[Arquivado] Trojan no atapi.sys

josé pimpolho · Dezembro 6, 2009

Olá, o AVG identificou um Cavalo de Tróia Packed.Protector no atapi.sys e não foi capaz de removê-lo.

O arquivo encontra-se em C:\WINDOWS\system32\drivers\atapi.sys

Como devo proceder?

Obrigado

wings · Dezembro 6, 2009

Boa noite josé pimpolho

Leia a regra 2 aqui do fórum.

Fabricio78 · Dezembro 7, 2009

estou com o mesmo problema do amigo acima, não consigo de maneira nenhuma me livrar deste trojan e ainda no gerenciador de tarefas aparece o svchost.exe ocupando 50% do cpu. O resultado do hijackthis foi o seguinte:

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 14:16:02, on 7/12/2009

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Boot mode: Normal

Running processes:

G:\WINDOWS\System32\smss.exe

G:\WINDOWS\system32\csrss.exe

G:\WINDOWS\system32\winlogon.exe

G:\WINDOWS\system32\services.exe

G:\WINDOWS\system32\lsass.exe

G:\WINDOWS\system32\svchost.exe

G:\WINDOWS\System32\svchost.exe

G:\WINDOWS\system32\spoolsv.exe

G:\ARQUIV~1\AVG\AVG8\avgwdsvc.exe

G:\Arquivos de programas\Java\jre6\bin\jqs.exe

G:\WINDOWS\system32\nvsvc32.exe

G:\WINDOWS\Explorer.EXE

G:\WINDOWS\system32\slserv.exe

G:\ARQUIV~1\AVG\AVG8\avgemc.exe

G:\ARQUIV~1\AVG\AVG8\avgrsx.exe

G:\ARQUIV~1\AVG\AVG8\avgnsx.exe

G:\Arquivos de programas\CyberLink DVD Solution\PowerDVD\PDVDServ.exe

G:\Arquivos de programas\Microsoft IntelliType Pro\type32.exe

G:\Arquivos de programas\Microsoft IntelliPoint\point32.exe

G:\WINDOWS\SOUNDMAN.EXE

G:\Arquivos de programas\Turbo\Manager\desp2k.exe

G:\WINDOWS\WinLogT.exe

G:\ARQUIV~1\AVG\AVG8\avgtray.exe

G:\WINDOWS\system32\RUNDLL32.EXE

G:\Arquivos de programas\Arquivos comuns\Real\Update_OB\realsched.exe

G:\Arquivos de programas\Java\jre6\bin\jusched.exe

G:\WINDOWS\system32\av_md.exe

G:\Arquivos de programas\DNA\btdna.exe

G:\Arquivos de programas\AVG\AVG8\avgcsrvx.exe

G:\WINDOWS\system32\ctfmon.exe

G:\WINDOWS\System32\svchost.exe

G:\Arquivos de programas\Microsoft Office\Office\1046\OLFSNT40.EXE

G:\WINDOWS\System32\svchost.exe

G:\WINDOWS\System32\alg.exe

G:\WINDOWS\system32\taskmgr.exe

G:\WINDOWS\System32\wbem\wmiapsrv.exe

G:\Arquivos de programas\Motherboard Monitor 5\MBM5.exe

G:\Arquivos de programas\Google\Chrome\Application\chrome.exe

G:\Documents and Settings\Fabricio\Meus documentos\downloads\HiJackThis.exe

G:\WINDOWS\System32\wbem\wmiprvse.exe

G:\Arquivos de programas\AVG\AVG8\avgcsrvx.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=101761&gct=&gc=1&q=

R3 - URLSearchHook: DefaultSearchHook Class - {C94E154B-1459-4A47-966B-4B843BEFC7DB} - G:\Arquivos de programas\AskSearch\bin\DefaultSearch.dll

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - G:\Arquivos de programas\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll

O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - G:\Arquivos de programas\AVG\AVG8\avgssie.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O2 - BHO: Auxiliar de Conexão do Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - G:\Arquivos de programas\Arquivos comuns\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - G:\Arquivos de programas\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - G:\Arquivos de programas\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - G:\Arquivos de programas\AVG\AVG8\Toolbar\IEToolbar.dll

O3 - Toolbar: (no name) - {A057A204-BACC-4D26-9990-79A187E2698E} - (no file)

O4 - HKLM\..\Run: [RemoteControl] "G:\Arquivos de programas\CyberLink DVD Solution\PowerDVD\PDVDServ.exe"

O4 - HKLM\..\Run: [NeroFilterCheck] G:\WINDOWS\system32\NeroCheck.exe

O4 - HKLM\..\Run: [ASUS Probe] G:\Program Files\ASUS\Asus Probe\AsusProb.exe

O4 - HKLM\..\Run: [type32] "G:\Arquivos de programas\Microsoft IntelliType Pro\type32.exe"

O4 - HKLM\..\Run: [intelliPoint] "G:\Arquivos de programas\Microsoft IntelliPoint\point32.exe"

O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [desp2k] G:\Arquivos de programas\Turbo\Manager\desp2k.exe

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE G:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [WinLogT] G:\WINDOWS\WinLogT.exe

O4 - HKLM\..\Run: [AVG8_TRAY] G:\ARQUIV~1\AVG\AVG8\avgtray.exe

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE G:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [TkBellExe] "G:\Arquivos de programas\Arquivos comuns\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [DAEMON Tools-1033] "G:\Arquivos de programas\D-Tools\daemon.exe" -lang 1033

O4 - HKLM\..\Run: [sunJavaUpdateSched] "G:\Arquivos de programas\Java\jre6\bin\jusched.exe"

O4 - HKLM\..\Run: [sysgif32] G:\WINDOWS\TEMP\~TM28.tmp

O4 - HKLM\..\Run: [av_md] G:\WINDOWS\system32\av_md.exe

O4 - HKLM\..\Run: [Regedit32] G:\WINDOWS\system32\regedit.exe

O4 - HKCU\..\Run: [bitTorrent DNA] "G:\Arquivos de programas\DNA\btdna.exe"

O4 - HKCU\..\Run: [ctfmon.exe] G:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [av_md] G:\Documents and Settings\Fabricio\av_md.exe

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] G:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] G:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] G:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] G:\WINDOWS\System32\CTFMON.EXE (User 'Default user')

O4 - Startup: siszyd32.exe

O4 - Global Startup: Microsoft Office.lnk = G:\Arquivos de programas\Microsoft Office\Office\OSA9.EXE

O4 - Global Startup: Symantec Fax Starter Edition Port.lnk = G:\Arquivos de programas\Microsoft Office\Office\1046\OLFSNT40.EXE

O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://G:\ARQUIV~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

O9 - Extra button: Pesquisar - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - G:\ARQUIV~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - G:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - G:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - G:\Arquivos de programas\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - G:\Arquivos de programas\Messenger\msmsgs.exe

O12 - Plugin for .spop: G:\Arquivos de programas\Internet Explorer\Plugins\NPDocBox.dll

O14 - IERESET.INF: SEARCH_PAGE_URL=&http://home.microsoft.com/intl/br/access/allinone.asp

O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} (MSN Games – Matchmaking) - http://sympatico.zone.msn.com/binFrameWork/v10/StagingUI.cab55579.cab

O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - http://www.srtest.com/srl_bin/sysreqlab3.cab

O16 - DPF: {339234B4-4E14-4280-B8B4-8BAE5AF99063} (Chess Object) - http://sympatico.zone.msn.com/bingame/zpagames/zpa_kqrp.cab55579.cab

O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (MSN Games – Buddy Invite) - http://sympatico.zone.msn.com/BinFrameWork/v10/ZBuddy.cab55579.cab

O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (MSN Games – Game Chat) - http://sympatico.zone.msn.com/binframework/v10/ZPAChat.cab55579.cab

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1192631346109

O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.nvidia.com/content/DriverDownload/srl/2.0.0.1/sysreqlab2.cab

O16 - DPF: {809A6301-7B40-4436-A02C-87B8D3D7D9E3} (ZPA_DMNO Object) - http://zone.msn.com/bingame/zpagames/zpa_dmno.cab55579.cab

O16 - DPF: {95B5D20C-BD31-4489-8ABF-F8C8BE748463} (MSN Games – Hearts) - http://zone.msn.com/bingame/zpagames/zpa_hrtz.cab70018.cab

O16 - DPF: {9BDF4724-10AA-43D5-BD15-AEA0D2287303} (MSN Games – Texas Holdem Poker) - http://zone.msn.com/bingame/zpagames/zpa_txhe.cab79352.cab

O16 - DPF: {A4110378-789B-455F-AE86-3A1BFC402853} (ZPA_SHVL Object) - http://zone.msn.com/bingame/zpagames/zpa_shvl.cab55579.cab

O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/ZPAFramework.cab102118.cab

O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (MSN Games – Game Communicator) - http://sympatico.zone.msn.com/binframework/v10/StProxy.cab55579.cab

O16 - DPF: {F773E7B2-62A9-4524-9109-87D2F0BEFAA4} (ChessControl Class) - http://zone.msn.com/bingame/zpagames/zpa_kqrp.cab56961.cab

O16 - DPF: {FF3C5A9F-5A91-4930-80E8-4709194C2AD3} (CheckersZPA Object) - http://zone.msn.com/bingame/zpagames/CheckersZPA.cab55579.cab

O16 - DPF: {FF3C5A9F-5A99-4930-80E8-4709194C2AD3} (MSN Games – Backgammon) - http://zone.msn.com/bingame/zpagames/ZPA_Backgammon.cab64162.cab

O17 - HKLM\System\CCS\Services\Tcpip\..\{94E8DE38-24F6-4126-B69E-3AA78F770265}: Domain = @

O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - G:\Arquivos de programas\AVG\AVG8\avgpp.dll

O20 - Winlogon Notify: avgrsstarter - G:\WINDOWS\SYSTEM32\avgrsstx.dll

O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - G:\ARQUIV~1\AVG\AVG8\avgemc.exe

O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - G:\ARQUIV~1\AVG\AVG8\avgwdsvc.exe

O23 - Service: Google Update Service (gupdate1ca391a32c9cf60) (gupdate1ca391a32c9cf60) - Google Inc. - G:\Arquivos de programas\Google\Update\GoogleUpdate.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - G:\Arquivos de programas\Java\jre6\bin\jqs.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - G:\WINDOWS\system32\nvsvc32.exe

O23 - Service: SmartLinkService (SLService) - - G:\WINDOWS\SYSTEM32\slserv.exe

--

End of file - 10197 bytes

POR FAVOR AJUDEM

wings · Dezembro 7, 2009

Boa tarde Fabricio78

Leia a regra 1 do fórum.

