0yi1tjx1vwx5rci387jsbtyr8wn235ea] c:\docume~1\admin\locals~1\temp\i2i5egyjss4u.exe
uRun: [ivwy3alm7o7ngc2944o33lgpdyjybh2l6eh6xv5ktvbaj7z] c:\docume~1\admin\locals~1\temp\b8unll962bjd1.exe
uRun: [mkbpyelj05y82s] c:\docume~1\admin\locals~1\temp\f1ly9lorg3.exe
uRun: [d1yvgcd8jnsgk5sw4ii7bh823b] c:\docume~1\admin\locals~1\temp\lraczt1vx4q.exe
uRun: [msv9o0zxff6] c:\docume~1\admin\locals~1\temp\tv3bjoa4eai.exe
uRun: [qlv3i0lay9fkr2oyfzrb3yfg7] c:\docume~1\admin\locals~1\temp\igzlozams9h0t.exe
uRun: [ehlo5cf2z] c:\docume~1\admin\locals~1\temp\sqhxi5e7d.exe
uRun: [r94yfjlucg2ez1j1p7zsq9kpsv] c:\docume~1\admin\locals~1\temp\g2v0dv.exe
uRun: [s687g5c5zhu5szefcs7z8ypglg6ktr5gjocl1dx] c:\docume~1\admin\locals~1\temp\o22mt4s42.exe
uRun: [esy21b67mz7cpzjsbgsvqptf6a6] c:\docume~1\admin\locals~1\temp\vksocg5.exe
uRun: [t7stnhhahz6ijm8z4bt6c72qcgqygkwubhy0ari] c:\docume~1\admin\locals~1\temp\rhgq81xze5vq.exe
uRun: [sxd9jtscselttyk6zadpf] c:\docume~1\admin\locals~1\temp\n7m6v5i9peavc.exe
uRun: [ooca8khv0wde0q172] c:\docume~1\admin\locals~1\temp\r096fjloos.exe
uRun: [ebtv0hmnrpv99lo8owdehae7qdn2jjt7l2z67tr1304cy] c:\docume~1\admin\locals~1\temp\w6y28u.exe
uRun: [dvocv3wlcwxlls6] c:\docume~1\admin\locals~1\temp\bfa2i6unsz614.exe
uRun: [pt1cgb77jjqnus41o5lheb3tstwd2] c:\docume~1\admin\locals~1\temp\sw0oacp.exe
uRun: [o131yw2hmps1n] c:\docume~1\admin\locals~1\temp\qwa2vwsuph6t.exe
uRun: [ktd1mui0gmqdk230et66aiiw8dcwf3nmmp2kuawzdtm] c:\docume~1\admin\locals~1\temp\o8lulum.exe
uRun: [xisy51aq24v1i5pk2y8nt6hf284nn3q0k8] c:\docume~1\admin\locals~1\temp\kjwj73khm.exe
uRun: [g8anf38kk7dl2s87gwwo71xvpiaab2fjd5gzckrh3h] c:\docume~1\admin\locals~1\temp\piqstb6p.exe
uRun: [fh027nqz1wwu5uflqj94n4pagd9uvfjqrnz289hxglsum] c:\docume~1\admin\locals~1\temp\v7sf46gqm5txf.exe
uRun: [ougq3etq9cl] c:\docume~1\admin\locals~1\temp\glzyuy6gf.exe
uRun: [b0os2rkbbgq0o4dwnoqwm6d21d5gpuzqebmnv9gm5sz0t] c:\docume~1\admin\locals~1\temp\q9fqyn.exe
uRun: [kmup73n0iuvnb8z0u] c:\docume~1\admin\locals~1\temp\qeha74a10ofb8.exe
uRun: [grc99snoow9iyp3cihpfhpduirg75cqck8bzrrwn1w] c:\docume~1\admin\locals~1\temp\wdehof.exe
uRun: [ctdgjyqct170px3zogtgk8450il] c:\docume~1\admin\locals~1\temp\pe7fm37q.exe
uRun: [foc1jne8w3d95wsyr21c] c:\docume~1\admin\locals~1\temp\ifoewq66jiey.exe
uRun: [c64e3d1bbrn1bm1b0wn4tevq5hubf2cnsplv] c:\docume~1\admin\locals~1\temp\xnjfwwl.exe
uRun: [evmgpz8v0aeiqv5ynxfdwfp0c1] c:\docume~1\admin\locals~1\temp\dvl27ree7op5.exe
uRun: [h9gxopnk3923gv53z21t6zz5ovg2x1tqcs053vkp] c:\docume~1\admin\locals~1\temp\sy470cpktm.exe
uRun: [fexlk05zz1xpt0rutogjtzcn97yuahxys3k06v6bcf649k] c:\docume~1\admin\locals~1\temp\kubnq38qn0.exe
uRun: [cxyuxm0kdrtz5xg6jr89vqttybvobsuxzax0brd0fpq014] c:\docume~1\admin\locals~1\temp\dmnp6po6q7.exe
uRun: [ouiov7u9ddamwt0q74ru58b86ba3e62bmn] c:\docume~1\admin\locals~1\temp\bhh0wni97j6kb.exe
uRun: [ty42l8rnv9tgb4jswm252w88] c:\docume~1\admin\locals~1\temp\qucl5r6.exe
uRun: [pbyq750eaycev9j96xkh] c:\docume~1\admin\locals~1\temp\i2755g0znv.exe
uRun: [ed7k4fpxruho8whjlnb] c:\docume~1\admin\locals~1\temp\yyok6mb.exe
uRun: [s6f8ex1jvc0ahis7rgmpofr661b5o9p9eixsv41mi] c:\docume~1\admin\locals~1\temp\xt26omfnwjz9h.exe
uRun: [mz1i0d79y2muygiigfrmei5wdupzxl5m15] c:\docume~1\admin\locals~1\temp\ic2pud.exe
uRun: [uvt73btf9dxh] c:\docume~1\admin\locals~1\temp\a8gt3011.exe
uRun: [gqc2bf5ksved2wfw8x3jue8v] c:\docume~1\admin\locals~1\temp\p6xax9z.exe
uRun: [f8invx2pi5fu5wfqtoh14dzgt9h03d9g] c:\docume~1\admin\locals~1\temp\auzdth6.exe
uRun: [t3ef7xzpggxqbgw8pzies] c:\docume~1\admin\locals~1\temp\ta6fp2hyl2fb.exe
uRun: [a0be3aggramuvj] c:\docume~1\admin\locals~1\temp\og8junp6.exe
uRun: [koz4m1daac1g4tk] c:\docume~1\admin\locals~1\temp\oswjeod34we.exe
uRun: [kd4vcd89e8p2cv8fv2qb9wbl4j9] c:\docume~1\admin\locals~1\temp\r5hqfhbm.exe
uRun: [gwt3qdacete] c:\docume~1\admin\locals~1\temp\gy57t8xm69.exe
uRun: [jrgj4d0hmjwdy55zxromkf] c:\docume~1\admin\locals~1\temp\knhp6nahtf7n.exe
uRun: [aq37x6j7ffc59st9] c:\docume~1\admin\locals~1\temp\pcg1pg.exe
uRun: [r79zujtna8q5p5kptrotvwdns] c:\docume~1\admin\locals~1\temp\xgsh9b.exe
uRun: [xxmgxem266vz1kr3ljuywbuvll0dhx21u4rf] c:\docume~1\admin\locals~1\temp\t1sj2c6d.exe
uRun: [pnsy68dume2pj3s6y9cm1brypfdq168kuj35083fl4e8pgog] c:\docume~1\admin\locals~1\temp\eagij6rpnl76a.exe
uRun: [pmm6lkdpux5a1hsycw6sc8u7g58j18] c:\docume~1\admin\locals~1\temp\hd6me2pn9x6ke.exe
uRun: [w8sqntylgaidzejt5es27d2qyiw] c:\docume~1\admin\locals~1\temp\pmblvwazj9.exe
uRun: [pkq0ysasgo8t6thz] c:\docume~1\admin\locals~1\temp\epumy3dk.exe
uRun: [uf86kayq14spay7kdqy90nrda2emgvc6d9g] c:\docume~1\admin\locals~1\temp\ban2cok.exe
uRun: [dhfmy2wun985glvw7u2cbredrl16mp1p6rzhnmr76q2zc1g0c3] c:\docume~1\admin\locals~1\temp\pru54dfd2.exe
uRun: [ybo9xc111xulrljt8dpj4ieubrq84a] c:\docume~1\admin\locals~1\temp\ekmno3.exe
uRun: [hebizqi46hsgoifzjml0y8eofecwl4zh] c:\docume~1\admin\locals~1\temp\oywr6v7w89.exe
uRun: [d0lw3plk9wrbwzluapi5n33zhr93u035e1z0r5h9uu15xg] c:\docume~1\admin\locals~1\temp\koyw8dgwx9f.exe
uRun: [l0d50jn7xktvjx] c:\docume~1\admin\locals~1\temp\sxtwipujey.exe
uRun: [y74zw2mo8g9] c:\docume~1\admin\locals~1\temp\s7ozo5.exe
uRun: [n595piufk7sffgru33xhvpx8bvwu2o6gz] c:\docume~1\admin\locals~1\temp\cb7kng0fg.exe
uRun: [u9r10va4jie2zui2auhfr4245] c:\docume~1\admin\locals~1\temp\fl24twhfssacb.exe
uRun: [kvtyhsdeobj1tq7wkvibc2bkz0vhcisere7b92nosm] c:\docume~1\admin\locals~1\temp\jaxqw6l.exe
uRun: [wxyb18n9srawifw1k0o4rzalonatj1m1rigq2qj19xl1k7c7xt] c:\docume~1\admin\locals~1\temp\q9478nomvaxgv.exe
uRun: [vrlhtdb8jx56ytkf0a2anxvs5u6h8die6w] c:\docume~1\admin\locals~1\temp\f0zr8t70.exe
uRun: [ylo4jlheihn7kjaju6carbi2o0kunb6h] c:\docume~1\admin\locals~1\temp\bg6t4vetys31y.exe
uRun: [vggustlg18jki8lkvu6kc7bl] c:\docume~1\admin\locals~1\temp\qt1ediy.exe
uRun: [osv8hfj9kfkkg727x1udvh] c:\docume~1\admin\locals~1\temp\w88hzxrf.exe
uRun: [cas4ca9vck74uxw] c:\docume~1\admin\locals~1\temp\ip8ytnp.exe
uRun: [x94ra14mht0fu9dmhpyhi] c:\docume~1\admin\locals~1\temp\a7y2i9.exe
uRun: [x3u58qmvi82qjc6dq79zofkefjadmrpiymvzxz5q] c:\docume~1\admin\locals~1\temp\dhtm7plrla.exe
uRun: [d3iv540ld2fcvwl] c:\docume~1\admin\locals~1\temp\erykfp5jmnc.exe
uRun: [j3yzz9uhcu5rlxoq1vib1v8ppmbfd6q35xl2xq9c5zhto] c:\docume~1\admin\locals~1\temp\vn2amsma.exe
uRun: [mpe6f34qt6] c:\docume~1\admin\locals~1\temp\g62ts2737.exe
uRun: [cu1csuo9od9qw55kwt0wdjf3pt] c:\docume~1\admin\locals~1\temp\jgxdyiokjbcwg.exe
uRun: [b9220ni75ci4qnx3vx3p05ewv] c:\docume~1\admin\locals~1\temp\gbldijch.exe
uRun: [j6hpyvndgrlcsanltlwdrya8sibu7ugzbf4tria1c] c:\docume~1\admin\locals~1\temp\nabykv.exe
uRun: [x3dl1wcahgwumx90kqtbsvgncscrr04o3j2c5epgnv9d5] c:\docume~1\admin\locals~1\temp\z3gfymsx.exe
uRun: [mk2gslrh7bcinleesc9] c:\docume~1\admin\locals~1\temp\b361wlpm25y.exe
uRun: [annd5unp5nnfanemf90148s4jzi01569h2cjipinrsnvxs63pk] c:\docume~1\admin\locals~1\temp\ve4xlq.exe
uRun: [tkxukx657ylulvbg] c:\docume~1\admin\locals~1\temp\jmw828.exe
uRun: [n01cjqrtkhl974iarfmwdy4lkylhpjavcbj3] c:\docume~1\admin\locals~1\temp\iha9uuotu6ac.exe
uRun: [toplwd6q7leksnr] c:\docume~1\admin\locals~1\temp\cs8mjze.exe
uRun: [mvq8lt96bio] c:\docume~1\admin\locals~1\temp\ql3pv6x2bcyj.exe
uRun: [emozf9n9qtl] c:\docume~1\admin\locals~1\temp\sqcejm.exe
uRun: [mk0bco6gll8c87o2rkt9j9t1w1ys] c:\docume~1\admin\locals~1\temp\iyht4t.exe
uRun: [mhqk0y48x0wrzzmthsgvt9dcgm1rxs4wr2wfgo97p] c:\docume~1\admin\locals~1\temp\mvyi0e4q0k0.exe
uRun: [em5lm8rx4ctg3ekscad10] c:\docume~1\admin\locals~1\temp\wavwgjjego3.exe
uRun: [uc83juln8p5103m53lfnte3bfek7s] c:\docume~1\admin\locals~1\temp\hmqis927.exe
uRun: [idcku5tjps] c:\docume~1\admin\locals~1\temp\kwl2h6jooi2f.exe
uRun: [bywka4a53pmm] c:\docume~1\admin\locals~1\temp\rvbn01w04u.exe
uRun: [ir0a4n6duxx550rmw3ejbuo20ndig8jgbqajsd9y3h3kwf13n] c:\docume~1\admin\locals~1\temp\vkn5dx9vr080.exe
uRun: [lyizlti7q7hlvqxqeu] c:\docume~1\admin\locals~1\temp\zviqgar4ifgt8.exe
uRun: [p4bukowe04q] c:\docume~1\admin\locals~1\temp\ji1bf4xj.exe
uRun: [e6bvbu7bu25gmw55j] c:\docume~1\admin\locals~1\temp\z4g3hvy.exe
uRun: [mlb2mgz320aaqv81n] c:\docume~1\admin\locals~1\temp\fy8db6p2j1kgr.exe
uRun: [v9a1k4jf11f25] c:\docume~1\admin\locals~1\temp\xqt168l7.exe
uRun: [kcz9j55rlu7jok6n7s0w84184afmpwaqp46i] c:\docume~1\admin\locals~1\temp\bk7msl3g1.exe
uRun: [cxvvaxp856] c:\docume~1\admin\locals~1\temp\pd2p4b.exe
uRun: [r7nby0cyrj90aewo7di6xppgyb36r6r58sggtebg1c7hsu] c:\docume~1\admin\locals~1\temp\wqq7x6uod7oc2.exe
uRun: [xrynyyx5jmn319o38150ao] c:\docume~1\admin\locals~1\temp\jjhi3z7bid.exe
uRun: [x83rltjjvji5kztxzugdmq4lu6o9vtp18k4] c:\docume~1\admin\locals~1\temp\h9gtdyps.exe
uRun: [qvdlzd6309mutia6hjpcxkxeyod7e] c:\docume~1\admin\locals~1\temp\hesttx1vzpux5.exe
uRun: [c45ys1eczp6mqwd3ar50dxnasf90zygrr20k] c:\docume~1\admin\locals~1\temp\l274iy4hap1cp.exe
uRun: [jq3rl4gz067ew7gmgrp22e55hbrnvl0e0033] c:\docume~1\admin\locals~1\temp\h4xq4hke6.exe
uRun: [iqhv3viu3ydmf7g] c:\docume~1\admin\locals~1\temp\kt6x8bn9.exe
uRun: [ovz23b5v4v2zfotw8] c:\docume~1\admin\locals~1\temp\y1yngybe.exe
uRun: [e8643e881geo7] c:\docume~1\admin\locals~1\temp\cbw1ex2.exe
uRun: [ujtsa43cisrt4w2lkkv] c:\docume~1\admin\locals~1\temp\o41ib7oiy.exe
uRun: [fbe0oqrbt0ejii8wooovtvddu25xfs88f2j68wp] c:\docume~1\admin\locals~1\temp\kk8ko9.exe
uRun: [e7nbi3ixjx6boxevu8qnzfr5i9av4rvo6s6a9ulo9939] c:\docume~1\admin\locals~1\temp\b7exuaqkc.exe
uRun: [mn2tl5g7movr9brc88nifzf0hp4uhz3h9qnsb4vlu] c:\docume~1\admin\locals~1\temp\ax9z3t69.exe
uRun: [xd1fb3du6rc679yhhs9uuplmx7epp7audq8164dk0zlrxd] c:\docume~1\admin\locals~1\temp\ztacjndfc9.exe
uRun: [h6epfn4ogaaminj5441za1n8qhhu] c:\docume~1\admin\locals~1\temp\u4og4qxqhfn.exe
uRun: [opdjxuflfrs8x] c:\docume~1\admin\locals~1\temp\sukr0b03wxjq.exe
uRun: [vf1pom9ncbgg943rzx51jx] c:\docume~1\admin\locals~1\temp\gshx2i7r.exe
uRun: [rw3646rj0my419rqjilc6r8e0y] c:\docume~1\admin\locals~1\temp\i7l6fv.exe
uRun: [gojxxfm6q47v7poijkm91llvs3xkgx43f4ugbo] c:\docume~1\admin\locals~1\temp\qlsp56z1py.exe
uRun: [hwpund7xc5gyult0nybnvhfpmcw2kpgh] c:\docume~1\admin\locals~1\temp\ic4q5cepfmtyu.exe
uRun: [xqfvy28sdgjxo0gkzdudwu] c:\docume~1\admin\locals~1\temp\jr4ocsak9ma.exe
uRun: [v1yoia9lzg6jw95y6s1l5gx8] c:\docume~1\admin\locals~1\temp\lrutrr.exe
uRun: [gllwqekourjtjhn2i5h34wbo1q0gtrpzn] c:\docume~1\admin\locals~1\temp\qggpponyws0oa.exe
uRun: [i4huok3mg65x1a8i88ghho1yom270196l5qz0p94xxg6dc32] c:\docume~1\admin\locals~1\temp\pbubsem9gnp.exe
uRun: [mxblkgasdxqnjt9z8wht2mkn0pw02jw5upqgeyw21kgi] c:\docume~1\admin\locals~1\temp\a8fsrzzr.exe
uRun: [yvjdkg43fyqckvyt3nadhd785] c:\docume~1\admin\locals~1\temp\hckfdan6xs.exe
uRun: [kwt7ogrtkd2xd5l8w8xv0] c:\docume~1\admin\locals~1\temp\pcricjia74srk.exe
uRun: [sw4h3jbjt6vmd0xg7b8k5] c:\docume~1\admin\locals~1\temp\o2t4ek.exe
uRun: [hysmp4scyvrgbe5s9soeq8hwj4ah9xjwjbmd6u5gb7jhy] c:\docume~1\admin\locals~1\temp\yuoptu.exe
uRun: [o5ru6x5zg] c:\docume~1\admin\locals~1\temp\n2jqt07zo.exe
uRun: [mjupl9fxn2icxyhbhkxs1xtzcky] c:\docume~1\admin\locals~1\temp\g3j8366yfhxqr.exe
uRun: [miox00l79] c:\docume~1\admin\locals~1\temp\jn9vf24w1tf4v.exe
uRun: [f53i6bhy5] c:\docume~1\admin\locals~1\temp\yv4wy82k.exe
uRun: [a1dwtfyljpgne18s3k6zpzgut2iwz6epum] c:\docume~1\admin\locals~1\temp\r1gv5udmu.exe
uRun: [qtw8f2scgzkarvu8p19nmo85rbr7ay2v8np0c05i] c:\docume~1\admin\locals~1\temp\ijko2xirv57qm.exe
uRun: [ffteohctrfoh4kl4p0m6w9zad3w30f11gmx1nlbk] c:\docume~1\admin\locals~1\temp\bpwnsj.exe
uRun: [j15d2lbvqqwwzkgctt2yvyo4n7tgir275clcji] c:\docume~1\admin\locals~1\temp\h9ma4f.exe
uRun: [xtu70svjh0wee2tl6h] c:\docume~1\admin\locals~1\temp\vghtqo5nxtin.exe
uRun: [p2tw5jue1mxu5m3vxmpmik] c:\docume~1\admin\locals~1\temp\w7mrh5pyyndbp.exe
uRun: [ssqz45v9m4o] c:\docume~1\admin\locals~1\temp\zfoe90zzhv.exe
uRun: [i9yeh6t1b9cr8li3npfv667lg9qltswr16x51xes7gs5] c:\docume~1\admin\locals~1\temp\gq2zcd08jus.exe
uRun: [u4nlkslq8iv4] c:\docume~1\admin\locals~1\temp\rs2iin2kmcbc.exe
uRun: [kr0dse8wb4k] c:\docume~1\admin\locals~1\temp\jas379yp56a.exe
uRun: [jc0ps0j4p07kttogos4txz5aba0vy] c:\docume~1\admin\locals~1\temp\m3n6dpf.exe
uRun: [ee2v7bcupnh1iaj27] c:\docume~1\admin\locals~1\temp\qszoqls14.exe
uRun: [rgmhmh5v3z6gcfmhh378nch0uq] c:\docume~1\admin\locals~1\temp\c76pdt2j8u.exe
uRun: [uv7vflg9ylpcsisoe2mb377xyccxb] c:\docume~1\admin\locals~1\temp\rymzaq2weuvim.exe
uRun: [fk40lsdayz1oz82qgswy72ns6qzd4lv] c:\docume~1\admin\locals~1\temp\frwc8p0hd6.exe
uRun: [zkutnjc5ozp894l] c:\docume~1\admin\locals~1\temp\xd8tie.exe
uRun: [o7bf7s1n9zt3vtwxl5z4wky64p1p9gfjcsut9mbt] c:\docume~1\admin\locals~1\temp\jz8dlldc0cxq.exe
uRun: [z8qk7h1i8d62] c:\docume~1\admin\locals~1\temp\t3afkfj.exe
uRun: [zawvlsiuou77vksdhsh9bdfkpkdialpka6c3ormaumzdyf9wr] c:\docume~1\admin\locals~1\temp\hb98preh9.exe
uRun: [xvy982elgq7qx4ndd9zmnmegtqzcav] c:\docume~1\admin\locals~1\temp\a3e7rmn.exe
uRun: [zzlk6yu1uta2mhrjhqyqojkejut0c] c:\docume~1\admin\locals~1\temp\cm4c6l31t7.exe
uRun: [sf4wvuw4vrahg5u9fcn6k1mhvt48d1thtwm5llj0geo13ly] c:\docume~1\admin\locals~1\temp\kqgsqgcaad.exe
uRun: [k3lhqqo80i8crtf3x9m43wj5h4gp3wgbrjl7] c:\docume~1\admin\locals~1\temp\ofst3cp5xj77.exe
uRun: [g23yu54j7n] c:\docume~1\admin\locals~1\temp\na6f2carfp.exe
uRun: [isyg95msmkf7g8vhbrkfv] c:\docume~1\admin\locals~1\temp\kvzcgi721.exe
uRun: [qu85rw6n5k9e95ct5gs8w6] c:\docume~1\admin\locals~1\temp\z8dgp119j10.exe
uRun: [x879rk2tmdd9s4kg7vw3rxqereq7aqu6d] c:\docume~1\admin\locals~1\temp\fbwjryamc.exe
uRun: [c61o48g1j51k54lvjl] c:\docume~1\admin\locals~1\temp\ytdi1l5vp1jn8.exe
uRun: [ls1azs0lfj7pmw92rdwg5f88l7zjbkf1kab5kc] c:\docume~1\admin\locals~1\temp\m0814u2rlp5.exe
uRun: [heeea5o1jwi53h8veeojgcv7jkcq6] c:\docume~1\admin\locals~1\temp\nrdzvb32mjjw.exe
uRun: [jvey311iwegsx8br945tcyblp] c:\docume~1\admin\locals~1\temp\ma3ltaj.exe
uRun: [t92xarkwo3vd] c:\docume~1\admin\locals~1\temp\xej2h43sj4.exe
uRun: [sh2v3afir253z2ao866v8] c:\docume~1\admin\locals~1\temp\f7h7zu.exe
uRun: [gzvj9zv1scs8iz69s2prr2ec4fq6zpm] c:\docume~1\admin\locals~1\temp\tvt923iydqho.exe
uRun: [xc7rm5i7zyj43mhku5] c:\docume~1\admin\locals~1\temp\t0vtbk6cwq4.exe
uRun: [esdxg9aw850a66d8yb6xw8e1v3advesr3n9gwfr50wn2rz93] c:\docume~1\admin\locals~1\temp\plvv4lah2qnjj.exe
uRun: [ixkgxp6lzy5vdtqwcjnmtcawzbg8suo2lr46lypsz8xxysf4c] c:\docume~1\admin\locals~1\temp\az2euw07c.exe
uRun: [opw0lhfye3n0ofa5lcgns6yttov] c:\docume~1\admin\locals~1\temp\wf9xqy.exe
uRun: [fqiqhl6519] c:\docume~1\admin\locals~1\temp\kiz384b.exe
uRun: [wgkhdpw2c83uvwjlvfvoq1cy] c:\docume~1\admin\locals~1\temp\cjp7xq.exe
uRun: [wo2ga92vxch3rwpaor6pmvh603] c:\docume~1\admin\locals~1\temp\g81pamkh.exe
uRun: [l2h44k84chafbi8zbct5aaka46xvsfxzpagwuu9pk95fbmvshl] c:\docume~1\admin\locals~1\temp\n28q309.exe
uRun: [mu50zwrg6claue8h9d92c2dz6n0fcn0mmujq28sud1i] c:\docume~1\admin\locals~1\temp\bjmd5ogmyqw.exe
uRun: [ta6u1yjcw1mhm9p9mi] c:\docume~1\admin\locals~1\temp\ylftj942cx.exe
uRun: [tved28cud8vmr3k7c5zn300oakugn1ztt7jv] c:\docume~1\admin\locals~1\temp\ubhflaw2ix7.exe
uRun: [yfbloew5hjcqfi8rdkgxshhhg4l1abpqe] c:\docume~1\admin\locals~1\temp\nhtxsw742le5.exe
uRun: [f3geu4xlzubivezsnpo0m6q62qxcqa] c:\docume~1\admin\locals~1\temp\xlcir7d.exe
uRun: [o2jas9kbe3fcw3600696ohngqa2s5mx9jippcpnlkxxr05spc] c:\docume~1\admin\locals~1\temp\ek2kt27vafwan.exe
uRun: [dsb83onxnxaz8wf61jm8h5k5vh1060ldgi97e4l1s5srn5s61] c:\docume~1\admin\locals~1\temp\dfgpsjb2zzf.exe
uRun: [pwm5dnr7ofvk8t9sq8j4bnrdkbwp4a4mj] c:\docume~1\admin\locals~1\temp\xcxmq56bu3ql6.exe
uRun: [mj3wx5h1nkf6u53aljcb1m679o] c:\docume~1\admin\locals~1\temp\t2z8sn.exe
uRun: [cvrd8su5v84xn8dgl83wt9rs0gd] c:\docume~1\admin\locals~1\temp\pnzapxxo.exe
uRun: [dvan4r6rk8a] c:\docume~1\admin\locals~1\temp\zr1v3ipvylh.exe
uRun: [vmls4609thbysygmd] c:\docume~1\admin\locals~1\temp\ps1duoo.exe
uRun: [gwobb1o4xdjlgh6fwgh6uesq318xexzfu] c:\docume~1\admin\locals~1\temp\kykyz9f21mn.exe
uRun: [swqotdbv1mtu1aai6727ii852jy3rr0lm] c:\docume~1\admin\locals~1\temp\yrykbzyc.exe
uRun: [melz1bphaisu] c:\docume~1\admin\locals~1\temp\vmmkvhm9n4t.exe
uRun: [jdwrqi0aju6mbd0539kxq0aae1ipxqqrfllqvsj3] c:\docume~1\admin\locals~1\temp\ajzlzrago83.exe
uRun: [pidibzfhsgcan61qd3wsavopw1dm815exazyvp99fwlyh6z] c:\docume~1\admin\locals~1\temp\z0wrq80x.exe
uRun: [rp9uhq6pm7bfc4gb7jionqjtxz] c:\docume~1\admin\locals~1\temp\dlwg6vq4lauq.exe
uRun: [re17s7urty24e40in2dc5k1z6jdwufecsm31pdvu05] c:\docume~1\admin\locals~1\temp\mueam4axvyy.exe
uRun: [g1cgwx0ekb6p0vf846jq3d] c:\docume~1\admin\locals~1\temp\hdck2m1d.exe
uRun: [psapn2dpkfwwo47rmasq9t7n8t7ziub9l32zgdweuhktmn3jl] c:\docume~1\admin\locals~1\temp\e4orpej3h7k6e.exe
uRun: [zm5zwjt04kutvdfi0e75kgtapzp4n08t6guynwpijmhk8xwep] c:\docume~1\admin\locals~1\temp\oi2wdopinlqu.exe
uRun: [uexg8aq6nc6ie24z4ja5qf3p151ggzfbpm] c:\docume~1\admin\locals~1\temp\whjvy13.exe
uRun: [o1n2r8nj9dhanl] c:\docume~1\admin\locals~1\temp\hfgij8acm2c.exe
uRun: [nh5ikj2slmbgokrq6ykx9op9qn33g8eylp9qf3x9nl7t0] c:\docume~1\admin\locals~1\temp\nunl5n3w8eos.exe
uRun: [remyzm739fv5p6g4khoqzo3p3kxt8w8v08mm] c:\docume~1\admin\locals~1\temp\yw64bx5pbwoj6.exe
uRun: [e2g001zta1] c:\docume~1\admin\locals~1\temp\x2j1x7tc5r9.exe
uRun: [im9nfydp0bd8] c:\docume~1\admin\locals~1\temp\il2kkhv589sk.exe
uRun: [hkuoqbh6nr4dxe29z8gpo0jed8rz7xip] c:\docume~1\admin\locals~1\temp\iqlnty0jr9f.exe
uRun: [vkuh1btcminp66356jajhak5b] c:\docume~1\admin\locals~1\temp\hggp2yg8qf.exe
uRun: [h5nkhnmwr9l1klyuxwecrqbomqp0ga2hgxtga] c:\docume~1\admin\locals~1\temp\fnfhcxh8.exe
uRun: [qke9ds8lhwb5yi6uldt6oicuk8xkac8n7f9a] c:\docume~1\admin\locals~1\temp\f2t4ru33qri.exe
uRun: [ha27gwcabd03rnjef4jgczdqq8nakgwnceqbiii] c:\docume~1\admin\locals~1\temp\u5c5u16on.exe
uRun: [t0m2fznhl9ct3aijf5hqw] c:\docume~1\admin\locals~1\temp\qlj773.exe
uRun: [b8gaim7p7] c:\docume~1\admin\locals~1\temp\xf780hnogyvh4.exe
uRun: [iyxzfbb50opmcqoghkl63gihwesfygj0x] c:\docume~1\admin\locals~1\temp\t0qacia.exe
uRun: [zjge8045wdaql] c:\docume~1\admin\locals~1\temp\ih7r68.exe
uRun: [g4xaitm04rolzcnxw] c:\docume~1\admin\locals~1\temp\m6j9jnlc.exe
uRun: [ee5pukjktqdp0dw8y8xym51wqkvrkt6oz] c:\docume~1\admin\locals~1\temp\ftvrq9weq.exe
uRun: [cxqbzhx42on8pbkd1q] c:\docume~1\admin\locals~1\temp\e2qtzsc3.exe
uRun: [ksnq1osw6upyqd90] c:\docume~1\admin\locals~1\temp\uav8kib2.exe
uRun: [a051o4uqefm09mteij27lj6jwxbpkmnv5q56nua8h7y62hzc] c:\docume~1\admin\locals~1\temp\hcldo8tk1m6x.exe
uRun: [y7jtsadgfhbnipkblfuumcuq27fpnum81y3lxjd] c:\docume~1\admin\locals~1\temp\xkqs9fb2zy1u.exe
uRun: [a31r6ebckgb7r115lntem5ivw3rfvau4h8n4pqtpbhybje3eap] c:\docume~1\admin\locals~1\temp\j1793o99dgi.exe
uRun: [lm48j2ov9kcp78c8hf7shvk2liqii] c:\docume~1\admin\locals~1\temp\b92amu.exe
uRun: [zcuxq7c35g834wfmszyadp0] c:\docume~1\admin\locals~1\temp\pgxtp32tisu4.exe
uRun: [suz3z8z9p12d2f8ptyt2bwpif5kc3w2d4dyp2] c:\docume~1\admin\locals~1\temp\eszrgu6.exe
uRun: [yr1ujqrqe91y4lwaq2sw6uzec93wtai2gr2g2uy] c:\docume~1\admin\locals~1\temp\xulcfvsj.exe
uRun: [p8zclu15tasmbmfwg] c:\docume~1\admin\locals~1\temp\ib0a1bkjlrtq.exe
uRun: [reader_s] c:\documents and settings\admin\reader_s.exe
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [nwiz] nwiz.exe /install
mRun: [DVDSentry] c:\windows\system32\DSentry.exe
mRun: [AdaptecDirectCD] "c:\program files\roxio\easy cd creator 5\directcd\DirectCD.exe"
mRun: [Dell AIO Printer A940] "c:\program files\dell aio printer a940\dlbabmgr.exe"
mRun: [ADUserMon] c:\program files\iomega\autodisk\ADUserMon.exe
mRun: [Iomega Drive Icons] c:\program files\iomega\driveicons\ImgIcon.exe
mRun: [Deskup] c:\program files\iomega\driveicons\deskup.exe /IMGSTART
mRun: [HelpCenter] c:\program files\bellsouth\helpcenter\bin\sprtcmd.exe /P HelpCenter
mRun: [DXM6Patch_981116] c:\windows\p_981116.exe /Q:A
mRun: [LVCOMS] c:\program files\common files\logitech\qcdriver3\LVCOMS.EXE
mRun: [LogitechGalleryRepair] c:\program files\logitech\imagestudio\ISStart.exe
mRun: [LogitechImageStudioTray] c:\program files\logitech\imagestudio\LogiTray.exe
mRun: [HelpCenter4.1] c:\program files\bellsouth\helpcenter40b\bin\sprtcmd.exe /P HelpCenter4.1
mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe"
mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot
mRun: [mcagent_exe] c:\program files\mcafee.com\agent\mcagent.exe /runkey
mRun: [SDFix] c:\sdfix\RunThis.bat /second
mRun: [reader_s] c:\windows\system32\reader_s.exe
mRun: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
dRun: [reader_s] c:\documents and settings\admin\reader_s.exe
StartupFolder: c:\docume~1\admin\startm~1\programs\startup\pictur~1.lnk - c:\program files\sony\sony picture utility\volumewatcher\SPUVolumeWatcher.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\kodake~1.lnk - c:\program files\kodak\kodak easyshare software\bin\EasyShare.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\kodaks~1.lnk - c:\program files\kodak\kodak software updater\7288971\program\Kodak Software Updater.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\logite~1.lnk - c:\program files\logitech\desktop messenger\8876480\program\LDMConf.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\micros~1.lnk - c:\program files\microsoft office\office10\OSA.EXE
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\paltalk.lnk - c:\program files\paltalk messenger\paltalk.exe
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office10\EXCEL.EXE/3000
IE: {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - c:\program files\paltalk messenger\Paltalk.exe
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\program files\spybot - search & destroy\SDHelper.dll
DPF: DirectAnimation Java Classes - file://c:\windows\java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\java\classes\xmldso.cab
DPF: {01113300-3E00-11D2-8470-0060089874ED} - hxxp://help.bellsouth.net/sdccommon/download/tgctlcm.cab
DPF: {01118A01-3E00-11D2-8470-0060089874ED} - hxxps://password.bellsouth.net/sdccommon/download/tgctlsr.cab
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/3/9/8/398422c0-8d3e-40e1-a617-af65a72a0465/LegitCheckControl.cab
DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - c:\program files\yahoo!\common\yinsthelper.dll
DPF: {321FB770-1FBE-4BFE-BDC1-6F622D4FA499} - hxxps://setup.bellsouth.net/wizlet/PWReset/static/controls/WebflowActiveXInstaller_4-2-1.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab
DPF: {CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA} - hxxp://java.sun.com/products/plugin/1.4/jinstall-14_02-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_10-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - c:\program files\common files\microsoft shared\web folders\PKMCDO.DLL
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dll
AppInit_DLLs: jcpljo.dll judbmx.dll napzdv.dll pvdtse.dll yorqzr.dll sqgyek.dll nsmsav.dll zsbxwq.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
LSA: Authentication Packages = msv1_0 c:\windows\system32\cbXQihig