Fabricio78 · Dezembro 7, 2009

Desculpe Abrirei novo tópico

josé pimpolho · Dezembro 8, 2009

Olá, o AVG identificou um Cavalo de Tróia Packed.Protector no atapi.sys e não foi capaz de removê-lo.

O arquivo encontra-se em C:\WINDOWS\system32\drivers\atapi.sys

Como devo proceder?

Obrigado

me desculpe, estou tendo problemas com o HiJack, ele não está abrindo.

aparece o seguinte aviso, daí quando clico em executar nada acontece

wings · Dezembro 8, 2009

Boa tarde josé pimpolho

*Baixe o HJTScanList e salve-o no desktop

*Extraia o seu conteúdo para o desktop

*Duplo clique em hjtscanlist.bat

*Tecle [X] > [ENTER]

*Tecle [1] > [ENTER]

*Selecione (Ctrl+A), copie (Ctrl+C) e cole (Ctrl+V) o relatório na sua próxima resposta.

josé pimpolho · Dezembro 8, 2009

 
                       $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ 
                       º                                    º 
                                   hjtscanlist v2.0              
                       º                                    º 
                       $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ 

Microsoft Windows XP [versÆo 5.1.2600]


C:

 08/12/2009 11:53      C:\HiJack --------- 0 
       C:\pagefile.sys ---------  
 07/12/2009 13:15      C:\$AVG8.VAULT$ --------- 0 
 06/12/2009 21:15      C:\Arquivos de programas --------- 0 
 05/12/2009 21:09      C:\WINDOWS --------- 0 
 29/11/2009 16:31      C:\dump_dvd.vob --------- 0 
 26/11/2009 11:54      C:\BrowserPlusPlugins --------- 0 
 21/11/2009 00:03      C:\Config.Msi --------- 0 
 30/10/2009 14:26      C:\boot.ini --------- 223 
 14/10/2009 18:48      C:\Gravity --------- 0 
 15/09/2009 14:20      C:\NVIDIA --------- 0 
 14/09/2009 21:43      C:\sqmdata19.sqm --------- 268 
 14/09/2009 21:43      C:\sqmnoopt19.sqm --------- 244 
 31/08/2009 11:50      C:\sqmdata18.sqm --------- 268 
 31/08/2009 11:50      C:\sqmnoopt18.sqm --------- 244 
 17/08/2009 18:10      C:\pagefile.log --------- 17 
 17/08/2009 18:10      C:\MSDOS.INF --------- 1 
 16/08/2009 16:37      C:\sqmdata17.sqm --------- 268 
 16/08/2009 16:37      C:\sqmnoopt17.sqm --------- 244 
 16/08/2009 12:51      C:\sqmdata16.sqm --------- 268 
 16/08/2009 12:51      C:\sqmnoopt16.sqm --------- 244 
 15/08/2009 13:32      C:\sqmdata15.sqm --------- 232 
 15/08/2009 13:32      C:\sqmnoopt15.sqm --------- 244 
 01/08/2009 13:15      C:\sqmnoopt14.sqm --------- 244 
 01/08/2009 13:15      C:\sqmdata14.sqm --------- 268 
 17/07/2009 15:18      C:\sqmdata13.sqm --------- 268 
 17/07/2009 15:18      C:\sqmnoopt13.sqm --------- 244 
 20/05/2009 12:31      C:\sqmdata12.sqm --------- 232 
 20/05/2009 12:31      C:\sqmnoopt12.sqm --------- 244 
 18/05/2009 03:45      C:\temp --------- 0 
 06/05/2009 11:45      C:\sqmdata11.sqm --------- 268 
 06/05/2009 11:45      C:\sqmnoopt11.sqm --------- 244 
 28/03/2009 06:06      C:\logwmemory.bin --------- 0 
 23/03/2009 22:57      C:\sqmdata10.sqm --------- 268 
 23/03/2009 22:57      C:\sqmnoopt10.sqm --------- 244 
 22/03/2009 10:56      C:\sqmdata09.sqm --------- 268 
 22/03/2009 10:56      C:\sqmnoopt09.sqm --------- 244 
 22/03/2009 10:45      C:\sqmdata08.sqm --------- 268 
 22/03/2009 10:45      C:\sqmnoopt08.sqm --------- 244 
 21/03/2009 12:56      C:\sqmdata07.sqm --------- 268 
 21/03/2009 12:56      C:\sqmnoopt07.sqm --------- 244 
 21/03/2009 12:22      C:\sqmdata06.sqm --------- 268 
 21/03/2009 12:22      C:\sqmnoopt06.sqm --------- 244 
 21/03/2009 12:03      C:\sqmdata05.sqm --------- 268 
 21/03/2009 12:03      C:\sqmnoopt05.sqm --------- 244 
 21/03/2009 09:22      C:\sqmdata04.sqm --------- 268 
 21/03/2009 09:22      C:\sqmnoopt04.sqm --------- 244 
 20/03/2009 23:45      C:\sqmdata03.sqm --------- 268 
 20/03/2009 23:45      C:\sqmnoopt03.sqm --------- 244 
 20/03/2009 23:15      C:\sqmdata02.sqm --------- 268 
 20/03/2009 23:15      C:\sqmnoopt02.sqm --------- 244 
 20/03/2009 09:13      C:\sqmdata01.sqm --------- 268 
 20/03/2009 09:13      C:\sqmnoopt01.sqm --------- 244 
 19/03/2009 23:09      C:\sqmdata00.sqm --------- 268 
 19/03/2009 23:09      C:\sqmnoopt00.sqm --------- 244 
 05/03/2009 15:10      C:\RECYCLER --------- 0 
 04/03/2009 20:28      C:\ntldr --------- 251696 
 04/03/2009 19:43      C:\Globalink --------- 0 
 04/03/2009 19:39      C:\3_Realtek_1021 --------- 0 
 04/03/2009 19:30      C:\3_Realtek_1021.zip --------- 49273788 
 04/03/2009 17:29      C:\csb.log --------- 10 
 04/03/2009 16:48      C:\Documents and Settings --------- 0 
 04/03/2009 16:48      C:\System Volume Information --------- 0 
 04/03/2009 16:44      C:\IO.SYS --------- 0 
 04/03/2009 16:44      C:\AUTOEXEC.BAT --------- 0 
 04/03/2009 16:44      C:\MSDOS.SYS --------- 0 
 04/03/2009 16:44      C:\CONFIG.SYS --------- 0 
 03/08/2004 22:38      C:\NTDETECT.COM --------- 47564 
 28/10/2001 09:06      C:\Bootfont.bin --------- 4952 
----------------------------------------


C:\WINDOWS

 08/12/2009 11:51     C:\WINDOWS\0.log --------- 0 
 08/12/2009 11:51     C:\WINDOWS\WindowsUpdate.log --------- 1506047 
 08/12/2009 11:50     C:\WINDOWS\wiaservc.log --------- 49 
 08/12/2009 11:50     C:\WINDOWS\wiadebug.log --------- 159 
 08/12/2009 11:50     C:\WINDOWS\bootstat.dat --------- 2048 
 08/12/2009 11:45     C:\WINDOWS\SchedLgU.Txt --------- 32346 
 07/12/2009 20:33     C:\WINDOWS\NeroDigital.ini --------- 116 
 07/12/2009 04:38     C:\WINDOWS\Sysvxd.exe --------- 24563 
 05/12/2009 16:34     C:\WINDOWS\kaillera.ini --------- 704 
 04/12/2009 15:59     C:\WINDOWS\wmsetup.log --------- 71225 
 22/11/2009 11:43     C:\WINDOWS\setupapi.log --------- 825205 
 15/11/2009 08:47     C:\WINDOWS\hs_err_pid3036.log --------- 10864 
 09/11/2009 15:00     C:\WINDOWS\avisplitter.ini --------- 38 
 02/11/2009 22:27     C:\WINDOWS\win.ini --------- 833 
 30/10/2009 14:26     C:\WINDOWS\DPINST.LOG --------- 29408 
 26/10/2009 18:00     C:\WINDOWS\hphins27.dat --------- 167933 
 26/10/2009 18:00     C:\WINDOWS\setupact.log --------- 186894 
 23/10/2009 12:53     C:\WINDOWS\ModemLog_Modem padrÆo.txt --------- 4650 
 18/10/2009 14:11     C:\WINDOWS\DirectX.log --------- 504178 
 16/10/2009 20:31     C:\WINDOWS\WA.INI --------- 122 
 17/09/2009 23:15     C:\WINDOWS\KB954708.log --------- 610 
 10/09/2009 14:27     C:\WINDOWS\COM+.log --------- 1566 
 18/07/2009 03:57     C:\WINDOWS\iis6.log --------- 73962 
 18/07/2009 03:57     C:\WINDOWS\tabletoc.log --------- 2963 
 18/07/2009 03:57     C:\WINDOWS\ntdtcsetup.log --------- 13530 
 18/07/2009 03:57     C:\WINDOWS\ocmsn.log --------- 2634 
 18/07/2009 03:57     C:\WINDOWS\imsins.log --------- 1374 
 18/07/2009 03:57     C:\WINDOWS\comsetup.log --------- 25576 
 18/07/2009 03:57     C:\WINDOWS\tsoc.log --------- 23350 
 18/07/2009 03:57     C:\WINDOWS\spupdsvc.log --------- 70123 
 18/07/2009 03:57     C:\WINDOWS\netfxocm.log --------- 7879 
 18/07/2009 03:57     C:\WINDOWS\ocgen.log --------- 29341 
 18/07/2009 03:57     C:\WINDOWS\msgsocm.log --------- 2260 
 18/07/2009 03:57     C:\WINDOWS\MedCtrOC.log --------- 4810 
 18/07/2009 03:57     C:\WINDOWS\FaxSetup.log --------- 42454 
 18/07/2009 03:57     C:\WINDOWS\msmqinst.log --------- 19564 
 10/07/2009 01:32     C:\WINDOWS\DIFx.log --------- 2705 
 25/06/2009 21:07     C:\WINDOWS\popcinfot.dat --------- 25 
 19/05/2009 03:59     C:\WINDOWS\wiaservim.log --------- 16 
 09/05/2009 12:38     C:\WINDOWS\hpoins04.dat.temp --------- 103511 
 09/05/2009 12:38     C:\WINDOWS\hpoins04.dat --------- 103511 
 08/05/2009 00:05     C:\WINDOWS\ReVoltX.ini --------- 1038 
 21/04/2009 15:29     C:\WINDOWS\xpsp1hfm.log --------- 1074 
 21/04/2009 15:25     C:\WINDOWS\WMSysPr9.prx --------- 316640 
 15/04/2009 16:39     C:\WINDOWS\IE4 Error Log.txt --------- 2009 
 09/03/2009 22:17     C:\WINDOWS\HideWin.exe --------- 319488 
 05/03/2009 17:26     C:\WINDOWS\nsreg.dat --------- 0 
 05/03/2009 15:19     C:\WINDOWS\KB950974.log --------- 3961 
 05/03/2009 15:19     C:\WINDOWS\KB967715.log --------- 3875 
 05/03/2009 15:19     C:\WINDOWS\KB954459.log --------- 3782 
 05/03/2009 15:17     C:\WINDOWS\KB951748.log --------- 3696 
 04/03/2009 20:39     C:\WINDOWS\KB956802.log --------- 2686 
 04/03/2009 20:38     C:\WINDOWS\OEWABLog.txt --------- 1186 
 04/03/2009 20:37     C:\WINDOWS\DtcInstall.log --------- 359 
 04/03/2009 20:36     C:\WINDOWS\spupdsvc.log.1.log --------- 187 
 04/03/2009 20:33     C:\WINDOWS\imsins.BAK --------- 2639 
 04/03/2009 20:33     C:\WINDOWS\svcpack.log --------- 529397 
 04/03/2009 20:32     C:\WINDOWS\cmsetacl.log --------- 373 
 04/03/2009 20:32     C:\WINDOWS\sessmgr.setup.log --------- 1281 
 04/03/2009 20:32     C:\WINDOWS\updspapi.log --------- 121784 
 04/03/2009 19:48     C:\WINDOWS\ODBC.INI --------- 421 
 04/03/2009 19:43     C:\WINDOWS\vminst.log --------- 2081 
 04/03/2009 19:41     C:\WINDOWS\iun3404.exe --------- 216064 
 04/03/2009 19:39     C:\WINDOWS\KB898461.log --------- 6964 
 04/03/2009 19:39     C:\WINDOWS\KB892130.log --------- 4608 
 04/03/2009 17:29     C:\WINDOWS\KB835221.log --------- 10042 
 04/03/2009 16:47     C:\WINDOWS\REGLOCS.OLD --------- 8192 
 04/03/2009 16:44     C:\WINDOWS\control.ini --------- 0 
 04/03/2009 16:44     C:\WINDOWS\ODBCINST.INI --------- 4205 
 04/03/2009 16:43     C:\WINDOWS\WindowsShell.Manifest --------- 749 
 04/03/2009 16:42     C:\WINDOWS\vbaddin.ini --------- 37 
 04/03/2009 16:42     C:\WINDOWS\vb.ini --------- 36 
 04/03/2009 13:39     C:\WINDOWS\Sti_Trace.log --------- 0 
 04/03/2009 13:37     C:\WINDOWS\regopt.log --------- 1282 
 04/03/2009 13:37     C:\WINDOWS\system.ini --------- 231 
 09/09/2008 18:39     C:\WINDOWS\RTHDCPL.EXE --------- 16851968 
 19/08/2008 13:26     C:\WINDOWS\SOUNDMAN.EXE --------- 77824 
 06/08/2008 15:51     C:\WINDOWS\RtlUpd.exe --------- 1200128 
 19/06/2008 16:42     C:\WINDOWS\ALCWZRD.EXE --------- 2808832 
 19/06/2008 16:27     C:\WINDOWS\RTLCPL.EXE --------- 9715200 
 19/06/2008 16:20     C:\WINDOWS\ALCMTR.EXE --------- 57344 
 13/04/2008 23:21     C:\WINDOWS\winhlp32.exe --------- 287744 
 13/04/2008 23:21     C:\WINDOWS\slrundll.exe --------- 32866 
 13/04/2008 23:21     C:\WINDOWS\regedit.exe --------- 150528 
 13/04/2008 23:21     C:\WINDOWS\notepad.exe --------- 70144 
 13/04/2008 23:21     C:\WINDOWS\hh.exe --------- 10752 
 13/04/2008 23:20     C:\WINDOWS\explorer.exe --------- 1035776 
 13/04/2008 23:20     C:\WINDOWS\twain_32.dll --------- 50688 
 12/12/2007 21:04     C:\WINDOWS\hphmdl27.dat --------- 787 
 20/11/2007 18:15     C:\WINDOWS\SkyTel.exe --------- 1826816 
 28/06/2007 16:44     C:\WINDOWS\MicCal.exe --------- 2165760 
 27/03/2007 14:16     C:\WINDOWS\wmprfptb.prx --------- 33694 
 28/12/2006 16:01     C:\WINDOWS\002697_.tmp --------- 19569 
 14/07/2006 16:29     C:\WINDOWS\UNNeroShowTime.exe --------- 966656 
 14/07/2006 16:29     C:\WINDOWS\UNNeroVision.exe --------- 966656 
 14/07/2006 16:29     C:\WINDOWS\UNNeroBackItUp.exe --------- 966656 
 14/07/2006 16:29     C:\WINDOWS\UNNeroMediaHome.exe --------- 966656 
 14/07/2006 16:29     C:\WINDOWS\UNRecode.exe --------- 966656 
 15/09/2005 13:35     C:\WINDOWS\UNNeroMediaHome.cfg --------- 50 
 30/08/2005 20:37     C:\WINDOWS\UNNeroVision.cfg --------- 50 
 30/08/2005 20:37     C:\WINDOWS\UNNeroShowTime.cfg --------- 50 
 30/08/2005 20:36     C:\WINDOWS\UNRecode.cfg --------- 50 
 30/08/2005 20:33     C:\WINDOWS\UNNeroBackItUp.cfg --------- 50 
 04/08/2004 01:40     C:\WINDOWS\SET3.tmp --------- 1014492 
 04/08/2004 01:34     C:\WINDOWS\SET8.tmp --------- 14043 
 04/08/2004 01:31     C:\WINDOWS\SET4.tmp --------- 1086058 
 22/06/2004 09:09     C:\WINDOWS\hpomdl04.dat --------- 17176 
 22/06/2004 09:09     C:\WINDOWS\hpomdl04.dat.temp --------- 17176 
 18/02/2002 10:23     C:\WINDOWS\setdebug.exe --------- 46352 
 18/02/2002 07:35     C:\WINDOWS\jautoexp.dat --------- 6550 
 28/10/2001 09:07     C:\WINDOWS\Tapete.bmp --------- 9522 
 28/10/2001 09:07     C:\WINDOWS\_default.pif --------- 707 
 28/10/2001 09:07     C:\WINDOWS\winhelp.exe --------- 304000 
 28/10/2001 09:07     C:\WINDOWS\winnt256.bmp --------- 48680 
 28/10/2001 09:07     C:\WINDOWS\winnt.bmp --------- 48680 
 28/10/2001 09:07     C:\WINDOWS\vmmreg32.dll --------- 18944 
 28/10/2001 09:07     C:\WINDOWS\twain.dll --------- 94832 
 28/10/2001 09:07     C:\WINDOWS\twunk_32.exe --------- 25600 
 28/10/2001 09:07     C:\WINDOWS\twunk_16.exe --------- 49680 
 28/10/2001 09:07     C:\WINDOWS\TASKMAN.EXE --------- 15360 
 28/10/2001 09:07     C:\WINDOWS\desktop.ini --------- 2 
 28/10/2001 09:07     C:\WINDOWS\Deserto.bmp --------- 65832 
 28/10/2001 09:07     C:\WINDOWS\Rododentro.bmp --------- 17362 
 28/10/2001 09:07     C:\WINDOWS\Leques.bmp --------- 26680 
 28/10/2001 09:07     C:\WINDOWS\Bruma.bmp --------- 65954 
 28/10/2001 09:07     C:\WINDOWS\msdfmap.ini --------- 1405 
 28/10/2001 09:06     C:\WINDOWS\Areia.bmp --------- 26582 
 28/10/2001 09:06     C:\WINDOWS\Pescaria.bmp --------- 17336 
 28/10/2001 09:06     C:\WINDOWS\explorer.scf --------- 80 
 28/10/2001 09:06     C:\WINDOWS\Seda.bmp --------- 16730 
 28/10/2001 09:06     C:\WINDOWS\clock.avi --------- 82944 
 28/10/2001 09:06     C:\WINDOWS\Cafezinho.bmp --------- 17062 
 28/10/2001 09:06     C:\WINDOWS\Bolhas de sabÆo.bmp --------- 65978 
 28/10/2001 09:06     C:\WINDOWS\Renda azul 16.bmp --------- 1272 
 18/04/1997 11:53     C:\WINDOWS\unin0416.exe --------- 298496 
----------------------------------------