================= FIREFOX ===================

FF - ProfilePath -
FF - HiddenExtension: XUL Cache: {F09CD97D-B405-48DB-8A2D-142B7E5A02BC} - c:\documents and settings\admin\local settings\application data\{F09CD97D-B405-48DB-8A2D-142B7E5A02BC}

============= SERVICES / DRIVERS ===============

S0 abein;abein;c:\windows\system32\drivers\qmxaubv.sys --> c:\windows\system32\drivers\qmxaubv.sys [?]
S0 alkjtu;alkjtu;c:\windows\system32\drivers\eiretrix.sys --> c:\windows\system32\drivers\eiretrix.sys [?]
S1 mfehidk;McAfee Inc. mfehidk;c:\windows\system32\drivers\mfehidk.sys [2008-10-5 201320]
S1 spusbaudio;USB Microphone;c:\windows\system32\drivers\CA506AA.sys [2003-8-1 39824]
S2 ASFAgent;ASF Agent;c:\program files\intel\asf agent\ASFAgent.exe [2003-2-10 114688]
S2 AsfAlrt;AsfAlrt;c:\windows\system32\drivers\Asfalrt.sys [2002-12-18 36064]
S2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\mcafee\siteadvisor\McSACore.exe [2008-10-7 206096]
S2 McProxy;McAfee Proxy Service;c:\progra~1\common~1\mcafee\mcproxy\mcproxy.exe [2008-10-5 359248]
S2 Viewpoint Manager Service;Viewpoint Manager Service;"c:\program files\viewpoint\common\viewpointservice.exe" --> c:\program files\viewpoint\common\ViewpointService.exe [?]
S3 McSysmon;McAfee SystemGuards;c:\progra~1\mcafee\viruss~1\mcsysmon.exe [2008-10-5 695624]
S3 mfeavfk;McAfee Inc. mfeavfk;c:\windows\system32\drivers\mfeavfk.sys [2008-10-5 79304]
S3 mfebopk;McAfee Inc. mfebopk;c:\windows\system32\drivers\mfebopk.sys [2008-10-5 35240]
S3 mferkdk;McAfee Inc. mferkdk;c:\windows\system32\drivers\mferkdk.sys [2008-10-5 33832]
S3 mfesmfk;McAfee Inc. mfesmfk;c:\windows\system32\drivers\mfesmfk.sys [2008-10-5 40488]
S3 protect;protect;c:\windows\system32\drivers\protect.sys [2009-2-22 18944]
S3 restore;restore;\??\c:\windows\system32\drivers\restore.sys --> c:\windows\system32\drivers\restore.sys [?]
S3 RTLWUSB;NETGEAR WG111v2 54Mbps Wireless USB 2.0 Adapter NT Driver;c:\windows\system32\drivers\wg111v2.sys --> c:\windows\system32\drivers\wg111v2.sys [?]
S3 SPCA506AV;X10 VA11A Video Capture;c:\windows\system32\drivers\CA506AV.SYS [2003-8-1 162096]

=============== Created Last 30 ================

2009-02-28 11:30 32,768 a------- c:\windows\system32\odjan.wa
2009-02-28 11:30 28,672 a------- c:\windows\system32\kdoqmn.sr
2009-02-28 11:30 32,768 a------- c:\windows\system32\kei1w.an
2009-02-28 11:30 28,672 a------- c:\windows\system32\doqkm.zt
2009-02-28 11:30 77,312 a------- c:\windows\system32\rkoq.pxf
2009-02-28 11:26 262,144 a------- c:\windows\system32\nvtpm32.dll
2009-02-28 11:26 105,984 a------- c:\windows\system32\9.tm_

==================== Find3M ====================

2009-02-28 11:26 577,536 a------- c:\windows\system32\user32.DLL
2009-02-22 18:29 24,110 a------- c:\windows\system32\8.tmp
2009-02-22 18:29 47,104 a------- c:\windows\system32\reader_s.exe
2009-02-22 18:29 30,208 a------- c:\documents and settings\admin\reader_s.exe
2009-02-22 18:29 18,944 a---h--- c:\windows\system32\drivers\protect.sys
2009-02-22 18:29 67,585 a------- c:\windows\system32\6.tmp
2009-02-22 18:29 64,000 a------- c:\windows\system32\hhupd.exe
2009-02-22 18:29 55,809 a------- c:\windows\services.exe
2009-02-22 17:52 64,512 a------- c:\windows\system32\codeblocks.exe
2009-02-22 17:31 182,912 a------- c:\windows\system32\drivers\ndis.sys
2009-02-22 17:31 182,912 a------- c:\windows\system32\dllcache\ndis.sys
2009-02-22 17:30 67,585 a------- c:\windows\system32\10.tmp
2009-02-22 17:30 64,512 a------- c:\windows\system32\undname.exe
2009-02-21 19:49 61,447 a------- c:\windows\system32\alg.exe
2009-02-21 19:49 15,360 a------- c:\windows\system32\ctfmon.exe
2009-02-21 19:49 174,592 a------- c:\windows\system32\LEXPPS.EXE
2009-02-21 19:48 57,856 a------- c:\windows\system32\spoolsv.exe
2009-02-15 13:16 39,936 a------- C:\xyephkl.exe
2009-02-15 13:16 146,944 a------- C:\ytprjxsv.exe
2009-02-15 13:14 60,928 a------- C:\cwxwwgtl.exe
2009-02-15 13:14 72,704 a------- c:\windows\system32\cpuwpjcd.dll
2009-02-15 13:12 33,444 a--sh--- c:\windows\system32\gihiQXbc.ini2
2009-02-15 00:00 129,024 a------- c:\windows\system32\zsbxwq.dll
2009-02-15 00:00 129,024 a------- c:\windows\system32\djvrqagi.dll
2009-02-14 11:55 129,024 a------- c:\windows\system32\onjyulfg.dll
2009-02-14 11:55 129,024 a------- c:\windows\system32\hgxdtq.dll
2009-02-13 17:06 129,024 a------- c:\windows\system32\yuttayfb.dll
2009-02-13 17:06 129,024 a------- c:\windows\system32\splgyb.dll
2009-02-12 17:04 129,024 a------- c:\windows\system32\zoaehj.dll
2009-02-12 17:04 129,024 a------- c:\windows\system32\nvblwifx.dll
2009-02-11 16:59 129,024 a------- c:\windows\system32\yfluwxuw.dll
2009-02-11 16:59 129,024 a------- c:\windows\system32\wuvizp.dll
2009-02-10 22:55 72,704 a------- c:\windows\system32\yiacrist.dll
2009-02-09 22:55 129,024 a------- c:\windows\system32\vnvgvcih.dll
2009-02-08 22:54 129,024 a------- c:\windows\system32\khwrspmj.dll
2009-02-08 22:54 129,024 a------- c:\windows\system32\isrgfc.dll
2009-02-08 22:51 302,592 a------- c:\windows\system32\cbXQihig.dll.vir
2009-02-03 23:41 35,420 a--sh--- c:\windows\system32\aIhjkUtv.ini2
2009-01-15 18:49 410,984 a------- c:\windows\system32\deploytk.dll
2008-12-24 20:19 888,604 a--sh--- c:\windows\system32\wGOrBJjl.ini2
2008-12-20 23:53 165 a------- c:\docume~1\alluse~1\applic~1\service.dat
2008-08-18 18:17 68,648 ac------ c:\docume~1\admin\applic~1\GDIPFONTCACHEV1.DAT
2007-05-18 17:10 241,664 a------- c:\program files\Uninstall Ask Toolbar.dll
2007-05-05 09:48 6,980,738 ac------ c:\documents and settings\admin\HC4Installer.exe

============= FINISH: 19:28:57.93 ===============


I hope I've done everything right. Please let know what other information I need to provide.

Attached Files



BC AdBot (Login to Remove)

 


#2 SifuMike

SifuMike

    malware expert


  • Staff Emeritus
  • 15,385 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Vancouver (not BC) WA (Not DC) USA
  • Local time:09:41 PM

Posted 28 March 2009 - 11:59 PM

Hello ttownfeen,

Sorry for the delay. We have many logs backed up and only a few helpers.

Please post a fresh DSS log so I can see if anything has changed.

Also see if you can run update and Malwarebytes. If you can, then post its log.
If I've saved you time & money,
please make a donation so I can keep helping people just like you! You can donate using a credit card and PayPal. Thank you!



Posted Image

Asking for help via Private Message or Mail will be ignored - So If you need help, post your problem in the forum.

#3 ttownfeen

ttownfeen
  • Topic Starter

  • Members
  • 35 posts
  • OFFLINE
  •  
  • Local time:11:41 PM

Posted 29 March 2009 - 11:36 PM

DSS log:

DDS (Ver_09-03-16.01) - NTFSx86 MINIMAL
Run by admin at 0:27:18.64 on Mon 03/30/2009
Internet Explorer: 7.0.5730.11 BrowserJavaVersion: 1.6.0_11
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1023.782 [GMT -5:00]

AV: McAfee VirusScan *On-access scanning disabled* (Outdated)
FW: McAfee Personal Firewall *enabled*

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
C:\WINDOWS\Explorer.EXE
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\Adobe\Reader 8.0\Reader\AcroRd32Info.exe
C:\Documents and Settings\admin\Desktop\dds.scr