C:\WINDOWS\System

13/04/2008 23:21    C:\WINDOWS\System\winspool.drv --------- 146944 
04/08/2004 00:35    C:\WINDOWS\System\MMSYSTEM.DLL --------- 70080 
28/10/2001 09:07    C:\WINDOWS\System\WFWNET.DRV --------- 13600 
28/10/2001 09:07    C:\WINDOWS\System\VER.DLL --------- 9072 
28/10/2001 09:07    C:\WINDOWS\System\VGA.DRV --------- 2176 
28/10/2001 09:07    C:\WINDOWS\System\TIMER.DRV --------- 4096 
28/10/2001 09:07    C:\WINDOWS\System\TAPI.DLL --------- 19200 
28/10/2001 09:07    C:\WINDOWS\System\SYSTEM.DRV --------- 3360 
28/10/2001 09:07    C:\WINDOWS\System\stdole.tlb --------- 5532 
28/10/2001 09:07    C:\WINDOWS\System\SOUND.DRV --------- 1744 
28/10/2001 09:07    C:\WINDOWS\System\setup.inf --------- 59167 
28/10/2001 09:07    C:\WINDOWS\System\SHELL.DLL --------- 5120 
28/10/2001 09:07    C:\WINDOWS\System\OLESVR.DLL --------- 24064 
28/10/2001 09:07    C:\WINDOWS\System\OLECLI.DLL --------- 83456 
28/10/2001 09:07    C:\WINDOWS\System\MSVIDEO.DLL --------- 127120 
28/10/2001 09:07    C:\WINDOWS\System\MOUSE.DRV --------- 2032 
28/10/2001 09:07    C:\WINDOWS\System\MMTASK.TSK --------- 1152 
28/10/2001 09:06    C:\WINDOWS\System\MCIAVI.DRV --------- 73632 
28/10/2001 09:06    C:\WINDOWS\System\MCIWAVE.DRV --------- 28160 
28/10/2001 09:06    C:\WINDOWS\System\MCISEQ.DRV --------- 25296 
28/10/2001 09:06    C:\WINDOWS\System\LZEXPAND.DLL --------- 9936 
28/10/2001 09:06    C:\WINDOWS\System\KEYBOARD.DRV --------- 2000 
28/10/2001 09:06    C:\WINDOWS\System\COMMDLG.DLL --------- 33504 
28/10/2001 09:06    C:\WINDOWS\System\AVICAP.DLL --------- 70144 
28/10/2001 09:06    C:\WINDOWS\System\AVIFILE.DLL --------- 109536 
----------------------------------------


C:\WINDOWS\System32

08/12/2009 11:50     C:\WINDOWS\system32\dllcache --------- 0 
08/12/2009 11:50     C:\WINDOWS\system32\NvApps.xml --------- 244806 
07/12/2009 13:15     C:\WINDOWS\system32\drivers --------- 0 
07/12/2009 10:51     C:\WINDOWS\system32\wpa.dbl --------- 2206 
06/12/2009 05:48     C:\WINDOWS\system32\fjhdyfhsn.bat --------- 164 
06/12/2009 05:48     C:\WINDOWS\system32\av_md.exe --------- 27477 
05/12/2009 14:48     C:\WINDOWS\system32\CatRoot2 --------- 0 
20/11/2009 12:28     C:\WINDOWS\system32\Nuncalev.zip --------- 85012 
19/11/2009 21:58     C:\WINDOWS\system32\Mdtc.exe --------- 45056 
19/11/2009 21:58     C:\WINDOWS\system32\zlib.dll --------- 53760 
19/11/2009 21:58     C:\WINDOWS\system32\shdocwv.dll --------- 40960 
19/11/2009 21:58     C:\WINDOWS\system32\MSNMessengerAPI.tlb --------- 24884 
19/11/2009 21:58     C:\WINDOWS\system32\msado20.tlb --------- 61440 
19/11/2009 21:58     C:\WINDOWS\system32\vbbho.tlb --------- 2148 
09/11/2009 15:00     C:\WINDOWS\system32\pncrt.dll --------- 278528 
09/11/2009 15:00     C:\WINDOWS\system32\pndx5016.dll --------- 6656 
09/11/2009 15:00     C:\WINDOWS\system32\pndx5032.dll --------- 5632 
09/11/2009 15:00     C:\WINDOWS\system32\ff_vfw.dll --------- 85504 
09/11/2009 15:00     C:\WINDOWS\system32\rmoc3260.dll --------- 185920 
03/11/2009 09:38     C:\WINDOWS\system32\perfc009.dat --------- 68922 
03/11/2009 09:38     C:\WINDOWS\system32\perfh016.dat --------- 466718 
03/11/2009 09:38     C:\WINDOWS\system32\perfc016.dat --------- 77558 
03/11/2009 09:38     C:\WINDOWS\system32\perfh009.dat --------- 433942 
03/11/2009 09:38     C:\WINDOWS\system32\PerfStringBackup.INI --------- 1061436 
30/10/2009 14:27     C:\WINDOWS\system32\DirectX --------- 0 
30/10/2009 14:26     C:\WINDOWS\system32\DRVSTORE --------- 0 
30/10/2009 02:51     C:\WINDOWS\system32\mbr.ini --------- 249856 
30/10/2009 02:51     C:\WINDOWS\system32\Nuncalev.exe --------- 249856 
24/09/2009 12:15     C:\WINDOWS\system32\FNTCACHE.DAT --------- 194568 
23/09/2009 13:12     C:\WINDOWS\system32\jupdate-1.6.0_15-b03.log --------- 4465 
10/09/2009 12:46     C:\WINDOWS\system32\URTTEMP --------- 0 
20/08/2009 10:27     C:\WINDOWS\system32\avgrsstx.dll --------- 11952 
17/08/2009 03:04     C:\WINDOWS\system32\nvwddi.dll --------- 81920 
17/08/2009 03:03     C:\WINDOWS\system32\nvwss.dll --------- 3170304 
17/08/2009 03:03     C:\WINDOWS\system32\nvvitvs.dll --------- 4026368 
17/08/2009 03:03     C:\WINDOWS\system32\nvmobls.dll --------- 1286144 
17/08/2009 03:03     C:\WINDOWS\system32\nvmccss.dll --------- 188416 
17/08/2009 03:03     C:\WINDOWS\system32\nvgames.dll --------- 3547136 
17/08/2009 03:03     C:\WINDOWS\system32\nvdisps.dll --------- 4923392 
17/08/2009 03:03     C:\WINDOWS\system32\nvmctray.dll --------- 86016 
17/08/2009 03:03     C:\WINDOWS\system32\nvcpl.dll --------- 13877248 
17/08/2009 03:03     C:\WINDOWS\system32\NvwsApps.xml --------- 66834 
17/08/2009 03:03     C:\WINDOWS\system32\nvsvc32.exe --------- 168004 
17/08/2009 03:02     C:\WINDOWS\system32\nvmccs.dll --------- 229376 
17/08/2009 00:57     C:\WINDOWS\system32\nv4_disp.dll --------- 5845760 
17/08/2009 00:57     C:\WINDOWS\system32\nvapi.dll --------- 868352 
17/08/2009 00:57     C:\WINDOWS\system32\nvcuda.dll --------- 2002944 
17/08/2009 00:57     C:\WINDOWS\system32\nvcuvenc.dll --------- 1706528 
17/08/2009 00:57     C:\WINDOWS\system32\nvcuvid.dll --------- 2189856 
17/08/2009 00:57     C:\WINDOWS\system32\nvdata.bin --------- 1597690 
17/08/2009 00:57     C:\WINDOWS\system32\nvcodins.dll --------- 155648 
17/08/2009 00:57     C:\WINDOWS\system32\nvdisp.nvu --------- 19495 
17/08/2009 00:57     C:\WINDOWS\system32\nvcod.dll --------- 155648 
17/08/2009 00:57     C:\WINDOWS\system32\nvudisp.exe --------- 485920 
17/08/2009 00:57     C:\WINDOWS\system32\nvoglnt.dll --------- 10457088 
16/08/2009 12:08     C:\WINDOWS\system32\unrar.dll --------- 178176 
14/08/2009 13:36     C:\WINDOWS\system32\PhysXLoader.dll --------- 70936 
11/08/2009 12:35     C:\WINDOWS\system32\NVUNINST.EXE --------- 485920 
03/08/2009 00:21     C:\WINDOWS\system32\PhysXDevice.dll --------- 23320 
26/07/2009 16:44     C:\WINDOWS\system32\sirenacm.dll --------- 48448 
25/07/2009 05:23     C:\WINDOWS\system32\javaw.exe --------- 145184 
25/07/2009 05:23     C:\WINDOWS\system32\javaws.exe --------- 149280 
25/07/2009 05:23     C:\WINDOWS\system32\java.exe --------- 145184 
25/07/2009 05:23     C:\WINDOWS\system32\deploytk.dll --------- 411368 
25/07/2009 03:00     C:\WINDOWS\system32\javacpl.cpl --------- 73728 
23/07/2009 17:07     C:\WINDOWS\system32\CatRoot --------- 0 
18/07/2009 03:57     C:\WINDOWS\system32\mui --------- 0 
18/07/2009 03:57     C:\WINDOWS\system32\XPSViewer --------- 0 
18/07/2009 03:57     C:\WINDOWS\system32\pt-br --------- 0 
18/07/2009 03:54     C:\WINDOWS\system32\en-us --------- 0 
18/07/2009 03:53     C:\WINDOWS\system32\spool --------- 0 
18/07/2009 03:51     C:\WINDOWS\system32\xlive --------- 0 
16/07/2009 10:02     C:\WINDOWS\system32\pool.bin --------- 256 
13/07/2009 21:15     C:\WINDOWS\system32\dpl100.dll --------- 90112 
13/07/2009 21:15     C:\WINDOWS\system32\divx.dll --------- 685056 
10/07/2009 01:33     C:\WINDOWS\system32\AGEIA --------- 0 
28/06/2009 20:54     C:\WINDOWS\system32\HsInfo.dat --------- 96 
28/06/2009 03:55     C:\WINDOWS\system32\PnkBstrB.xtr --------- 189640 
28/06/2009 03:55     C:\WINDOWS\system32\PnkBstrB.exe --------- 189640 
27/06/2009 18:19     C:\WINDOWS\system32\PnkBstrA.exe --------- 75064 
27/06/2009 18:19     C:\WINDOWS\system32\pbsvc.exe --------- 794408 
27/06/2009 18:19     C:\WINDOWS\system32\LogFiles --------- 0 
05/06/2009 11:42     C:\WINDOWS\system32\usbaaplrc.dll --------- 2060288 
29/05/2009 18:37     C:\WINDOWS\system32\xvidvfw.dll --------- 205824 
29/05/2009 18:31     C:\WINDOWS\system32\xvidcore.dll --------- 881664 
26/05/2009 17:18     C:\WINDOWS\system32\QuickTime.qts --------- 57344 
26/05/2009 17:18     C:\WINDOWS\system32\QuickTimeVR.qtx --------- 90112 
19/05/2009 03:59     C:\WINDOWS\system32\2158743776.dat --------- 32 
07/05/2009 12:32     C:\WINDOWS\system32\ReinstallBackups --------- 0 
27/04/2009 19:38     C:\WINDOWS\system32\wrap_oal.dll --------- 444952 
27/04/2009 19:38     C:\WINDOWS\system32\OpenAL32.dll --------- 109080 
22/04/2009 02:17     C:\WINDOWS\system32\Macromed --------- 0 
22/04/2009 02:16     C:\WINDOWS\system32\Adobe --------- 0 
22/04/2009 00:20     C:\WINDOWS\system32\xlive.dll --------- 14311680 
22/04/2009 00:20     C:\WINDOWS\system32\xlivefnt.dll --------- 13642496 
22/04/2009 00:19     C:\WINDOWS\system32\xlive.dll.cat --------- 172173 
07/04/2009 10:50     C:\WINDOWS\system32\PhysXCompatCplUI.exe --------- 288024 
07/04/2009 10:50     C:\WINDOWS\system32\PhysXCplUI.exe --------- 288024 
07/04/2009 10:50     C:\WINDOWS\system32\PhysX.cpl --------- 214296 
06/04/2009 15:47     C:\WINDOWS\system32\REX Shared Library.dll --------- 233472 
----------------------------------------