============== Pseudo HJT Report ===============

uStart Page = hxxp://my.att.net/
uSearch Page = hxxp://www.google.com
uDefault_Page_URL = hxxp://education.dellnet.com/
uSearch Bar = hxxp://www.google.com/ie
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
mDefault_Page_URL = hxxp://education.dellnet.com/
mDefault_Search_URL = hxxp://www.google.com/ie
mSearch Page =
mSearch Bar = hxxp://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html
uInternet Settings,ProxyOverride = localhost
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
mSearchAssistant = hxxp://www.google.com/ie
BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
BHO: scriptproxy: {7db2d5a0-7241-4e79-b68d-6309f01c5231} - c:\program files\mcafee\virusscan\scriptsn.dll
TB: BellSouth Toolbar: {4e7bd74f-2b8d-469e-8cbd-fd60bb9aae2e} - c:\progra~1\blstoo~1\BLSTOO~1.DLL
TB: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
TB: Ask Toolbar: {3041d03e-fd4b-44e0-b742-2d9b88305f98} - c:\program files\askbardis\bar\bin\askBar.dll
TB: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No File
EB: {32683183-48a0-441b-a342-7c2a440a9478} - No File
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [LDM] c:\program files\logitech\desktop messenger\8876480\program\BackWeb-8876480.exe
uRun: [WebCamRT.exe]
uRun: [Aim6]
uRun: [MsnMsgr] "c:\program files\msn messenger\MsnMsgr.Exe" /background
uRun: [Messenger (Yahoo!)] "c:\program files\yahoo!\messenger\YahooMessenger.exe" -quiet
uRun: [eukj05hhd5ohllazvaz7ekr9r9v9xh] c:\docume~1\admin\locals~1\temp\p2nnx2.exe
uRun: [m635rhtua0g1dbc8c2vrboik95eujslevhx68] c:\docume~1\admin\locals~1\temp\v8sdfwh.exe
uRun: [dz1ho4ebhdzcc9jhisn8o7kst2poo5yq1x04uj0dn1ph] c:\docume~1\admin\locals~1\temp\kr1ph7zirf4.exe
uRun: [eu0bjptkmccvlv17] c:\docume~1\admin\locals~1\temp\n4mvjl1pe9.exe
uRun: [zxbc0mxqg3s7ijer3rikhduxsk4] c:\docume~1\admin\locals~1\temp\wp28ygq.exe
uRun: [spvev6e47j1glpnxlghguix9] c:\docume~1\admin\locals~1\temp\hh64ws1r.exe
uRun: [nr35aksqq7wdkep7tzfc0] c:\docume~1\admin\locals~1\temp\d8sa661opa.exe
uRun: [bawcn21odwuhu6wtb8040yodmmc] c:\docume~1\admin\locals~1\temp\hssb332.exe
uRun: [jgsdl8ecf9ivxf30bo66sy3nxeq8] c:\docume~1\admin\locals~1\temp\t99sxt.exe
uRun: [qbga2wvnp71nyfrh8gvylhl56eyjm] c:\docume~1\admin\locals~1\temp\m17bracqs4w.exe
uRun: [jm73gz0n5m9ilt5suc6a7fc50175757l7lpsobfd2] c:\docume~1\admin\locals~1\temp\gzuwi7ockp.exe
uRun: [m9e5yqxsehnk1wu1465j045dd] c:\docume~1\admin\locals~1\temp\ri1iyvt2mgvdz.exe
uRun: [ijap75lac9uccjwr725jg154pvb7b8s] c:\docume~1\admin\locals~1\temp\bgvur0.exe
uRun: [blfsc9p2k9pxmr] c:\docume~1\admin\locals~1\temp\jcqltjy64cv.exe
uRun: [wu4ykpe6mb] c:\docume~1\admin\locals~1\temp\pfdsjooo.exe
uRun: [gt2mi6b7zwf83me1vpw9o6e2vra5o0w7] c:\docume~1\admin\locals~1\temp\xtqs0ggdye.exe
uRun: [f7tskcunb2wkgqqzmubju8jsdew75gf] c:\docume~1\admin\locals~1\temp\a8ba4h5gyg5rv.exe
uRun: [zd76zvn6yjj84vgw9y8712ft9w3jfaelud509klyqi] c:\docume~1\admin\locals~1\temp\epp3z1hipzdo.exe
uRun: [crkqrwboh4mivrgi9q5pz07] c:\docume~1\admin\locals~1\temp\v20dg5a1gt5.exe
uRun: [j25pmt8tpolvxxirnivr6jejg2awj4c1x1ec3pu5qckqm5] c:\docume~1\admin\locals~1\temp\o8cvrhzul69a.exe
uRun: [qzk0yhx1dqjyas2nhybywqt8aoovqkmnquo] c:\docume~1\admin\locals~1\temp\nus446zh.exe
uRun: [j6hdmjrknl4id3nskq02s4tjyrwwy07ox0tcrr002yzw8ig32] c:\docume~1\admin\locals~1\temp\wn02fs0.exe
uRun: [m4okihf0h0zxc0cgjf] c:\docume~1\admin\locals~1\temp\aegi9tm29yup.exe
uRun: [afo9hfp0h9fmav1yfc3quwnmesac] c:\docume~1\admin\locals~1\temp\ruvx9qdz4b8q9.exe
uRun: [ijl2a8jsvp0zo1lah] c:\docume~1\admin\locals~1\temp\g9xxdu4.exe
uRun: [blefag5ojbxzjpt67uweo6xg41bod1] c:\docume~1\admin\locals~1\temp\rsxgj46z.exe
uRun: [i8lg5g0cv2nvm19] c:\docume~1\admin\locals~1\temp\xx0hoqoy58mz.exe
uRun: [f8njq33kzd98ack5tt] c:\docume~1\admin\locals~1\temp\dcb6deh6lx.exe
uRun: [ca3dpmcpegds6c209vnshhcnpg32myareokgcu0b7igr2p6] c:\docume~1\admin\locals~1\temp\pavnlz.exe
uRun: [gcrxx2m6cubjitpstfkswaclbq6] c:\docume~1\admin\locals~1\temp\m5jn50ixh.exe
uRun: [cnm4ww04d7spiw851hnqeogp5sf5jbu2vjyc] c:\docume~1\admin\locals~1\temp\i799ajfudauuc.exe
uRun: [n24czcweekqasfh8yhmfrnsh7z4] c:\docume~1\admin\locals~1\temp\ztifsp.exe
uRun: [ynujhl9nbhrwecmazl7gjpxm9oy6lkq143akzlfrpk8tjaj] c:\docume~1\admin\locals~1\temp\rv57mp4.exe
uRun: [e08nmhd2v71lyggxmbpdh9dhfw01be4cjfwsga1qaefmku] c:\docume~1\admin\locals~1\temp\azlhxox.exe
uRun: [c0gz1b3rm6jtdexasu299fj8ghrhskd8m02engyw] c:\docume~1\admin\locals~1\temp\eoxz6dwsu.exe
uRun: [qnip5rfhr2cyc0r3fvx6q8g] c:\docume~1\admin\locals~1\temp\ckohk6.exe
uRun: [etl8qmytvrujx8wh29bffmk8myhlowm82k] c:\docume~1\admin\locals~1\temp\koh1bw.exe
uRun: [qed5eg23ngwa1va4glvmflno0qobsuy8t4alea60] c:\docume~1\admin\locals~1\temp\g4ozh31whit.exe
uRun: [zja76sm3s7] c:\docume~1\admin\locals~1\temp\sg0v9bbm0eof1.exe
uRun: [wymq7efbzeuzg49hrf23pe63j5nu1udgbd5brbdkzhm5fkl] c:\docume~1\admin\locals~1\temp\hyhjmafpi9w.exe
uRun: [aykgu90yc7eolexywjr] c:\docume~1\admin\locals~1\temp\yrmn6nn.exe
uRun: [eey7a13rufmx0j1jk96ahcgafreuafrtz] c:\docume~1\admin\locals~1\temp\yw57w4.exe
uRun: [z5nmvs7kba8biou6d1k4mreeqqxujo4x1981g8wg2of8] c:\docume~1\admin\locals~1\temp\z289gdd.exe
uRun: [lowcvil8os5t3ugd59vrfeujbfno0p] c:\docume~1\admin\locals~1\temp\n5ozrip6yc.exe
uRun: [jbvyztgkfisccezt70kunk9] c:\docume~1\admin\locals~1\temp\btjiur32.exe
uRun: [ne67jzkq7avvzmtpnd6xxexwgiry] c:\docume~1\admin\locals~1\temp\h64pv3ih9zjg.exe
uRun: [mqv3l2l3hbyfuwfegt2hpkasdcfz5qfz2nehd8yomwk6] c:\docume~1\admin\locals~1\temp\paxofyrqqo7n.exe
uRun: [nfdgtn12vsv9dgvv3nqfkcj0wofykgkk1qml0pqw] c:\docume~1\admin\locals~1\temp\t9n9ya42p0.exe
uRun: [amlhoxf0dvsvviw2j6iachmm6b23n8yvt] c:\docume~1\admin\locals~1\temp\leovxm4nw9xs.exe
uRun: [j1haogrgfz7yp2rq6hnj] c:\docume~1\admin\locals~1\temp\kea1f1w.exe
uRun: [s1lj3srurlb5aygpr1btkp0cs9snmk31q0zxuo7oml] c:\docume~1\admin\locals~1\temp\ld2t2io.exe
uRun: [gk2elaajze29nxsqxaztskmutymp1a6xlxsw6bg65mppg7j2ry] c:\docume~1\admin\locals~1\temp\kz12jx2ra7n.exe
uRun: [jx8bjsonct37lmezjamwun2ganiqxk01r7l94pdck6n] c:\docume~1\admin\locals~1\temp\maqilp.exe
uRun: [mxs1tyxs3rud399rshcfe19hw7y27d0ueay6o2v76nr6271] c:\docume~1\admin\locals~1\temp\ujl1vig4xx53f.exe
uRun: [sef38xzo5hpcutob655mlve61yr47bf] c:\docume~1\admin\locals~1\temp\arn5ndq5cw.exe
uRun: [e5gvchtp3p] c:\docume~1\admin\locals~1\temp\bis3edagd9l.exe
uRun: [gs5rps75pf3la1xh0p0k] c:\docume~1\admin\locals~1\temp\l18bsllqy.exe
uRun: [yryb7cklk1zsppms5vivjf7] c:\docume~1\admin\locals~1\temp\nb0k6zb799.exe
uRun: [qasj7h7a2aoygdod4i4vqo2tfuov75gln] c:\docume~1\admin\locals~1\temp\etnumj.exe
uRun: [rvsc4g5r9zch92t7wovjrk] c:\docume~1\admin\locals~1\temp\pvnd9ti.exe
uRun: [wscr7yg9cai9tw3] c:\docume~1\admin\locals~1\temp\hnflxu72f4bs.exe
uRun: [vaan0i1ly885u44k1hm8krzf5qpv8kokwq623] c:\docume~1\admin\locals~1\temp\aar34zi4zsiqb.exe
uRun: [tbegusrth9dl82zkvemsizkg9vr8amyxcl6r8nmu84xr] c:\docume~1\admin\locals~1\temp\zjm5wiytyy4l.exe
uRun: [jubhrx9onr9p76woyml38aezzrnat9a3d0m] c:\docume~1\admin\locals~1\temp\vceehg.exe
uRun: [rjbpsvvtmqu5rsv1y4eyxiz9g3d] c:\docume~1\admin\locals~1\temp\u7s0gg94ch9g.exe
uRun: [aexlrevuvvhun52maym564ozp6md9izr3lsc4lfmfmd0zlif] c:\docume~1\admin\locals~1\temp\x5zklv2oytl0q.exe
uRun: [bbnmwy8zv2yj938ezwac4edif55ulw] c:\docume~1\admin\locals~1\temp\r2g0jhx.exe
uRun: [wu7igen986sp7ee9sl07ph2] c:\docume~1\admin\locals~1\temp\tc1p4d.exe
uRun: [ylu2u2ae4bpq4e4hw] c:\docume~1\admin\locals~1\temp\z79n32.exe
uRun: [agu65ai1zrhvltr7x1v0o7bml] c:\docume~1\admin\locals~1\temp\hk0zozbn.exe
uRun: [srof7ldhncz054571wo5xojnspebhs1816vo] c:\docume~1\admin\locals~1\temp\aejgz2fp.exe
uRun: [o3ygo9oll9ynv3yesvh87wqo0l5m4ga81365k] c:\docume~1\admin\locals~1\temp\saqhf76z.exe
uRun: [dqkm62qxacw5bxgwbu4wi0a1v6xo] c:\docume~1\admin\locals~1\temp\l7434ra.exe
uRun: [gusxx8187oq0hrhq] c:\docume~1\admin\locals~1\temp\dy9kufw6.exe
uRun: [uqy5rau40d2k1c9k] c:\docume~1\admin\locals~1\temp\he6p69jt.exe
uRun: [mv1qp3ztw70u0akgwp] c:\docume~1\admin\locals~1\temp\r61al21b.exe
uRun: [mrz2822uudnacgcit7z38j3b7yjrs1edzn0nk8w3d9fp] c:\docume~1\admin\locals~1\temp\evx9umr.exe
uRun: [k1eeewsnoijqe] c:\docume~1\admin\locals~1\temp\ad16ebiylnnm9.exe
uRun: [tmmoyo84y7vis9b4k9hpvux6cy2wjfh7eej9u8a44e2ysh7tr8] c:\docume~1\admin\locals~1\temp\jmj0u12rcbrr.exe
uRun: [xiyhqlp3uah3rjfmv3vv1bf3c1nbuagjmup0he0le0vsh1] c:\docume~1\admin\locals~1\temp\zihfvqdc3.exe
uRun: [vwrm38ayvgsztjs7hq36g401gmqufcy0jq] c:\docume~1\admin\locals~1\temp\f3n9vh42ku7.exe
uRun: [rskaqwj2bgys43] c:\docume~1\admin\locals~1\temp\mcpe39fvtcwwd.exe
uRun: [agmlr2un12r49x6qkv4emvioarf412dk45g] c:\docume~1\admin\locals~1\temp\qw8f06gnnc.exe
uRun: [zdck8o45cp89wfa5c4rq5y914o28v5kd3ag821iqcq5yikufig] c:\docume~1\admin\locals~1\temp\l73029jysio.exe
uRun: [rp74698hpx2f5isz59y2zd77j61arr] c:\docume~1\admin\locals~1\temp\mhrytqk9tcjq.exe
uRun: [u89ax833emd1lla7661i7ow] c:\docume~1\admin\locals~1\temp\wtdr9w.exe
uRun: [c2rhw6yv75nemzs2bd6sih0f1u2k3fussmwb3xd6rf6prc] c:\docume~1\admin\locals~1\temp\dskcsr0eolq8.exe
uRun: [ppgl54dxu24kesrevhgp] c:\docume~1\admin\locals~1\temp\dy33kyu7sy.exe
uRun: [zez0u9raihkj2jc08z5zc5] c:\docume~1\admin\locals~1\temp\l20krbere7kuv.exe
uRun: [ybhsv0ihvi05axocgueuadacdih7x1svx] c:\docume~1\admin\locals~1\temp\g4ca5bx2x.exe
uRun: [nm6qe5zpnms43y8tlnv0qzrng3418imt6y5ao9nwhzx92leqe] c:\docume~1\admin\locals~1\temp\nm2v7na.exe
uRun: [ortu6drreblz9nu3burk8mz7q8k] c:\docume~1\admin\locals~1\temp\kocs28.exe
uRun: [qy54xenxd5a46xxgztohct710py30uwykf0539gt13j5eou] c:\docume~1\admin\locals~1\temp\q6sijj8.exe
uRun: [b7uor424uu7i8] c:\docume~1\admin\locals~1\temp\thk9duzlntxpd.exe
uRun: [rtg7ofh84gpphs1t3m] c:\docume~1\admin\locals~1\temp\s23b6e3.exe
uRun: [atucvtjewuab0lhzoccro7orfr2kgu4h4tlizq3vz0pdhm] c:\docume~1\admin\locals~1\temp\mzk840yke.exe
uRun: [zocoe48e8isq8joi3dgo3gxvbjin8ubfzoz8hdfso82vm44hzx] c:\docume~1\admin\locals~1\temp\agauw6tx35d.exe
uRun: [bl8pa7n012] c:\docume~1\admin\locals~1\temp\hfhff169j.exe
uRun: [wnsh9pykn3yqcto2xwtg8hwhoqs9i5zm6kq7iq8xkjkgem] c:\docume~1\admin\locals~1\temp\dmqla18kfu42.exe
uRun: [gu861zyk5d7i] c:\docume~1\admin\locals~1\temp\vxb9534.exe
uRun: [nhwbyw03224f5v24qtziry9lv535nza4gntafbr5b] c:\docume~1\admin\locals~1\temp\me1cx9z2z.exe
uRun: [hiq2fp8x6] c:\docume~1\admin\locals~1\temp\ruib15w8no5b.exe
uRun: [lauvj8t6g89qulegvwnikhmkj7h2v6h4] c:\docume~1\admin\locals~1\temp\vjute1.exe
uRun: [js4z0mg9z6265] c:\docume~1\admin\locals~1\temp\acfiig6qecz9i.exe
uRun: [pf6uxcb8fjh56l9oilwdslmyyezfw38] c:\docume~1\admin\locals~1\temp\bmkgqx.exe
uRun: [we1r6gm4u3yskr4u9kyysv1sk9] c:\docume~1\admin\locals~1\temp\bwf0fd7i8c.exe
uRun: [lnjzwjbo2ki2ef95vr6ovoa2e6lb9nqjtc9m] c:\docume~1\admin\locals~1\temp\puc6hk.exe
uRun: [na03e43ufyfmmekcz337wf8igbwr4d5avjztaruihjsiq1gar8] c:\docume~1\admin\locals~1\temp\hm4e5lkmpd8.exe
uRun: [q3zngrqaxh7s33475uzaqhxryxzrz6t7w] c:\docume~1\admin\locals~1\temp\jrd3t15php95i.exe
uRun: [ux3lt0ecp8hlyah6rk05rl9l] c:\docume~1\admin\locals~1\temp\hkpgfz.exe
uRun: [zkphf14k6g3kekrzpcjo4lb8dlh] c:\docume~1\admin\locals~1\temp\s3wje88qq.exe
uRun: [z5hyotuyxm72t8a0e589tqxagaqxmsv9j] c:\docume~1\admin\locals~1\temp\q3juk5ew0.exe
uRun: [qtv00sy8ean25th2dy0zi082rscx3ce8atg] c:\docume~1\admin\locals~1\temp\useve1rrnm5.exe
uRun: [c8nfa3bjacvoj880iiqw1c8d41gwp6qaqfr4ipxze0b4uzp38] c:\docume~1\admin\locals~1\temp\v2jt51bjog0i.exe
uRun: [k2z5sfpxugy5pfurdbuwahgdzmnnfpobxn3w1srqt8gbro3] c:\docume~1\admin\locals~1\temp\q82xam2a.exe
uRun: [jnbiu5b7ztcx05foah] c:\docume~1\admin\locals~1\temp\r5q3tax.exe
uRun: [zigpcc5i9ezsv3e9tbwxez7jh1qsae] c:\docume~1\admin\locals~1\temp\kb2l0f8x.exe
uRun: [m07o691tk3cwm18l7da731yp7xpa0bybp8hzjerzwskp2i4a] c:\docume~1\admin\locals~1\temp\jwlntzcjvb.exe
uRun: [aw794q76pg9czt3rke7m8] c:\docume~1\admin\locals~1\temp\tbfzml979oc.exe
uRun: [doask60736u0k16dwg0o538drsmgqtny32u4ynk7] c:\docume~1\admin\locals~1\temp\b5dvh01.exe
uRun: [rx3c8f1s8wz] c:\docume~1\admin\locals~1\temp\prm1z6kq5.exe
uRun: [zrolglhgr] c:\docume~1\admin\locals~1\temp\cyb9fi.exe
uRun: [wkd0b8eq6qjxg7fwk8ma0krz015rytbicpy2ig] c:\docume~1\admin\locals~1\temp\rwv763mtxua.exe
uRun: [hdq83899vhk2s7kqu14rrfx5jfzqltj] c:\docume~1\admin\locals~1\temp\dujrabdbk6b2.exe
uRun: [f262q7qgcrj52f0fws] c:\docume~1\admin\locals~1\temp\k2sfrgikxue6.exe
uRun: [bluv6oj5qnk9] c:\docume~1\admin\locals~1\temp\wvc6rz.exe
uRun: [hz21aqwfq8bphogcvry32f2g2fmgk69n8m] c:\docume~1\admin\locals~1\temp\s605ek64yo5h.exe
uRun: [u6juupo458d54n4uidvegm9hs8rv6hmmpdc4a25h0pvb] c:\docume~1\admin\locals~1\temp\r1eawka7gu.exe
uRun: [d858yecqs66tc3tb6cbrec505n8x5sepdn6oxexhlbwp9d3m] c:\docume~1\admin\locals~1\temp\c9gaiw7juge.exe
uRun: [t0jrs59kr9e9m0dzu] c:\docume~1\admin\locals~1\temp\xkidnk.exe
uRun: [q3gww5fs3m74vz4gbf5] c:\docume~1\admin\locals~1\temp\my3p8fxv1.exe
uRun: [sw0d1zjq04uuuw12itg0a3vhj] c:\docume~1\admin\locals~1\temp\ebaq73omk.exe
uRun: [ux6abkcglk5a3xkq263thv2yunkuonboc46dfh06] c:\docume~1\admin\locals~1\temp\mp5c7d7.exe
uRun: [vyfpqgh2pdk6ad7k63u2d71qqhkfnshw0d3kxfpp350qli58] c:\docume~1\admin\locals~1\temp\frff7rj7.exe
uRun: [tzpzbcrozhsqeg] c:\docume~1\admin\locals~1\temp\i1tiw70oil7m.exe
uRun: [borebid6fm5duv7sml7jisntfc6plm92pyf5gxfjhgcqga2k] c:\docume~1\admin\locals~1\temp\mq509m.exe
uRun: [n8y8mkews80y8232yiwv8ef] c:\docume~1\admin\locals~1\temp\fi026p.exe
uRun: [zugy52gyciuq4g6her0yh39v3t9h0edi90vwo2] c:\docume~1\admin\locals~1\temp\by742r41lso.exe
uRun: [hmvqrkkn749tbge2d3k6dutih] c:\docume~1\admin\locals~1\temp\kciyyz0.exe
uRun: [asjx73fc36cuo7foghus2jj0tw2htl1mdw] c:\docume~1\admin\locals~1\temp\sgbezu9.exe
uRun: [bbcee9d9mx5jkhmnbnb] c:\docume~1\admin\locals~1\temp\tvbc6a51gs0yf.exe
uRun: [jcykhssi6wjq3pqj64y5d3zqzv48qp3knm] c:\docume~1\admin\locals~1\temp\sqpy5aq4yys.exe
uRun: [o7gudzvgdvyp4wcglaloqchsy] c:\docume~1\admin\locals~1\temp\cd8jnl.exe
uRun: [m14zlsk5se1k6xt1hxl73nreflhj924] c:\docume~1\admin\locals~1\temp\cn3mt1wj0m.exe
uRun: [jisglo29phptfir0hrzl5zrm3n7z3istt30ok80y7zxg64] c:\docume~1\admin\locals~1\temp\qgo9yq84m.exe
uRun: [h8wf5ve9i2nwy7vn4g67j3topb67hmcn8yhc7] c:\docume~1\admin\locals~1\temp\m24iw5mi4tfeh.exe
uRun: [headz3t5jucok06] c:\docume~1\admin\locals~1\temp\twsjpjbgk58g.exe
uRun: [ify0nm3ucpokxvp] c:\docume~1\admin\locals~1\temp\trg4zfq.exe
uRun: [eq5ryxwqbnr1eghnkzzahwbahuf78r7bngooqgjxhg84] c:\docume~1\admin\locals~1\temp\shb2ik.exe
uRun: [dehvcg86gxhk8s7htq69cfe] c:\docume~1\admin\locals~1\temp\b5njzcp31bj.exe
uRun: [ri3hnffsi6upk99k03071u7l3] c:\docume~1\admin\locals~1\temp\wgt1y0.exe
uRun: [uf5knkf141u146rmj] c:\docume~1\admin\locals~1\temp\ocwrtj.exe
uRun: [uiyse5ergc67srbv8umtstv13bu2ahf6] c:\docume~1\admin\locals~1\temp\p31pkjw.exe
uRun: [ezcj14no4it] c:\docume~1\admin\locals~1\temp\kj5x5jxab.exe
uRun: [o0r3ljotgd9zw5i] c:\docume~1\admin\locals~1\temp\vh23qqly766ay.exe
uRun: [sqvzi8h02xhehvm5] c:\docume~1\admin\locals~1\temp\lzm2v8.exe
uRun: [m7b2omumotr0t0nrtmzhwqce4epo31bqc6jwwb8wbm3au] c:\docume~1\admin\locals~1\temp\retmhns.exe
uRun: [z67iv79kbw3yjckctq4jrum1ftb6dwjrsqpgwaa1wh] c:\docume~1\admin\locals~1\temp\soyk8ncf.exe
uRun: [wkcm9d2ctcxm65p7uzpqu6fjjbo6syu32jz1b90] c:\docume~1\admin\locals~1\temp\fwnz7pqk31q87.exe
uRun: [nqb3i5cktfrx7] c:\docume~1\admin\locals~1\temp\bydltr6hz.exe
uRun: [dpgsl2ut4k5sav4] c:\docume~1\admin\locals~1\temp\mqyozrqg.exe
uRun: [vhuiosyw7f9hkqy8udtv1i7ywgk76b26t8ozokel1] c:\docume~1\admin\locals~1\temp\rpbg4gc.exe
uRun: [cl26x67gh9g2kr8npz5q16nbulfn9a3crn75u4ugka9wob72] c:\docume~1\admin\locals~1\temp\pbovtczj.exe
uRun: [zxcs5qwpvm4tuljdkbxw6y9k4j0nxt] c:\docume~1\admin\locals~1\temp\j8ps5tq.exe
uRun: [elpwm21r9t2m0fjhha5fqrexj8t6yxzb] c:\docume~1\admin\locals~1\temp\u13eh0stgllq.exe
uRun: [dquarhgh35o5feg086] c:\docume~1\admin\locals~1\temp\c9m89gqz9oog.exe
uRun: [gb5cmgdnqiy6f5a75nxo82cwibupwo] c:\docume~1\admin\locals~1\temp\bvygkwa23rys1.exe
uRun: [h5qa0f0dpwvsmjlx68uwl8ggonack] c:\docume~1\admin\locals~1\temp\tr50j11tmlrl2.exe
uRun: [cf0neh7osr9u1lldn5noy561da9r5yziao2fg0gci0dzqzm2] c:\docume~1\admin\locals~1\temp\wge74vnorxwt.exe
uRun: [gsnyfkahfky3ati5g63yyjcjumgfl3fvij0ls4yjk73kcb] c:\docume~1\admin\locals~1\temp\azay3yld2xgaj.exe
uRun: [lvj1x2hi03] c:\docume~1\admin\locals~1\temp\ur8bs3bc.exe
uRun: [hqi0mpnv9rjy4p] c:\docume~1\admin\locals~1\temp\qgu9p7a.exe
uRun: [hgrghk0gakf7vkn421hgnyec] c:\docume~1\admin\locals~1\temp\twh0g0dwfr.exe
uRun: [g09r00i2jfd19n4s8p2] c:\docume~1\admin\locals~1\temp\leeoy4lvofd.exe
uRun: [h3vqycvdqvi9f4khpew4ekeojutg4lb0jjw] c:\docume~1\admin\locals~1\temp\zvlrqag8d98dt.exe
uRun: [n2tbakkwlid50qugi16o7sly8trdvskyosoyxu6djruoa79y] c:\docume~1\admin\locals~1\temp\myy69w1aam61n.exe
uRun: [nrn1im6zbzumruas68lullfvjfoe4n54ufuocrbh6m627] c:\docume~1\admin\locals~1\temp\o86fsfclt.exe
uRun: [j9py3jz64146djuthovrwcvgturymdmujs9eovtzaqr3an7dx] c:\docume~1\admin\locals~1\temp\qdjm3u.exe
uRun: [m5mol93cbk2rojazuvlsfquyzgpktk] c:\docume~1\admin\locals~1\temp\h0lh3w.exe
uRun: [t5lx8qlc2500spi25] c:\docume~1\admin\locals~1\temp\ab9g9hutigyw.exe
uRun: [fud4wk0sq8vu8yihweq36rdnru0l0kjoaxybx] c:\docume~1\admin\locals~1\temp\a2b3pf441z.exe
uRun: [bjo1lng8o8445s9h2] c:\docume~1\admin\locals~1\temp\kcdwgx4ceu5.exe
uRun: [nuj21ri6y4fui37eye9v8ezm47m3xidt6vdx7qoh42] c:\docume~1\admin\locals~1\temp\w51dd7q18krou.exe
uRun: [t386vi53xiu5j0nt85s6ykkzovtl1k6022fxhnxn52dqa1y] c:\docume~1\admin\locals~1\temp\rb3hisyou.exe
uRun: [yl7cxbdwys2freqf6zkrgvv22dgu6vsirc10k2zatl3l2rsqv] c:\docume~1\admin\locals~1\temp\trbhai3s07f.exe
uRun: [rtdsl5oyzxtvwv49mvz] c:\docume~1\admin\locals~1\temp\t684pf.exe
uRun: [bfkvxrsumx6gb4tlm0hs92nf8tlftftu] c:\docume~1\admin\locals~1\temp\hdknsomjp1xp.exe
uRun: [z0wa60imh0lstc66pd8li71z7wkduqbnpja2ly9y2ie] c:\docume~1\admin\locals~1\temp\jeejolc6rh1.exe
uRun: [okd1kvruy5hgh8slg037bxdihee0zdhf0myf] c:\docume~1\admin\locals~1\temp\eqfeoxs6.exe
uRun: [al77pe36xdotenbe2tesvcl3y63rehxuvoqqpt5lh6f4drtg7] c:\docume~1\admin\locals~1\temp\ecyyxex.exe
uRun: [jxam81tp7aodausyik3k] c:\docume~1\admin\locals~1\temp\qf8jof83mlkx.exe
uRun: [r5kn77wq37lvukm5bhjv6zqhv0myvc8tsh1a1xn] c:\docume~1\admin\locals~1\temp\p53lgyoblrp.exe
uRun: [ahulnsq0myq5vco0s05] c:\docume~1\admin\locals~1\temp\ytw2eqyt.exe
uRun: [wt454g10uhh7weqjiqjj] c:\docume~1\admin\locals~1\temp\qp33dvp3.exe
uRun: [q4z8ps4crvd5uhqbe2pb1er7hysaovudc2qtm6n49a2rlo] c:\docume~1\admin\locals~1\temp\dievxjhut4.exe
uRun: [lgroyxvqiwc4s6owqgk27jit21l73] c:\docume~1\admin\locals~1\temp\orjued2.exe
uRun: [emyvxxqwxyf55xpzaud7wcy85t81zxhqwrbbrd] c:\docume~1\admin\locals~1\temp\tvcay8b.exe
uRun: [SpybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe
uRun: [k2h34uolifjw70tdjl5947bkuqv8qn] c:\docume~1\admin\locals~1\temp\pynoalny7ri0.exe
uRun: [cmpu3wbdvttezls6b4e11n0v2a7390vj2k1hga95t] c:\docume~1\admin\locals~1\temp\o7iq243n6xn.exe
uRun: [opxjucw6dy7pe7dsvza2bibmxl8ndqah6od9oi657] c:\docume~1\admin\locals~1\temp\dkwubrnpw405j.exe
uRun: [g7ffci169nul0woqeri0hucfmcumqfi8d9vjc35u16c] c:\docume~1\admin\locals~1\temp\i4jnelun0m.exe
uRun: [zqetwlostgbwyyt] c:\docume~1\admin\locals~1\temp\b1x9k5yh3.exe
uRun: [e1u35q21bko314wcvg7bp1ci871mjecse15p3zci] c:\docume~1\admin\locals~1\temp\eqi2o68.exe
uRun: [x5g8aru1j7z9zllc5sci0lqoooblxkmc77cumcoot] c:\docume~1\admin\locals~1\temp\y8m69kdn2b.exe
uRun: [wsjg62dcivcfptykh6863h0zbi34xijxet1ymflcjh8p2w0cxe] c:\docume~1\admin\locals~1\temp\ov589oh0tt2la.exe
uRun: [xm4e310lhss1f79rir5eg44jhujrl4wjsu46afickczt8ytju] c:\docume~1\admin\locals~1\temp\grc98crrcneeu.exe
uRun: [p1d3iq9w2rcd6xvd8t59aodr5igxybbbeqdkznw9udm2j7j] c:\docume~1\admin\locals~1\temp\tui4yg0ijnb.exe
uRun: [i3475d21zlrn7pf5artad5y0olg49n] c:\docume~1\admin\locals~1\temp\fib2f8aj.exe
uRun: [w2rbq43jwm6aj3rcv2075s9am3vaf1dfvw2] c:\docume~1\admin\locals~1\temp\l08sw011l.exe
uRun: [h36t4sqtsutt7g3ji6vytp8g08nw63hyhu5fnly] c:\docume~1\admin\locals~1\temp\khoy4h.exe
uRun: [dcjx2qcgv8t63i39a0e1iwj41] c:\docume~1\admin\locals~1\temp\o67javg7x6.exe
uRun: [lqmbdqfbxxlm84lsbcnjdkgxk] c:\docume~1\admin\locals~1\temp\zp72xmi00o3.exe
uRun: [ngam7xyjlsb8h1wjl1se1mjze3k97dhe2f6ksz] c:\docume~1\admin\locals~1\temp\l9hn76cj.exe
uRun: [jsknol9njpavq0ag7866864wmgqdrjtu639ee9u] c:\docume~1\admin\locals~1\temp\d5oonb3a.exe
uRun: [zwrs3f6x59ovj8] c:\docume~1\admin\locals~1\temp\o7o7tl57r.exe
uRun: [vq34a1oumhbn6n] c:\docume~1\admin\locals~1\temp\le07xnh.exe
uRun: [fed8zzsbbxde59ka3dro9pya4dg1uvwbl2w637] c:\docume~1\admin\locals~1\temp\k4v9p6.exe
uRun: [xk8mh14hni8cjn4vn8qk] c:\docume~1\admin\locals~1\temp\zmsxor5.exe
uRun: [otff8ubu6nkvw] c:\docume~1\admin\locals~1\temp\u2wosanli.exe
uRun: [u0h9hl3pomjg3ji132t3i9rsgn4dospl23jmk510a] c:\docume~1\admin\locals~1\temp\kgdrcp6ldfq2f.exe
uRun: [ffskq1w181w6x6hdbvwuyxbfbknqw7c4smqbqo71u0] c:\docume~1\admin\locals~1\temp\j1dto9a.exe
uRun: [ieix5ii4o0x05b15n5rlgkp7ca01igapehjzwey0gw00qbm7c] c:\docume~1\admin\locals~1\temp\fqyro1db4.exe
uRun: [qjkb5hbzt6207yxvejzv6d] c:\docume~1\admin\locals~1\temp\lf0ezw.exe
uRun: [rt07mrtv4oe9iaq44099paiddkz0j] c:\docume~1\admin\locals~1\temp\hx4bj2ejcgzp.exe
uRun: [tb558zg8mrcreblsmtgmm8qo6e9rk2h6qrjdn] c:\docume~1\admin\locals~1\temp\cm3fas74w9c.exe
uRun: [ar4ooi0flpezfy55x7pawxcde7jfvi7giu614hxi5r] c:\docume~1\admin\locals~1\temp\v53lko.exe
uRun: [p9n84o1845rfslt7s4p1b6vevq10paoa1zkq4mvdfle0b3ix] c:\docume~1\admin\locals~1\temp\yow1apj7ka4o.exe
uRun: [li0ukza6l4joetjrz47] c:\docume~1\admin\locals~1\temp\rgr37sin4yyz.exe
uRun: [qgnhd5fhjeda8c] c:\docume~1\admin\locals~1\temp\rhoavn.exe
uRun: [pinq8nxfsr4jh0wvs2hxr2r4] c:\docume~1\admin\locals~1\temp\z0yupa.exe
uRun: [y9m1ueubiktevolnf] c:\docume~1\admin\locals~1\temp\c1v1u5tf.exe
uRun: [euo5rmkhk1olydnua5] c:\docume~1\admin\locals~1\temp\zl1qadxsphu.exe
uRun: [puviiibjfrp4mj] c:\docume~1\admin\locals~1\temp\qd9n6vcpq0iki.exe
uRun: [kka1b2whgsd80f6fbhwx1s5x5ykmmeown9s5] c:\docume~1\admin\locals~1\temp\an8zj1gau.exe
uRun: [h5u2pq3ry5q9jab555yifycoanw967] c:\docume~1\admin\locals~1\temp\lba2f9nhx.exe
uRun: [uxhnvinvvwsfpp4j8u] c:\docume~1\admin\locals~1\temp\h1cohawhmp.exe
uRun: [rpmt67ba355] c:\docume~1\admin\locals~1\temp\mqbh03yijdja.exe
uRun: [nlvh55px3yihelgsxlhsol9] c:\docume~1\admin\locals~1\temp\llcth8.exe
uRun: [u8zcrqgeh8tvk1oxsjib6718vugjt35pm3693d] c:\docume~1\admin\locals~1\temp\n4vrjok8.exe
uRun: [d49r99or3tr] c:\docume~1\admin\locals~1\temp\btu13a13gv.exe
uRun: [vf9j9b98p1kixxkuy6wkofcl] c:\docume~1\admin\locals~1\temp\i6ijw5q1w.exe
uRun: [zztioftlya1m7u8hkd1v1qbd5yqkci] c:\docume~1\admin\locals~1\temp\edkoy6z1lb.exe
uRun: [xe5mq4a5qubonlw065uh2qq0f9p6qxx5azz3t] c:\docume~1\admin\locals~1\temp\l1q0vu8jd.exe
uRun: [m2xkymdh8v8heh2uv6rb5gcxhg7] c:\docume~1\admin\locals~1\temp\l55tnytdu8ud.exe
uRun: [ejueer5lx] c:\docume~1\admin\locals~1\temp\yf450lef.exe
uRun: [yev7ebikf6fptq5ku6j1rq882ylrtgfsebaigiz96pdxea8n1] c:\docume~1\admin\locals~1\temp\h7vf9hqa.exe
uRun: [imqjghhsmij2b5bep5ntho9333k0gu1fmjwlzol] c:\docume~1\admin\locals~1\temp\ve7yvq.exe
uRun: [zke4b759x1] c:\docume~1\admin\locals~1\temp\w5cw37o.exe
uRun: [f8acjykm336rl] c:\docume~1\admin\locals~1\temp\nsi998y0o3.exe
uRun: [xzekzwjjh0y629f1vhj2rvc2ifybrr2gsycskwxmm46] c:\docume~1\admin\locals~1\temp\m1dbirepn.exe
uRun: [mbb9o5u4gxb0bu2581l29x9mxs4cc1pvgawo2] c:\docume~1\admin\locals~1\temp\ygkc5zo7al.exe
uRun: [a5f36zzmbncgzhh9jtyv] c:\docume~1\admin\locals~1\temp\ntixshnws.exe
uRun: [d9oolcpue4m80ijgit7m34k4gkr2zlzg3] c:\docume~1\admin\locals~1\temp\q4hrfa7g4.exe
uRun: [hc9meyx78lwqytw7f2t07ceknwz6b9e7ficd8yytvcfvr] c:\docume~1\admin\locals~1\temp\awvtukpyp.exe
uRun: [zjguzmcpgpa9bvs46iu0nbz9h6se1lmt2i1t6] c:\docume~1\admin\locals~1\temp\mp0a8ub2tmg.exe
uRun: [fj859nt9bm9hzfg2p7itn8hctqvm5xf3rfzruev] c:\docume~1\admin\locals~1\temp\i0osvfy76.exe
uRun: [kyi5epng5zmpl0otskgm4qgpvusskc9o4ept9ivbtvjj7ufgh5] c:\docume~1\admin\locals~1\temp\st648ljsrn29e.exe
uRun: [qul128owywpmats8l4pxjbk7dhbiau3ihukybeimogq00pyic] c:\docume~1\admin\locals~1\temp\kbw8x7yxahx6.exe
uRun: [riw505nj7vmjwj6jb5tur5qbxnnyeipv] c:\docume~1\admin\locals~1\temp\c7k9wcpotb9z.exe
uRun: [y2zm93m3rinom3kf6rj57lzm836gdk9d5x10wm0u7plqrm737a] c:\docume~1\admin\locals~1\temp\rkyd5z.exe
uRun: [tizpmqwp6cq64c4s0tml9fygl6kzjuakb78o2nqod] c:\docume~1\admin\locals~1\temp\qbx6cvsik.exe
uRun: [iqyugld6z58t654nnawry9s7xlpmdsef1suycx3] c:\docume~1\admin\locals~1\temp\n93sjmrhftsbv.exe
uRun: [ia5o0ig3jmnb2pvir4wlty9sdnp2k926v32vg0ew47dx8] c:\docume~1\admin\locals~1\temp\icna1h7n.exe
uRun: [kzckgx5bqgplk8k9986hsujah5xsf] c:\docume~1\admin\locals~1\temp\enbsol.exe
uRun: [o3pql21cled] c:\docume~1\admin\locals~1\temp\zztnoih6n1s.exe
uRun: [wdpi4ro2pva1zolud2fx8s9f9dl8h158piln9j2wog6y6lwik] c:\docume~1\admin\locals~1\temp\r7oo7o.exe
uRun: [k6il3iaghsul47ih4xisb] c:\docume~1\admin\locals~1\temp\dipe62feyic5.exe
uRun: [wqv502nkb7j] c:\docume~1\admin\locals~1\temp\ii61to.exe
uRun: [t99p2llpr5rfg8p1whqzq9zj] c:\docume~1\admin\locals~1\temp\smpmsi7vz.exe
uRun: [hd5r2klbfm9wud6htwjodfd9kwbastur0l1a15z9lm9j] c:\docume~1\admin\locals~1\temp\t16kgyk.exe
uRun: [xjmtsy692t0zhsrw7mxmyv089485v] c:\docume~1\admin\locals~1\temp\s1mq7wtqbjka.exe
uRun: [nnahrydcv] c:\docume~1\admin\locals~1\temp\ly0cdgx3vq1.exe
uRun: [y6t0a2h4amc7asyve99xxxsxlpva9ea] c:\docume~1\admin\locals~1\temp\ixyndk4royj.exe
uRun: [hz4t0yy8cmkp7fppe02cbtm8eucm7heidscsl9t] c:\docume~1\admin\locals~1\temp\pw58fwh34.exe
uRun: [peh20jfrc2ivg0u] c:\docume~1\admin\locals~1\temp\fepokecpng.exe
uRun: [bb60h7r9lexo3h] c:\docume~1\admin\locals~1\temp\mnrcs66iwyha.exe
uRun: [anvwjasmvf08yr32jn23yvtg36l4og] c:\docume~1\admin\locals~1\temp\ua3st1frdn5h.exe
uRun: [o5ifsr76esn22jyzq0ikqtbgv] c:\docume~1\admin\locals~1\temp\et00797kyb.exe
uRun: [y3ie170gvwwer2657rzvkr60lvnlueob75pepz3mk9omdlg1j] c:\docume~1\admin\locals~1\temp\iivikokflhaz.exe
uRun: [rrhth7ryjot52ac6466chl3z] c:\docume~1\admin\locals~1\temp\h3vkdp.exe
uRun: [cbomihb63ba5wcvgt7o91xmchvfrn] c:\docume~1\admin\locals~1\temp\iuji468.exe
uRun: [oxjdcoygqtapwd3a08uz2yskoa168hnikw4] c:\docume~1\admin\locals~1\temp\ly6c4gzj9.exe
uRun: [kbnvv6so55ak40w9970owpdh1sd7x6dncs1] c:\docume~1\admin\locals~1\temp\riwgzcx0v.exe
uRun: [rq6bkh0yy1v4dyu2jr8in] c:\docume~1\admin\locals~1\temp\bb78j0pr9ic.exe
uRun: [rh95t4o7nbimkqyht6mfzax8dul736wrd6scnf61lo] c:\docume~1\admin\locals~1\temp\hbu4oxviw61bi.exe
uRun: [k28gmqdmxmlst6] c:\docume~1\admin\locals~1\temp\s9yuj3ch17y.exe
uRun: [wudun6mz3m8vmdhb] c:\docume~1\admin\locals~1\temp\v5chyh.exe
uRun: [pjihnryhyio4n5amao65ngpsnngamytgbzdxlzp8004dv4k] c:\docume~1\admin\locals~1\temp\qzqljk1.exe
uRun: [dv208jsol71miolwqzb29hridy95] c:\docume~1\admin\locals~1\temp\kw7i2h05w.exe
uRun: [xuxp2mgqkcb0lghsj9u9jqy79oh9kklz1kvr39aakrc6r7cw7g] c:\docume~1\admin\locals~1\temp\xubaht0d.exe
uRun: [zc3pdqxkvhp8cbd7ejas0x0b1qhao5ejs857upls5hpwcqj] c:\docume~1\admin\locals~1\temp\uxbyoma9.exe
uRun: [e9xoajg4oltt3esr42mr3p5t36l4ravgxc38l] c:\docume~1\admin\locals~1\temp\fe849ad7v3np.exe
uRun: [x7fzv8907tl08u] c:\docume~1\admin\locals~1\temp\mdfps57jbf.exe
uRun: [lbeiu2hf2tg8v43mfp3z] c:\docume~1\admin\locals~1\temp\px5tnio0gr.exe
uRun: [ddvt9dn4xi3fiwq5iq6gxyoh51zk1w4akd2ccrs] c:\docume~1\admin\locals~1\temp\oiovg2smmr4h.exe
uRun: [htrzv7zi36f5uq4f3t83rc9tyrb1coam9wmvu7p09bzs4x53] c:\docume~1\admin\locals~1\temp\h50drehwr48rv.exe
uRun: [a57qtddbo0256hfxzaibsyvx31pl3n7x] c:\docume~1\admin\locals~1\temp\ku9kr1p0bax6.exe
uRun: [v3o1wa1vo6b3cyh188] c:\docume~1\admin\locals~1\temp\cqgl76grupzu.exe
uRun: [mv6z5zgxqkgpbpgt90r] c:\docume~1\admin\locals~1\temp\f56u5a.exe
uRun: [qxosansa18t6zsn4bp] c:\docume~1\admin\locals~1\temp\ys67t8do.exe
uRun: [wnt22pxo2p24w1h6cpp7s7qamwgbxw9] c:\docume~1\admin\locals~1\temp\emrxu1bm5g1j.exe
uRun: [pk46bl3zjfp081al6] c:\docume~1\admin\locals~1\temp\g7d3ef9gjwci.exe
uRun: [spub39hg1rs5lq5x9k9wx4t] c:\docume~1\admin\locals~1\temp\nf6ff55o8to2d.exe
uRun: [ueqd6ru72dc0evu78gcokypf] c:\docume~1\admin\locals~1\temp\vjzez0expzcsc.exe
uRun: [xvuqsksuervbf] c:\docume~1\admin\locals~1\temp\cjm6nqi1h0b22.exe
uRun: [ooc16v92dvivxwn5sar9iwfc] c:\docume~1\admin\locals~1\temp\hmif27himhz.exe
uRun: [a0690gm812m5ful9gl] c:\docume~1\admin\locals~1\temp\xzqerqj.exe
uRun: [bqy5nk19zs4yqtgpmj86od8dc2nero072h] c:\docume~1\admin\locals~1\temp\sxuteiqg.exe
uRun: [zany8eqg2r5an6tsc7qanahwaon] c:\docume~1\admin\locals~1\temp\ifuso5pf2vb2.exe
uRun: [wm6r3fxl4u] c:\docume~1\admin\locals~1\temp\u6fbzoy7.exe
uRun: [xov8ryvtpc420c] c:\docume~1\admin\locals~1\temp\wv5xscz.exe
uRun: [vv4ko8xxs7fw2ornqcazh00kcj1p89] c:\docume~1\admin\locals~1\temp\oja2vx4ut2su.exe
uRun: [ap8vo91dcamsrt] c:\docume~1\admin\locals~1\temp\zxyllpuk.exe
uRun: [czu15e0qs96kzl40enxfsaagcoxpddj9im] c:\docume~1\admin\locals~1\temp\m3qmd6s1dvid.exe
uRun: [aaic0rm63uozfhl1hh1ghs2rnllk86d] c:\docume~1\admin\locals~1\temp\t3xvyrb9x.exe
uRun: [m33q6sznz04bwnvjs5ndmfknggvie2fdr8jvvc2v8gd63nf] c:\docume~1\admin\locals~1\temp\t9wmc3qfs9.exe
uRun: [f9yxql1vfh6ncsg6kattrybg3v43mxo5fey3tw5x] c:\docume~1\admin\locals~1\temp\kvmsu9q6h3u.exe
uRun: [irclxvj8s3fd83zrys3z] c:\docume~1\admin\locals~1\temp\vjovqhgw3lh.exe
uRun: [h80w1tg7fcea58p5qzn3vvoyfwtsc6pf3kwq7ibgqp21hu3z] c:\docume~1\admin\locals~1\temp\nfvfpm7nmft.exe
uRun: [pc5xuvee085acrgsj4gj9pfy2jywgeif] c:\docume~1\admin\locals~1\temp\yug5kb7m8.exe
uRun: [h13c60c5784xkptd75ni6w304jgtf75g4f3nje5kkxoz0hd7] c:\docume~1\admin\locals~1\temp\bis50a.exe
uRun: [a72so372b0] c:\docume~1\admin\locals~1\temp\wtm9ozodel.exe
uRun: [mlvxf0bgviw44s0b14n2m1m1agne1lwlqgnkofvjtvp36y9] c:\docume~1\admin\locals~1\temp\m1bonkl.exe
uRun: [maoatgm9q3u7d6p81h2cxpx4a4chh56bp] c:\docume~1\admin\locals~1\temp\dnhuacpm1ro.exe
uRun: [beob7h8zwv5janfxlbhcz8hi] c:\docume~1\admin\locals~1\temp\x3b7tbnb.exe
uRun: [r56ei6icx7s0b5wxqirqttc6fp2gmqy2ihcwmg] c:\docume~1\admin\locals~1\temp\qqn60gydr.exe
uRun: [tla6h2dekug1yfp4j2cuwz] c:\docume~1\admin\locals~1\temp\uanoxd.exe
uRun: [g8fu3rr2qqczrkhs8bvplapzr4gydsr88hn7gvf3q887jhzd] c:\docume~1\admin\locals~1\temp\kxjn1dpuxm22.exe
uRun: [uhucqouyztibs5cfq33id4wpdp58] c:\docume~1\admin\locals~1\temp\yvgt31d1.exe
uRun: [mpnz2eyxc21zroo87hxjsarryjer8] c:\docume~1\admin\locals~1\temp\gjpgsrwjm5.exe
uRun: [ccs4q8e9ueu1vr241z6sn2633dducf] c:\docume~1\admin\locals~1\temp\qn81rl2yvnq7w.exe
uRun: [vcwd1rg8x0akt37419jt3g63g8zny7oij2] c:\docume~1\admin\locals~1\temp\x6vtywwge9vey.exe
uRun: [mcovtlf9995p8q9hgpb6kc0rk4i0fdyj] c:\docume~1\admin\locals~1\temp\wdxf0t.exe
uRun: [neg9xytxd032297fz5ealxg66tsungfa9ruxypo28btd] c:\docume~1\admin\locals~1\temp\hfxyn3l.exe
uRun: [mh7d13kchylrsh3hie1ud] c:\docume~1\admin\locals~1\temp\zb4im8r.exe
uRun: [gmu4k5l9snnlye8g9cqhwsamj78xtgnb2l1bc7q3zj] c:\docume~1\admin\locals~1\temp\vmsh9cerbb0oa.exe
uRun: [cuxi15t97v0cvpl945riipylwnanad2nqm31c1ua2va] c:\docume~1\admin\locals~1\temp\c0dp76.exe
uRun: [q1oorpritfy0ao35f3ge28e6enph0mz6cx6d9t7wqv] c:\docume~1\admin\locals~1\temp\bmtyo08cli.exe
uRun: [o952e1sgbkuwqagm4c0hth1w17ilmo25mic0] c:\docume~1\admin\locals~1\temp\tz7jx4beup8a.exe
uRun: [ytayax7kyefl9ntz3] c:\docume~1\admin\locals~1\temp\l59n28j5.exe
uRun: [u8t0y53eghuzujffs3g6d2908sdrqlsbl04x86yj3e7kl3kk] c:\docume~1\admin\locals~1\temp\ebl59uu7q.exe
uRun: [guveoyx3s5wb] c:\docume~1\admin\locals~1\temp\jc8yco.exe
uRun: [tld8bribqt0sedfi77qzlpcejnofu5cosbkr9tcm] c:\docume~1\admin\locals~1\temp\nkkgp3eh.exe
uRun: [k8re4dtap9ucgbieha7dc7w9k29bgx4j8xh] c:\docume~1\admin\locals~1\temp\krpw0nx0ovv6.exe
uRun: [grdzaxxurhghv2ov3f] c:\docume~1\admin\locals~1\temp\oz54rr.exe
uRun: [j3ga6gung] c:\docume~1\admin\locals~1\temp\se1vkz6951jd.exe
uRun: [wsyioqdppzrnzva38ekoz1shd] c:\docume~1\admin\locals~1\temp\l6geeg1ch.exe
uRun: [n43fgol2yuf5d8rwna5z46h4d0he07d6ftxz] c:\docume~1\admin\locals~1\temp\qmxuzxowwhcl.exe
uRun: [xn6dr533lj0perd2u2fgxasxovg2s5hgkwxvth2y091o0] c:\docume~1\admin\locals~1\temp\tk4xlrr2r8zpz.exe
uRun: [gkkwjoaqbpvjxby0pp64f3xep3c89apy9p3n92l] c:\docume~1\admin\locals~1\temp\j17p70g.exe
uRun: [encma2qbf2we9] c:\docume~1\admin\locals~1\temp\gdfpo09.exe
uRun: [vzxlmw0wi9ukcfcovye7i1xy] c:\docume~1\admin\locals~1\temp\fe9218.exe
uRun: [vgg7pwl26agnkyir1opoggxr0hcxje7xfh9d5yy4dimv] c:\docume~1\admin\locals~1\temp\bug4xtb4cri.exe
uRun: [vy5pvn4y04djagszwrhapekqwmlxn] c:\docume~1\admin\locals~1\temp\uhs34fm6wfpp.exe
uRun: [q9ixtf8fvus166] c:\docume~1\admin\locals~1\temp\t7n5dy6l9tf.exe
uRun: [sg6kbzdazbixugilotloc6z4iyb6bhkg4wola6] c:\docume~1\admin\locals~1\temp\apuqwaf7u.exe
uRun: [u5ynizyl4bx9vf5gb5vsu48nhhm3fiumcc2] c:\docume~1\admin\locals~1\temp\sxpafguvkl0w.exe
uRun: [mgncwwu7lz4hzpz0g8laefa2jk00y7nkb4r] c:\docume~1\admin\locals~1\temp\t2b5xz.exe
uRun: [hdabj3xsqcuphg1i1p] c:\docume~1\admin\locals~1\temp\s351tb91wa6ne.exe
uRun: [jvakdbbybbghidvi3v12rguvuiiaxgx7] c:\docume~1\admin\locals~1\temp\gfj45isbsy.exe
uRun: [n3sdq2fvftyb2vopjpflcagftb78wevh3ird6j] c:\docume~1\admin\locals~1\temp\s8olj9efwath.exe
uRun: [v1fmqt33s] c:\docume~1\admin\locals~1\temp\dhckj3zr6.exe
uRun: [w83lx3i5emwc21a] c:\docume~1\admin\locals~1\temp\yx98u47gu.exe
uRun: [qgja9py380imxs6s3] c:\docume~1\admin\locals~1\temp\dwaocv09v.exe
uRun: [y7g5xwjlff6ispm0b9i3f0w3s00x] c:\docume~1\admin\locals~1\temp\esh6ttpyb.exe
uRun: [t7xucns6g9tsbkt2] c:\docume~1\admin\locals~1\temp\n4zn5wz.exe
uRun: [n4zskuk8rdscvgf19hbml4dm4cpvikhupfxp] c:\docume~1\admin\locals~1\temp\ext69s.exe
uRun: [k4zmy8caymj26dw605ckt5h] c:\docume~1\admin\locals~1\temp\iqca2idqvs04v.exe
uRun: [nqczy8z8dshd2u1j75ii8ic0sjwuj12j8cqmuofmqexdx3] c:\docume~1\admin\locals~1\temp\ua15yu3kuz.exe
uRun: [rllnpa5xckcnpurorlg73vf9] c:\docume~1\admin\locals~1\temp\n6s061luvnwpq.exe
uRun: [uk08m8p7swrl233twu35iffp6717vtr1u5tb3] c:\docume~1\admin\locals~1\temp\a95f846ws0udk.exe
uRun: [amswunot85sc4x7dvaxcoogl9q7qucbhrjrnilpp7] c:\docume~1\admin\locals~1\temp\m75w2u43pibm.exe
uRun: [ckmnbwn8thw] c:\docume~1\admin\locals~1\temp\aj0zekndl.exe
uRun: [qco1bf4aijooahggm7x041kh6xxg] c:\docume~1\admin\locals~1\temp\twhef9.exe
uRun: [lf6ofim769y6nulpckrj8f2rcl3z3u2gppy] c:\docume~1\admin\locals~1\temp\e30hbh.exe
uRun: [l2ctbg1kl9xesqvft9wuod3] c:\docume~1\admin\locals~1\temp\g46tebv3jol.exe
uRun: [m2oi7142y0y0c45ki2c9cv49cf0kpc5p62hvk] c:\docume~1\admin\locals~1\temp\o8z9f64c0d9.exe
uRun: [b5cyh2zsku6h] c:\docume~1\admin\locals~1\temp\s115j664zxvru.exe
uRun: [ujug1kp20j11b2siq47] c:\docume~1\admin\locals~1\temp\dtvjk04uectro.exe
uRun: [jkauh8mplvprzam] c:\docume~1\admin\locals~1\temp\dkx6jyx5xc3.exe
uRun: [dfvm7p3z8ja8] c:\docume~1\admin\locals~1\temp\jtf0zohfoj.exe
uRun: [s53cphk5y0fe5e5fry0xchk2fyoca5y6l2nd1spg3gr43q] c:\docume~1\admin\locals~1\temp\vm3hwf3jsvlz.exe
uRun: [ah39wu9qoiqygt] c:\docume~1\admin\locals~1\temp\tgylyzndx19c5.exe
uRun: [fvacfc11cfz] c:\docume~1\admin\locals~1\temp\qx55rhz.exe
uRun: [v8u6f1xfc8y6ajmueqpe74ui] c:\docume~1\admin\locals~1\temp\s2xbfe18f.exe
uRun: [ehzp0idyuv4npecsgnorgx7e57] c:\docume~1\admin\locals~1\temp\gftuaqfz.exe
uRun: [kzcrit1w7607kzo8hypfym7i8pwkrz9swrf8] c:\docume~1\admin\locals~1\temp\bpm1yt8p7d.exe
uRun: [x3itftjn555mv8z8z8qc7xmqjpoxowmivgojy61u7mkskk] c:\docume~1\admin\locals~1\temp\nna2l1z7up1.exe
uRun: [u3tdjv7hjoiljcoisfnlbs4n8pe55mv6rmaoja] c:\docume~1\admin\locals~1\temp\x2ey2jnt7kl.exe
uRun: [qpe9vhzda92ch34rxsqialerkq83fga] c:\docume~1\admin\locals~1\temp\m5ei5qqe4.exe
uRun: [rd2p2aejm3pgo4ucd5qek915pp8cd2gpj5yxr] c:\docume~1\admin\locals~1\temp\hlb6grf3s.exe
uRun: [s3zsvcs8yz3uvd3jcdctgo6nnlx9fhnai47bg7] c:\docume~1\admin\locals~1\temp\okirz3s.exe
uRun: [oj4vvdirh7m0j79os212nw3kl2d04ndjdq2] c:\docume~1\admin\locals~1\temp\ob3vyi27r39z7.exe
uRun: [edfl0nojmc31] c:\docume~1\admin\locals~1\temp\r9aykg.exe
uRun: [j6hfdc1oo] c:\docume~1\admin\locals~1\temp\ytjwt0ol8egr.exe
uRun: [qquaocclxh651dm6631qw02bldshkwt5x] c:\docume~1\admin\locals~1\temp\ac918z4.exe
uRun: [hv1sntwxazsmg2ufil8u] c:\docume~1\admin\locals~1\temp\ihzoxp4st.exe
uRun: [t6yzasjfov7h9nl7nr8w] c:\docume~1\admin\locals~1\temp\u4oeg4bql8.exe
uRun: [hrwsw0w5frfuvk0qhdo290jnu] c:\docume~1\admin\locals~1\temp\ew2zvecrnw.exe
uRun: [dkyvkujovozbtjcwvxm6eq9p8epnxvhkxlbv] c:\docume~1\admin\locals~1\temp\w38ufcnj1f.exe
uRun: [dr3mmj608r9dri] c:\docume~1\admin\locals~1\temp\opkb8k.exe
uRun: [dicwqis0gl] c:\docume~1\admin\locals~1\temp\oj7k7u.exe
uRun: [of8anchv76tcg1ehdau6d12qiot871xgliglgygujeasnz5] c:\docume~1\admin\locals~1\temp\k4qmjv9l.exe
uRun: [g9aqbsigp25a6p8] c:\docume~1\admin\locals~1\temp\ob9v8i46mpe.exe
uRun: [nrllpc67zx0jin] c:\docume~1\admin\locals~1\temp\r5kmjtvfv.exe
uRun: [usipqdfe9c4m24lv8g1esfywtdrib7vc95eydebvg4pg6] c:\docume~1\admin\locals~1\temp\bemrrlp8j2c.exe
uRun: [vjn9thgilsc1zj] c:\docume~1\admin\locals~1\temp\uky9yqha3qj3.exe
uRun: [fskevlb0z4jc] c:\docume~1\admin\locals~1\temp\ii5cqf.exe
uRun: [qwvtbix7pi8zy1ng1] c:\docume~1\admin\locals~1\temp\gn1rfsz.exe
uRun: [wj12vsuz416pmomsnl5s532mnsu2lslkyu0t] c:\docume~1\admin\locals~1\temp\dudrjubc63632.exe
uRun: [nxc7fufwifjlndhr5tfs6grnc8va14j5loco8w] c:\docume~1\admin\locals~1\temp\jtay05.exe
uRun: [hexo82d2azo9oqtzsvm0j1f3s06ckpm9yv3w69f1jhnws0o] c:\docume~1\admin\locals~1\temp\rxmx1h.exe
uRun: [nxjn2nx2zwlts62lfqajdxa0s81wmc5ij2csl58dfynw5je8mt] c:\docume~1\admin\locals~1\temp\qs0jjhfpd3xx.exe
uRun: [xw0udjnevm4qswltdt58ltmrn2wa64popwgustl0] c:\docume~1\admin\locals~1\temp\bu02prhiglgob.exe
uRun: [vsbgtxz6ro6opzi7agtk6nhlyp9efxokxer5hlkwt4dzbys98t] c:\docume~1\admin\locals~1\temp\uc0kgegh7.exe
uRun: [wzgw07ec3ztsw0] c:\docume~1\admin\locals~1\temp\psx8rfo6v.exe
uRun: [dy34n69xtdi51yf38ix0bq666sws1zfct037] c:\docume~1\admin\locals~1\temp\bd0na3jpa096.exe
uRun: [bbtz3f6vfr8cyt9am] c:\docume~1\admin\locals~1\temp\ji0dn6r52dpec.exe
uRun: [qpuedjv8nro6] c:\docume~1\admin\locals~1\temp\xvbnnrk7a7hq.exe
uRun: [mo53euydyk5biuprtsf1fvgs] c:\docume~1\admin\locals~1\temp\lo6qzy3h6.exe
uRun: [ira093suteamuai9rpn58zvz5o22wl7djadr5plsi1a] c:\docume~1\admin\locals~1\temp\kyyzdvtyhq.exe
uRun: [zq3zihhtc8cz1guiwyg0b5mwx23q8i788hj1ldoehv3x3wjeu] c:\docume~1\admin\locals~1\temp\ozh0asu.exe
uRun: [df8mzxilgbm8cwuyjqpehige44zsbxz33zr9y0k5p8xaawi1zt] c:\docume~1\admin\locals~1\temp\qs26eo.exe
uRun: [diz4quhuatohpenea3] c:\docume~1\admin\locals~1\temp\tyigsj6.exe
uRun: [z9diwtx1ma7dcst4qp728rpslv65vlf0acttfa572m849] c:\docume~1\admin\locals~1\temp\rpxf7dy.exe
uRun: [sbg1wk6rg5iw78ohuk898ocwnuqa54wzho9698yzjsc7] c:\docume~1\admin\locals~1\temp\k02xuylx436t5.exe
uRun: [jfopk94b1gj39i93aduitnmrtke9gseh5l] c:\docume~1\admin\locals~1\temp\m5u31en.exe
uRun: [t7v4zcs8hokz2b2s4t92u4b1j7] c:\docume~1\admin\locals~1\temp\iqu5ufaml.exe
uRun: [bqfiulkke792p0edqi2nipq75eekfevynk76xpx9vw0e92v8f] c:\docume~1\admin\locals~1\temp\qfshzd.exe
uRun: [nx1lhrqnbn1qwd0uejsefoxbjmg] c:\docume~1\admin\locals~1\temp\bys0mng.exe
uRun: [g2cj2w0db34u0kuj37cewbu1rh06t041w40f7dwlnd1ke51] c:\docume~1\admin\locals~1\temp\wftyv1r20mw.exe
uRun: [dfivx6wrowbdre3bo5q] c:\docume~1\admin\locals~1\temp\kila8drgnp9gl.exe
uRun: [dcssq2m36jxzurfb1no4gccf9wqz6u9n5mh59eugha] c:\docume~1\admin\locals~1\temp\zuq2ay.exe
uRun: [nmy6fsjl3gd0gi7t3xx5zib4d9ng1s9l5gpkhraut5uef] c:\docume~1\admin\locals~1\temp\rlvj05z.exe
uRun: [x6ma8wddbqvc6pt4vifkj16phmz3hb5j0] c:\docume~1\admin\locals~1\temp\zd0i0gkmmy8q.exe
uRun: [nrlj36bryti1w7499agacird6vnf4gdwb4dza1qn165rn5y9] c:\docume~1\admin\locals~1\temp\ob0zupitjgt.exe
uRun: [cyt3db7zv3jj6jqiq60wd] c:\docume~1\admin\locals~1\temp\ht0ylch.exe
uRun: [p3b4isi1hc0s1bvy78f9e1tku8xxkkfgxqn9d4mx] c:\docume~1\admin\locals~1\temp\xbkx9dce.exe
uRun: [lflozxt5f9zfaasecytklltr7uzc7ed01xucj03o6] c:\docume~1\admin\locals~1\temp\p78hpim5.exe
uRun: [dplp55mye1yomllxpwfdr7kbnfvg8rjpg3gmi] c:\docume~1\admin\locals~1\temp\furjpmqimzn.exe
uRun: [f5et0fmsonecbc] c:\docume~1\admin\locals~1\temp\af7r9434a5.exe
uRun: [y4x5pbov6093sn3nlwgyzfolmfha4xnc1] c:\docume~1\admin\locals~1\temp\ijjqaztdrb.exe
uRun: [kjpwo8mu0es0] c:\docume~1\admin\locals~1\temp\koswywexj6a6.exe
uRun: [jeesqb47rwekrakexkilwgzaaukz] c:\docume~1\admin\locals~1\temp\sslvirn60cyw.exe
uRun: [q5cfqt1iru58kxbn79f5vhhfr2s2uptuxkxy3ad4ag] c:\docume~1\admin\locals~1\temp\rsbhx7k.exe
uRun: [ht4qj1ur61yf4gsq3rbnp0o63kbijp6tstmalt9unamlwc5] c:\docume~1\admin\locals~1\temp\ucrollu44.exe
uRun: [yia9bdrb6r5pmfivog349cj1mr8gjf7rtii] c:\docume~1\admin\locals~1\temp\qocddkrit.exe
uRun: [gtn5hkdv52rprm69ym59i277bvdpdvjah4o6jkz1at4sdo] c:\docume~1\admin\locals~1\temp\asvfcvxg2cqr.exe
uRun: [r0y9r0st3zip3soozjnsdsbnz4sy8h] c:\docume~1\admin\locals~1\temp\hwl34of61.exe
uRun: [taiqfbdr0y5y264a6eyzxd8vcawietnkfaca] c:\docume~1\admin\locals~1\temp\zss4kc6xk.exe
uRun: [c208t5rl1c3mzywcq] c:\docume~1\admin\locals~1\temp\t3qhshdw5jk2.exe
uRun: [lneugo1a0xvzpruje] c:\docume~1\admin\locals~1\temp\zcpb87x6w75.exe
uRun: [xlgq1s1kl] c:\docume~1\admin\locals~1\temp\rti89y22.exe
uRun: [hk9hyl8fv0o98lgmxwfprjxh9v29aw1krr51vdfvia50d] c:\docume~1\admin\locals~1\temp\qkh1zfb8cmz.exe
uRun: [p740zl1onpqu8jmig6] c:\docume~1\admin\locals~1\temp\u9tjtqypr70vd.exe
uRun: [cvgrp95kc863qotob5] c:\docume~1\admin\locals~1\temp\pfvnybpx3.exe
uRun: [rdjcfa6cavccl3ds7jx3t46m760] c:\docume~1\admin\locals~1\temp\xojmy5.exe
uRun: [utg9bmejcp6ks2vevdeb1sbov3bumf6t1xybsc23qai6d46] c:\docume~1\admin\locals~1\temp\o1bwfq3blw4r5.exe
uRun: [urpj5uycpfbnx6rjfjmb0q5ppfzriq7gz4ni0fzpqy8nopy] c:\docume~1\admin\locals~1\temp\o6dg578p4wrl.exe
uRun: [qlxae3t5m659alsd1o0x0gycnhtxy7s3l3t] c:\docume~1\admin\locals~1\temp\xp7dad9z.exe
uRun: [vgupgaoxqcozs4h061w3i6a6avht5zw6q] c:\docume~1\admin\locals~1\temp\kxcsv3rh.exe
uRun: [h8l6eqx1187lusfohzaqgh5299rbm3hc6fu612a6tcov0tl] c:\docume~1\admin\locals~1\temp\jn7u437.exe
uRun: [wi3a8gq0f] c:\docume~1\admin\locals~1\temp\qwgjmduak3b.exe
uRun: [z39ppln0nduz1mvevepy5] c:\docume~1\admin\locals~1\temp\jx9y310y4rvdu.exe
uRun: [tacz0fapb0enbb85vhks940wnmt] c:\docume~1\admin\locals~1\temp\ie6nbzqfmx.exe
uRun: [eljd89o0ga4je2e0dx6ibmtuw] c:\docume~1\admin\locals~1\temp\wqkqnps.exe
uRun: [abt4bj8mtnnm8ruvqsacd189tqdtwglak0twnx4iyxlebqvxe8] c:\docume~1\admin\locals~1\temp\aadoa4hp5r.exe
uRun: [nf30mc2i8cw5ii3rwhg13lo7eoqtwsk] c:\docume~1\admin\locals~1\temp\lo17hf.exe
uRun: [txuh05ku1joee5qlqi] c:\docume~1\admin\locals~1\temp\g9hy1xki39hn5.exe
uRun: [smqj36x4258sorye6ep] c:\docume~1\admin\locals~1\temp\odtelstrkf5d4.exe
uRun: [vitkyk9jihnklxnntvyxttumnaviygr89hdj2] c:\docume~1\admin\locals~1\temp\ri5eir5udl.exe
uRun: [oqtfh04h6p2iv7yr6lmww1rffuuuf] c:\docume~1\admin\locals~1\temp\ibri24.exe
uRun: [ca9czyiksufkufphwatjkbwuu34if60j3n1ye8j69kts3] c:\docume~1\admin\locals~1\temp\zshlut8w.exe
uRun: [yezqo53ogn8u6q8u4ix] c:\docume~1\admin\locals~1\temp\gro6d5.exe
uRun: [b2sy1oka96qpotgzo5vua] c:\docume~1\admin\locals~1\temp\iga2slie9t2bo.exe
uRun: [opkl5jcgjuo4gyv] c:\docume~1\admin\locals~1\temp\hwakvohq.exe
uRun: [zsruj2126ibnhqnhgw5umh] c:\docume~1\admin\locals~1\temp\a75mbrxl.exe
uRun: [pv5ev4m05jax73iv72sj3hnupjjh] c:\docume~1\admin\locals~1\temp\ovh5x0.exe
uRun: [enxm0apid24c7xu8d95x0] c:\docume~1\admin\locals~1\temp\zx0okad.exe
uRun: [q8pfzq1mazmj2jtiavt1ifx5myvgn97rej55nh2ha32] c:\docume~1\admin\locals~1\temp\m5pkjcrf5nhn.exe
uRun: [h0eacvhat5yy44] c:\docume~1\admin\locals~1\temp\b8p4mjd0l5.exe
uRun: [ejuoahov14o5oog74x17tefzyrmw08hh7r12ywx] c:\docume~1\admin\locals~1\temp\wjashlqmxoa3a.exe
uRun: [otrxdexpga1jmo5avkrv88g5zmkbxkb] c:\docume~1\admin\locals~1\temp\n1dljaz4p0z5.exe
uRun: [ahch1557rzdr] c:\docume~1\admin\locals~1\temp\p6mr7q.exe
uRun: [htu7ybzcwh8i2mptnntqrfyo1e1jpeluqnaf94i] c:\docume~1\admin\locals~1\temp\pk37y9w.exe
uRun: [a8cs1czbzdlo5em6d1wvgzwffopb9p6o9yrtp14h6shxmxq] c:\docume~1\admin\locals~1\temp\qb85pqgl.exe
uRun: [a3afq6ofrlsujjr64hxmxz0ibm76n1yyl3ngpaey1uu9durrzh] c:\docume~1\admin\locals~1\temp\o6jgfoaoziw.exe
uRun: [qbdsy77mdzc44k7c5pqctm7j64qxi9s3jof71dbcvojfu9s4] c:\docume~1\admin\locals~1\temp\v07y82zmfu.exe
uRun: [u00onv01fwtmzsypjey9blkgjq7] c:\docume~1\admin\locals~1\temp\eojf6u9.exe
uRun: [didpe44aocyx5f91fjfpry526iu] c:\docume~1\admin\locals~1\temp\tfezp0ow62.exe
uRun: [jmd0piftmoecu3s6leipsachesc4tv9kedxgplmqb7rdah] c:\docume~1\admin\locals~1\temp\svvysknjmomsx.exe
uRun: [tbitkjla27] c:\docume~1\admin\locals~1\temp\rmdrzg6s.exe
uRun: [og4e1cb8c9ak] c:\docume~1\admin\locals~1\temp\be8ce9oa.exe
uRun: [lyvah6bj6i7ogxd7ytb7eugbrs3l07kle89x] c:\docume~1\admin\locals~1\temp\y0yzxp5if.exe
uRun: [s1hmieh0t3ivq11wfurth1f474llklrodt1btu6j8w8pjy] c:\docume~1\admin\locals~1\temp\u63eucnu.exe
uRun: [s1x8abjf0ghne8qyv2x4i2aah4bpvvgcqgz5h8yh6z91eg2y] c:\docume~1\admin\locals~1\temp\isckcin0h.exe
uRun: [lvgpx95kvmibo24c7quuks8ys92] c:\docume~1\admin\locals~1\temp\p375fv594p.exe
uRun: [slyfnj2zt8w9d5tvtjwswttqinou8xjjb2nkse5xefpl7skr] c:\docume~1\admin\locals~1\temp\myvmiwt6bjj9h.exe
uRun: [qrwr5hfh3huefbtc57meyyd24y756j0p2umj3ov9iz] c:\docume~1\admin\locals~1\temp\qw50wuw9y.exe
uRun: [d27uo1oa40zfel2ndibye043ggcrj8deo7kxh2xxxbjf3mvmao] c:\docume~1\admin\locals~1\temp\vxscg7.exe
uRun: [wiz0q6pk4tstnssxwibewn3hzaqjuquf1] c:\docume~1\admin\locals~1\temp\lysbqu2nt8.exe
uRun: [n3xtvele23rry5ju54pilhjose4hrkwbeaytsu] c:\docume~1\admin\locals~1\temp\vqnw54kovd.exe
uRun: [y5p0s4pos79xry7] c:\docume~1\admin\locals~1\temp\g4ufvf.exe
uRun: [tuotep6y8w] c:\docume~1\admin\locals~1\temp\nyix5tzcl1tu9.exe
uRun: [fwqp7z4scv1i290ejsfnl6inhq0ghxk1v] c:\docume~1\admin\locals~1\temp\xr0sig3if.exe
uRun: [sa0t8ryb49] c:\docume~1\admin\locals~1\temp\pjlgwigj18q5.exe
uRun: [fl25777ch5vzvvvexpnfafhfg] c:\docume~1\admin\locals~1\temp\jfm66uri15ya.exe
uRun: [lwglye4i3gr2eu7pgha5oehl] c:\docume~1\admin\locals~1\temp\haxhwov.exe
uRun: [op5rx1j0rb8xstygbhf] c:\docume~1\admin\locals~1\temp\abqwdc1vb.exe
uRun: [szkbvv7i3fkvc5c38e9u6v9r83an3] c:\docume~1\admin\locals~1\temp\f058ia.exe
uRun: [k22ygy8fr5udpihcyvariuxyqovnfvkjblon] c:\docume~1\admin\locals~1\temp\qo7be1.exe
uRun: [edx9jpq92d5srpm2ktoqfqefhqrjnp9s89jugrvahq78z458q] c:\docume~1\admin\locals~1\temp\s3in1w.exe
uRun: [wtmebnq8o8b8yqu0g2xq6mq] c:\docume~1\admin\locals~1\temp\x1vc7wkeieri3.exe
uRun: [t3yt0pdnar5y9rxshvzjzc7n59s1f72jvo9lqj] c:\docume~1\admin\locals~1\temp\szwrgac6p.exe
uRun: [dmnbtg0ee0d9ethu6aq5] c:\docume~1\admin\locals~1\temp\dd3a6llwzf2hg.exe
uRun: [vxj7l1q5fn1d3torwbt9hrahb1ye6u8efb5sz2u244d2] c:\docume~1\admin\locals~1\temp\fwtflki2.exe
uRun: [mrcu59rlazf1drsr52772rectl6v0dwrb64] c:\docume~1\admin\locals~1\temp\vetec7h1i9i4.exe
uRun: [lz9bibpwmbzcyrh8f5clueh2e4kuqgvp] c:\docume~1\admin\locals~1\temp\mae4jah9j.exe
uRun: [n8028jk3prgul5t8evct] c:\docume~1\admin\locals~1\temp\ihgqlbqs89.exe
uRun: [t736205r0pib45r5obz69x36edfq7z6ss0ul36fctts0vlmoqr] c:\docume~1\admin\locals~1\temp\ens8sx1usgm.exe
uRun: [m2xldimkr3c7ja35ixpwr9brc3bu85igg74l45hx9m9m6s] c:\docume~1\admin\locals~1\temp\xkzaoitd.exe
uRun: [hlmittautji4rg18i8qxvjpycthbwyon0acvqla29] c:\docume~1\admin\locals~1\temp\e26c7u.exe
uRun: [lqyh7x9wbuqjmgwg51p6u8esmxeoeapt4amf1tf] c:\docume~1\admin\locals~1\temp\hmfz2q.exe
uRun: [nymvz4qt449iofp59wptbdh2xd9xtr4zs6yjk38nyqzqw] c:\docume~1\admin\locals~1\temp\smm2izzr0.exe
uRun: [g7zgljzo7pgkxp92gf3uwrfhz] c:\docume~1\admin\locals~1\temp\g3coaodnp4w.exe
uRun: [vmhufip2a] c:\docume~1\admin\locals~1\temp\z4cn1uc.exe
uRun: [au06yh1qskgfvtq5rphlsynzctv39lt73jlwo3bttyu86j] c:\docume~1\admin\locals~1\temp\g1fa3kxzsl.exe
uRun: [ejwf7glztcxp0x2kgpujiyrdq7] c:\docume~1\admin\locals~1\temp\fteacpmne42l.exe
uRun: [raecce9pdsi8auhnahotyrafs3oh9vmw] c:\docume~1\admin\locals~1\temp\a38qh5lw6.exe
uRun: [hr1lbqd1nj67q32tyr387nwuow18cf3p06pn] c:\docume~1\admin\locals~1\temp\kroi4u.exe
uRun: [kvnf3sr7s0vwm4aeqi1sdmfowuhb6363gyrq8jys0n7yq] c:\docume~1\admin\locals~1\temp\swh5ofzrcga5o.exe
uRun: [ji1kzx1siofoae7m0gab] c:\docume~1\admin\locals~1\temp\z4m3rc0s9sgu5.exe
uRun: [o7kz31yyag] c:\docume~1\admin\locals~1\temp\rr2bzed5iz3ub.exe
uRun: [e6ic6sdfzsli3u7u5w] c:\docume~1\admin\locals~1\temp\y429za9sry.exe
uRun: [r8trcbe9xun6gt3qelhgcjbprv1gij18w8] c:\docume~1\admin\locals~1\temp\iinhxj8zjzo.exe
uRun: [tizghnt2sh35fej9jk0] c:\docume~1\admin\locals~1\temp\rmjrqg.exe
uRun: [i7712uj4b8xw8xn2v2f6mfitt8q9] c:\docume~1\admin\locals~1\temp\ncldsyl.exe
uRun: [dxjph05ukiq8pdb7tdtpapzyynov] c:\docume~1\admin\locals~1\temp\a0dlm54n2t.exe
uRun: [vzf191x18u1tzp26m4ltar2jqz1h] c:\docume~1\admin\locals~1\temp\jo623xe.exe
uRun: [z89v9ywwvnc60w1112j2esp1] c:\docume~1\admin\locals~1\temp\i6aznm5v6vm2a.exe
uRun: [qjksatfuff9qryc4eg3mu16n] c:\docume~1\admin\locals~1\temp\s0szjiwc.exe
uRun: [u5pkozosn0j71718wyzb0bow59ykvswdyfkxi36x5931ai3il] c:\docume~1\admin\locals~1\temp\g6tbdz6s1tlmp.exe
uRun: [hooqn3jtnmiqpdh1hv45g98z9pj9m8rqczxjxf10fd4tgwytuo] c:\docume~1\admin\locals~1\temp\a8mr8kd8fhql.exe
uRun: [agu12kp59mm61wryhg6jcmlstmozru76bc3qske0z3x5hp] c:\docume~1\admin\locals~1\temp\oamaeuf1iz9c5.exe
uRun: [yhyfjp3q1hq] c:\docume~1\admin\locals~1\temp\vj7fmmq.exe
uRun: [g62bbo2rntu2qmh] c:\docume~1\admin\locals~1\temp\pbpsp5v.exe
uRun: [ec0un619arqa3is1ldb33lepvghsjs7am9e8ngkgqie5gbb] c:\docume~1\admin\locals~1\temp\do02pq.exe
uRun: [v7ua7r2ks] c:\docume~1\admin\locals~1\temp\s6xqobd.exe
uRun: [eutwjhhci3zo8t2u56948fuetrcq37o8kfxqw] c:\docume~1\admin\locals~1\temp\kx9r70smbv.exe
uRun: [dlj3jw2g7fyzzwavmij83h1tano0m] c:\docume~1\admin\locals~1\temp\jn4tg0rba.exe
uRun: [xwvcoo216gu1muuxvw] c:\docume~1\admin\locals~1\temp\yvzdz66z0pf1.exe
uRun: [zismtwnoc73v9jntin5i3gz4] c:\docume~1\admin\locals~1\temp\fd6yi10uz1.exe
uRun: [xo8refmqanqjvkfouq2igbueqtp6lcioucqr1duinqursml] c:\docume~1\admin\locals~1\temp\b5ux5mnz.exe
uRun: [n597qu0p3jqmdk4kiu0ndgrvxibi00r4yogqvx5rahp] c:\docume~1\admin\locals~1\temp\qdw1yavy9dfo7.exe
uRun: [k7azjqphnxlehwvoy6dqv6tbfcvkw4lkunra8eypfjllo5] c:\docume~1\admin\locals~1\temp\eu34qz9.exe
uRun: [ld31u39bbnmx6h3w] c:\docume~1\admin\locals~1\temp\f4csv7z1.exe
uRun: [mtzh87ducs3g0vwawp45a7emy] c:\docume~1\admin\locals~1\temp\b1f4d1l5vvl9a.exe
uRun: [zv4r2ryuq96s7s50evpg] c:\docume~1\admin\locals~1\temp\xmy662p.exe
uRun: [yffrjvn4v2xdd9h6jeng1uo5] c:\docume~1\admin\locals~1\temp\idxj1s5.exe
uRun: [ob2bct7crgdx1z6qi3qpy4x71rfgmh3lvyp9zldyp25n] c:\docume~1\admin\locals~1\temp\qbgpys1r8ilp.exe
uRun: [j0y5dcofvszv1hupik2r4slc1nmyqcpg1ozo9a51lreisr] c:\docume~1\admin\locals~1\temp\qhwzt4gxk78xc.exe
uRun: [yqilw9984x0v17ofh7vwx9pn5k0ddgj1vlobu7mnwf] c:\docume~1\admin\locals~1\temp\eorifdutgvd.exe
uRun: [jjp7d3aupi7lw581kcwdm1mms19hag9w36k6] c:\docume~1\admin\locals~1\temp\n74w12.exe
uRun: [wiwvihpil9uzm9rm9urbgcak6] c:\docume~1\admin\locals~1\temp\br1mc775y.exe
uRun: [rpceu64koa7qncbh2gz] c:\docume~1\admin\locals~1\temp\jed2w2gef.exe
uRun: [del2qvj95l98iqo0k2cbh2cgifalzwgwsngcueeq] c:\docume~1\admin\locals~1\temp\mz0wwto4d3f.exe
uRun: [ksdtbfgifhdson03ucwardqhqg91fatvinb6] c:\docume~1\admin\locals~1\temp\gri9zttq79j.exe
uRun: [smx2ihdi4i7gv8y] c:\docume~1\admin\locals~1\temp\uuyzay.exe
uRun: [kynyv3syxiboa6wckgv3208oyp] c:\docume~1\admin\locals~1\temp\jlt0t4kgv.exe
uRun: [fbge74wtxfaglf8boeqxtsxtnatv5y] c:\docume~1\admin\locals~1\temp\q6j5lx.exe
uRun: [xd4japdm2n6a] c:\docume~1\admin\locals~1\temp\ayxq0q.exe
uRun: [chnbaom8trsl90ou35v6zq019hxdxm0eftx8sem0bl3086f7mn] c:\docume~1\admin\locals~1\temp\krw2uw5shs.exe
uRun: [e9yu8guz27ry2f0igs94v41o] c:\docume~1\admin\locals~1\temp\czrmd2kg7ghqn.exe
uRun: [mkz57orfenq5g6iz9o1hwkafi63y6k8tuxbzvywhbl] c:\docume~1\admin\locals~1\temp\u0h72oglqaxd.exe
uRun: [fh25tfvksemscbbr6prk9sfbziw96xaxz7yw0ixc00fj] c:\docume~1\admin\locals~1\temp\ejefgwrz1c.exe
uRun: [bz9ksvjzdn5nuq] c:\docume~1\admin\locals~1\temp\tmxgj3uz.exe
uRun: [wf548xf33bx986lgu6p5iyeabte8edwekbhfsw3qw9czh20] c:\docume~1\admin\locals~1\temp\avzl8v5s0h.exe
uRun: [meogxth64o7au9g9gvilx1n] c:\docume~1\admin\locals~1\temp\iibksqe1hn.exe
uRun: [k08dn3njpqxdfqqjreb5] c:\docume~1\admin\locals~1\temp\q3o07g2.exe
uRun: [n7u02tyjhejubgqbspt5fnt4e37fpcxmn8x6dgdu55u6a8ohij] c:\docume~1\admin\locals~1\temp\zmhxfr7k16dlb.exe
uRun: [lh96enlnof9fat77n3ba5bqpq4w75u7] c:\docume~1\admin\locals~1\temp\x2el9sw96cosz.exe
uRun: [rvy3jwwr4pcknr] c:\docume~1\admin\locals~1\temp\p8n9ovgs86a.exe
uRun: [m8j5cgt59z5e9w8gvuvom6uehxrpx7rqkigvxv0l] c:\docume~1\admin\locals~1\temp\fllop1ad.exe
uRun: [y10d3dowt8xw2z2ywf9jl71] c:\docume~1\admin\locals~1\temp\lfpvqdpbe6g4.exe
uRun: [xadgfyj3pi9crbs1o5bajdqwv7b8nmbls0qy] c:\docume~1\admin\locals~1\temp\eqkx6g5rhdaf.exe
uRun: [zveq1xtzhptgtkk5xnn3wi9kptprpci64byvt6gvshtk] c:\docume~1\admin\locals~1\temp\dgwzfz4gg0f.exe
uRun: [l7tvd5a93h8y5nx2dh5u] c:\docume~1\admin\locals~1\temp\m48gwreh.exe
uRun: [q9qvzq5x6mr6e7mtkog1v3olm78mozelm4d17] c:\docume~1\admin\locals~1\temp\wdalljpa07.exe
uRun: [n8qihrjsv9upzqcctscpzftlhydm7be9x9d4ta] c:\docume~1\admin\locals~1\temp\z22s6wbqv.exe
uRun: [rbymwpyxywwlglt] c:\docume~1\admin\locals~1\temp\b2se4c8bxvw6.exe
uRun: [lgodv3jmu905jatowtr6m2zl421adrnrn31eh34kystzt5] c:\docume~1\admin\locals~1\temp\u4i0qeo8.exe
uRun: [jewehthczl8juw0dowsivjvf5et1guu9j] c:\docume~1\admin\locals~1\temp\hnf84m.exe
uRun: [oa92l6ratj1339uh] c:\docume~1\admin\locals~1\temp\xof7v9fh5e.exe
uRun: [lpfd3p4k9vtaxcwu5l9ckiot43kxoqk6swpgj] c:\docume~1\admin\locals~1\temp\sljyzsg00eb9.exe
uRun: [lxsfz3h9s9ndx0ftasohqmavr6yfrnshadpg54] c:\docume~1\admin\locals~1\temp\f26qzfkd7el.exe
uRun: [xd5xf0iosoi9phu6ttt77kqrmh4f8] c:\docume~1\admin\locals~1\temp\r7z7g7ue.exe
uRun: [ylj3ghivq9nlzs33x1bckd4ul4g1mvsk] c:\docume~1\admin\locals~1\temp\u6my7hx7gl8.exe
uRun: [wv0u7ut45lgrvas5hc5jen8cqklir7buv2htum1gzwkn1l2ujz] c:\docume~1\admin\locals~1\temp\ts27owb.exe
uRun: [wlt5yn8odfd0ivfebs8p7xvy9me0o0e41a88] c:\docume~1\admin\locals~1\temp\gqwjh18q.exe
uRun: [x1ev5vxdgu2mifj5ht0qyo80kg6dx] c:\docume~1\admin\locals~1\temp\j5a6dyd4oah.exe
uRun: [pput79ew2ejf] c:\docume~1\admin\locals~1\temp\a6qw006figbjb.exe
uRun: [uybz2erpyyz] c:\docume~1\admin\locals~1\temp\fvcsfgm4danp.exe
uRun: [hc2ry4zccmhsh46ezamnta9521mcl49l0sb3u14jlb] c:\docume~1\admin\locals~1\temp\rtwq61zy.exe
uRun: [pq2ohmrur1trfrc0lgdyb0] c:\docume~1\admin\locals~1\temp\s31oe1j9k.exe
uRun: [tiv9plo2s2v20sc10sc65eqtxo3o0ecqj8te07xm1o0jh7e8gh] c:\docume~1\admin\locals~1\temp\g1yuzp7xzh3i7.exe
uRun: [ynt7ytl8m] c:\docume~1\admin\locals~1\temp\kqavc4k.exe
uRun: [fh50za9jm1nnzj2tnht3bx8ounacv8tqhsri2q034i] c:\docume~1\admin\locals~1\temp\cmhws9b.exe
uRun: [gcc25xrkif904k1ti] c:\docume~1\admin\locals~1\temp\illn2jev3z.exe
uRun: [ti6wqhmz11nijakdf338] c:\docume~1\admin\locals~1\temp\wjit4q.exe
uRun: [jofhda5to1h] c:\docume~1\admin\locals~1\temp\h2ica0n.exe
uRun: [u64oc0bvi6dv1rlyo3fejtg0laznq9twlphfepph1baouki] c:\docume~1\admin\locals~1\temp\lruunw078.exe
uRun: [gc4znseecuzhrkrg1nakq9skpghjalcoiw4rxxzo9urg7eyr1] c:\docume~1\admin\locals~1\temp\jhxvb33.exe
uRun: [fzupi0y809x62lgc3gsxysimuw5ze] c:\docume~1\admin\locals~1\temp\vahmum4b0.exe
uRun: [yqbjz5djqv6s6d9e5vt5wgkllqqj] c:\docume~1\admin\locals~1\temp\u0co3mk0.exe
uRun: [rkm2jeq52gki24luu7j8o6mv2wfnk46nqgec1tpfnicincpb8] c:\docume~1\admin\locals~1\temp\ns7qj80g.exe
uRun: [qlrpfag7l9l2llfvmbz] c:\docume~1\admin\locals~1\temp\cj2rjef4sda.exe
uRun: [loidiwchbs4cgt4tkr201lc82maj3zx] c:\docume~1\admin\locals~1\temp\h3p3m852.exe
uRun: [z0mdbfoxs84gv95w7pfm] c:\docume~1\admin\locals~1\temp\i985smb8qvf7.exe
uRun: [mfvypp6cn43d989icrtjgc3xs4] c:\docume~1\admin\locals~1\temp\hur7ln.exe
uRun: [obzj2xih7w] c:\docume~1\admin\locals~1\temp\w75buazf.exe
uRun: [kns32ltl5t7] c:\docume~1\admin\locals~1\temp\o3ccty96.exe
uRun: [dqq9sz76yvesufe8yaxd4t9bek8d83lsl03izu1] c:\docume~1\admin\locals~1\temp\gq208i.exe
uRun: [salrdv03y1rpzcmcctazg9ydbxgv3vafqp7dlbk8w] c:\docume~1\admin\locals~1\temp\flg5qiespwih.exe
uRun: [tfq2hmqhrsys] c:\docume~1\admin\locals~1\temp\cl6p00.exe
uRun: [frhe6wu9l] c:\docume~1\admin\locals~1\temp\qjkvlovabx.exe
uRun: [hwj09vrh1sls1dabiy466257vegxi136bsec2fj5] c:\docume~1\admin\locals~1\temp\w8mzdjo.exe
uRun: [ph9bc4pf05p1tcjdt5lafx] c:\docume~1\admin\locals~1\temp\klxsd4.exe
uRun: [kcirepdg80h853kz5mjatfb1z71d5zmpsxdp7w] c:\docume~1\admin\locals~1\temp\chni5yp.exe
uRun: [luqime2pm25q163q2hkux5y0at5xu2kqocvthlxq] c:\docume~1\admin\locals~1\temp\n5dziirm.exe
uRun: [mec3zh4f2rhdkfx2dk] c:\docume~1\admin\locals~1\temp\xiyfodyk.exe