C:\WINDOWS\Prefetch

08/12/2009 13:05     C:\WINDOWS\Prefetch\CMD.EXE-087B4001.pf --------- 14842 
08/12/2009 13:05     C:\WINDOWS\Prefetch\WINRAR.EXE-09D6614C.pf --------- 32176 
08/12/2009 13:04     C:\WINDOWS\Prefetch\VERCLSID.EXE-3667BD89.pf --------- 17564 
08/12/2009 13:02     C:\WINDOWS\Prefetch\GOOGLEUPDATE.EXE-198D7F30.pf --------- 32634 
08/12/2009 12:59     C:\WINDOWS\Prefetch\LOGON.SCR-151EFAEA.pf --------- 52710 
08/12/2009 12:48     C:\WINDOWS\Prefetch\JQSNOTIFY.EXE-39AFFB8A.pf --------- 7122 
08/12/2009 12:48     C:\WINDOWS\Prefetch\FIREFOX.EXE-1362643C.pf --------- 74494 
08/12/2009 12:39     C:\WINDOWS\Prefetch\AVGCMGR.EXE-144224E3.pf --------- 21560 
08/12/2009 12:32     C:\WINDOWS\Prefetch\RUNDLL32.EXE-2A94BB85.pf --------- 22392 
08/12/2009 12:32     C:\WINDOWS\Prefetch\RUNDLL32.EXE-2E5AF1D7.pf --------- 26666 
08/12/2009 12:07     C:\WINDOWS\Prefetch\BIOSHOCK.EXE-1DF13E1D.pf --------- 48400 
08/12/2009 12:07     C:\WINDOWS\Prefetch\NTSD.EXE-0A9BC67B.pf --------- 5982 
08/12/2009 12:02     C:\WINDOWS\Prefetch\WLCOMM.EXE-0889FC35.pf --------- 22166 
08/12/2009 12:00     C:\WINDOWS\Prefetch\AVGSCANX.EXE-218775F9.pf --------- 74962 
08/12/2009 12:00     C:\WINDOWS\Prefetch\AVGCSRVX.EXE-37924D46.pf --------- 64592 
08/12/2009 11:58     C:\WINDOWS\Prefetch\MSPAINT.EXE-11CBB631.pf --------- 19330 
08/12/2009 11:55     C:\WINDOWS\Prefetch\JUCHECK.EXE-04F6299D.pf --------- 28498 
08/12/2009 11:55     C:\WINDOWS\Prefetch\JAVA.EXE-348EE6DF.pf --------- 68556 
08/12/2009 11:55     C:\WINDOWS\Prefetch\GOOGLETALKPLUGIN.EXE-107D5DED.pf --------- 26002 
08/12/2009 11:52     C:\WINDOWS\Prefetch\HPQGPC01.EXE-35F7712D.pf --------- 34050 
08/12/2009 11:52     C:\WINDOWS\Prefetch\HPQBAM08.EXE-0CE058EF.pf --------- 15410 
08/12/2009 11:52     C:\WINDOWS\Prefetch\HPQSTE08.EXE-130D683B.pf --------- 36750 
08/12/2009 11:52     C:\WINDOWS\Prefetch\ALG.EXE-0F138680.pf --------- 14672 
08/12/2009 11:52     C:\WINDOWS\Prefetch\IPODSERVICE.EXE-3ADF8F7D.pf --------- 14124 
08/12/2009 11:52     C:\WINDOWS\Prefetch\HPRBLOG.EXE-0FC9EFAA.pf --------- 40590 
08/12/2009 11:52     C:\WINDOWS\Prefetch\IMAPI.EXE-0BF740A4.pf --------- 18650 
08/12/2009 11:51     C:\WINDOWS\Prefetch\WMIAPSRV.EXE-1E2270A5.pf --------- 17430 
08/12/2009 11:51     C:\WINDOWS\Prefetch\RUNDLL32.EXE-35A483DA.pf --------- 22368 
08/12/2009 11:51     C:\WINDOWS\Prefetch\RUNDLL32.EXE-1619A94E.pf --------- 15436 
08/12/2009 11:51     C:\WINDOWS\Prefetch\WUAUCLT.EXE-399A8E72.pf --------- 20352 
08/12/2009 11:51     C:\WINDOWS\Prefetch\WMIPRVSE.EXE-28F301A9.pf --------- 84338 
08/12/2009 11:51     C:\WINDOWS\Prefetch\SVCHOST.EXE-3530F672.pf --------- 69946 
08/12/2009 11:51     C:\WINDOWS\Prefetch\WINVNC4.EXE-1C0003C2.pf --------- 13086 
08/12/2009 11:51     C:\WINDOWS\Prefetch\WDFMGR.EXE-2CF4013B.pf --------- 6796 
08/12/2009 11:51     C:\WINDOWS\Prefetch\ROXWATCH9.EXE-17DFEDB9.pf --------- 29200 
08/12/2009 11:51     C:\WINDOWS\Prefetch\ROXIOUPNPSERVICE9.EXE-378A9427.pf --------- 23754 
08/12/2009 11:51     C:\WINDOWS\Prefetch\ROXLIVESHARE9.EXE-19905F76.pf --------- 21980 
08/12/2009 11:51     C:\WINDOWS\Prefetch\PNKBSTRB.EXE-21412697.pf --------- 34458 
08/12/2009 11:51     C:\WINDOWS\Prefetch\AVGNSX.EXE-20E94814.pf --------- 17604 
08/12/2009 11:51     C:\WINDOWS\Prefetch\AVGRSX.EXE-1DCC9962.pf --------- 47282 
08/12/2009 11:51     C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf --------- 1036194 
08/12/2009 11:47     C:\WINDOWS\Prefetch\HPQTRA08.EXE-13D111C8.pf --------- 47744 
08/12/2009 11:47     C:\WINDOWS\Prefetch\OSA.EXE-04147CEC.pf --------- 6014 
08/12/2009 09:47     C:\WINDOWS\Prefetch\AVGUPD.EXE-21BABB7D.pf --------- 32462 
08/12/2009 09:47     C:\WINDOWS\Prefetch\FIXCFG.EXE-292CBDE3.pf --------- 19810 
08/12/2009 09:02     C:\WINDOWS\Prefetch\GOOGLECRASHHANDLER.EXE-0820F13E.pf --------- 13880 
08/12/2009 04:43     C:\WINDOWS\Prefetch\Layout.ini --------- 316126 
07/12/2009 23:56     C:\WINDOWS\Prefetch\STEAM.EXE-00A6FB77.pf --------- 16784 
07/12/2009 23:19     C:\WINDOWS\Prefetch\WMPLAYER.EXE-0366FBE9.pf --------- 57082 
07/12/2009 20:48     C:\WINDOWS\Prefetch\HELPSVC.EXE-2878DDA2.pf --------- 52186 
07/12/2009 20:33     C:\WINDOWS\Prefetch\MPC-HC.EXE-2EE05F2D.pf --------- 65468 
07/12/2009 20:20     C:\WINDOWS\Prefetch\SOL.EXE-1C0C14EB.pf --------- 11830 
07/12/2009 18:16     C:\WINDOWS\Prefetch\HPQUSGH.EXE-01A0DB69.pf --------- 29008 
07/12/2009 14:31     C:\WINDOWS\Prefetch\HPSWP_CLIPBOOK.EXE-023F4146.pf --------- 15600 
07/12/2009 14:31     C:\WINDOWS\Prefetch\IEXPLORE.EXE-2B53DE18.pf --------- 80162 
07/12/2009 14:31     C:\WINDOWS\Prefetch\AVGUI.EXE-18AFB087.pf --------- 58528 
07/12/2009 14:09     C:\WINDOWS\Prefetch\DFRGNTFS.EXE-269967DF.pf --------- 133658 
07/12/2009 14:09     C:\WINDOWS\Prefetch\DEFRAG.EXE-273F131E.pf --------- 47592 
07/12/2009 13:53     C:\WINDOWS\Prefetch\HPQDIREC.EXE-03A38057.pf --------- 52406 
07/12/2009 13:15     C:\WINDOWS\Prefetch\NMINDEXSTORESVR.EXE-2B439C8B.pf --------- 85374 
----------------------------------------