uRun: [cstdqxa9wgigbxccisnt90r7d7ayvxvj] c:\docume~1\admin\locals~1\temp\fn3k74n.exe
uRun: [xqgwi7hu61521s2yg6z6oy0s6lec2x6] c:\docume~1\admin\locals~1\temp\mma5qghmb49s2.exe
uRun: [h6j232dt1z4dr50noof54p2x16b1x8bgx9dhnnkeu] c:\docume~1\admin\locals~1\temp\f110hnid.exe
uRun: [vpykmp90ab2wt3] c:\docume~1\admin\locals~1\temp\zk4hjl.exe
uRun: [e2xr3glmmz9529575iivn5ab1u7o] c:\docume~1\admin\locals~1\temp\ln41ms0cmgop.exe
uRun: [m648toscz7nzugpku41thy] c:\docume~1\admin\locals~1\temp\hoxg3x.exe
uRun: [vjnoz0riwnb8dxcpr4] c:\docume~1\admin\locals~1\temp\qvmu5l.exe
uRun: [ahjnuhvj2tdg2cek23sk5gw] c:\docume~1\admin\locals~1\temp\rmrsd23.exe
uRun: [gvjlsek7hc2t] c:\docume~1\admin\locals~1\temp\ltn9ezb5qt.exe
uRun: [c2zsrxs4js6nou8xcs5zrr2tuw2f6afr7knuk0ox73akku] c:\docume~1\admin\locals~1\temp\o3ickf.exe
uRun: [jprdx53wk0rycnppi6pdqzheetp83v3snoy] c:\docume~1\admin\locals~1\temp\u253bpey0.exe
uRun: [b0te6zpr5ehumz5euws5g18] c:\docume~1\admin\locals~1\temp\nuh5rbuek.exe
uRun: [iru6o9zbrx0puv] c:\docume~1\admin\locals~1\temp\ab4xryyr.exe
uRun: [mf1m7lo7t012p] c:\docume~1\admin\locals~1\temp\ifxdbt70.exe
uRun: [tqj02x31ej280y0aw717acd5j8my] c:\docume~1\admin\locals~1\temp\qs7pdqny60.exe
uRun: [plo8cvtxy1zzyvdlbh24ibw] c:\docume~1\admin\locals~1\temp\eqlvye.exe
uRun: [n6efnekko8usjt5qv8kua9amjllmmxyubj] c:\docume~1\admin\locals~1\temp\o913cmmf6cnm.exe
uRun: [eaozizzixjdeh0475jkyklp1] c:\docume~1\admin\locals~1\temp\ys92ekb8vpjb.exe
uRun: [z702nkkjpakiy9js5zvbz8qxpu4bf259j0lte7bi7bxjb] c:\docume~1\admin\locals~1\temp\v4cc3de.exe
uRun: [wljt4su2lpuxqssawqbjv109by3knbtbamsp8p6x6jht7dzbsd] c:\docume~1\admin\locals~1\temp\ch0dd8.exe
uRun: [fjigrjmijienkw6qim7vog5ed9eyuqrnq6cj0fmbe3w] c:\docume~1\admin\locals~1\temp\yo2zf9v.exe
uRun: [d5tst8x5pn1kf26g] c:\docume~1\admin\locals~1\temp\owreeb9jh2jh.exe
uRun: [jmwxpi8vqnfnft6zwfgh1jzoy] c:\docume~1\admin\locals~1\temp\hcyxaw12u.exe
uRun: [jqdn0a3hidmg] c:\docume~1\admin\locals~1\temp\dn3fxho.exe
uRun: [wnlg9vfhjd4dftsdw15] c:\docume~1\admin\locals~1\temp\ee8doh8i.exe
uRun: [f8f1pkwgsbqxl1d870c] c:\docume~1\admin\locals~1\temp\ob5it8e.exe
uRun: [dqgy36f5r0sso22tfju] c:\docume~1\admin\locals~1\temp\s0hj64r9g.exe
uRun: [ufmhvic8rqzj6ish08mxv118hi4hcgqqh5tec321nc5qgp1itk] c:\docume~1\admin\locals~1\temp\rc2py35n5.exe
uRun: [autfnq084vq6epgmlekn9kgruz8z58a760tqzbgaugazzcyo] c:\docume~1\admin\locals~1\temp\vfvnl1d49kia.exe
uRun: [cpk2m9h3zq855ffq4g6crsms] c:\docume~1\admin\locals~1\temp\x66wzf3lkf60s.exe
uRun: [p89z8yiy8jv7jflf1k5lky9faq86dbgdzoun9gl93mipit] c:\docume~1\admin\locals~1\temp\etphh990.exe
uRun: [x4mqtjyzk4b97uy1o4ioai2i] c:\docume~1\admin\locals~1\temp\t1k7tlobhutu.exe
uRun: [p5oc3w6q0lss4e3qtngro] c:\docume~1\admin\locals~1\temp\yq6xwc4def.exe
uRun: [yssg9eqhx70xarkanek5i4heg3lj2bxwm] c:\docume~1\admin\locals~1\temp\n34i2u32f.exe
uRun: [cyuwdmve5hkapl9wz] c:\docume~1\admin\locals~1\temp\lyvtex1.exe
uRun: [mcik7jd57jt88jztejjnnklwywy5cn] c:\docume~1\admin\locals~1\temp\xc6nr5xeos1.exe
uRun: [hbj5zwvdffadtrujd5lwjpnqzlulcwjj2d421ytirdw] c:\docume~1\admin\locals~1\temp\yhs195tspm96t.exe
uRun: [iu6qzafwy56fdpwdi2kodk9a9vxi1] c:\docume~1\admin\locals~1\temp\xhp7032s7s.exe
uRun: [id7ztdahcc26pqb3gq1ur8mgfe4sk] c:\docume~1\admin\locals~1\temp\q9k9xpi8rg.exe
uRun: [shihdoati5hp2a68ud1ft4losz0dmpe0c] c:\docume~1\admin\locals~1\temp\xmc04bsv4.exe
uRun: [avqj54akra934hgs4f9] c:\docume~1\admin\locals~1\temp\hfjja8zglmz.exe
uRun: [j0urwx0qf7m0imtr7za] c:\docume~1\admin\locals~1\temp\tdq3xgqyph0b.exe
uRun: [itgzsrh0xoxw9j2d43ipobahs3v7] c:\docume~1\admin\locals~1\temp\gmlocqrgr55e.exe
uRun: [bksfnt3jk0mk1c877yqz0xla52ehpxwuj1tpx] c:\docume~1\admin\locals~1\temp\kqut4ngkh.exe
uRun: [g93hao6dxmt2ju5xsoyha7n1a9x7ctny2koaod1y3mlpgp] c:\docume~1\admin\locals~1\temp\udde3dflzzaw.exe
uRun: [qqwbt9zxbml92sktp6vbba4md5w] c:\docume~1\admin\locals~1\temp\v4icuugw0t51h.exe
uRun: [pehnczp6jtw24] c:\docume~1\admin\locals~1\temp\kvddd0vk.exe
uRun: [mvhjapycviovl5melwmcg4i7] c:\docume~1\admin\locals~1\temp\sy9590.exe
uRun: [zjnuhuxj5xu7f] c:\docume~1\admin\locals~1\temp\ne6tk1.exe
uRun: [gnr736j72vjfddqbryl5g7z9r96rzpc8v8p9ecwdlnx] c:\docume~1\admin\locals~1\temp\f1fhzlmblhgh.exe
uRun: [semlbmc2k] c:\docume~1\admin\locals~1\temp\gskfql63mbb5k.exe
uRun: [knc1g5eeolojnelqj] c:\docume~1\admin\locals~1\temp\ixt4ei8.exe
uRun: [tex5l7475of6xa8u0ev46hjthdd5acyjepqgp] c:\docume~1\admin\locals~1\temp\iqoo3y8nqt2.exe
uRun: [yg40dba9vl8htym5l3cwc] c:\docume~1\admin\locals~1\temp\yyt3oo755ox.exe
uRun: [zba1zs1p7ior5arls7mkiee] c:\docume~1\admin\locals~1\temp\xt7pn5b8n.exe
uRun: [wmakzq0byvd2phz1cqbhavl5303] c:\docume~1\admin\locals~1\temp\rvkmfleba62en.exe
uRun: [y7tvfzuxurknxud2wxg] c:\docume~1\admin\locals~1\temp\s2ayx727yw.exe
uRun: [i1aku67rlrrxlsvri986z9bq4u4se1oqgz138p7ybl] c:\docume~1\admin\locals~1\temp\y1epo050wexjk.exe
uRun: [qzsrx6uoqcibymbv5xe1lrctwntk] c:\docume~1\admin\locals~1\temp\i5ganbby.exe
uRun: [yh2s96nr0s77ij0tlgz1a1j9unm] c:\docume~1\admin\locals~1\temp\agiy1d7k0wo.exe
uRun: [cxgnfr5rqsqq5ot3usb02nb4xbdn9idc] c:\docume~1\admin\locals~1\temp\ovmowj7jm.exe
uRun: [ygtnz3d49] c:\docume~1\admin\locals~1\temp\chvuep7tur.exe
uRun: [c2va0wi7wpljhsj3h7e1ll5accip2is8] c:\docume~1\admin\locals~1\temp\gx9zqjdghx.exe
uRun: [vftfb5nhu970q4kka0inkqbpfkwzijq6iwisjhtu69k6jmi5c] c:\docume~1\admin\locals~1\temp\ki956p.exe
uRun: [xxuku57qcb7tmhhfatayhy0xvl97k1acrayic1xz78kfonx] c:\docume~1\admin\locals~1\temp\bdd7u2ezcgy5.exe
uRun: [cvrhrp2mdihh1h9ldb1whef1fibxxqwncav2jhqmaz69il5] c:\docume~1\admin\locals~1\temp\tzi4b9.exe
uRun: [xjk75c044xc910yrnn721v4atmcu5iohrqxv3j3par8bv0] c:\docume~1\admin\locals~1\temp\a38932uobm3.exe
uRun: [v8dowardd9znq3cq6mmo51u9xt1fxphuljg4lvc4c] c:\docume~1\admin\locals~1\temp\fob9babvaa.exe
uRun: [i1ctlo91svr7s] c:\docume~1\admin\locals~1\temp\qgpo4ro9.exe
uRun: [mytgicv0zfsf1uisxgv6qxs2d4zo5jzk8b2idz] c:\docume~1\admin\locals~1\temp\g3s7iq79.exe
uRun: [saexqd3yrgex20k2wpee7bsfmxy9yjvt9qt4qr0t] c:\docume~1\admin\locals~1\temp\yg6brdrbuh.exe
uRun: [h9w7066rrudm6k4b1ajn] c:\docume~1\admin\locals~1\temp\iz3j5l24.exe
uRun: [aq6hyu2upplumub8lcgjpjmaaafcu3k4el] c:\docume~1\admin\locals~1\temp\weqbcup.exe
uRun: [puikcjigjjvmu4k30r] c:\docume~1\admin\locals~1\temp\cea9ri2waxkt.exe
uRun: [g2ebuuydhu6d5b] c:\docume~1\admin\locals~1\temp\zu4mah0lx.exe
uRun: [poccw1e4futgs] c:\docume~1\admin\locals~1\temp\snwvvyqatmn.exe
uRun: [m311xe6n03k0vl7s8hc4vo22] c:\docume~1\admin\locals~1\temp\r8fx7zuwim6qm.exe
uRun: [upvf4coulc2js241y9teei6mcgubc3al6o1f5e0oykh2] c:\docume~1\admin\locals~1\temp\cbvnin6h.exe
uRun: [s4i9cpnnwyhdozxevywk9i9xer2kjweok48hhr] c:\docume~1\admin\locals~1\temp\ebl9x3mnpmk.exe
uRun: [dvwr7sq1y667p5kzzxb6jd] c:\docume~1\admin\locals~1\temp\flq7o3nyqgy2.exe
uRun: [f2p6d4ko2dqxrlezvs67o3rxoie4] c:\docume~1\admin\locals~1\temp\a1nvz4vnvm99.exe
uRun: [v4isykz08sbr6lm] c:\docume~1\admin\locals~1\temp\elnww1wf8.exe
uRun: [zau7leuqqi5vysn9sxckgzc0h7ts8eg] c:\docume~1\admin\locals~1\temp\rfvv4kyyy51ze.exe
uRun: [yeo627bvp3] c:\docume~1\admin\locals~1\temp\nv2e05ql1d.exe
uRun: [gq6oct8hbit6erp883cj3kfhwma7vzebax5xm] c:\docume~1\admin\locals~1\temp\lhyc6idcbuy.exe
uRun: [zq0akx7djyefgjn224n1voggxxqveht17we67kv0w91b] c:\docume~1\admin\locals~1\temp\k7aey1tka0.exe
uRun: [yk4alhu4gpurbxpe4m2c75f5srqrw00w2p8b] c:\docume~1\admin\locals~1\temp\svj1nrt2o25q.exe
uRun: [cn8t02cc8wqf72gq0] c:\docume~1\admin\locals~1\temp\b4ubaikk4.exe
uRun: [jn1fo22sbvt4iswhf] c:\docume~1\admin\locals~1\temp\iypwdvltav.exe
uRun: [xrjhnda76coc5lvqe2gtk30] c:\docume~1\admin\locals~1\temp\lif08rjrw7.exe
uRun: [grcwn1oab] c:\docume~1\admin\locals~1\temp\dk2b28poa75.exe
uRun: [yw0p8jysvanxqsbhpck83wssnh1iz6sbl] c:\docume~1\admin\locals~1\temp\b1mqbm0.exe
uRun: [vb8fs7ac9y7vfpi1tha] c:\docume~1\admin\locals~1\temp\db4y16iga.exe
uRun: [caji341x8cn65j6fd6mx6tfyeth] c:\docume~1\admin\locals~1\temp\hv7xcyfvwe8.exe
uRun: [t8uoxrh9ec] c:\docume~1\admin\locals~1\temp\lkjypusqj3yzo.exe
uRun: [u7n6ki6r0h4mr70rko34ey7ysoku5swrkpmwwi] c:\docume~1\admin\locals~1\temp\em9kbw8nf.exe
uRun: [yblaf7votafiait3mmy36x1gxwid59758o3z9x6onw5t] c:\docume~1\admin\locals~1\temp\synnn3.exe
uRun: [v9hd226rtvk] c:\docume~1\admin\locals~1\temp\llz5u82.exe
uRun: [j9i4fddh2qcpl9qh5jgeolk] c:\docume~1\admin\locals~1\temp\ynpayykh93v.exe
uRun: [l5q27o555duz0vruii5awnpvvydzp9rcy3jxinursws1xxu] c:\docume~1\admin\locals~1\temp\jfu9fs5t.exe
uRun: [dsbmp2tvfv7c54h7c1qovxv21hp] c:\docume~1\admin\locals~1\temp\u3wcbjc0.exe
uRun: [e9obde7o8537zwr398qqlmdz9lkq] c:\docume~1\admin\locals~1\temp\c7pbvzbn.exe
uRun: [jxtt8igwxsf65ludmct821sunu2ro] c:\docume~1\admin\locals~1\temp\ibo22n0o.exe
uRun: [oua70ohomat20ev6lsren] c:\docume~1\admin\locals~1\temp\i2qp1l.exe
uRun: [r5hhmjq0u] c:\docume~1\admin\locals~1\temp\w56wcqmi9.exe
uRun: [fomi3febja0s593h7ugyv1aru6tl0b6ru9] c:\docume~1\admin\locals~1\temp\kh1iog.exe
uRun: [m6bfe6el9e0sm4elaevph67mcqeaqxyuhdqp0zhz94tqd] c:\docume~1\admin\locals~1\temp\jcf46x9ensas.exe
uRun: [ib0n1eyfv7kas5gx59aite8smw9hmo8eh2ec2vnwto] c:\docume~1\admin\locals~1\temp\yafl0n7lkar.exe
uRun: [wu8i9l4sq178s3vr7ygolyrsscz6hl] c:\docume~1\admin\locals~1\temp\ids0j99nhnp.exe
uRun: [g9g916uiavfrfas5pi0f78li89ucuyl2] c:\docume~1\admin\locals~1\temp\b0lz9vkp1bwn.exe
uRun: [hrz9g06p27d5mx2fzecvbr8ubpg] c:\docume~1\admin\locals~1\temp\twz3ii.exe
uRun: [ztnxjhengu] c:\docume~1\admin\locals~1\temp\d5doxb.exe
uRun: [nw6e668fdvlgqvzl2qjnkp9jdmv3v49epc1msx1xyglh7] c:\docume~1\admin\locals~1\temp\qilnmuosj6.exe
uRun: [twrtl9kghl5jxpt8uk5s] c:\docume~1\admin\locals~1\temp\rsqldu83k0z.exe
uRun: [mc1a36bo74wodk4a2vhuyz1leghgt50l1] c:\docume~1\admin\locals~1\temp\kt00uzer4oj6e.exe
uRun: [bf0ofhg6rppgfknb4ywtjewsr0x5bwj031diexcbp8sds] c:\docume~1\admin\locals~1\temp\mkb98d.exe
uRun: [gcwgbyfhzbp84l8f4eexz4] c:\docume~1\admin\locals~1\temp\zw31b1wz.exe
uRun: [pg3dqt9opbvdhkdzxx2odnqehsmm4lcy0asts] c:\docume~1\admin\locals~1\temp\dlyj5g9ugj.exe
uRun: [j68hb0vftsmx5] c:\docume~1\admin\locals~1\temp\lpripbi3xp.exe
uRun: [ici1f0ixazudqb1q4ifeatdthbcdi8bt13nr] c:\docume~1\admin\locals~1\temp\gr7q9av6l.exe
uRun: [c9csceuf0aypc4w0wziz3gynjpwo4t] c:\docume~1\admin\locals~1\temp\ov0pa5lf2.exe
uRun: [cgljto8qsc7ig1xkn3twkzki0n1u1l] c:\docume~1\admin\locals~1\temp\ryqt512wo.exe
uRun: [uw5cr0p7kmksjux] c:\docume~1\admin\locals~1\temp\u84wbhjdhjknn.exe
uRun: [i91wk6za06aqrbgpp6x9ffw5d7krlhzkvtl] c:\docume~1\admin\locals~1\temp\b3pl9q.exe
uRun: [ay6vii1w6q7079sc4gv6nv6v35] c:\docume~1\admin\locals~1\temp\fnpm6njcmk0.exe
uRun: [eklf5odx0y7o3kl2ypgfjc1zmqlf0f08xzip48] c:\docume~1\admin\locals~1\temp\atr7b8r.exe
uRun: [lijk3mhjnmrnn] c:\docume~1\admin\locals~1\temp\h2cvj0lw7.exe
uRun: [y6oclxw7ivwvmhkc7hoe6mblzsf] c:\docume~1\admin\locals~1\temp\zo5ct8v6xqu4i.exe
uRun: [uq5rvztod3xcjpj0gwecyrc5tsrvdmr8izwv2wfm0ms1rlyegp] c:\docume~1\admin\locals~1\temp\z3jg8mh1.exe
uRun: [z3zr90b368az2ocyela8a0qeuv0zb98db6u6cxb07cl0h67zsm] c:\docume~1\admin\locals~1\temp\g291rh.exe
uRun: [u6edrji1g4vnp] c:\docume~1\admin\locals~1\temp\o620st.exe
uRun: [jyqg5v2esefq416ul3u75pxdf5sq1i] c:\docume~1\admin\locals~1\temp\czg34jmw22m.exe
uRun: [m9r0ujzj2qwqzedtiytc76bzro7ib7b0zya9m] c:\docume~1\admin\locals~1\temp\fopa8wpr7x.exe
uRun: [cro6knxflx0sp7opyx509iyxnkztv6jd] c:\docume~1\admin\locals~1\temp\iykuex.exe
uRun: [fqj0kg0eisg2m5es] c:\docume~1\admin\locals~1\temp\pxrfxojkzfxj.exe
uRun: [jk5pdokdoijakgc8tlbomqb80m2qrzr] c:\docume~1\admin\locals~1\temp\p7q8hclq.exe
uRun: [xfas6g2jbx68y41e7qawj16zyl511rd6c7hgs9fghh] c:\docume~1\admin\locals~1\temp\bjaz0vm5wx.exe
uRun: [hoq22vie5b5lpscqd8jdook] c:\docume~1\admin\locals~1\temp\lsgu3v1nlrn8.exe
uRun: [pnrbe10guwimafbave3yte1qpt] c:\docume~1\admin\locals~1\temp\knuglvm93x.exe
uRun: [cd7m21d6hzv727eu1v30] c:\docume~1\admin\locals~1\temp\hpj6lp801.exe
uRun: [edjb0o9byt23cjvu9s9mjy56dvhe9sm] c:\docume~1\admin\locals~1\temp\oy4bthjtarv.exe
uRun: [kfy2kqxt1kv8oug0c07e40114gmjmdq6] c:\docume~1\admin\locals~1\temp\gkxs3pt.exe
uRun: [x6z2ze1ioz0125gtsc] c:\docume~1\admin\locals~1\temp\j0r3nhpqoau0.exe
uRun: [phtc6h9ydoaoicxt6rbs4yf] c:\docume~1\admin\locals~1\temp\i9m5w0ofngz.exe
uRun: [owfnvyrsvutucgx883x5dhpv2u2ruzr] c:\docume~1\admin\locals~1\temp\fqt8pzhqua0c6.exe
uRun: [wgmvwmkkznzryt0] c:\docume~1\admin\locals~1\temp\i50sbe.exe
uRun: [arimxee21uza3l3] c:\docume~1\admin\locals~1\temp\ny1h1ysa.exe
uRun: [vyd50sba9aeeb5fx1hyhgwp16ko4yo9ck] c:\docume~1\admin\locals~1\temp\u37tym1.exe
uRun: [r24ih62ynyz42runxw6qbr] c:\docume~1\admin\locals~1\temp\tc2v75.exe
uRun: [vmm30b9coxd7cgjwggxa2f07xsjh25uxifazh] c:\docume~1\admin\locals~1\temp\xrjteldvw4zz.exe
uRun: [khtbcry7pynxs93uxc8ejzoczsr5] c:\docume~1\admin\locals~1\temp\grdq0ax.exe
uRun: [i4oc5rik7gq8f9myr2xugsk] c:\docume~1\admin\locals~1\temp\sj409n9.exe
uRun: [p1qs8wozhuy809xv7ctjagu3py7je2mho9] c:\docume~1\admin\locals~1\temp\cc3cmtu2cbw.exe
uRun: [jb56eryn9e6wo08u] c:\docume~1\admin\locals~1\temp\dr3at9qg6.exe
uRun: [yyg1h746zmxls7wsmj7tcexgi4imm9cmttir1rjyay5p] c:\docume~1\admin\locals~1\temp\m02lqia9.exe
uRun: [usaf1wb6z3lnz5cxv6dbc26e9psggdm] c:\docume~1\admin\locals~1\temp\bhviaqf54nepc.exe
uRun: [ll1zn5mg8ckippk3q9y] c:\docume~1\admin\locals~1\temp\ue94ga0z7uvu.exe
uRun: [o8hmo65q16twqcyjsrvgvj0a] c:\docume~1\admin\locals~1\temp\tv6tshn7a.exe
uRun: [xuwdzcsbh6kb9oqz0oghrgc9tezja6uip8t] c:\docume~1\admin\locals~1\temp\l1fhmba.exe
uRun: [iwcu9f9afabrcjtvfjaj6ul53hjr2opbw8nlaqifat1821ix] c:\docume~1\admin\locals~1\temp\bivv55lo690cs.exe
uRun: [fjacexvnmix4816yabl8ktclu7wqiqkhmbez] c:\docume~1\admin\locals~1\temp\ce07txaq9un8.exe
uRun: [hsep6b26x8kf1zdhtukniwfu729jka72c5j] c:\docume~1\admin\locals~1\temp\n6o6arv2j.exe
uRun: [wr74k7setiuqrp1bfukcbqp2e1if2kp9k0zghvg4yd34m0kud] c:\docume~1\admin\locals~1\temp\qqea5nc4e.exe
uRun: [yi8xf8uliy2jd4ia81zzrb6cjas6evfxnx8soa9jo03yy] c:\docume~1\admin\locals~1\temp\xfqbijpz12u.exe
uRun: [dzxdwuk0mgtai] c:\docume~1\admin\locals~1\temp\tmsxk1yeh7s7.exe
uRun: [j7751seccyxv7du7o94mngsj8wav] c:\docume~1\admin\locals~1\temp\yzqtfgqn.exe
uRun: [g1vtbf49ztgutbp1eshd2sotneqy5yq3qo9wd25] c:\docume~1\admin\locals~1\temp\mnlcip.exe
uRun: [cmg6jnya5ocr7325srtt7t186aavlz5xjehhd5odi] c:\docume~1\admin\locals~1\temp\mj6jqlj8kv9.exe
uRun: [a5xh9c6k17iw0gjoe9jjqp8trw11a235k4uxkyl7uqf9c] c:\docume~1\admin\locals~1\temp\a5fp8r2zspr0.exe
uRun: [b3l0nlv9seb54p9jkhux4kveaug7] c:\docume~1\admin\locals~1\temp\efd369tz3p2.exe
uRun: [n1gp6908ixkc0x59veuqj4] c:\docume~1\admin\locals~1\temp\j0g3eyr6jw.exe
uRun: [u2xdhdy5hktbxdv64x5karbncan8vb3up8qkmld70kt6c5] c:\docume~1\admin\locals~1\temp\bw44dm1x2q.exe
uRun: [qsaa21gm6qw9c] c:\docume~1\admin\locals~1\temp\cbl212eb.exe
uRun: [nlj90c4izsy1] c:\docume~1\admin\locals~1\temp\mynnjd3q58u.exe
uRun: [v54siqsx2y9z9bqh73] c:\docume~1\admin\locals~1\temp\nubo0bsfp2c.exe
uRun: [n4xr1jhc4ivzvwhx5ig9ja9y8dbfay9] c:\docume~1\admin\locals~1\temp\p9fxu7uza.exe
uRun: [zyker6756max4hbi8c75m6dxe7pm5ym1xksvbo9b80xnt] c:\docume~1\admin\locals~1\temp\uhuqz5.exe
uRun: [mwqb3cg548l2umbc9ajhellv0j] c:\docume~1\admin\locals~1\temp\aw1tlkr.exe
uRun: [dqy4l9fk8nutmh1y] c:\docume~1\admin\locals~1\temp\peyh35zd.exe
uRun: [he5k444gtqv6wi4] c:\docume~1\admin\locals~1\temp\xiax408m.exe
uRun: [xq8tlf17m] c:\docume~1\admin\locals~1\temp\bs8b2ig.exe
uRun: [qncdf6jo2mpowpke72ktq7qi8z1] c:\docume~1\admin\locals~1\temp\as50tgp33fnv.exe
uRun: [vw2o3n3r1576r7ru4ls3ivxy1yn8kydbo9fme] c:\docume~1\admin\locals~1\temp\a20kzw6k.exe
uRun: [kn21vhk6qcwcvu232445azwd49a8me61u7la191ft98] c:\docume~1\admin\locals~1\temp\vdl8uy2prll.exe
uRun: [tie15ak580dlwlef8cy] c:\docume~1\admin\locals~1\temp\hfolsvl.exe
uRun: [t6dds1kwg3eb4znsuloh5ufkk7p898cfitgqg3cdlyq6] c:\docume~1\admin\locals~1\temp\rp6x5xg3gle.exe
uRun: [gyfzjk8rp1r4upe4axkshyy99ndyxu3] c:\docume~1\admin\locals~1\temp\sp98ez.exe
uRun: [jjmwfjgvl1f0gb7kjaxwbq2] c:\docume~1\admin\locals~1\temp\cr6gs71wj3xc.exe
uRun: [p6b9b96nivgzwvxolw8ga4zr22o] c:\docume~1\admin\locals~1\temp\yjuffb9rro.exe
uRun: [z6yyrjb0hfyc3dimifrtz26vep6t3od7aqoq2evlf5yjz8opp] c:\docume~1\admin\locals~1\temp\nvscjkyuaf.exe
uRun: [ksi93i0u2wt7amdtyzi8baz84jolfedg37jhotzfdsh] c:\docume~1\admin\locals~1\temp\t9tqpr61.exe
uRun: [b77o0czhn8l] c:\docume~1\admin\locals~1\temp\tlhqssuyrgp.exe
uRun: [jbytij62cjeq4wwc] c:\docume~1\admin\locals~1\temp\b3rm36ft8mq1.exe
uRun: [f0yrx2qpyeid3do1suzf6hlwwukrps17liizwu6gr] c:\docume~1\admin\locals~1\temp\a8jbr3.exe
uRun: [cymt4wo1ce6kwvm6si3mak] c:\docume~1\admin\locals~1\temp\hxvt4id8.exe
uRun: [v0v2u14yd2vn] c:\docume~1\admin\locals~1\temp\h27t1hpbgakg7.exe
uRun: [ysxv55inozkv1067pa5mht7215705quzkxo8iwj8d4f] c:\docume~1\admin\locals~1\temp\apqv1lto.exe
uRun: [knuuzg2thzpr] c:\docume~1\admin\locals~1\temp\p2ogo3s.exe
uRun: [zmo2451iatmy11qjmzf] c:\docume~1\admin\locals~1\temp\b0c0bbjz.exe
uRun: [ziksldtzmgmsck8rt3y6qincj095ksfhk49ayecstzvanw6] c:\docume~1\admin\locals~1\temp\cewrdw50utt7.exe
uRun: [ytuqlzpua4si9h46l7m87coh0xgyd8crd07b] c:\docume~1\admin\locals~1\temp\t12l0xy.exe
uRun: [v1sunka0frty6sbr06fkmcububx] c:\docume~1\admin\locals~1\temp\i8hye83f.exe
uRun: [rdle48l4doblfr8o5wtctwy8lo3y] c:\docume~1\admin\locals~1\temp\a4ozudup.exe
uRun: [wn1qefjz3vtvytc] c:\docume~1\admin\locals~1\temp\hzzrlpcl1lf.exe
uRun: [hqa1iyn1r1gv1erfwwj53ctwy44l17g5lxvbzxjukryg5y] c:\docume~1\admin\locals~1\temp\zvns19dytb2.exe
uRun: [iimeqcoq86nu5mz4jt8hc4g9o59nc] c:\docume~1\admin\locals~1\temp\zm8f0o6qc.exe
uRun: [lr0e4arwyxq7y335zo97utgl2iy3vlftsavgv48] c:\docume~1\admin\locals~1\temp\sniuhccewiw.exe
uRun: [whdsodp983] c:\docume~1\admin\locals~1\temp\yc3hs7my.exe
uRun: [f047zil4c4mfgh2feapv9hzmzx9ckt7ey245ew0kxs2vr04] c:\docume~1\admin\locals~1\temp\yhm1ior.exe
uRun: [birsj0zsjx4s] c:\docume~1\admin\locals~1\temp\j55newh.exe
uRun: [l05cq0htlemt4l3ps72zkb11vhi3e0vh] c:\docume~1\admin\locals~1\temp\b5eo4t.exe
uRun: [a9ynh10o5bd33mfrb8suiw] c:\docume~1\admin\locals~1\temp\a6sxbzmoyi5.exe
uRun: [p4flfzpka07z] c:\docume~1\admin\locals~1\temp\lpbghqoh10o8.exe
uRun: [o3kw0axjkgoz] c:\docume~1\admin\locals~1\temp\p9bye6p9v.exe
uRun: [m32nbbn1ohp8ndem4zs8reupgri708dorfq] c:\docume~1\admin\locals~1\temp\dc5uaktp0p.exe
uRun: [p05dyz6j5a4parjl3jc8qykwv3rd] c:\docume~1\admin\locals~1\temp\s3w5fznot10oq.exe
uRun: [lebc8aob6i4m0nufub8m1tn8qz2sncdu8mz] c:\docume~1\admin\locals~1\temp\sfk5z0bl.exe
uRun: [fa711m231j8f0i23rm0qf1gurzy4tmhvis0jg] c:\docume~1\admin\locals~1\temp\a26kqd.exe
uRun: [rn6evo0jm6azlum9oz4bmblek5r2utsih8] c:\docume~1\admin\locals~1\temp\jbov6msc1vmnx.exe
uRun: [tc2gypdtn9udvgb2nv73950uvtbf67fwm74] c:\docume~1\admin\locals~1\temp\rfhuqh1li1tdw.exe
uRun: [te6ytvvp3r1afvj9h995xcjrzx3q44c65rdr6ui] c:\docume~1\admin\locals~1\temp\xe4lhr4e.exe
uRun: [xm4zsmkt2i6xh3hec8rsivluqxsaj2dhfi6ce39tp39cfts] c:\docume~1\admin\locals~1\temp\te1appdey83ur.exe
uRun: [vxpepl721f32ohs4wco0c1pef98e75q3a29k2323vqfro0] c:\docume~1\admin\locals~1\temp\oa8bod45h2wnb.exe
uRun: [ivhuv1ohuqtz1aeds2guu5zohnrz6rgcgunwx0ekg] c:\docume~1\admin\locals~1\temp\b8smamt.exe
uRun: [atax8mle7sq6jjgx7pfck5gki45x5wjb9xhb8heap] c:\docume~1\admin\locals~1\temp\lmwb8vs2.exe
uRun: [hbgaie26j2cru4cn3velkjn1zxtnvto1z8y] c:\docume~1\admin\locals~1\temp\d9mzny.exe
uRun: [blgtb5mip4eqpdqjtoiwbxrnx57or9m0t0o] c:\docume~1\admin\locals~1\temp\c4045yxopwoz.exe
uRun: [o2mp231491rsj4kvinl12px5n20ys07o9ga1mkx] c:\docume~1\admin\locals~1\temp\ua9s31hqrq.exe
uRun: [ttbh8g0ia9wj] c:\docume~1\admin\locals~1\temp\w1k1hf7o2ly.exe
uRun: [jt36naf9z02o1gm5fx555mfqlvgr] c:\docume~1\admin\locals~1\temp\mokkhj.exe
uRun: [th9huyegsf80v3qcg] c:\docume~1\admin\locals~1\temp\h4h8sk.exe
uRun: [scxiguwxa40l03c4tdr] c:\docume~1\admin\locals~1\temp\ekr4xo.exe
uRun: [gmlblh2mvq8o4gnfa73lswj33bzveghu3ki7s165gyio7ww8l3] c:\docume~1\admin\locals~1\temp\w70svrmuerp6.exe
uRun: [o9u0rk8dcchj5k9u6dqtyag9gws3bp6ay366] c:\docume~1\admin\locals~1\temp\hiyo23v.exe
uRun: [iatahlxdzpzmpzh] c:\docume~1\admin\locals~1\temp\rilgqtz.exe
uRun: [x7nfndvw8fwxez8sta3418ea] c:\docume~1\admin\locals~1\temp\y541p45vis.exe
uRun: [ibf0r5lxb] c:\docume~1\admin\locals~1\temp\f4umrgiq.exe
uRun: [sdvh6jxrfkd2j0gl6iynsa53gyt] c:\docume~1\admin\locals~1\temp\yrnlyltsi.exe
uRun: [n9rcfncaxv6b4yecjf6wbcj] c:\docume~1\admin\locals~1\temp\gvzkzgn8d.exe
uRun: [zssk75mu32hp9v88vuhwap4q1huo4jpg39hwb] c:\docume~1\admin\locals~1\temp\y188xj3.exe
uRun: [intvyj186pxjr6gk3zx] c:\docume~1\admin\locals~1\temp\kt9fdxml343lq.exe
uRun: [odsasd1bkfm7iy0gen59mfe8ib346vtdzgx] c:\docume~1\admin\locals~1\temp\zw9zg4p6jmq.exe
uRun: [iah6vl8xy] c:\docume~1\admin\locals~1\temp\whqmmsw.exe
uRun: [kapqbul1ovlo83ikrvr6ckxdv1or0bm] c:\docume~1\admin\locals~1\temp\p4yvf6mb.exe
uRun: [euqh2tza9hk2y99] c:\docume~1\admin\locals~1\temp\dq71gcmly.exe
uRun: [j361mfndthwno38dpp4oj4] c:\docume~1\admin\locals~1\temp\i6oh1pj8mzu7.exe
uRun: [bytzghpkru] c:\docume~1\admin\locals~1\temp\oe94ckcs1.exe
uRun: [bel1tc7de75i3s] c:\docume~1\admin\locals~1\temp\gwg8168x.exe
uRun: [z5qr5e8kmtuzq1o] c:\docume~1\admin\locals~1\temp\lll4gmo.exe
uRun: [uzogkkq5gjukp] c:\docume~1\admin\locals~1\temp\bckgmp9gyb.exe
uRun: [nf7bqgb8ywllb4y3fvvq86z214cw8396] c:\docume~1\admin\locals~1\temp\jgwf6ki6fh.exe
uRun: [sxt7grajou913a1gtmsk] c:\docume~1\admin\locals~1\temp\c3ped6t8z54.exe
uRun: [cx6zvnzmtrh7vl1oc0u1vrxpplkih71z1h4uc0arhfv] c:\docume~1\admin\locals~1\temp\i2conz.exe
uRun: [y5yicvz8jnt9nqto3] c:\docume~1\admin\locals~1\temp\pbetcr7d.exe
uRun: [ysuhhjhkug9s0l6gp7vsw28vfhn5k4e1xgfvdipg667b] c:\docume~1\admin\locals~1\temp\cim1s3.exe
uRun: [ysecylu4yk] c:\docume~1\admin\locals~1\temp\d9bzxyeklck9.exe
uRun: [pek2t3s0mke] c:\docume~1\admin\locals~1\temp\zpi1a063y.exe
uRun: [a4r8w1zcw5wcjyir20krr1qarpt8ceyqyxisqxo] c:\docume~1\admin\locals~1\temp\zu1ljhbh.exe
uRun: [wfd2dgrzpv1h4xv00] c:\docume~1\admin\locals~1\temp\ihqbjwifq.exe
uRun: [azwwklq7p7] c:\docume~1\admin\locals~1\temp\knfovourduwpp.exe
uRun: [gidyuyu195gfih3s9u67cx2k1nfcgvi5udvkuw] c:\docume~1\admin\locals~1\temp\envqg006.exe
uRun: [iwr29qaijs8wtsgzef6ehxm5dtvt04azrwzl0dkpl2leqwh] c:\docume~1\admin\locals~1\temp\nxa814u86.exe
uRun: [nf29q22i2zedyyyrx4ej0po9o77wp1zj3kdltgj3kx5foj5] c:\docume~1\admin\locals~1\temp\gyk6ishwqo6.exe
uRun: [wm9aotylu05hzfuc] c:\docume~1\admin\locals~1\temp\g33q895aq7.exe
uRun: [iheif76mn4nbphfe6bjdpe5dptq95f5z55m8460zvb3ck] c:\docume~1\admin\locals~1\temp\hrwj4qptnl1o.exe
uRun: [itd513fh8fwlwfx9s7xishnfxz56953boj631x] c:\docume~1\admin\locals~1\temp\a73l0b0cj.exe
uRun: [fashht9y6bye6xy5jm9v] c:\docume~1\admin\locals~1\temp\kdqlg8f.exe
uRun: [kjgh7vu1bc14mzchyl0f45] c:\docume~1\admin\locals~1\temp\fjsplt6hrau.exe
uRun: [ektlsk5g9q7k] c:\docume~1\admin\locals~1\temp\rqi4wlyz0.exe
uRun: [tdwnnyrbbbh9zj40s57v3tqls4m55su8i6m9on2u2s12h] c:\docume~1\admin\locals~1\temp\jiza450tq.exe
uRun: [ul3i0hxsvdkpfi7syc0njsqlrxpyu8ca03fp] c:\docume~1\admin\locals~1\temp\ji6uxnt4xzu.exe
uRun: [enw4ao3q2izpfg4v6ycdaylqr1t77cp4dmwuk95nay5wdv] c:\docume~1\admin\locals~1\temp\db4e51pz3uhne.exe
uRun: [bniolqo24fkcqvzq8fkdh2mra65rrb51p7g283sa1] c:\docume~1\admin\locals~1\temp\whxdvn.exe
uRun: [u731je56cas6g0gqznsiiz] c:\docume~1\admin\locals~1\temp\s2gfo74n.exe
uRun: [w13ivkru2] c:\docume~1\admin\locals~1\temp\ktbz7djfs1o.exe
uRun: [i6h51g40kpn6b830fwr77tx909q9l3c2bwn1x782u5lu8] c:\docume~1\admin\locals~1\temp\ymp2j3l4.exe
uRun: [n8kpmd4yool] c:\docume~1\admin\locals~1\temp\jopl6unx1.exe
uRun: [hu1ar8c1rdrq124hloywzccbs0mzj5hwvpji68eh0guyyiy] c:\docume~1\admin\locals~1\temp\g0dl9vbu863v.exe
uRun: [izce65bo0co6nsisb8jtqpzfc6yfnt] c:\docume~1\admin\locals~1\temp\ywkmp02lr0fo.exe
uRun: [gax57dgq0v] c:\docume~1\admin\locals~1\temp\r2d4w5dnbomm2.exe
uRun: [e0s72py3fa1w7ifgn8hazjz] c:\docume~1\admin\locals~1\temp\re14g61k.exe
uRun: [srk037gq08itr9eoua8f4d9l95yan9u0f9i] c:\docume~1\admin\locals~1\temp\mu8u8sif.exe
uRun: [rs73nxx6ijgowki4ynrsb6tkqf745d5a6j7b] c:\docume~1\admin\locals~1\temp\wi7mcyy39ft7l.exe
uRun: [yqwqkvogp4] c:\docume~1\admin\locals~1\temp\jqw1f99zk4.exe
uRun: [a9aamu94092jwwyli83x8378cmq1p4zc728dn0jws2v9] c:\docume~1\admin\locals~1\temp\u4k11u.exe
uRun: [pbff8f7xmhfdd6xjtluuhp4ckz] c:\docume~1\admin\locals~1\temp\ewfmg4.exe
uRun: [v1kufauyhq5v59p0e4pbur1h7nm0cz] c:\docume~1\admin\locals~1\temp\eihppl8duy223.exe
uRun: [wxbzmy8a283lbjjzult54zji9tz6memz6x] c:\docume~1\admin\locals~1\temp\c3ugc8p.exe
uRun: [c0h6qhwxfvix7or2fd0hradugmr4z5p2g55kwnjkn] c:\docume~1\admin\locals~1\temp\ay5r26jw7s.exe
uRun: [kzostw0aj] c:\docume~1\admin\locals~1\temp\a3s1pv9zn.exe
uRun: [gabo1w7oooxcjohgm96] c:\docume~1\admin\locals~1\temp\zy6nocu.exe
uRun: [qx0x3ynvkt1kak9zrr2bzef07fi5x3fg95py8gexwppb0] c:\docume~1\admin\locals~1\temp\khlggeb6.exe
uRun: [ggku4x6jfgcuix6vg45rz025xwlejfnsdx9h8ejl0lt] c:\docume~1\admin\locals~1\temp\km40pcz.exe
uRun: [brijipochl] c:\docume~1\admin\locals~1\temp\zuzkpieri4.exe
uRun: [onycrxs3vtjaqfo8asi7j] c:\docume~1\admin\locals~1\temp\zzi4yzj51.exe
uRun: [iapcwrqbsrebl928i3694m020lwfjiqzevm8r7w87it55boo4] c:\docume~1\admin\locals~1\temp\yuwqgz4.exe
uRun: [wf0x8x1pzra0] c:\docume~1\admin\locals~1\temp\c4u4ey.exe
uRun: [mb0o163pf6yowxyf0naqadillnxomulg0de69xoueo4z2] c:\docume~1\admin\locals~1\temp\xkyv37az.exe
uRun: [z8zt6fgwhuubgtxbezk9ws9emy] c:\docume~1\admin\locals~1\temp\qctefkco.exe
uRun: [y064bpdt0mmr2lrj615jqr182v0vv1hv6jeulvp8eskcf0] c:\docume~1\admin\locals~1\temp\t6elgwam7zgk.exe
uRun: [wj5f24ptvu9k1uq8vvfnn4j131] c:\docume~1\admin\locals~1\temp\zq48bs8ktbfh.exe
uRun: [xb0bo03i0eavmmdfy1ot04kwmxjhoagdmzzsgmibdm0] c:\docume~1\admin\locals~1\temp\ep47fo5.exe
uRun: [z5h89mcg94j77b5uwl9zh4ocm1cbi] c:\docume~1\admin\locals~1\temp\o2l5f11dqt9d.exe
uRun: [hgkur5s0sbg24hqent8d81vw5va6ngws8o4e6htdsad2f] c:\docume~1\admin\locals~1\temp\lob9y0z2x6gqh.exe
uRun: [y2jkfw24p62rns7e3qmi54yvaonun70vas77rl9qi] c:\docume~1\admin\locals~1\temp\c1fz53zty6.exe
uRun: [giymwh7gmu423ct61g6rvzpgb890cc71o1hvug5v] c:\docume~1\admin\locals~1\temp\ktkymxk.exe
uRun: [tdu3uothbjy2q1d4y] c:\docume~1\admin\locals~1\temp\qit57a.exe
uRun: [o4yv6rdgilgvgpjt8urzf4jqe3uv9nv9] c:\docume~1\admin\locals~1\temp\jjmkoyt5.exe
uRun: [m01jxdmnxli76hd59kto7fwhv0gaza4k7ss9p2] c:\docume~1\admin\locals~1\temp\lk9wrsj3101e0.exe
uRun: [j2uwjuc9nx12g8nme1xe406rs7pb2ic] c:\docume~1\admin\locals~1\temp\muxuz9.exe
uRun: [lx2gpylymd2pd4a] c:\docume~1\admin\locals~1\temp\h0gf4ubmeu.exe
uRun: [v65dtf5fexyyaw1dbo3t4sd] c:\docume~1\admin\locals~1\temp\z16jtg7rx.exe
uRun: [c80ms9f056lqw2oq0xm43tfbb35ls9] c:\docume~1\admin\locals~1\temp\dqik6ckmku4.exe
uRun: [s0kud5vgzq7ymh4juag0ovt4ch484ywvft8er37] c:\docume~1\admin\locals~1\temp\soi10lithc.exe
uRun: [jwj0f5br9sre0lisx06y69jpz3pkgvvb3lqf] c:\docume~1\admin\locals~1\temp\gmfol9.exe
uRun: [fdzwkvk0bci8q8x7y2qd34o1jkronr4v89hjd3q2iggq0w7p] c:\docume~1\admin\locals~1\temp\jljyc2stu.exe
uRun: [qur8juwffm1] c:\docume~1\admin\locals~1\temp\lvr7vl34dpbz9.exe
uRun: [jtw8shs4prfl27g7m8ssxfuyxfz710flnej97yfdgoum] c:\docume~1\admin\locals~1\temp\spf8ogs2t1ni.exe
uRun: [ec7aw0bnjbarxs1qncq1tfeecnetnzv672ls0jcymn8ejgl] c:\docume~1\admin\locals~1\temp\ilg430.exe
uRun: [ma25tfduxmexgi2svzz4kth] c:\docume~1\admin\locals~1\temp\ytljo7.exe
uRun: [r9lf7wwme3l9qtq9cw743cmop432h5p] c:\docume~1\admin\locals~1\temp\q1g3owfg0.exe
uRun: [wjmfc7hkb28i87nvjriungjw2r7mnh5xic4h] c:\docume~1\admin\locals~1\temp\ix44n167j.exe
uRun: [b5lkyf6py4c3ycsg5eh3nva] c:\docume~1\admin\locals~1\temp\wjda5oph8e.exe
uRun: [c0iovbfizo4navs5y0h7ho8zvtt8y6u6] c:\docume~1\admin\locals~1\temp\t0kuy6isy8qo.exe
uRun: [cwgnl2uhy3b2465lek340] c:\docume~1\admin\locals~1\temp\lrfvycx.exe
uRun: [bomts11acuruashsv09tp58] c:\docume~1\admin\locals~1\temp\pb8cla5xb2.exe
uRun: [m2rb91krw9] c:\docume~1\admin\locals~1\temp\g7c2sd5.exe
uRun: [abjghu5f9d5ex] c:\docume~1\admin\locals~1\temp\gojm2vygj.exe
uRun: [a38tapn8tq9flwnd6qtc1x99903dgfke22k2] c:\docume~1\admin\locals~1\temp\deo2wfhzqq24h.exe
uRun: [llnyf6w8nrn2v19789drngvbc6xstb4ngnn1rx4] c:\docume~1\admin\locals~1\temp\n24b04x6bx.exe
uRun: [ptq0306bt0g9kwtjlc3e06mz9w8xegjodyhkdf] c:\docume~1\admin\locals~1\temp\nxlranssbxh.exe
uRun: [wcfrw2k2zk9qd4qgn976j1d83mv7uc4yjghppgo1vo462xc] c:\docume~1\admin\locals~1\temp\p7d0o1iqm95n.exe
uRun: [coea1lhh7d1p4sc04nmnjaf8kw1fcr8mkxowooshcm11p84c] c:\docume~1\admin\locals~1\temp\aqwjubkjpr5ew.exe
uRun: [ysz5j01kcgl7lbgrqhi070p3soe6qtvqm83on3d8p9ri47729] c:\docume~1\admin\locals~1\temp\m210cs1.exe
uRun: [d1hmmzodhpytq477o917az2q4hu9g12] c:\docume~1\admin\locals~1\temp\t1rlae0z9fzpf.exe
uRun: [mv9by5mzk1ekpzrhpybiii1qpax] c:\docume~1\admin\locals~1\temp\wcjcl8r8ear.exe
uRun: [r7jpsnzl21yry6aij7frjs8yu9r] c:\docume~1\admin\locals~1\temp\otc95gd4.exe
uRun: [eszvkmb16zhz2lq956w7i8] c:\docume~1\admin\locals~1\temp\c64jm16.exe
uRun: [d6oyzsrnzwf94za] c:\docume~1\admin\locals~1\temp\z1w9kty9zy.exe
uRun: [itxiuqnwp1eozn8hcdtbywwoks5m] c:\docume~1\admin\locals~1\temp\g0i48x7f.exe
uRun: [ngx6s3fzbfb6ju6jrle] c:\docume~1\admin\locals~1\temp\ia3tctl.exe
uRun: [mbu42fx6jzxxjijlr5btolfl984ht] c:\docume~1\admin\locals~1\temp\mu3b9qmuxg1i.exe
uRun: [o3eaw15xd9fzr8h5lq3py] c:\docume~1\admin\locals~1\temp\hwqm3qbrszjja.exe
uRun: [t9cjpuswc8n3hb27nglq0vnfvpul5xymjpy226dz] c:\docume~1\admin\locals~1\temp\h6l696s84.exe
uRun: [qrlkeitn8b2f22ojcsz4wdqbyd1qgi1d9zveh57gn61yl] c:\docume~1\admin\locals~1\temp\skspzyiyeh6nd.exe
uRun: [nuf13iipulh87kf1pkz8a1blv1ycajj8vf] c:\docume~1\admin\locals~1\temp\sun9oezf7.exe
uRun: [ffxcxosb9beoz9v1jzb4fjkjgaocacgbk81z0tnenj1] c:\docume~1\admin\locals~1\temp\c8k35umy7.exe
uRun: [h1l7dddwtb9f91tpuc8tys1v7xf7e04pka3] c:\docume~1\admin\locals~1\temp\yjwg9rlr.exe
uRun: [tb6y2zllx0a4srgor93k8cik9aocz02nhxayaf9e4r3r7h] c:\docume~1\admin\locals~1\temp\dnswohq662snk.exe
uRun: [xcrgdl669t0ahmlqdtf0kwmyc3p3gumddmpwsws45602u3y3] c:\docume~1\admin\locals~1\temp\h7sxlerffc.exe
uRun: [wghn0ovhj] c:\docume~1\admin\locals~1\temp\lw4fyaneswz1.exe
uRun: [a6yw97h2i8ozkf2oiatknu54vlvi6wylmka7yy808spo6r] c:\docume~1\admin\locals~1\temp\a4zzhg2.exe
uRun: [unem0dms4l4xgyuita] c:\docume~1\admin\locals~1\temp\obbiofbl9j0cg.exe
uRun: [sgcwgl0fcqoaqumo848n] c:\docume~1\admin\locals~1\temp\ypf71y.exe
uRun: [ya0uh3dgo] c:\docume~1\admin\locals~1\temp\fj38bc4iwopzq.exe
uRun: [j7rx6yvz24nuao9rbfqlw2icx] c:\docume~1\admin\locals~1\temp\qlmrh7.exe
uRun: [jx1knk4hbnxb3udsx9i9oznzi9r8] c:\docume~1\admin\locals~1\temp\gt862t.exe
uRun: [rr4jejl75hg6xn1qbk304z] c:\docume~1\admin\locals~1\temp\qmjymhx3.exe
uRun: [d6aocjct2lvf542akgjmvm6pv6ql5eawwr68co5s] c:\docume~1\admin\locals~1\temp\rr5tnhchtp.exe
uRun: [e0jq8415lmm40vlmn5xitejxakdx8nfoj2xc] c:\docume~1\admin\locals~1\temp\rha9yk.exe
uRun: [xs2krc5rvt2aisf8yhfrf88ju9xsoswtydnnxlzqfg] c:\docume~1\admin\locals~1\temp\h8slnngu0.exe
uRun: [nlf2fsyah2bwtedn0wtmwpzxpldpskqrp5rwpcy2ph] c:\docume~1\admin\locals~1\temp\jeeh2kwj.exe
uRun: [xwmqez8pne50xlewlc63b3dy] c:\docume~1\admin\locals~1\temp\hub5dll8.exe
uRun: [vuv1ben8ali81e4895gmxusnawp4gvyj9nlbz49897x2s7wdk] c:\docume~1\admin\locals~1\temp\qdl2lf.exe
uRun: [tqx9f8lbzzjqtvqtaowat7na0e26699650fgldqnje0b] c:\docume~1\admin\locals~1\temp\a567t71o.exe
uRun: [a8c51rigpmg7oupz3mbkjtsfqx04ztiuxoilkhbapk] c:\docume~1\admin\locals~1\temp\dbfee1n.exe
uRun: [h2oyl8rlx66gxcepf8xnkyxywwa5xv7fu] c:\docume~1\admin\locals~1\temp\v7mydpe.exe
uRun: [a2jzmmj3uzdwsjzsjrgufqkgx8zjgkg8c9x0w3u06x6n04] c:\docume~1\admin\locals~1\temp\z0kcbo.exe
uRun: [h8d0ughh3s19033tyxsllbaiyxfqfktlc3j] c:\docume~1\admin\locals~1\temp\c6tjw18m7e4ue.exe
uRun: [lv9sb58s2jazjapvzs34lnfxbef] c:\docume~1\admin\locals~1\temp\glahkh401el.exe
uRun: [yt7ows6hgqfk2sdlzhen52w68kmyua87u4vox68piw05h3xqr] c:\docume~1\admin\locals~1\temp\xhe7r348.exe
uRun: [bk48b9crgev9] c:\docume~1\admin\locals~1\temp\cqqq1wi.exe
uRun: [i5005l9rj0rlh] c:\docume~1\admin\locals~1\temp\a6z0v4.exe
uRun: [pzwgag2utxyt73q8vneq7l84] c:\docume~1\admin\locals~1\temp\jkx8ua.exe
uRun: [rf0qz3jf6cu5hyd1pkt7p5e3] c:\docume~1\admin\locals~1\temp\sod3rx.exe
uRun: [l7qlsn2agygqfg9prtoirow8mnjbdl] c:\docume~1\admin\locals~1\temp\as6yle.exe
uRun: [kob2rv1rj4x7dvyym6fjhvaynpzynax3rdzch4pionpeeykc] c:\docume~1\admin\locals~1\temp\p96ff4to48218.exe
uRun: [jf9nz449tkw7osntj88chqj1khc5kgd6dn9i97] c:\docume~1\admin\locals~1\temp\xnuy5fjee.exe
uRun: [x2aczlu1zyzeyxkbv9xr] c:\docume~1\admin\locals~1\temp\qestxn8.exe
uRun: [djc5dsbjbx9cx10nltmbrdq7kt1mktn7] c:\docume~1\admin\locals~1\temp\ibw116ql0.exe
uRun: [ey6vw8tzy] c:\docume~1\admin\locals~1\temp\lp6xi7sw.exe
uRun: [dxzlgetmboqhhhyurwrw90b0vgi6rzd] c:\docume~1\admin\locals~1\temp\s8a6pxw0.exe
uRun: [ptnb3fv58nwgxe7b1ws2qudc91v8p97p6xcy] c:\docume~1\admin\locals~1\temp\g1os14fayx6xj.exe
uRun: [tm36qk2bqighnnjrfh3h] c:\docume~1\admin\locals~1\temp\kq7uoi4gb.exe
uRun: [kirswj5dkoywl143rwt4jgtd7zydx2brk2jnmitc2gx3a8miuh] c:\docume~1\admin\locals~1\temp\kg5qp3bosxn.exe
uRun: [ck2c275j7llainty4fozp2s5wwugdzbb] c:\docume~1\admin\locals~1\temp\zy2e77j41ln2.exe
uRun: [g3pbgalcqp4r9n1ghelj4hsh8n184r8sfgic] c:\docume~1\admin\locals~1\temp\jllz6ip.exe
uRun: [ntmc544t8a4n37an2yaz8si] c:\docume~1\admin\locals~1\temp\j74jwz.exe
uRun: [k0qlpjwkbecefhmwlw9d3] c:\docume~1\admin\locals~1\temp\xoumoot4.exe
uRun: [yo0yi1tjx1vwx5rci387jsbtyr8wn235ea] c:\docume~1\admin\locals~1\temp\i2i5egyjss4u.exe
uRun: [ivwy3alm7o7ngc2944o33lgpdyjybh2l6eh6xv5ktvbaj7z] c:\docume~1\admin\locals~1\temp\b8unll962bjd1.exe
uRun: [mkbpyelj05y82s] c:\docume~1\admin\locals~1\temp\f1ly9lorg3.exe
uRun: [d1yvgcd8jnsgk5sw4ii7bh823b] c:\docume~1\admin\locals~1\temp\lraczt1vx4q.exe
uRun: [msv9o0zxff6] c:\docume~1\admin\locals~1\temp\tv3bjoa4eai.exe
uRun: [qlv3i0lay9fkr2oyfzrb3yfg7] c:\docume~1\admin\locals~1\temp\igzlozams9h0t.exe
uRun: [ehlo5cf2z] c:\docume~1\admin\locals~1\temp\sqhxi5e7d.exe
uRun: [r94yfjlucg2ez1j1p7zsq9kpsv] c:\docume~1\admin\locals~1\temp\g2v0dv.exe
uRun: [s687g5c5zhu5szefcs7z8ypglg6ktr5gjocl1dx] c:\docume~1\admin\locals~1\temp\o22mt4s42.exe
uRun: [esy21b67mz7cpzjsbgsvqptf6a6] c:\docume~1\admin\locals~1\temp\vksocg5.exe
uRun: [t7stnhhahz6ijm8z4bt6c72qcgqygkwubhy0ari] c:\docume~1\admin\locals~1\temp\rhgq81xze5vq.exe
uRun: [sxd9jtscselttyk6zadpf] c:\docume~1\admin\locals~1\temp\n7m6v5i9peavc.exe
uRun: [ooca8khv0wde0q172] c:\docume~1\admin\locals~1\temp\r096fjloos.exe
uRun: [ebtv0hmnrpv99lo8owdehae7qdn2jjt7l2z67tr1304cy] c:\docume~1\admin\locals~1\temp\w6y28u.exe
uRun: [dvocv3wlcwxlls6] c:\docume~1\admin\locals~1\temp\bfa2i6unsz614.exe
uRun: [pt1cgb77jjqnus41o5lheb3tstwd2] c:\docume~1\admin\locals~1\temp\sw0oacp.exe
uRun: [o131yw2hmps1n] c:\docume~1\admin\locals~1\temp\qwa2vwsuph6t.exe
uRun: [ktd1mui0gmqdk230et66aiiw8dcwf3nmmp2kuawzdtm] c:\docume~1\admin\locals~1\temp\o8lulum.exe
uRun: [xisy51aq24v1i5pk2y8nt6hf284nn3q0k8] c:\docume~1\admin\locals~1\temp\kjwj73khm.exe
uRun: [g8anf38kk7dl2s87gwwo71xvpiaab2fjd5gzckrh3h] c:\docume~1\admin\locals~1\temp\piqstb6p.exe
uRun: [fh027nqz1wwu5uflqj94n4pagd9uvfjqrnz289hxglsum] c:\docume~1\admin\locals~1\temp\v7sf46gqm5txf.exe
uRun: [ougq3etq9cl] c:\docume~1\admin\locals~1\temp\glzyuy6gf.exe
uRun: [b0os2rkbbgq0o4dwnoqwm6d21d5gpuzqebmnv9gm5sz0t] c:\docume~1\admin\locals~1\temp\q9fqyn.exe
uRun: [kmup73n0iuvnb8z0u] c:\docume~1\admin\locals~1\temp\qeha74a10ofb8.exe
uRun: [grc99snoow9iyp3cihpfhpduirg75cqck8bzrrwn1w] c:\docume~1\admin\locals~1\temp\wdehof.exe
uRun: [ctdgjyqct170px3zogtgk8450il] c:\docume~1\admin\locals~1\temp\pe7fm37q.exe
uRun: [foc1jne8w3d95wsyr21c] c:\docume~1\admin\locals~1\temp\ifoewq66jiey.exe
uRun: [c64e3d1bbrn1bm1b0wn4tevq5hubf2cnsplv] c:\docume~1\admin\locals~1\temp\xnjfwwl.exe
uRun: [evmgpz8v0aeiqv5ynxfdwfp0c1] c:\docume~1\admin\locals~1\temp\dvl27ree7op5.exe
uRun: [h9gxopnk3923gv53z21t6zz5ovg2x1tqcs053vkp] c:\docume~1\admin\locals~1\temp\sy470cpktm.exe
uRun: [fexlk05zz1xpt0rutogjtzcn97yuahxys3k06v6bcf649k] c:\docume~1\admin\locals~1\temp\kubnq38qn0.exe
uRun: [cxyuxm0kdrtz5xg6jr89vqttybvobsuxzax0brd0fpq014] c:\docume~1\admin\locals~1\temp\dmnp6po6q7.exe
uRun: [ouiov7u9ddamwt0q74ru58b86ba3e62bmn] c:\docume~1\admin\locals~1\temp\bhh0wni97j6kb.exe
uRun: [ty42l8rnv9tgb4jswm252w88] c:\docume~1\admin\locals~1\temp\qucl5r6.exe
uRun: [pbyq750eaycev9j96xkh] c:\docume~1\admin\locals~1\temp\i2755g0znv.exe
uRun: [ed7k4fpxruho8whjlnb] c:\docume~1\admin\locals~1\temp\yyok6mb.exe
uRun: [s6f8ex1jvc0ahis7rgmpofr661b5o9p9eixsv41mi] c:\docume~1\admin\locals~1\temp\xt26omfnwjz9h.exe
uRun: [mz1i0d79y2muygiigfrmei5wdupzxl5m15] c:\docume~1\admin\locals~1\temp\ic2pud.exe
uRun: [uvt73btf9dxh] c:\docume~1\admin\locals~1\temp\a8gt3011.exe
uRun: [gqc2bf5ksved2wfw8x3jue8v] c:\docume~1\admin\locals~1\temp\p6xax9z.exe
uRun: [f8invx2pi5fu5wfqtoh14dzgt9h03d9g] c:\docume~1\admin\locals~1\temp\auzdth6.exe
uRun: [t3ef7xzpggxqbgw8pzies] c:\docume~1\admin\locals~1\temp\ta6fp2hyl2fb.exe
uRun: [a0be3aggramuvj] c:\docume~1\admin\locals~1\temp\og8junp6.exe
uRun: [koz4m1daac1g4tk] c:\docume~1\admin\locals~1\temp\oswjeod34we.exe
uRun: [kd4vcd89e8p2cv8fv2qb9wbl4j9] c:\docume~1\admin\locals~1\temp\r5hqfhbm.exe
uRun: [gwt3qdacete] c:\docume~1\admin\locals~1\temp\gy57t8xm69.exe
uRun: [jrgj4d0hmjwdy55zxromkf] c:\docume~1\admin\locals~1\temp\knhp6nahtf7n.exe
uRun: [aq37x6j7ffc59st9] c:\docume~1\admin\locals~1\temp\pcg1pg.exe
uRun: [r79zujtna8q5p5kptrotvwdns] c:\docume~1\admin\locals~1\temp\xgsh9b.exe
uRun: [xxmgxem266vz1kr3ljuywbuvll0dhx21u4rf] c:\docume~1\admin\locals~1\temp\t1sj2c6d.exe
uRun: [pnsy68dume2pj3s6y9cm1brypfdq168kuj35083fl4e8pgog] c:\docume~1\admin\locals~1\temp\eagij6rpnl76a.exe
uRun: [pmm6lkdpux5a1hsycw6sc8u7g58j18] c:\docume~1\admin\locals~1\temp\hd6me2pn9x6ke.exe
uRun: [w8sqntylgaidzejt5es27d2qyiw] c:\docume~1\admin\locals~1\temp\pmblvwazj9.exe
uRun: [pkq0ysasgo8t6thz] c:\docume~1\admin\locals~1\temp\epumy3dk.exe
uRun: [uf86kayq14spay7kdqy90nrda2emgvc6d9g] c:\docume~1\admin\locals~1\temp\ban2cok.exe
uRun: [dhfmy2wun985glvw7u2cbredrl16mp1p6rzhnmr76q2zc1g0c3] c:\docume~1\admin\locals~1\temp\pru54dfd2.exe
uRun: [ybo9xc111xulrljt8dpj4ieubrq84a] c:\docume~1\admin\locals~1\temp\ekmno3.exe
uRun: [hebizqi46hsgoifzjml0y8eofecwl4zh] c:\docume~1\admin\locals~1\temp\oywr6v7w89.exe
uRun: [d0lw3plk9wrbwzluapi5n33zhr93u035e1z0r5h9uu15xg] c:\docume~1\admin\locals~1\temp\koyw8dgwx9f.exe
uRun: [l0d50jn7xktvjx] c:\docume~1\admin\locals~1\temp\sxtwipujey.exe
uRun: [y74zw2mo8g9] c:\docume~1\admin\locals~1\temp\s7ozo5.exe
uRun: [n595piufk7sffgru33xhvpx8bvwu2o6gz] c:\docume~1\admin\locals~1\temp\cb7kng0fg.exe
uRun: [u9r10va4jie2zui2auhfr4245] c:\docume~1\admin\locals~1\temp\fl24twhfssacb.exe
uRun: [kvtyhsdeobj1tq7wkvibc2bkz0vhcisere7b92nosm] c:\docume~1\admin\locals~1\temp\jaxqw6l.exe
uRun: [wxyb18n9srawifw1k0o4rzalonatj1m1rigq2qj19xl1k7c7xt] c:\docume~1\admin\locals~1\temp\q9478nomvaxgv.exe
uRun: [vrlhtdb8jx56ytkf0a2anxvs5u6h8die6w] c:\docume~1\admin\locals~1\temp\f0zr8t70.exe
uRun: [ylo4jlheihn7kjaju6carbi2o0kunb6h] c:\docume~1\admin\locals~1\temp\bg6t4vetys31y.exe
uRun: [vggustlg18jki8lkvu6kc7bl] c:\docume~1\admin\locals~1\temp\qt1ediy.exe
uRun: [osv8hfj9kfkkg727x1udvh] c:\docume~1\admin\locals~1\temp\w88hzxrf.exe
uRun: [cas4ca9vck74uxw] c:\docume~1\admin\locals~1\temp\ip8ytnp.exe
uRun: [x94ra14mht0fu9dmhpyhi] c:\docume~1\admin\locals~1\temp\a7y2i9.exe
uRun: [x3u58qmvi82qjc6dq79zofkefjadmrpiymvzxz5q] c:\docume~1\admin\locals~1\temp\dhtm7plrla.exe
uRun: [d3iv540ld2fcvwl] c:\docume~1\admin\locals~1\temp\erykfp5jmnc.exe
uRun: [j3yzz9uhcu5rlxoq1vib1v8ppmbfd6q35xl2xq9c5zhto] c:\docume~1\admin\locals~1\temp\vn2amsma.exe
uRun: [mpe6f34qt6] c:\docume~1\admin\locals~1\temp\g62ts2737.exe
uRun: [cu1csuo9od9qw55kwt0wdjf3pt] c:\docume~1\admin\locals~1\temp\jgxdyiokjbcwg.exe
uRun: [b9220ni75ci4qnx3vx3p05ewv] c:\docume~1\admin\locals~1\temp\gbldijch.exe
uRun: [j6hpyvndgrlcsanltlwdrya8sibu7ugzbf4tria1c] c:\docume~1\admin\locals~1\temp\nabykv.exe
uRun: [x3dl1wcahgwumx90kqtbsvgncscrr04o3j2c5epgnv9d5] c:\docume~1\admin\locals~1\temp\z3gfymsx.exe
uRun: [mk2gslrh7bcinleesc9] c:\docume~1\admin\locals~1\temp\b361wlpm25y.exe
uRun: [annd5unp5nnfanemf90148s4jzi01569h2cjipinrsnvxs63pk] c:\docume~1\admin\locals~1\temp\ve4xlq.exe
uRun: [tkxukx657ylulvbg] c:\docume~1\admin\locals~1\temp\jmw828.exe
uRun: [n01cjqrtkhl974iarfmwdy4lkylhpjavcbj3] c:\docume~1\admin\locals~1\temp\iha9uuotu6ac.exe
uRun: [toplwd6q7leksnr] c:\docume~1\admin\locals~1\temp\cs8mjze.exe
uRun: [mvq8lt96bio] c:\docume~1\admin\locals~1\temp\ql3pv6x2bcyj.exe
uRun: [emozf9n9qtl] c:\docume~1\admin\locals~1\temp\sqcejm.exe
uRun: [mk0bco6gll8c87o2rkt9j9t1w1ys] c:\docume~1\admin\locals~1\temp\iyht4t.exe
uRun: [mhqk0y48x0wrzzmthsgvt9dcgm1rxs4wr2wfgo97p] c:\docume~1\admin\locals~1\temp\mvyi0e4q0k0.exe
uRun: [em5lm8rx4ctg3ekscad10] c:\docume~1\admin\locals~1\temp\wavwgjjego3.exe
uRun: [uc83juln8p5103m53lfnte3bfek7s] c:\docume~1\admin\locals~1\temp\hmqis927.exe
uRun: [idcku5tjps] c:\docume~1\admin\locals~1\temp\kwl2h6jooi2f.exe
uRun: [bywka4a53pmm] c:\docume~1\admin\locals~1\temp\rvbn01w04u.exe
uRun: [ir0a4n6duxx550rmw3ejbuo20ndig8jgbqajsd9y3h3kwf13n] c:\docume~1\admin\locals~1\temp\vkn5dx9vr080.exe
uRun: [lyizlti7q7hlvqxqeu] c:\docume~1\admin\locals~1\temp\zviqgar4ifgt8.exe
uRun: [p4bukowe04q] c:\docume~1\admin\locals~1\temp\ji1bf4xj.exe
uRun: [e6bvbu7bu25gmw55j] c:\docume~1\admin\locals~1\temp\z4g3hvy.exe
uRun: [mlb2mgz320aaqv81n] c:\docume~1\admin\locals~1\temp\fy8db6p2j1kgr.exe
uRun: [v9a1k4jf11f25] c:\docume~1\admin\locals~1\temp\xqt168l7.exe
uRun: [kcz9j55rlu7jok6n7s0w84184afmpwaqp46i] c:\docume~1\admin\locals~1\temp\bk7msl3g1.exe
uRun: [cxvvaxp856] c:\docume~1\admin\locals~1\temp\pd2p4b.exe
uRun: [r7nby0cyrj90aewo7di6xppgyb36r6r58sggtebg1c7hsu] c:\docume~1\admin\locals~1\temp\wqq7x6uod7oc2.exe
uRun: [xrynyyx5jmn319o38150ao] c:\docume~1\admin\locals~1\temp\jjhi3z7bid.exe
uRun: [x83rltjjvji5kztxzugdmq4lu6o9vtp18k4] c:\docume~1\admin\locals~1\temp\h9gtdyps.exe
uRun: [qvdlzd6309mutia6hjpcxkxeyod7e] c:\docume~1\admin\locals~1\temp\hesttx1vzpux5.exe
uRun: [c45ys1eczp6mqwd3ar50dxnasf90zygrr20k] c:\docume~1\admin\locals~1\temp\l274iy4hap1cp.exe
uRun: [jq3rl4gz067ew7gmgrp22e55hbrnvl0e0033] c:\docume~1\admin\locals~1\temp\h4xq4hke6.exe
uRun: [iqhv3viu3ydmf7g] c:\docume~1\admin\locals~1\temp\kt6x8bn9.exe
uRun: [ovz23b5v4v2zfotw8] c:\docume~1\admin\locals~1\temp\y1yngybe.exe
uRun: [e8643e881geo7] c:\docume~1\admin\locals~1\temp\cbw1ex2.exe
uRun: [ujtsa43cisrt4w2lkkv] c:\docume~1\admin\locals~1\temp\o41ib7oiy.exe
uRun: [fbe0oqrbt0ejii8wooovtvddu25xfs88f2j68wp] c:\docume~1\admin\locals~1\temp\kk8ko9.exe
uRun: [e7nbi3ixjx6boxevu8qnzfr5i9av4rvo6s6a9ulo9939] c:\docume~1\admin\locals~1\temp\b7exuaqkc.exe
uRun: [mn2tl5g7movr9brc88nifzf0hp4uhz3h9qnsb4vlu] c:\docume~1\admin\locals~1\temp\ax9z3t69.exe
uRun: [xd1fb3du6rc679yhhs9uuplmx7epp7audq8164dk0zlrxd] c:\docume~1\admin\locals~1\temp\ztacjndfc9.exe
uRun: [h6epfn4ogaaminj5441za1n8qhhu] c:\docume~1\admin\locals~1\temp\u4og4qxqhfn.exe
uRun: [opdjxuflfrs8x] c:\docume~1\admin\locals~1\temp\sukr0b03wxjq.exe
uRun: [vf1pom9ncbgg943rzx51jx] c:\docume~1\admin\locals~1\temp\gshx2i7r.exe
uRun: [rw3646rj0my419rqjilc6r8e0y] c:\docume~1\admin\locals~1\temp\i7l6fv.exe
uRun: [gojxxfm6q47v7poijkm91llvs3xkgx43f4ugbo] c:\docume~1\admin\locals~1\temp\qlsp56z1py.exe
uRun: [hwpund7xc5gyult0nybnvhfpmcw2kpgh] c:\docume~1\admin\locals~1\temp\ic4q5cepfmtyu.exe
uRun: [xqfvy28sdgjxo0gkzdudwu] c:\docume~1\admin\locals~1\temp\jr4ocsak9ma.exe
uRun: [v1yoia9lzg6jw95y6s1l5gx8] c:\docume~1\admin\locals~1\temp\lrutrr.exe
uRun: [gllwqekourjtjhn2i5h34wbo1q0gtrpzn] c:\docume~1\admin\locals~1\temp\qggpponyws0oa.exe
uRun: [i4huok3mg65x1a8i88ghho1yom270196l5qz0p94xxg6dc32] c:\docume~1\admin\locals~1\temp\pbubsem9gnp.exe
uRun: [mxblkgasdxqnjt9z8wht2mkn0pw02jw5upqgeyw21kgi] c:\docume~1\admin\locals~1\temp\a8fsrzzr.exe
uRun: [yvjdkg43fyqckvyt3nadhd785] c:\docume~1\admin\locals~1\temp\hckfdan6xs.exe
uRun: [kwt7ogrtkd2xd5l8w8xv0] c:\docume~1\admin\locals~1\temp\pcricjia74srk.exe
uRun: [sw4h3jbjt6vmd0xg7b8k5] c:\docume~1\admin\locals~1\temp\o2t4ek.exe
uRun: [hysmp4scyvrgbe5s9soeq8hwj4ah9xjwjbmd6u5gb7jhy] c:\docume~1\admin\locals~1\temp\yuoptu.exe
uRun: [o5ru6x5zg] c:\docume~1\admin\locals~1\temp\n2jqt07zo.exe
uRun: [mjupl9fxn2icxyhbhkxs1xtzcky] c:\docume~1\admin\locals~1\temp\g3j8366yfhxqr.exe
uRun: [miox00l79] c:\docume~1\admin\locals~1\temp\jn9vf24w1tf4v.exe
uRun: [f53i6bhy5] c:\docume~1\admin\locals~1\temp\yv4wy82k.exe
uRun: [a1dwtfyljpgne18s3k6zpzgut2iwz6epum] c:\docume~1\admin\locals~1\temp\r1gv5udmu.exe
uRun: [qtw8f2scgzkarvu8p19nmo85rbr7ay2v8np0c05i] c:\docume~1\admin\locals~1\temp\ijko2xirv57qm.exe
uRun: [ffteohctrfoh4kl4p0m6w9zad3w30f11gmx1nlbk] c:\docume~1\admin\locals~1\temp\bpwnsj.exe
uRun: [j15d2lbvqqwwzkgctt2yvyo4n7tgir275clcji] c:\docume~1\admin\locals~1\temp\h9ma4f.exe
uRun: [xtu70svjh0wee2tl6h] c:\docume~1\admin\locals~1\temp\vghtqo5nxtin.exe
uRun: [p2tw5jue1mxu5m3vxmpmik] c:\docume~1\admin\locals~1\temp\w7mrh5pyyndbp.exe
uRun: [ssqz45v9m4o] c:\docume~1\admin\locals~1\temp\zfoe90zzhv.exe
uRun: [i9yeh6t1b9cr8li3npfv667lg9qltswr16x51xes7gs5] c:\docume~1\admin\locals~1\temp\gq2zcd08jus.exe
uRun: [u4nlkslq8iv4] c:\docume~1\admin\locals~1\temp\rs2iin2kmcbc.exe
uRun: [kr0dse8wb4k] c:\docume~1\admin\locals~1\temp\jas379yp56a.exe
uRun: [jc0ps0j4p07kttogos4txz5aba0vy] c:\docume~1\admin\locals~1\temp\m3n6dpf.exe
uRun: [ee2v7bcupnh1iaj27] c:\docume~1\admin\locals~1\temp\qszoqls14.exe
uRun: [rgmhmh5v3z6gcfmhh378nch0uq] c:\docume~1\admin\locals~1\temp\c76pdt2j8u.exe
uRun: [uv7vflg9ylpcsisoe2mb377xyccxb] c:\docume~1\admin\locals~1\temp\rymzaq2weuvim.exe
uRun: [fk40lsdayz1oz82qgswy72ns6qzd4lv] c:\docume~1\admin\locals~1\temp\frwc8p0hd6.exe
uRun: [zkutnjc5ozp894l] c:\docume~1\admin\locals~1\temp\xd8tie.exe
uRun: [o7bf7s1n9zt3vtwxl5z4wky64p1p9gfjcsut9mbt] c:\docume~1\admin\locals~1\temp\jz8dlldc0cxq.exe
uRun: [z8qk7h1i8d62] c:\docume~1\admin\locals~1\temp\t3afkfj.exe
uRun: [zawvlsiuou77vksdhsh9bdfkpkdialpka6c3ormaumzdyf9wr] c:\docume~1\admin\locals~1\temp\hb98preh9.exe
uRun: [xvy982elgq7qx4ndd9zmnmegtqzcav] c:\docume~1\admin\locals~1\temp\a3e7rmn.exe
uRun: [zzlk6yu1uta2mhrjhqyqojkejut0c] c:\docume~1\admin\locals~1\temp\cm4c6l31t7.exe
uRun: [sf4wvuw4vrahg5u9fcn6k1mhvt48d1thtwm5llj0geo13ly] c:\docume~1\admin\locals~1\temp\kqgsqgcaad.exe
uRun: [k3lhqqo80i8crtf3x9m43wj5h4gp3wgbrjl7] c:\docume~1\admin\locals~1\temp\ofst3cp5xj77.exe
uRun: [g23yu54j7n] c:\docume~1\admin\locals~1\temp\na6f2carfp.exe
uRun: [isyg95msmkf7g8vhbrkfv] c:\docume~1\admin\locals~1\temp\kvzcgi721.exe
uRun: [qu85rw6n5k9e95ct5gs8w6] c:\docume~1\admin\locals~1\temp\z8dgp119j10.exe
uRun: [x879rk2tmdd9s4kg7vw3rxqereq7aqu6d] c:\docume~1\admin\locals~1\temp\fbwjryamc.exe
uRun: [c61o48g1j51k54lvjl] c:\docume~1\admin\locals~1\temp\ytdi1l5vp1jn8.exe
uRun: [ls1azs0lfj7pmw92rdwg5f88l7zjbkf1kab5kc] c:\docume~1\admin\locals~1\temp\m0814u2rlp5.exe
uRun: [heeea5o1jwi53h8veeojgcv7jkcq6] c:\docume~1\admin\locals~1\temp\nrdzvb32mjjw.exe
uRun: [jvey311iwegsx8br945tcyblp] c:\docume~1\admin\locals~1\temp\ma3ltaj.exe
uRun: [t92xarkwo3vd] c:\docume~1\admin\locals~1\temp\xej2h43sj4.exe
uRun: [sh2v3afir253z2ao866v8] c:\docume~1\admin\locals~1\temp\f7h7zu.exe
uRun: [gzvj9zv1scs8iz69s2prr2ec4fq6zpm] c:\docume~1\admin\locals~1\temp\tvt923iydqho.exe
uRun: [xc7rm5i7zyj43mhku5] c:\docume~1\admin\locals~1\temp\t0vtbk6cwq4.exe
uRun: [esdxg9aw850a66d8yb6xw8e1v3advesr3n9gwfr50wn2rz93] c:\docume~1\admin\locals~1\temp\plvv4lah2qnjj.exe
uRun: [ixkgxp6lzy5vdtqwcjnmtcawzbg8suo2lr46lypsz8xxysf4c] c:\docume~1\admin\locals~1\temp\az2euw07c.exe
uRun: [opw0lhfye3n0ofa5lcgns6yttov] c:\docume~1\admin\locals~1\temp\wf9xqy.exe
uRun: [fqiqhl6519] c:\docume~1\admin\locals~1\temp\kiz384b.exe
uRun: [wgkhdpw2c83uvwjlvfvoq1cy] c:\docume~1\admin\locals~1\temp\cjp7xq.exe
uRun: [wo2ga92vxch3rwpaor6pmvh603] c:\docume~1\admin\locals~1\temp\g81pamkh.exe
uRun: [l2h44k84chafbi8zbct5aaka46xvsfxzpagwuu9pk95fbmvshl] c:\docume~1\admin\locals~1\temp\n28q309.exe
uRun: [mu50zwrg6claue8h9d92c2dz6n0fcn0mmujq28sud1i] c:\docume~1\admin\locals~1\temp\bjmd5ogmyqw.exe
uRun: [ta6u1yjcw1mhm9p9mi] c:\docume~1\admin\locals~1\temp\ylftj942cx.exe
uRun: [tved28cud8vmr3k7c5zn300oakugn1ztt7jv] c:\docume~1\admin\locals~1\temp\ubhflaw2ix7.exe
uRun: [yfbloew5hjcqfi8rdkgxshhhg4l1abpqe] c:\docume~1\admin\locals~1\temp\nhtxsw742le5.exe
uRun: [f3geu4xlzubivezsnpo0m6q62qxcqa] c:\docume~1\admin\locals~1\temp\xlcir7d.exe
uRun: [o2jas9kbe3fcw3600696ohngqa2s5mx9jippcpnlkxxr05spc] c:\docume~1\admin\locals~1\temp\ek2kt27vafwan.exe
uRun: [dsb83onxnxaz8wf61jm8h5k5vh1060ldgi97e4l1s5srn5s61] c:\docume~1\admin\locals~1\temp\dfgpsjb2zzf.exe
uRun: [pwm5dnr7ofvk8t9sq8j4bnrdkbwp4a4mj] c:\docume~1\admin\locals~1\temp\xcxmq56bu3ql6.exe
uRun: [mj3wx5h1nkf6u53aljcb1m679o] c:\docume~1\admin\locals~1\temp\t2z8sn.exe
uRun: [cvrd8su5v84xn8dgl83wt9rs0gd] c:\docume~1\admin\locals~1\temp\pnzapxxo.exe
uRun: [dvan4r6rk8a] c:\docume~1\admin\locals~1\temp\zr1v3ipvylh.exe
uRun: [vmls4609thbysygmd] c:\docume~1\admin\locals~1\temp\ps1duoo.exe
uRun: [gwobb1o4xdjlgh6fwgh6uesq318xexzfu] c:\docume~1\admin\locals~1\temp\kykyz9f21mn.exe
uRun: [swqotdbv1mtu1aai6727ii852jy3rr0lm] c:\docume~1\admin\locals~1\temp\yrykbzyc.exe
uRun: [melz1bphaisu] c:\docume~1\admin\locals~1\temp\vmmkvhm9n4t.exe
uRun: [jdwrqi0aju6mbd0539kxq0aae1ipxqqrfllqvsj3] c:\docume~1\admin\locals~1\temp\ajzlzrago83.exe
uRun: [pidibzfhsgcan61qd3wsavopw1dm815exazyvp99fwlyh6z] c:\docume~1\admin\locals~1\temp\z0wrq80x.exe
uRun: [rp9uhq6pm7bfc4gb7jionqjtxz] c:\docume~1\admin\locals~1\temp\dlwg6vq4lauq.exe
uRun: [re17s7urty24e40in2dc5k1z6jdwufecsm31pdvu05] c:\docume~1\admin\locals~1\temp\mueam4axvyy.exe
uRun: [g1cgwx0ekb6p0vf846jq3d] c:\docume~1\admin\locals~1\temp\hdck2m1d.exe
uRun: [psapn2dpkfwwo47rmasq9t7n8t7ziub9l32zgdweuhktmn3jl] c:\docume~1\admin\locals~1\temp\e4orpej3h7k6e.exe
uRun: [zm5zwjt04kutvdfi0e75kgtapzp4n08t6guynwpijmhk8xwep] c:\docume~1\admin\locals~1\temp\oi2wdopinlqu.exe
uRun: [uexg8aq6nc6ie24z4ja5qf3p151ggzfbpm] c:\docume~1\admin\locals~1\temp\whjvy13.exe
uRun: [o1n2r8nj9dhanl] c:\docume~1\admin\locals~1\temp\hfgij8acm2c.exe
uRun: [nh5ikj2slmbgokrq6ykx9op9qn33g8eylp9qf3x9nl7t0] c:\docume~1\admin\locals~1\temp\nunl5n3w8eos.exe
uRun: [remyzm739fv5p6g4khoqzo3p3kxt8w8v08mm] c:\docume~1\admin\locals~1\temp\yw64bx5pbwoj6.exe
uRun: [e2g001zta1] c:\docume~1\admin\locals~1\temp\x2j1x7tc5r9.exe
uRun: [im9nfydp0bd8] c:\docume~1\admin\locals~1\temp\il2kkhv589sk.exe
uRun: [hkuoqbh6nr4dxe29z8gpo0jed8rz7xip] c:\docume~1\admin\locals~1\temp\iqlnty0jr9f.exe
uRun: [vkuh1btcminp66356jajhak5b] c:\docume~1\admin\locals~1\temp\hggp2yg8qf.exe
uRun: [h5nkhnmwr9l1klyuxwecrqbomqp0ga2hgxtga] c:\docume~1\admin\locals~1\temp\fnfhcxh8.exe
uRun: [qke9ds8lhwb5yi6uldt6oicuk8xkac8n7f9a] c:\docume~1\admin\locals~1\temp\f2t4ru33qri.exe
uRun: [ha27gwcabd03rnjef4jgczdqq8nakgwnceqbiii] c:\docume~1\admin\locals~1\temp\u5c5u16on.exe
uRun: [t0m2fznhl9ct3aijf5hqw] c:\docume~1\admin\locals~1\temp\qlj773.exe
uRun: [b8gaim7p7] c:\docume~1\admin\locals~1\temp\xf780hnogyvh4.exe
uRun: [iyxzfbb50opmcqoghkl63gihwesfygj0x] c:\docume~1\admin\locals~1\temp\t0qacia.exe
uRun: [zjge8045wdaql] c:\docume~1\admin\locals~1\temp\ih7r68.exe
uRun: [g4xaitm04rolzcnxw] c:\docume~1\admin\locals~1\temp\m6j9jnlc.exe
uRun: [ee5pukjktqdp0dw8y8xym51wqkvrkt6oz] c:\docume~1\admin\locals~1\temp\ftvrq9weq.exe
uRun: [cxqbzhx42on8pbkd1q] c:\docume~1\admin\locals~1\temp\e2qtzsc3.exe
uRun: [ksnq1osw6upyqd90] c:\docume~1\admin\locals~1\temp\uav8kib2.exe
uRun: [a051o4uqefm09mteij27lj6jwxbpkmnv5q56nua8h7y62hzc] c:\docume~1\admin\locals~1\temp\hcldo8tk1m6x.exe
uRun: [y7jtsadgfhbnipkblfuumcuq27fpnum81y3lxjd] c:\docume~1\admin\locals~1\temp\xkqs9fb2zy1u.exe
uRun: [a31r6ebckgb7r115lntem5ivw3rfvau4h8n4pqtpbhybje3eap] c:\docume~1\admin\locals~1\temp\j1793o99dgi.exe
uRun: [lm48j2ov9kcp78c8hf7shvk2liqii] c:\docume~1\admin\locals~1\temp\b92amu.exe
uRun: [zcuxq7c35g834wfmszyadp0] c:\docume~1\admin\locals~1\temp\pgxtp32tisu4.exe
uRun: [suz3z8z9p12d2f8ptyt2bwpif5kc3w2d4dyp2] c:\docume~1\admin\locals~1\temp\eszrgu6.exe
uRun: [yr1ujqrqe91y4lwaq2sw6uzec93wtai2gr2g2uy] c:\docume~1\admin\locals~1\temp\xulcfvsj.exe
uRun: [p8zclu15tasmbmfwg] c:\docume~1\admin\locals~1\temp\ib0a1bkjlrtq.exe
uRun: [reader_s] c:\documents and settings\admin\reader_s.exe
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [nwiz] nwiz.exe /install
mRun: [DVDSentry] c:\windows\system32\DSentry.exe
mRun: [AdaptecDirectCD] "c:\program files\roxio\easy cd creator 5\directcd\DirectCD.exe"
mRun: [Dell AIO Printer A940] "c:\program files\dell aio printer a940\dlbabmgr.exe"
mRun: [ADUserMon] c:\program files\iomega\autodisk\ADUserMon.exe
mRun: [Iomega Drive Icons] c:\program files\iomega\driveicons\ImgIcon.exe
mRun: [Deskup] c:\program files\iomega\driveicons\deskup.exe /IMGSTART
mRun: [HelpCenter] c:\program files\bellsouth\helpcenter\bin\sprtcmd.exe /P HelpCenter
mRun: [DXM6Patch_981116] c:\windows\p_981116.exe /Q:A
mRun: [LVCOMS] c:\program files\common files\logitech\qcdriver3\LVCOMS.EXE
mRun: [LogitechGalleryRepair] c:\program files\logitech\imagestudio\ISStart.exe
mRun: [LogitechImageStudioTray] c:\program files\logitech\imagestudio\LogiTray.exe
mRun: [HelpCenter4.1] c:\program files\bellsouth\helpcenter40b\bin\sprtcmd.exe /P HelpCenter4.1
mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe"
mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot
mRun: [mcagent_exe] c:\program files\mcafee.com\agent\mcagent.exe /runkey
mRun: [SDFix] c:\sdfix\RunThis.bat /second
mRun: [reader_s] c:\windows\system32\reader_s.exe
mRun: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
dRun: [reader_s] c:\documents and settings\admin\reader_s.exe
StartupFolder: c:\docume~1\admin\startm~1\programs\startup\pictur~1.lnk - c:\program files\sony\sony picture utility\volumewatcher\SPUVolumeWatcher.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\kodake~1.lnk - c:\program files\kodak\kodak easyshare software\bin\EasyShare.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\kodaks~1.lnk - c:\program files\kodak\kodak software updater\7288971\program\Kodak Software Updater.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\logite~1.lnk - c:\program files\logitech\desktop messenger\8876480\program\LDMConf.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\micros~1.lnk - c:\program files\microsoft office\office10\OSA.EXE
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\paltalk.lnk - c:\program files\paltalk messenger\paltalk.exe
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office10\EXCEL.EXE/3000
IE: {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - c:\program files\paltalk messenger\Paltalk.exe
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\program files\spybot - search & destroy\SDHelper.dll
DPF: DirectAnimation Java Classes - file://c:\windows\java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\java\classes\xmldso.cab
DPF: {01113300-3E00-11D2-8470-0060089874ED} - hxxp://help.bellsouth.net/sdccommon/download/tgctlcm.cab
DPF: {01118A01-3E00-11D2-8470-0060089874ED} - hxxps://password.bellsouth.net/sdccommon/download/tgctlsr.cab
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/3/9/8/398422c0-8d3e-40e1-a617-af65a72a0465/LegitCheckControl.cab
DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - c:\program files\yahoo!\common\yinsthelper.dll
DPF: {321FB770-1FBE-4BFE-BDC1-6F622D4FA499} - hxxps://setup.bellsouth.net/wizlet/PWReset/static/controls/WebflowActiveXInstaller_4-2-1.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab
DPF: {CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA} - hxxp://java.sun.com/products/plugin/1.4/jinstall-14_02-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_10-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - c:\program files\common files\microsoft shared\web folders\PKMCDO.DLL
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dll
AppInit_DLLs: jcpljo.dll judbmx.dll napzdv.dll pvdtse.dll yorqzr.dll sqgyek.dll nsmsav.dll zsbxwq.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
LSA: Authentication Packages = msv1_0 c:\windows\system32\cbXQihig