C:\WINDOWS\Tasks

08/12/2009 13:02     C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1659004503-1644491937-1801674531-1003UA.job --------- 1136 
08/12/2009 11:50     C:\WINDOWS\Tasks\SA.DAT --------- 6 
08/12/2009 09:02     C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1659004503-1644491937-1801674531-1003Core.job --------- 1084 
05/12/2009 12:17     C:\WINDOWS\Tasks\AppleSoftwareUpdate.job --------- 300 
28/10/2001 09:07     C:\WINDOWS\Tasks\desktop.ini --------- 65 
----------------------------------------


C:\WINDOWS\Temp

08/12/2009 12:51     C:\WINDOWS\Temp\hpqddsvc.log --------- 713087 
08/12/2009 11:50     C:\WINDOWS\Temp\Perflib_Perfdata_488.dat --------- 16384 
08/12/2009 11:46     C:\WINDOWS\Temp\Perflib_Perfdata_75c.dat --------- 16384 
07/12/2009 13:13     C:\WINDOWS\Temp\3f5c97a6-e6c9-4632-96fe-3b930c13e042.tmp --------- 0 
07/12/2009 13:13     C:\WINDOWS\Temp\920cef3e-9924-4e13-b6b4-f8a6587e076c.tmp --------- 0 
07/12/2009 13:13     C:\WINDOWS\Temp\16031ba7-38d6-40a7-b141-37579dc68ee2.tmp --------- 65536 
07/12/2009 13:13     C:\WINDOWS\Temp\9d4d037f-6418-4880-ae0f-1e90892089b1.tmp --------- 65536 
07/12/2009 10:51     C:\WINDOWS\Temp\Perflib_Perfdata_70c.dat --------- 16384 
06/12/2009 10:17     C:\WINDOWS\Temp\Perflib_Perfdata_720.dat --------- 16384 
06/12/2009 05:48     C:\WINDOWS\Temp\~TMF18.tmp --------- 27477 
23/11/2009 15:35     C:\WINDOWS\Temp\Perflib_Perfdata_748.dat --------- 16384 
22/11/2009 11:40     C:\WINDOWS\Temp\Perflib_Perfdata_51c.dat --------- 16384 
08/11/2009 20:07     C:\WINDOWS\Temp\Perflib_Perfdata_790.dat --------- 16384 
02/11/2009 13:43     C:\WINDOWS\Temp\Perflib_Perfdata_788.dat --------- 16384 
02/11/2009 13:41     C:\WINDOWS\Temp\0fb2b2a8-d35d-4bd2-b942-9e918f419ce6.tmp --------- 0 
02/11/2009 03:51     C:\WINDOWS\Temp\Perflib_Perfdata_6c8.dat --------- 16384 
26/10/2009 18:00     C:\WINDOWS\Temp\hp_PC_D4300.log --------- 331814 
23/10/2009 23:46     C:\WINDOWS\Temp\avg8info.id --------- 74 
22/10/2009 12:27     C:\WINDOWS\Temp\Perflib_Perfdata_5f0.dat --------- 16384 
08/10/2009 10:31     C:\WINDOWS\Temp\Perflib_Perfdata_684.dat --------- 16384 
06/10/2009 19:00     C:\WINDOWS\Temp\Perflib_Perfdata_124.dat --------- 16384 
03/10/2009 13:00     C:\WINDOWS\Temp\Perflib_Perfdata_5d8.dat --------- 16384 
24/09/2009 12:15     C:\WINDOWS\Temp\Perflib_Perfdata_4a4.dat --------- 16384 
23/09/2009 08:54     C:\WINDOWS\Temp\Perflib_Perfdata_31c.dat --------- 16384 
16/09/2009 10:03     C:\WINDOWS\Temp\Perflib_Perfdata_7d0.dat --------- 16384 
15/09/2009 13:03     C:\WINDOWS\Temp\MSI170a7.LOG --------- 144 
06/09/2009 07:58     C:\WINDOWS\Temp\Perflib_Perfdata_5c0.dat --------- 16384 
25/07/2009 02:09     C:\WINDOWS\Temp\Perflib_Perfdata_624.dat --------- 16384 
30/06/2009 08:30     C:\WINDOWS\Temp\Perflib_Perfdata_49c.dat --------- 16384 
13/06/2009 12:40     C:\WINDOWS\Temp\SetupAdmin754.log --------- 85 
13/06/2009 07:42     C:\WINDOWS\Temp\Perflib_Perfdata_3a4.dat --------- 16384 
10/06/2009 15:31     C:\WINDOWS\Temp\Perflib_Perfdata_620.dat --------- 16384 
10/06/2009 15:28     C:\WINDOWS\Temp\e7c2bfce-7b18-41f9-a8c3-6d29bbe62cb5.tmp --------- 0 
10/06/2009 15:28     C:\WINDOWS\Temp\88d534b6-0589-47cd-bc2f-803dac5b88c8.tmp --------- 0 
10/06/2009 15:28     C:\WINDOWS\Temp\589f28dd-7f4d-472b-a9d1-9fd405f4d983.tmp --------- 65536 
10/06/2009 15:26     C:\WINDOWS\Temp\7b346d05-28eb-4b9f-bad5-ae557d9da4ca.tmp --------- 29354522 
10/06/2009 15:26     C:\WINDOWS\Temp\6e0210f4-cab3-49e7-bacb-2acb5c3f04dd.tmp --------- 23986176 
10/06/2009 08:24     C:\WINDOWS\Temp\Perflib_Perfdata_448.dat --------- 16384 
06/06/2009 09:19     C:\WINDOWS\Temp\Perflib_Perfdata_3d8.dat --------- 16384 
20/05/2009 18:35     C:\WINDOWS\Temp\hpzcoi03.log --------- 838 
20/05/2009 18:35     C:\WINDOWS\Temp\hpzcoi02.log --------- 1085 
20/05/2009 18:35     C:\WINDOWS\Temp\hpzcoi01.log --------- 596 
20/05/2009 18:35     C:\WINDOWS\Temp\hpzcoi00.log --------- 596 
20/05/2009 18:35     C:\WINDOWS\Temp\servic001.log --------- 2288 
20/05/2009 18:35     C:\WINDOWS\Temp\servic000.log --------- 2288 
19/05/2009 13:03     C:\WINDOWS\Temp\Perflib_Perfdata_6fc.dat --------- 16384 
28/04/2009 12:22     C:\WINDOWS\Temp\Perflib_Perfdata_660.dat --------- 16384 
28/04/2009 12:20     C:\WINDOWS\Temp\8dc325a2-31a3-4fa4-95ef-8e1d19596c6f.tmp --------- 1024 
28/04/2009 12:20     C:\WINDOWS\Temp\7782fc2e-683a-4139-87da-19e49d17eb1b.tmp --------- 1024 
21/04/2009 15:29     C:\WINDOWS\Temp\Perflib_Perfdata_bd8.dat --------- 16384 
14/04/2009 12:24     C:\WINDOWS\Temp\4c342e1d-ef09-48a5-9f60-41a29dc5b2ab.tmp --------- 175104 
14/04/2009 12:24     C:\WINDOWS\Temp\b623e08a-1740-46e5-a387-721e030a7e77.tmp --------- 0 
14/04/2009 12:24     C:\WINDOWS\Temp\bec7c27a-892a-4898-a0d4-8010d59bb612.tmp --------- 0 
11/04/2009 12:10     C:\WINDOWS\Temp\Perflib_Perfdata_5d0.dat --------- 16384 
04/04/2009 12:17     C:\WINDOWS\Temp\Hist¢rico --------- 0 
04/04/2009 12:17     C:\WINDOWS\Temp\Cookies --------- 0 
04/04/2009 12:17     C:\WINDOWS\Temp\Temporary Internet Files --------- 0 
04/03/2009 17:33     C:\WINDOWS\Temp\MYDEFAULT --------- 0 
04/03/2009 17:33     C:\WINDOWS\Temp\{4D36E96C-E325-11CE-BFC1-08002BE10318}0005 --------- 0 
04/03/2009 17:33     C:\WINDOWS\Temp\RTWaveTempINI.ini --------- 92 
04/03/2009 17:33     C:\WINDOWS\Temp\TempINI.ini --------- 173 
19/10/2007 18:46     C:\WINDOWS\Temp\hpzPT5mu.chm --------- 195864 
19/10/2007 18:46     C:\WINDOWS\Temp\hpzPT5mu.hlp --------- 37788 
11/04/2001 15:29     C:\WINDOWS\Temp\IEC112.tmp --------- 340866 
11/04/2001 15:29     C:\WINDOWS\Temp\IEC2A.tmp --------- 340866 
05/10/2000 22:01     C:\WINDOWS\Temp\IEC7E.tmp --------- 339565 
05/10/2000 14:05     C:\WINDOWS\Temp\set111.tmp --------- 165888 
05/10/2000 14:05     C:\WINDOWS\Temp\set175.tmp --------- 165888 
----------------------------------------