================= FIREFOX ===================

FF - ProfilePath -
FF - HiddenExtension: XUL Cache: {F09CD97D-B405-48DB-8A2D-142B7E5A02BC} - c:\documents and settings\admin\local settings\application data\{F09CD97D-B405-48DB-8A2D-142B7E5A02BC}

============= SERVICES / DRIVERS ===============

S0 abein;abein;c:\windows\system32\drivers\qmxaubv.sys --> c:\windows\system32\drivers\qmxaubv.sys [?]
S0 alkjtu;alkjtu;c:\windows\system32\drivers\eiretrix.sys --> c:\windows\system32\drivers\eiretrix.sys [?]
S1 mfehidk;McAfee Inc. mfehidk;c:\windows\system32\drivers\mfehidk.sys [2008-10-5 201320]
S1 spusbaudio;USB Microphone;c:\windows\system32\drivers\CA506AA.sys [2003-8-1 39824]
S2 ASFAgent;ASF Agent;c:\program files\intel\asf agent\ASFAgent.exe [2003-2-10 114688]
S2 AsfAlrt;AsfAlrt;c:\windows\system32\drivers\Asfalrt.sys [2002-12-18 36064]
S2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\mcafee\siteadvisor\McSACore.exe [2008-10-7 206096]
S2 McProxy;McAfee Proxy Service;c:\progra~1\common~1\mcafee\mcproxy\mcproxy.exe [2008-10-5 359248]
S2 Viewpoint Manager Service;Viewpoint Manager Service;"c:\program files\viewpoint\common\viewpointservice.exe" --> c:\program files\viewpoint\common\ViewpointService.exe [?]
S3 McSysmon;McAfee SystemGuards;c:\progra~1\mcafee\viruss~1\mcsysmon.exe [2008-10-5 695624]
S3 mfeavfk;McAfee Inc. mfeavfk;c:\windows\system32\drivers\mfeavfk.sys [2008-10-5 79304]
S3 mfebopk;McAfee Inc. mfebopk;c:\windows\system32\drivers\mfebopk.sys [2008-10-5 35240]
S3 mferkdk;McAfee Inc. mferkdk;c:\windows\system32\drivers\mferkdk.sys [2008-10-5 33832]
S3 mfesmfk;McAfee Inc. mfesmfk;c:\windows\system32\drivers\mfesmfk.sys [2008-10-5 40488]
S3 protect;protect;c:\windows\system32\drivers\protect.sys [2009-2-22 18944]
S3 restore;restore;\??\c:\windows\system32\drivers\restore.sys --> c:\windows\system32\drivers\restore.sys [?]
S3 RTLWUSB;NETGEAR WG111v2 54Mbps Wireless USB 2.0 Adapter NT Driver;c:\windows\system32\drivers\wg111v2.sys --> c:\windows\system32\drivers\wg111v2.sys [?]
S3 SPCA506AV;X10 VA11A Video Capture;c:\windows\system32\drivers\CA506AV.SYS [2003-8-1 162096]

=============== Created Last 30 ================

2009-02-28 11:30 32,768 a------- c:\windows\system32\odjan.wa
2009-02-28 11:30 28,672 a------- c:\windows\system32\kdoqmn.sr
2009-02-28 11:30 32,768 a------- c:\windows\system32\kei1w.an
2009-02-28 11:30 28,672 a------- c:\windows\system32\doqkm.zt
2009-02-28 11:30 77,312 a------- c:\windows\system32\rkoq.pxf
2009-02-28 11:26 262,144 a------- c:\windows\system32\nvtpm32.dll
2009-02-28 11:26 105,984 a------- c:\windows\system32\9.tm_

==================== Find3M ====================

2009-02-28 11:26 577,536 a------- c:\windows\system32\user32.DLL
2009-02-22 18:29 24,110 a------- c:\windows\system32\8.tmp
2009-02-22 18:29 47,104 a------- c:\windows\system32\reader_s.exe
2009-02-22 18:29 30,208 a------- c:\documents and settings\admin\reader_s.exe
2009-02-22 18:29 18,944 a---h--- c:\windows\system32\drivers\protect.sys
2009-02-22 18:29 67,585 a------- c:\windows\system32\6.tmp
2009-02-22 18:29 64,000 a------- c:\windows\system32\hhupd.exe
2009-02-22 18:29 55,809 a------- c:\windows\services.exe
2009-02-22 17:52 64,512 a------- c:\windows\system32\codeblocks.exe
2009-02-22 17:31 182,912 a------- c:\windows\system32\drivers\ndis.sys
2009-02-22 17:31 182,912 a------- c:\windows\system32\dllcache\ndis.sys
2009-02-22 17:30 67,585 a------- c:\windows\system32\10.tmp
2009-02-22 17:30 64,512 a------- c:\windows\system32\undname.exe
2009-02-21 19:49 61,447 a------- c:\windows\system32\alg.exe
2009-02-21 19:49 15,360 a------- c:\windows\system32\ctfmon.exe
2009-02-21 19:49 174,592 a------- c:\windows\system32\LEXPPS.EXE
2009-02-21 19:48 57,856 a------- c:\windows\system32\spoolsv.exe
2009-02-15 13:16 39,936 a------- C:\xyephkl.exe
2009-02-15 13:16 146,944 a------- C:\ytprjxsv.exe
2009-02-15 13:14 60,928 a------- C:\cwxwwgtl.exe
2009-02-15 13:14 72,704 a------- c:\windows\system32\cpuwpjcd.dll
2009-02-15 13:12 33,444 a--sh--- c:\windows\system32\gihiQXbc.ini2
2009-02-15 00:00 129,024 a------- c:\windows\system32\zsbxwq.dll
2009-02-15 00:00 129,024 a------- c:\windows\system32\djvrqagi.dll
2009-02-14 11:55 129,024 a------- c:\windows\system32\onjyulfg.dll
2009-02-14 11:55 129,024 a------- c:\windows\system32\hgxdtq.dll
2009-02-13 17:06 129,024 a------- c:\windows\system32\yuttayfb.dll
2009-02-13 17:06 129,024 a------- c:\windows\system32\splgyb.dll
2009-02-12 17:04 129,024 a------- c:\windows\system32\zoaehj.dll
2009-02-12 17:04 129,024 a------- c:\windows\system32\nvblwifx.dll
2009-02-11 16:59 129,024 a------- c:\windows\system32\yfluwxuw.dll
2009-02-11 16:59 129,024 a------- c:\windows\system32\wuvizp.dll
2009-02-10 22:55 72,704 a------- c:\windows\system32\yiacrist.dll
2009-02-09 22:55 129,024 a------- c:\windows\system32\vnvgvcih.dll
2009-02-08 22:54 129,024 a------- c:\windows\system32\khwrspmj.dll
2009-02-08 22:54 129,024 a------- c:\windows\system32\isrgfc.dll
2009-02-08 22:51 302,592 a------- c:\windows\system32\cbXQihig.dll.vir
2009-02-03 23:41 35,420 a--sh--- c:\windows\system32\aIhjkUtv.ini2
2009-01-15 18:49 410,984 a------- c:\windows\system32\deploytk.dll
2008-12-20 23:53 165 a------- c:\docume~1\alluse~1\applic~1\service.dat
2008-08-18 18:17 68,648 ac------ c:\docume~1\admin\applic~1\GDIPFONTCACHEV1.DAT
2007-05-18 17:10 241,664 a------- c:\program files\Uninstall Ask Toolbar.dll
2007-05-05 09:48 6,980,738 ac------ c:\documents and settings\admin\HC4Installer.exe
2008-12-24 20:19 888,604 a--sh--- c:\windows\system32\wGOrBJjl.ini2

============= FINISH: 0:28:35.50 ===============

I can't run MBAM, the program doesn't even seem to exist anymore. I tried opening it by going to the MBAM folder in windows explorer.

Edited by SifuMike, 29 March 2009 - 11:47 PM.
removed quote for easy reading


#4 SifuMike

SifuMike

    malware expert


  • Staff Emeritus
  • 15,385 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Vancouver (not BC) WA (Not DC) USA
  • Local time:09:41 PM

Posted 29 March 2009 - 11:45 PM

Hello tttownfeen,

We will run ComboFix.

You should NOT use Combofix unless you have been instructed to do so by a Malware Removal Expert.
It is intended by its creator to be used under the guidance and supervision of an Malware Removal Expert, not for private use.

Using this tool incorrectly could lead to disastrous problems with your operating system such as preventing it from ever starting again.
Please read Combofix's Disclaimer.
Further, ComboFix logs are not permitted outside the HijackThis forums and then only when requested by a HJT Team member.

You need to disable your McAfee Antivirus and Spybot Teatimer before running ComboFix, as they will prevent it from running.


To disable MCAFEE SECURITY CENTER 7.1
Please navigate to the system tray and double-click the taskbar icon to open Security Center.
Click Advanced Menu (bottom mid-left).
Click Configure (left).
Click Computer & Files (top left).
VirusScan can be disabled in the right-hand module and set when it should resume or you can do that manually later on.
Do the same via Internet & Network for Firewall Plus.


To disable McAfee Virusscan:
Please navigate to the system tray on the bottom right hand corner and look for a Posted Image sign.
  • right-click it -> chose "Exit."
  • a popup will warn that protection will now be disabled. Click on "Yes" to disable the Antivirus guard.
You succesfully disabled the McAfee Guard.

We need to disable Spybot S&D's "TeaTimer"
TeaTimer works by preventing ANY changes to the system. It will attempt to undo any fixes we run, because it blocks these fixes from running.

In order to safeguard your system from problems that can be brought on by a half finished fix, we need to disable TeaTimer. We can reenable it when we're done if you like.
  • Open SpyBot Search and Destroy by going to Start -> All Programs -> Spybot Search and Destroy -> Spybot Search and Destroy.
  • If prompted with a legal dialog, accept the warning.
  • Click Posted Image and then on "Advanced Mode"
    Posted Image
  • You may be presented with a warning dialog. If so, press Posted Image
  • Click on Posted Image
  • Click on Posted Image
  • Uncheck this checkbox:
    Posted Image
  • Close/Exit Spybot Search and Destroy
Note: If you already have a copy of ComboFix on your system it is essential that you delete it before downloading this copy.