C:\DOCUME~1\adm\CONFIG~1\Temp

08/12/2009 12:07      C:\DOCUME~1\adm\CONFIG~1\Temp\drm_dyndata_7340007.dll --------- 212992 
08/12/2009 11:55      C:\DOCUME~1\adm\CONFIG~1\Temp\jusched.log --------- 385830 
08/12/2009 11:55      C:\DOCUME~1\adm\CONFIG~1\Temp\jupdate_d65bb55a --------- 8975 
08/12/2009 11:52      C:\DOCUME~1\adm\CONFIG~1\Temp\hpqddusr.log --------- 22310 
08/12/2009 11:52      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR8B.tmp --------- 1285 
08/12/2009 11:52      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR8A.tmp --------- 1342 
07/12/2009 23:43      C:\DOCUME~1\adm\CONFIG~1\Temp\MessengerCache --------- 0 
07/12/2009 13:24      C:\DOCUME~1\adm\CONFIG~1\Temp\TWAIN.LOG --------- 1974 
07/12/2009 13:24      C:\DOCUME~1\adm\CONFIG~1\Temp\Twain001.Mtx --------- 2 
07/12/2009 13:24      C:\DOCUME~1\adm\CONFIG~1\Temp\Twunk001.MTX --------- 156 
07/12/2009 13:24      C:\DOCUME~1\adm\CONFIG~1\Temp\Twunk002.MTX --------- 0 
07/12/2009 13:16      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR89.tmp --------- 1285 
07/12/2009 13:16      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR88.tmp --------- 1342 
06/12/2009 21:10      C:\DOCUME~1\adm\CONFIG~1\Temp\o0tmuzsf.exe.part --------- 380107 
06/12/2009 19:32      C:\DOCUME~1\adm\CONFIG~1\Temp\Perflib_Perfdata_1e0.dat --------- 16384 
06/12/2009 18:38      C:\DOCUME~1\adm\CONFIG~1\Temp\hsperfdata_adm --------- 0 
06/12/2009 10:23      C:\DOCUME~1\adm\CONFIG~1\Temp\3pknQfsB.exe.part --------- 140288 
06/12/2009 10:19      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR87.tmp --------- 1285 
06/12/2009 10:19      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR86.tmp --------- 1342 
06/12/2009 05:48      C:\DOCUME~1\adm\CONFIG~1\Temp\jar_cache622403676623493099.tmp --------- 5017 
06/12/2009 05:48      C:\DOCUME~1\adm\CONFIG~1\Temp\java_install_reg.log --------- 72955 
06/12/2009 05:01      C:\DOCUME~1\adm\CONFIG~1\Temp\test.php --------- 7 
05/12/2009 19:28      C:\DOCUME~1\adm\CONFIG~1\Temp\AcrA32.tmp --------- 2048000 
05/12/2009 19:23      C:\DOCUME~1\adm\CONFIG~1\Temp\wfyA23.tmp --------- 0 
05/12/2009 08:26      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR85.tmp --------- 1285 
05/12/2009 08:26      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR84.tmp --------- 1342 
05/12/2009 03:45      C:\DOCUME~1\adm\CONFIG~1\Temp\chrome_shutdown_ms.txt --------- 4 
04/12/2009 18:19      C:\DOCUME~1\adm\CONFIG~1\Temp\Bioshock_Data_DFE --------- 0 
04/12/2009 18:14      C:\DOCUME~1\adm\CONFIG~1\Temp\_isdelet.ini --------- 235 
04/12/2009 18:03      C:\DOCUME~1\adm\CONFIG~1\Temp\isp355.tmp --------- 0 
04/12/2009 15:59      C:\DOCUME~1\adm\CONFIG~1\Temp\control.xml --------- 12818 
03/12/2009 21:58      C:\DOCUME~1\adm\CONFIG~1\Temp\56818A.tmp --------- 0 
03/12/2009 21:32      C:\DOCUME~1\adm\CONFIG~1\Temp\eel177.tmp --------- 0 
03/12/2009 19:32      C:\DOCUME~1\adm\CONFIG~1\Temp\phy14D.tmp --------- 0 
03/12/2009 14:08      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR83.tmp --------- 1285 
03/12/2009 14:08      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR82.tmp --------- 1342 
02/12/2009 20:29      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR81.tmp --------- 1285 
02/12/2009 20:29      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR80.tmp --------- 1342 
02/12/2009 10:11      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR7F.tmp --------- 1285 
02/12/2009 10:11      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR7E.tmp --------- 1342 
01/12/2009 23:32      C:\DOCUME~1\adm\CONFIG~1\Temp\fnbAF.tmp --------- 0 
01/12/2009 19:37      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR7D.tmp --------- 1285 
01/12/2009 19:37      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR7C.tmp --------- 1342 
01/12/2009 19:29      C:\DOCUME~1\adm\CONFIG~1\Temp\Setup Log 2009-12-01 #001.txt --------- 118886 
01/12/2009 14:49      C:\DOCUME~1\adm\CONFIG~1\Temp\TFR10D.tmp --------- 10225 
01/12/2009 14:49      C:\DOCUME~1\adm\CONFIG~1\Temp\TFR109.tmp --------- 37885 
01/12/2009 14:49      C:\DOCUME~1\adm\CONFIG~1\Temp\TFR105.tmp --------- 119080 
01/12/2009 14:49      C:\DOCUME~1\adm\CONFIG~1\Temp\TFRFF.tmp --------- 31536 
01/12/2009 14:49      C:\DOCUME~1\adm\CONFIG~1\Temp\TFRFD.tmp --------- 84343 
01/12/2009 14:49      C:\DOCUME~1\adm\CONFIG~1\Temp\TFRFB.tmp --------- 47701 
01/12/2009 14:49      C:\DOCUME~1\adm\CONFIG~1\Temp\TFRF4.tmp --------- 67560 
01/12/2009 14:49      C:\DOCUME~1\adm\CONFIG~1\Temp\TFRF0.tmp --------- 49200 
01/12/2009 14:49      C:\DOCUME~1\adm\CONFIG~1\Temp\TFREF.tmp --------- 19331 
01/12/2009 11:50      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR7B.tmp --------- 1285 
01/12/2009 11:50      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR7A.tmp --------- 1342 
28/11/2009 11:18      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR79.tmp --------- 1285 
28/11/2009 11:18      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR78.tmp --------- 1342 
27/11/2009 10:05      C:\DOCUME~1\adm\CONFIG~1\Temp\msohtml1 --------- 0 
27/11/2009 09:58      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR77.tmp --------- 1285 
27/11/2009 09:58      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR76.tmp --------- 1342 
26/11/2009 11:54      C:\DOCUME~1\adm\CONFIG~1\Temp\BrowserPlusInstaller.log --------- 4190964 
25/11/2009 13:49      C:\DOCUME~1\adm\CONFIG~1\Temp\plugtmp-5 --------- 0 
25/11/2009 12:22      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR75.tmp --------- 1285 
25/11/2009 12:22      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR74.tmp --------- 1342 
24/11/2009 17:28      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR73.tmp --------- 1285 
24/11/2009 17:28      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR72.tmp --------- 1342 
23/11/2009 18:13      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR71.tmp --------- 1285 
23/11/2009 18:13      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR70.tmp --------- 1342 
23/11/2009 16:43      C:\DOCUME~1\adm\CONFIG~1\Temp\tmp3B6.tmp --------- 39028785 
23/11/2009 16:30      C:\DOCUME~1\adm\CONFIG~1\Temp\_Transporte.doc --------- 39424 
23/11/2009 16:29      C:\DOCUME~1\adm\CONFIG~1\Temp\Programacao_seminario versao 16nov09.doc --------- 94208 
23/11/2009 16:27      C:\DOCUME~1\adm\CONFIG~1\Temp\_Confirma‡ao.xls --------- 43008 
23/11/2009 15:46      C:\DOCUME~1\adm\CONFIG~1\Temp\plugtmp-4 --------- 0 
23/11/2009 15:37      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR6F.tmp --------- 1285 
23/11/2009 15:37      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR6E.tmp --------- 1342 
23/11/2009 14:15      C:\DOCUME~1\adm\CONFIG~1\Temp\Aspyr2532Star Wars The Force Unleashed --------- 0 
23/11/2009 14:12      C:\DOCUME~1\adm\CONFIG~1\Temp\Aspyr1748Star Wars The Force Unleashed --------- 0 
23/11/2009 12:14      C:\DOCUME~1\adm\CONFIG~1\Temp\Aspyr2076Star Wars The Force Unleashed --------- 0 
22/11/2009 11:42      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR6D.tmp --------- 1285 
22/11/2009 11:42      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR6C.tmp --------- 1342 
22/11/2009 10:26      C:\DOCUME~1\adm\CONFIG~1\Temp\Picasa3 --------- 0 
22/11/2009 10:25      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR6B.tmp --------- 1285 
22/11/2009 10:25      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR6A.tmp --------- 1342 
22/11/2009 10:07      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR69.tmp --------- 1285 
22/11/2009 10:07      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR68.tmp --------- 1342 
22/11/2009 09:56      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR67.tmp --------- 1285 
22/11/2009 09:56      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR66.tmp --------- 1342 
21/11/2009 20:50      C:\DOCUME~1\adm\CONFIG~1\Temp\audacity_temp --------- 0 
21/11/2009 14:27      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR65.tmp --------- 1285 
21/11/2009 14:27      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR64.tmp --------- 1342 
20/11/2009 20:13      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR63.tmp --------- 1285 
20/11/2009 20:13      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR62.tmp --------- 1342 
20/11/2009 20:10      C:\DOCUME~1\adm\CONFIG~1\Temp\tmp8B0.tmp --------- 133661560 
19/11/2009 16:29      C:\DOCUME~1\adm\CONFIG~1\Temp\mso3A23D.emf --------- 11076 
19/11/2009 16:29      C:\DOCUME~1\adm\CONFIG~1\Temp\msoD698C.emf --------- 11082 
19/11/2009 16:29      C:\DOCUME~1\adm\CONFIG~1\Temp\mso96C03.emf --------- 11076 
19/11/2009 16:29      C:\DOCUME~1\adm\CONFIG~1\Temp\mso8ECB0.emf --------- 11076 
19/11/2009 16:29      C:\DOCUME~1\adm\CONFIG~1\Temp\msoDA614.emf --------- 11076 
19/11/2009 16:29      C:\DOCUME~1\adm\CONFIG~1\Temp\mso8BC16.emf --------- 11076 