Please visit this webpage for instructions for downloading and running ComboFix:
http://www.bleepingcomputer.com/combofix/how-to-use-combofix


To work properly, you must install ComboFix on the Desktop..

Post the ComboFix log. Please DO NOT put your logs in quotes, as it is hard to read that way.


A caution -
Have no other programs running. Your Task Bar should be clear of any program entries including your Browser.
Do not run Combofix more than once.
Do not touch your mouse/keyboard until the scan has completed, as this may cause the process to stall or your computer to lock. The scan will temporarily disable your desktop, and if interrupted may leave your desktop disabled. If this occurs, please reboot to restore the desktop. Even when ComboFix appears to be doing nothing, look at your Drive light. If it is flashing, Combofix is still at work.

Edited by SifuMike, 30 March 2009 - 12:02 AM.
add McAfee disable

If I've saved you time & money,
please make a donation so I can keep helping people just like you! You can donate using a credit card and PayPal. Thank you!



Posted Image

Asking for help via Private Message or Mail will be ignored - So If you need help, post your problem in the forum.

#5 ttownfeen

ttownfeen
  • Topic Starter

  • Members
  • 35 posts
  • OFFLINE
  •  
  • Local time:11:41 PM

Posted 30 March 2009 - 07:22 PM

Edit: n/m

working on ComboFix now

Edited by ttownfeen, 30 March 2009 - 07:56 PM.


#6 ttownfeen

ttownfeen
  • Topic Starter

  • Members
  • 35 posts
  • OFFLINE
  •  
  • Local time:11:41 PM

Posted 30 March 2009 - 07:50 PM

I was able to run Malwarebytes Anti-Malware program (MBAM) and do a scan of the system, the log of the scan is copied and pasted below:

Malwarebytes' Anti-Malware 1.35
Database version: 1904
Windows 5.1.2600 Service Pack 2

3/30/2009 8:42:21 PM
mbam-log-2009-03-30 (20-42-21).txt

Scan type: Quick Scan
Objects scanned: 76228
Time elapsed: 8 minute(s), 51 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 1
Registry Keys Infected: 11
Registry Values Infected: 3
Registry Data Items Infected: 2
Folders Infected: 0
Files Infected: 31

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
\\?\globalroot\systemroot\SYSTEM32\UACrvifkcse.dll (Trojan.TDSS) -> Delete on reboot.

Registry Keys Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{c5bf49a2-94f3-42bd-f434-3604812c8955} (Trojan.Downloader) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\restore (Rootkit.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Protect (Rootkit.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\cs41275 (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\UAC (Rootkit.Trace) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\AvScan (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\seneka (Rootkit.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\seneka (Rootkit.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\AGprotect (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\protect (Rootkit.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\protect (Rootkit.Agent) -> Quarantined and deleted successfully.

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\reader_s (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\reader_s (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\reader_s (Trojan.Agent) -> Quarantined and deleted successfully.

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Authentication Packages (Trojan.Vundo) -> Data: c:\windows\system32\cbxqihig -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Folders Infected:
(No malicious items detected)

Files Infected:
\\?\globalroot\systemroot\SYSTEM32\UACrvifkcse.dll (Trojan.TDSS) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\cpuwpjcd.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\isrgfc.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\khwrspmj.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\MSINET.oca (Rogue.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\nvblwifx.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\splgyb.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\vnvgvcih.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\wuvizp.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\yfluwxuw.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\yuttayfb.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\zoaehj.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\services.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\uacinit.dll (Trojan.Agent) -> Delete on reboot.
C:\WINDOWS\SYSTEM32\reader_s.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\nvtpm32.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\codeblocks.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\undname.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\4.tmp (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\6.tmp (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\8.tmp (Trojan.Agent) -> Quarantined and deleted successfully.
C:\cwxwwgtl.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\admin\reader_s.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\ytprjxsv.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\xyephkl.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\Temp\init.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\Temp\BN1.tmp (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\Temp\BN2.tmp (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\hhupd.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\cbXQihig.dll.vir (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\DRIVERS\protect.sys (Rootkit.Agent) -> Quarantined and deleted successfully.

Edited by ttownfeen, 30 March 2009 - 08:31 PM.


#7 ttownfeen

ttownfeen
  • Topic Starter

  • Members
  • 35 posts
  • OFFLINE
  •  
  • Local time:11:41 PM

Posted 30 March 2009 - 08:30 PM

ComboFix 09-03-29.04 - admin 2009-03-30 21:13:17.1 - NTFSx86 MINIMAL
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1023.831 [GMT -5:00]
Running from: c:\documents and settings\admin\Desktop\ComboFix.exe
AV: McAfee VirusScan *On-access scanning disabled* (Updated)
FW: McAfee Personal Firewall *enabled*

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\admin\Application Data\IUpd721
c:\documents and settings\admin\Application Data\IUpd721\Logs\scns.log
c:\windows\file.bat
c:\windows\IE4 Error Log.txt
c:\windows\system32\aIhjkUtv.ini
c:\windows\SYSTEM32\aIhjkUtv.ini2
c:\windows\system32\drivers\UACbobrrfwo.sys
c:\windows\system32\gihiQXbc.ini
c:\windows\SYSTEM32\gihiQXbc.ini2
c:\windows\system32\UACakypfdsf.log
c:\windows\system32\UACiyntndqv.dll
c:\windows\system32\UACmtphomlw.log
c:\windows\system32\UACmyxvrgkf.dat
c:\windows\system32\UACnxfdqbes.log
c:\windows\system32\UACpttapulr.dll
c:\windows\system32\UACrvifkcse.dll
c:\windows\system32\UACxehbapbi.dll
c:\windows\SYSTEM32\wGOrBJjl.ini
c:\windows\system32\wGOrBJjl.ini2
c:\windows\Tasks\qtdqzudp.job

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_UACd.sys
-------\Legacy_PROTECT
-------\Legacy_RESTORE


((((((((((((((((((((((((( Files Created from 2009-02-28 to 2009-03-31 )))))))))))))))))))))))))))))))
.

2009-03-30 20:30 . 2009-03-30 20:31 <DIR> d-------- c:\program files\Malwarebytes' Anti-Malware
2009-03-30 20:30 . 2009-03-26 16:49 38,496 --a------ c:\windows\SYSTEM32\DRIVERS\mbamswissarmy.sys
2009-03-30 20:30 . 2009-03-26 16:49 15,504 --a------ c:\windows\SYSTEM32\DRIVERS\mbam.sys
2009-02-28 11:30 . 2009-02-28 11:30 77,312 --a------ c:\windows\SYSTEM32\rkoq.pxf
2009-02-28 11:30 . 2009-02-28 11:30 32,768 --a------ c:\windows\SYSTEM32\odjan.wa
2009-02-28 11:30 . 2009-02-28 11:30 32,768 --a------ c:\windows\SYSTEM32\kei1w.an
2009-02-28 11:30 . 2009-02-28 11:30 28,672 --a------ c:\windows\SYSTEM32\kdoqmn.sr
2009-02-28 11:30 . 2009-02-28 11:30 28,672 --a------ c:\windows\SYSTEM32\doqkm.zt
2009-02-28 11:26 . 2009-02-28 11:26 105,984 --a------ c:\windows\SYSTEM32\9.tm_
2009-02-22 18:01 . 2009-02-22 18:01 118 --a------ c:\windows\SYSTEM32\MRT.INI
2009-02-22 17:52 . 2009-02-22 17:52 128 --a------ c:\windows\adobe.bat
2009-02-22 17:31 . 2009-02-22 17:31 182,912 --a------ c:\windows\SYSTEM32\DLLCACHE\ndis.sys
2009-02-22 17:30 . 2009-02-22 17:30 67,585 --a------ c:\windows\SYSTEM32\10.tmp
2009-02-22 16:40 . 2009-02-22 16:40 <DIR> d-------- c:\windows\ERUNT
2009-02-22 15:38 . 2009-02-22 15:38 <DIR> d-------- c:\windows\SYSTEM32\NtmsData
2009-02-15 23:26 . 2009-02-15 23:26 <DIR> d-------- c:\windows\PaltalkScene
2009-02-15 21:47 . 2009-02-15 23:26 <DIR> d-------- c:\program files\Paltalk Messenger
2009-02-15 00:00 . 2009-02-15 00:00 129,024 --a------ c:\windows\SYSTEM32\zsbxwq.dll
2009-02-15 00:00 . 2009-02-15 00:00 129,024 --a------ c:\windows\SYSTEM32\djvrqagi.dll
2009-02-14 11:55 . 2009-02-14 11:55 129,024 --a------ c:\windows\SYSTEM32\onjyulfg.dll
2009-02-14 11:55 . 2009-02-14 11:55 129,024 --a------ c:\windows\SYSTEM32\hgxdtq.dll
2009-02-10 22:55 . 2009-02-10 22:55 72,704 --a------ c:\windows\SYSTEM32\yiacrist.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-03-31 01:53 --------- d-----w c:\program files\Spybot - Search & Destroy
2009-02-28 16:26 577,536 ----a-w c:\windows\SYSTEM32\user32.DLL
2009-02-22 22:31 182,912 ----a-w c:\windows\system32\drivers\ndis.sys
2009-02-22 00:49 61,447 ----a-w c:\windows\SYSTEM32\alg.exe
2009-02-22 00:49 174,592 ----a-w c:\windows\SYSTEM32\LEXPPS.EXE
2009-02-22 00:49 15,360 ----a-w c:\windows\SYSTEM32\ctfmon.exe
2009-02-22 00:48 57,856 ----a-w c:\windows\SYSTEM32\spoolsv.exe
2009-02-18 03:46 --------- d-----w c:\program files\McAfee
2009-02-16 03:39 --------- d-----w c:\program files\Viewpoint
2009-02-16 03:39 --------- d-----w c:\documents and settings\All Users\Application Data\Viewpoint
2009-02-16 03:39 --------- d-----w c:\documents and settings\admin\Application Data\Viewpoint
2009-02-16 03:22 --------- d-----w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-02-16 02:47 --------- d-----w c:\documents and settings\admin\Application Data\Paltalk
2009-02-04 04:52 --------- d-----w c:\program files\WS_FTP
2009-01-15 23:49 410,984 ----a-w c:\windows\SYSTEM32\deploytk.dll
2008-12-21 04:53 165 ----a-w c:\documents and settings\All Users\Application Data\service.dat
2008-12-11 11:57 333,184 ------w c:\windows\SYSTEM32\DLLCACHE\srv.sys
2008-08-18 23:17 68,648 -c--a-w c:\documents and settings\admin\Application Data\GDIPFONTCACHEV1.DAT
2007-05-18 22:10 241,664 ----a-w c:\program files\Uninstall Ask Toolbar.dll
2007-05-05 14:48 6,980,738 -c--a-w c:\documents and settings\admin\HC4Installer.exe
.
c:\windows\system32\user32.dll ... is infected !!
577,024 2005-03-02 18:19:56 c:\windows\$hf_mig$\KB890859\SP2QFE\user32.dll
578,048 2007-03-08 15:48:36 c:\windows\$hf_mig$\KB925902\SP2QFE\user32.dll
560,128 2003-09-25 16:49:02 c:\windows\$NtServicePackUninstall$\user32.dll
528,896 2002-11-01 20:26:46 c:\windows\$NtUninstallKB824141$\user32.dll
577,024 2004-08-04 07:56:46 c:\windows\$NtUninstallKB890859$\user32.dll
577,024 2005-03-02 18:09:30 c:\windows\$NtUninstallKB925902$\user32.dll
560,128 2002-08-29 10:00:00 c:\windows\$NtUninstallQ328310$\user32.dll
577,024 2004-08-04 07:56:46 c:\windows\ServicePackFiles\i386\user32.dll
578,560 2008-04-14 00:12:08 c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\user32.dll
577,536 2009-02-28 16:26:59 c:\windows\SYSTEM32\user32.DLL
577,536 2009-02-28 16:26:59 c:\windows\SYSTEM32\DLLCACHE\user32.dll


------- Sigcheck -------

2002-08-29 05:00 29696 67501d535a068dba7abc712a058d749f c:\windows\$NtServicePackUninstall$\svchost.exe
2004-08-04 02:56 31744 83e6c2e69905c4bab35a94d43837c799 c:\windows\ServicePackFiles\i386\svchost.exe
2008-04-13 19:12 31232 432096c22a45ce911ce30d44763f120b c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\svchost.exe
2004-08-04 02:56 31232 00ec261eec203399ae09e1e49c0dd440 c:\windows\SYSTEM32\svchost.exe

2005-03-02 13:19 577024 1800f293bccc8ede8a70e12b88d80036 c:\windows\$hf_mig$\KB890859\SP2QFE\user32.dll
2007-03-08 10:48 578048 7aa4f6c00405dfc4b70ed4214e7d687b c:\windows\$hf_mig$\KB925902\SP2QFE\user32.dll
2003-09-25 11:49 560128 32173306185f603e75c477e117f3bb8d c:\windows\$NtServicePackUninstall$\user32.dll
md5deep: c:\windows\$NtUninstallKB824141$\user32.dll: Permission denied
2004-08-04 02:56 577024 c72661f8552ace7c5c85e16a3cf505c4 c:\windows\$NtUninstallKB890859$\user32.dll
2005-03-02 13:09 577024 de2db164bbb35db061af0997e4499054 c:\windows\$NtUninstallKB925902$\user32.dll
2002-08-29 05:00 560128 dd9269230c21ee8fb7fd3fccc3b1cfcb c:\windows\$NtUninstallQ328310$\user32.dll
2004-08-04 02:56 577024 c72661f8552ace7c5c85e16a3cf505c4 c:\windows\ServicePackFiles\i386\user32.dll
2008-04-13 19:12 578560 b26b135ff1b9f60c9388b4a7d16f600b c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\user32.dll
2009-02-28 11:26 577536 c3213e5ab0e751d9b0a9afca0b58c305 c:\windows\SYSTEM32\user32.DLL
2009-02-28 11:26 577536 c3213e5ab0e751d9b0a9afca0b58c305 c:\windows\SYSTEM32\DLLCACHE\user32.dll

2003-03-06 10:30 162432 558635d3af1c7546d26067d5d9b6959e c:\windows\$NtServicePackUninstall$\ndis.sys
2004-08-04 01:14 182912 558635d3af1c7546d26067d5d9b6959e c:\windows\ServicePackFiles\i386\ndis.sys
2008-04-13 14:20 182656 558635d3af1c7546d26067d5d9b6959e c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ndis.sys
2009-02-22 17:31 213376 558635d3af1c7546d26067d5d9b6959e c:\windows\SYSTEM32\DLLCACHE\ndis.sys
2009-02-22 17:31 213376 558635d3af1c7546d26067d5d9b6959e c:\windows\SYSTEM32\DRIVERS\ndis.sys

2007-06-13 05:23 1050112 708b33764b76a8a6466dba53518b2cbb c:\windows\explorer.exe
2007-06-13 06:26 1050112 e55afb7050ccc5bab982f91477896e01 c:\windows\$hf_mig$\KB938828\SP2QFE\explorer.exe
2003-05-11 21:12 1013248 4fe65e8da11937dcb86f8af485a400f3 c:\windows\$NtServicePackUninstall$\explorer.exe
2002-08-29 05:00 1020928 194e55f48f0f3f9151caaf2a77114741 c:\windows\$NtUninstallKB820291$\explorer.exe
2004-08-04 02:56 1049088 3ee2032b6d8c7cd797f9c97304f70cf8 c:\windows\$NtUninstallKB938828$\explorer.exe
2004-08-04 02:56 1049088 820b838083f982badbba41511ecb9fcb c:\windows\ServicePackFiles\i386\explorer.exe
2008-04-13 19:12 1050624 a07b306bca07938d9a689ba92ed9d0b6 c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\explorer.exe
2007-06-13 05:23 1050112 c18449f01102771604d8607725ae16a9 c:\windows\SYSTEM32\DLLCACHE\explorer.exe

2002-08-29 05:00 30208 cab28764c3e570110733f4f50776ba85 c:\windows\$NtServicePackUninstall$\ctfmon.exe
2004-08-04 02:56 32256 7905e09e1cf9d9954c0a67e6ca8f0b92 c:\windows\ServicePackFiles\i386\ctfmon.exe
2008-04-13 19:12 32256 50e4a8de3669ed0eb01aa083595252f1 c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ctfmon.exe
2009-02-21 19:49 15360 cd982474df5458262ae3102d8a4faf4a c:\windows\SYSTEM32\ctfmon.exe

2005-06-10 19:17 75264 9b8c90abae1df0eb8d6706f7d3b5bea2 c:\windows\$hf_mig$\KB896423\SP2QFE\spoolsv.exe
2002-08-29 05:00 68096 1f39991d0c50d42a82ea908939dcea35 c:\windows\$NtServicePackUninstall$\spoolsv.exe
2004-08-04 02:56 74752 585d55bb4edc0a3dd8574c8db535e2e1 c:\windows\$NtUninstallKB896423$\spoolsv.exe
2004-08-04 02:56 74752 f0eeec790e9d753145f7b0bf5fb0e4b3 c:\windows\ServicePackFiles\i386\spoolsv.exe
2008-04-13 19:12 74752 6ec788b44e7629dd33093998ad5603ba c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\spoolsv.exe
2009-02-21 19:48 57856 1182bd635d3534c5d51fce10ab499903 c:\windows\SYSTEM32\spoolsv.exe

2002-08-29 05:00 39424 b0c5a236c98a56059dd9846bd8ecdd13 c:\windows\$NtServicePackUninstall$\userinit.exe
2004-08-04 02:56 41472 4b3acf7c9b56bc4d468288989c268abb c:\windows\ServicePackFiles\i386\userinit.exe
2008-04-13 19:12 43520 c4c5bad7e54b31160c37953e7c5cf4c0 c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\userinit.exe
2004-08-04 02:56 41472 c8a7bbd05ac2680fb5781092379cb036 c:\windows\SYSTEM32\userinit.exe
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2009-02-21 15360]
"LDM"="c:\program files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe" [2007-06-26 36864]
"Messenger (Yahoo!)"="c:\program files\Yahoo!\Messenger\YahooMessenger.exe" [2008-05-27 4269296]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\System32\NvCpl.dll" [2003-10-06 5058560]
"DVDSentry"="c:\windows\System32\DSentry.exe" [2002-08-14 49152]
"AdaptecDirectCD"="c:\program files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe" [2009-02-21 684032]
"Dell AIO Printer A940"="c:\program files\Dell AIO Printer A940\dlbabmgr.exe" [2003-02-17 106582]
"ADUserMon"="c:\program files\Iomega\AutoDisk\ADUserMon.exe" [2002-09-24 167936]
"Iomega Drive Icons"="c:\program files\Iomega\DriveIcons\ImgIcon.exe" [2002-08-13 106496]
"Deskup"="c:\program files\Iomega\DriveIcons\deskup.exe" [2002-07-16 53248]
"HelpCenter"="c:\program files\Bellsouth\HelpCenter\bin\sprtcmd.exe" [2006-10-30 212992]
"DXM6Patch_981116"="c:\windows\p_981116.exe" [1998-11-30 497376]
"LVCOMS"="c:\program files\Common Files\Logitech\QCDriver3\LVCOMS.EXE" [2002-12-10 147502]
"LogitechGalleryRepair"="c:\program files\Logitech\ImageStudio\ISStart.exe" [2002-12-10 176128]
"LogitechImageStudioTray"="c:\program files\Logitech\ImageStudio\LogiTray.exe" [2002-12-10 81920]
"HelpCenter4.1"="c:\program files\Bellsouth\HelpCenter40b\bin\sprtcmd.exe" [2007-06-28 198184]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2007-06-29 307200]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2007-09-14 267064]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-01-15 136600]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2008-04-22 185896]
"mcagent_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2007-08-03 582992]
"nwiz"="nwiz.exe" [2003-10-06 c:\windows\SYSTEM32\nwiz.exe]

c:\documents and settings\admin\Start Menu\Programs\Startup\
Picture Motion Browser Media Check Tool.lnk - c:\program files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe [2007-11-25 364544]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
Kodak EasyShare software.lnk - c:\program files\Kodak\Kodak EasyShare software\bin\EasyShare.exe [2007-02-20 303104]
KODAK Software Updater.lnk - c:\program files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe [2004-02-13 36903]
Logitech Desktop Messenger.lnk - c:\program files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe [2007-06-26 186880]
Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-02-13 83360]
PalTalk.lnk - c:\program files\Paltalk Messenger\paltalk.exe [2009-01-28 10967040]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=zsbxwq.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.VDOM"= vdowave.drv
"VIDC.MPG4"= msscmc32.dll
"VIDC.TR20"= tr2032.dll
"msacm.voxacm119"= vdk32119.acm
"vidc.vivo"= ivvideo.dll

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"FirewallOverride"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Common Files\\X10\\Common\\rundll32.exe"=
"c:\\WINDOWS\\SYSTEM32\\LEXPPS.EXE"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"=
"c:\\Program Files\\Google\\Google Talk\\googletalk.exe"=
"c:\\Program Files\\Paltalk Messenger\\paltalk.exe"=
"c:\\Program Files\\AIM6\\aim6.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\backWeb-8876480.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Kodak\\KODAK Software Updater\\7288971\\Program\\Kodak Software Updater.exe"=
"c:\\Program Files\\Kodak\\Kodak EasyShare software\\bin\\EasyShare.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Common Files\\McAfee\\MNA\\McNASvc.exe"=
"%windir%\\system32\\drivers\\svchost.exe"=

R2 ASFAgent;ASF Agent;c:\program files\Intel\ASF Agent\ASFAgent.exe [2003-02-10 114688]
R2 AsfAlrt;AsfAlrt;c:\windows\SYSTEM32\DRIVERS\Asfalrt.sys [2002-12-18 36064]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\McAfee\SiteAdvisor\McSACore.exe [2008-10-07 206096]
S0 abein;abein;c:\windows\system32\drivers\qmxaubv.sys --> c:\windows\system32\drivers\qmxaubv.sys [?]
S0 alkjtu;alkjtu;c:\windows\system32\drivers\eiretrix.sys --> c:\windows\system32\drivers\eiretrix.sys [?]
S0 ragdllqc;ragdllqc;c:\windows\system32\drivers\egbjik.sys --> c:\windows\system32\drivers\egbjik.sys [?]
S1 spusbaudio;USB Microphone;c:\windows\SYSTEM32\DRIVERS\CA506AA.sys [2003-08-01 39824]
S2 Viewpoint Manager Service;Viewpoint Manager Service;"c:\program files\Viewpoint\Common\ViewpointService.exe" --> c:\program files\Viewpoint\Common\ViewpointService.exe [?]
S3 RTLWUSB;NETGEAR WG111v2 54Mbps Wireless USB 2.0 Adapter NT Driver;c:\windows\system32\DRIVERS\wg111v2.sys --> c:\windows\system32\DRIVERS\wg111v2.sys [?]
S3 SPCA506AV;X10 VA11A Video Capture;c:\windows\SYSTEM32\DRIVERS\CA506AV.SYS [2003-08-01 162096]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{47f149b2-ef4c-11dd-b459-000bdb750158}]
\Shell\AutoRun\command - F:\PortableVault.exe
.
Contents of the 'Scheduled Tasks' folder

2008-11-18 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2007-08-29 14:57]

2009-02-15 c:\windows\Tasks\McDefragTask.job
- c:\progra~1\mcafee\mqc\QcConsol.exe [2007-12-04 13:32]

2009-02-01 c:\windows\Tasks\McQcTask.job
- c:\progra~1\mcafee\mqc\QcConsol.exe [2007-12-04 13:32]
.
- - - - ORPHANS REMOVED - - - -

Toolbar-{3041d03e-fd4b-44e0-b742-2d9b88305f98} - c:\program files\AskBarDis\bar\bin\askBar.dll
HKCU-Run-MsnMsgr - c:\program files\MSN Messenger\MsnMsgr.Exe
HKCU-Run-WebCamRT.exe - (no file)
HKCU-Run-Aim6 - (no file)
HKLM-Run-SDFix - c:\sdfix\RunThis.bat


.
------- Supplementary Scan -------
.
uStart Page = hxxp://my.att.net/
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
mSearch Bar = hxxp://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html
uInternet Settings,ProxyOverride = localhost
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office10\EXCEL.EXE/3000
IE: {{4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - c:\program files\Paltalk Messenger\Paltalk.exe
DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
DPF: {01118A01-3E00-11D2-8470-0060089874ED} - hxxps://password.bellsouth.net/sdccommon/download/tgctlsr.cab
FF - ProfilePath -
.

**************************************************************************

catchme 0.3.1375 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-03-30 21:18:55
Windows 5.1.2600 Service Pack 2 NTFS

detected NTDLL code modification:
ZwOpenFile

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Iomega Activity Disk2]
"ImagePath"="\"\""
.
------------------------ Other Running Processes ------------------------
.
c:\windows\SYSTEM32\LEXBCES.EXE
c:\windows\SYSTEM32\LEXPPS.EXE
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Dell\OpenManage\Client\Iap.exe
c:\progra~1\Iomega\System32\AppServices.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\progra~1\McAfee\MSC\mcmscsvc.exe
c:\progra~1\COMMON~1\McAfee\MNA\McNASvc.exe
c:\progra~1\COMMON~1\McAfee\McProxy\McProxy.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\program files\Iomega\AutoDisk\ADService.exe
c:\windows\SYSTEM32\wscntfy.exe
c:\program files\Dell AIO Printer A940\dlbabmon.exe
c:\program files\Yahoo!\Messenger\Ymsgr_tray.exe
c:\program files\iPod\bin\iPodService.exe
c:\program files\McAfee\MPF\MpfSrv.exe
c:\progra~1\McAfee\MSC\mcuimgr.exe
c:\progra~1\McAfee\MSC\mcupdmgr.exe
.
**************************************************************************
.
Completion time: 2009-03-30 21:26:31 - machine was rebooted
ComboFix-quarantined-files.txt 2009-03-31 02:26:28

Pre-Run: 65,186,762,752 bytes free
Post-Run: 64,109,522,944 bytes free

294 --- E O F --- 2009-03-31 02:26:24

#8 SifuMike

SifuMike

    malware expert


  • Staff Emeritus
  • 15,385 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Vancouver (not BC) WA (Not DC) USA
  • Local time:09:41 PM

Posted 30 March 2009 - 09:21 PM

Hi tttownfeen,

Good job. Malwarebystes removed some of the infection, but there is pleaty more left.

BTW, do you have another computer? We may need to transfer some files.


Please disable any running anti-virus program before running Kaspersky Online Scanner.
If you are unsure how to do this, see this topic: http://www.bleepingcomputer.com/forums/t/114351/how-to-temporarily-disable-your-anti-virus-firewall-and-anti-malware-programs/
Close any open browsers

Please do a scan with Kaspersky Online Scanner

You can refer to this animation by sundavis.


Note: If you are using Windows Vista, open your browser by right-clicking on its icon and select 'Run as administrator' to perform this scan.

Click on the Accept button and install any components it needs.
  • The program will install and then begin downloading the latest definition files.
  • After the files have been downloaded on the left side of the page in the Scan section select My Computer.
  • This will start the program and scan your system.
  • The scan will take a while, so be patient and let it run.
  • Once the scan is complete, click on View scan report
  • Now, click on the Save Report as button.
  • In the drop down box labeled Files of type change the type to Text file.
  • Save the file to your desktop.
  • Copy and paste that information in your next post.
This scanner will only scan. It does not remove any malware it finds.





WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!



With malware infections being as they are today, we need to have the Windows Recovery Console pre-installed on your machine before doing any malware removal.

The Windows Recovery Console will allow you to boot up into a special recovery (repair) mode. This allows us to more easily help you should your computer have a problem after an attempted removal of malware. It is a simple procedure that will only take a few moments of your time.


Go to Microsoft's website => http://support.microsoft.com/kb/310994

Select the download that's appropriate for your Operating System

Posted Image

You will need to download the XP Pro setup package
Download the file & save it as it's originally named.

You need to disable your McAfee Antivirus and Spybot Teatimer before running ComboFix, as they will prevent it from running.


Posted Image
  • Drag the setup package onto ComboFix.exe and drop it.

  • Follow the prompts to start ComboFix and when prompted, agree to the End-User License Agreement to install the Microsoft Recovery Console.


    Posted Image


  • At the next prompt, click 'Yes' to run the full ComboFix scan.

  • When the tool is finished, it will produce a report for you.
Please post the C:\ComboFix.txt in your next reply.

Edited by SifuMike, 30 March 2009 - 10:25 PM.
added Kaspersky scanner

If I've saved you time & money,
please make a donation so I can keep helping people just like you! You can donate using a credit card and PayPal. Thank you!



Posted Image

Asking for help via Private Message or Mail will be ignored - So If you need help, post your problem in the forum.

#9 ttownfeen

ttownfeen
  • Topic Starter

  • Members
  • 35 posts
  • OFFLINE
  •  
  • Local time:11:41 PM

Posted 31 March 2009 - 06:58 PM

MAJOR MAJOR PROBLEM!!

I was running ComboFix with the instructions you gave me above and while combofix was running, the blue screen came up with the following:

STOP: c0000221 {Bad Image Checksum}
The image user32.dll is possibly corrupt. The header checksum does not match computer checksum.

Now, this happens on start-up with both normal mode and safe mode and that Windows Recovery thing (but I may not be using it properly).

I haven't fried the computer, have I??! :thumbup2:

Edited by ttownfeen, 31 March 2009 - 06:59 PM.


#10 SifuMike

SifuMike

    malware expert


  • Staff Emeritus
  • 15,385 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Vancouver (not BC) WA (Not DC) USA
  • Local time:09:41 PM

Posted 31 March 2009 - 09:01 PM

Hi ttownfeen,

I dont know yet.

Did ComboFix run to completion?

Did ComboFix product a log? It will be called C:\ ComboFix.txt. If it is there then post it.


See if you can reboot and run the Kaspersky Online Scan in my previous post.

I think you may have a deeper infection on this computer.
If I've saved you time & money,
please make a donation so I can keep helping people just like you! You can donate using a credit card and PayPal. Thank you!



Posted Image

Asking for help via Private Message or Mail will be ignored - So If you need help, post your problem in the forum.

#11 ttownfeen

ttownfeen
  • Topic Starter

  • Members
  • 35 posts
  • OFFLINE
  •  
  • Local time:11:41 PM

Posted 31 March 2009 - 10:46 PM

I don't know if ComboFix ran to completion. I was away from the computer since I knew it would take a while, and I came back to the blue screen.

I did a Kaspersky online scan, and had a log saved to the desktop ready to copy and paste. I was going to post the log here but it was too long to post so I said I would do it later. Unfortunately, I decided to run ComboFix first and then I ran into the current issue.

IF I can somehow reboot the computer, I'll post it, but like I said, I'm getting that blue screen with the same message I mentioned above regardless of whether I boot the computer in normal mode or safe mode.

I have that MS Recovery Console installed now, but I'm not sure what to do with it.

Edited by ttownfeen, 31 March 2009 - 10:47 PM.


#12 SifuMike

SifuMike

    malware expert


  • Staff Emeritus
  • 15,385 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Vancouver (not BC) WA (Not DC) USA
  • Local time:09:41 PM

Posted 31 March 2009 - 10:48 PM

I don't know if ComboFix ran to completion.

If ComboFix ran to completion then it produced a log.


Are you saying you cannot reboot the computer to the normal mode?

Your c:\windows\system32\user32.dll is infected !!


I'm getting that blue screen with the same message I mentioned above regardless of whether I boot the computer in normal mode or safe mode.



STOP: c0000221 {Bad Image Checksum}
The image user32.dll is possibly corrupt. The header checksum does not match computer checksum
Can you get by the blue screen to the normal mode. It sounds like it is telling you the user32.dll is bad.


Yes, I already know the user32.dll is corrupt. Your combofix log told me that.

We need to boot to the normal mode to run combofix. Can you do that?

If you cant then let me know and we will use Recovery Console.


However, you may have even worse malware, that is the reason I asked you to run Kaspersky and post the log.

Edited by SifuMike, 01 April 2009 - 04:15 PM.
typo

If I've saved you time & money,
please make a donation so I can keep helping people just like you! You can donate using a credit card and PayPal. Thank you!



Posted Image

Asking for help via Private Message or Mail will be ignored - So If you need help, post your problem in the forum.

#13 ttownfeen

ttownfeen
  • Topic Starter

  • Members
  • 35 posts
  • OFFLINE
  •  
  • Local time:11:41 PM

Posted 01 April 2009 - 04:41 PM

I can't boot the computer in normal mode or safe mode. Both ways lead to the blue screen.

I was able to install the Recovery Console before I started getting this error.

#14 SifuMike

SifuMike

    malware expert


  • Staff Emeritus
  • 15,385 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Vancouver (not BC) WA (Not DC) USA
  • Local time:09:41 PM

Posted 01 April 2009 - 05:23 PM

deleted post

Edited by SifuMike, 01 April 2009 - 06:43 PM.
deleted post- found virut virus

If I've saved you time & money,
please make a donation so I can keep helping people just like you! You can donate using a credit card and PayPal. Thank you!



Posted Image

Asking for help via Private Message or Mail will be ignored - So If you need help, post your problem in the forum.

#15 SifuMike

SifuMike

    malware expert


  • Staff Emeritus
  • 15,385 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Vancouver (not BC) WA (Not DC) USA
  • Local time:09:41 PM

Posted 01 April 2009 - 06:41 PM

Hi

I just was looking the files and I am afraid you are done in. :thumbup2:

Your System is infected with Virut!!
Virut is a file infecting virus which is able to modify itself each and every time it runs. In addition, when it infects, sometimes it will destroy the file it tries to latch onto.
For these reasons, you really can't truly fix Virut. You will need to format/reinstall the operating system on this machine.

More information:
http://free.avg.com/66558

There are bugs in the viral code. When the virus produces infected files, it also creates non-functional files that also contain the virus.


http://home.mcafee.com/VirusInfo/VirusProf...aspx?key=143034

W32/Virut.h is a polymorphic, entry point obscuring (EPO) file infector with IRC bot functionality. It can accept commands to download other malware on the compromised machine.
It appends to the end of the last section of executable (PE) files an encrypted copy of its code. The decryptor is polymorphic and can be located either:
Immediately before the encrypted code at the end of the last section
At the end of the code section of the infected host in 'slack-space' (assuming there is any)
At the original entry point of the host (overwriting the original host code)


Miekiemoes, an expert  for malware removal, and an MS-MVP, additionally has a blog post about Virut.

I suggest you to start backup all of your valuable data/documents/pictures/movies/songs/etc..
Do NOT backup any applications/installers and Do NOT backup any .exe/.scr/.htm/.html/.xml/.zip/.rar files...
This because these files may be infected as well. If you back them up and replace them afterwards, it will infect your computer again.

Read here for instructions how to format and reinstall Windows
:

http://web.mit.edu/ist/products/winxp/adva...all-format.html

Edited by SifuMike, 01 April 2009 - 06:45 PM.
typo

If I've saved you time & money,
please make a donation so I can keep helping people just like you! You can donate using a credit card and PayPal. Thank you!



Posted Image

Asking for help via Private Message or Mail will be ignored - So If you need help, post your problem in the forum.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users