19/11/2009 16:29      C:\DOCUME~1\adm\CONFIG~1\Temp\mso7BAF.emf --------- 11076 
19/11/2009 16:29      C:\DOCUME~1\adm\CONFIG~1\Temp\mso797E5.emf --------- 11076 
19/11/2009 16:29      C:\DOCUME~1\adm\CONFIG~1\Temp\mso59971.emf --------- 11076 
19/11/2009 16:29      C:\DOCUME~1\adm\CONFIG~1\Temp\msoD21DA.emf --------- 11076 
19/11/2009 16:29      C:\DOCUME~1\adm\CONFIG~1\Temp\msoA1597.emf --------- 20988 
19/11/2009 16:29      C:\DOCUME~1\adm\CONFIG~1\Temp\msoD4C6B.wmf --------- 11724 
19/11/2009 16:29      C:\DOCUME~1\adm\CONFIG~1\Temp\msoB3222.wmf --------- 9852 
19/11/2009 16:29      C:\DOCUME~1\adm\CONFIG~1\Temp\mso339B8.emf --------- 15116 
19/11/2009 16:29      C:\DOCUME~1\adm\CONFIG~1\Temp\mso75199.wmf --------- 17402 
19/11/2009 16:29      C:\DOCUME~1\adm\CONFIG~1\Temp\msoE87DE.wmf --------- 67092 
19/11/2009 16:29      C:\DOCUME~1\adm\CONFIG~1\Temp\msoF247F.wmf --------- 19078 
19/11/2009 16:29      C:\DOCUME~1\adm\CONFIG~1\Temp\msoF8B9C.wmf --------- 12424 
19/11/2009 16:29      C:\DOCUME~1\adm\CONFIG~1\Temp\mso9A4A6.wmf --------- 83154 
19/11/2009 16:29      C:\DOCUME~1\adm\CONFIG~1\Temp\mso706C1.wmf --------- 45174 
19/11/2009 16:29      C:\DOCUME~1\adm\CONFIG~1\Temp\mso1BA8D.wmf --------- 17128 
19/11/2009 16:29      C:\DOCUME~1\adm\CONFIG~1\Temp\msoABFC0.emf --------- 14396 
19/11/2009 16:29      C:\DOCUME~1\adm\CONFIG~1\Temp\msoF1D3.wmf --------- 30466 
19/11/2009 16:29      C:\DOCUME~1\adm\CONFIG~1\Temp\msoEAA35.wmf --------- 43194 
19/11/2009 16:29      C:\DOCUME~1\adm\CONFIG~1\Temp\msoCA36A.wmf --------- 7562 
19/11/2009 13:15      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR61.tmp --------- 1285 
19/11/2009 13:15      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR60.tmp --------- 1342 
19/11/2009 12:15      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR5F.tmp --------- 1285 
19/11/2009 12:15      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR5E.tmp --------- 1342 
19/11/2009 11:43      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR5D.tmp --------- 1285 
19/11/2009 11:43      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR5C.tmp --------- 1342 
18/11/2009 21:31      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR5B.tmp --------- 1285 
18/11/2009 21:31      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR5A.tmp --------- 1342 
17/11/2009 19:51      C:\DOCUME~1\adm\CONFIG~1\Temp\pwt104.tmp --------- 0 
17/11/2009 19:51      C:\DOCUME~1\adm\CONFIG~1\Temp\3or102.tmp --------- 0 
17/11/2009 19:49      C:\DOCUME~1\adm\CONFIG~1\Temp\yj4FB.tmp --------- 0 
17/11/2009 19:49      C:\DOCUME~1\adm\CONFIG~1\Temp\plugtmp-3 --------- 0 
17/11/2009 19:49      C:\DOCUME~1\adm\CONFIG~1\Temp\233F8.tmp --------- 0 
17/11/2009 19:46      C:\DOCUME~1\adm\CONFIG~1\Temp\plugtmp-2 --------- 0 
17/11/2009 19:17      C:\DOCUME~1\adm\CONFIG~1\Temp\j9zD2.tmp --------- 0 
17/11/2009 19:17      C:\DOCUME~1\adm\CONFIG~1\Temp\5ayD1.tmp --------- 0 
17/11/2009 17:55      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR59.tmp --------- 1285 
17/11/2009 17:55      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR58.tmp --------- 1342 
17/11/2009 17:19      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR57.tmp --------- 1285 
17/11/2009 17:19      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR56.tmp --------- 1342 
17/11/2009 07:26      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR55.tmp --------- 1285 
17/11/2009 07:26      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR54.tmp --------- 1342 
17/11/2009 02:55      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR53.tmp --------- 1285 
17/11/2009 02:55      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR52.tmp --------- 1342 
16/11/2009 18:51      C:\DOCUME~1\adm\CONFIG~1\Temp\v3init2.log --------- 8876 
16/11/2009 18:22      C:\DOCUME~1\adm\CONFIG~1\Temp\maintenance.ini --------- 76 
16/11/2009 13:40      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR51.tmp --------- 1285 
16/11/2009 13:40      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR50.tmp --------- 1342 
16/11/2009 13:09      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR4F.tmp --------- 1285 
16/11/2009 13:09      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR4E.tmp --------- 1342 
15/11/2009 17:37      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR4D.tmp --------- 1285 
15/11/2009 17:37      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR4C.tmp --------- 1342 
15/11/2009 16:51      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR4B.tmp --------- 1285 
15/11/2009 16:51      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR4A.tmp --------- 1342 
15/11/2009 16:47      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR49.tmp --------- 1285 
15/11/2009 16:47      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR48.tmp --------- 1342 
15/11/2009 16:25      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR47.tmp --------- 1285 
15/11/2009 16:25      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR46.tmp --------- 1342 
14/11/2009 18:07      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR45.tmp --------- 1285 
14/11/2009 18:07      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR44.tmp --------- 1342 
14/11/2009 17:35      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR43.tmp --------- 1285 
14/11/2009 17:35      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR42.tmp --------- 1342 
14/11/2009 17:18      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR41.tmp --------- 1285 
14/11/2009 17:18      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR40.tmp --------- 1342 
14/11/2009 16:59      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR3F.tmp --------- 1285 
14/11/2009 16:59      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR3E.tmp --------- 1342 
14/11/2009 16:44      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR3D.tmp --------- 1285 
14/11/2009 16:44      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR3C.tmp --------- 1342 
14/11/2009 16:25      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR3B.tmp --------- 1285 
14/11/2009 16:25      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR3A.tmp --------- 1342 
14/11/2009 13:03      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR39.tmp --------- 1285 
14/11/2009 13:03      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR38.tmp --------- 1342 
14/11/2009 05:00      C:\DOCUME~1\adm\CONFIG~1\Temp\delete.ini --------- 0 
13/11/2009 19:52      C:\DOCUME~1\adm\CONFIG~1\Temp\Xl0000003.xls --------- 84480 
13/11/2009 14:03      C:\DOCUME~1\adm\CONFIG~1\Temp\CR_63D.tmp --------- 0 
13/11/2009 14:03      C:\DOCUME~1\adm\CONFIG~1\Temp\chrome_installer.log --------- 0 
13/11/2009 14:03      C:\DOCUME~1\adm\CONFIG~1\Temp\chrome_11719 --------- 0 
11/11/2009 00:24      C:\DOCUME~1\adm\CONFIG~1\Temp\TFRF3.tmp --------- 49200 
11/11/2009 00:24      C:\DOCUME~1\adm\CONFIG~1\Temp\TFREE.tmp --------- 19331 
11/11/2009 00:24      C:\DOCUME~1\adm\CONFIG~1\Temp\TFREA.tmp --------- 31536 
11/11/2009 00:24      C:\DOCUME~1\adm\CONFIG~1\Temp\TFRE7.tmp --------- 119080 
11/11/2009 00:24      C:\DOCUME~1\adm\CONFIG~1\Temp\TFRE3.tmp --------- 10225 
11/11/2009 00:24      C:\DOCUME~1\adm\CONFIG~1\Temp\TFRDF.tmp --------- 35574 
11/11/2009 00:24      C:\DOCUME~1\adm\CONFIG~1\Temp\TFRDC.tmp --------- 47701 
11/11/2009 00:24      C:\DOCUME~1\adm\CONFIG~1\Temp\TFRD7.tmp --------- 84343 
11/11/2009 00:24      C:\DOCUME~1\adm\CONFIG~1\Temp\TFRD2.tmp --------- 40950 
11/11/2009 00:24      C:\DOCUME~1\adm\CONFIG~1\Temp\TFRCC.tmp --------- 37885 
11/11/2009 00:24      C:\DOCUME~1\adm\CONFIG~1\Temp\TFRC9.tmp --------- 23262 
11/11/2009 00:24      C:\DOCUME~1\adm\CONFIG~1\Temp\TFRC3.tmp --------- 62753 
11/11/2009 00:24      C:\DOCUME~1\adm\CONFIG~1\Temp\TFRBF.tmp --------- 67994 
11/11/2009 00:24      C:\DOCUME~1\adm\CONFIG~1\Temp\TFRBB.tmp --------- 67560 
11/11/2009 00:24      C:\DOCUME~1\adm\CONFIG~1\Temp\TFRB9.tmp --------- 46021 
10/11/2009 22:48      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR37.tmp --------- 1285 
10/11/2009 22:48      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR36.tmp --------- 1342 
10/11/2009 20:05      C:\DOCUME~1\adm\CONFIG~1\Temp\1110200500000a20ucgghwa8d2 --------- 0 
10/11/2009 18:20      C:\DOCUME~1\adm\CONFIG~1\Temp\chrome_2130 --------- 0 
10/11/2009 16:02      C:\DOCUME~1\adm\CONFIG~1\Temp\CR_369.tmp --------- 0 
10/11/2009 16:02      C:\DOCUME~1\adm\CONFIG~1\Temp\chrome_7833 --------- 0 
10/11/2009 15:26      C:\DOCUME~1\adm\CONFIG~1\Temp\U3Launcher.log --------- 26849 
08/11/2009 20:09      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR35.tmp --------- 1285 
08/11/2009 20:09      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR34.tmp --------- 1342 
08/11/2009 11:01      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR33.tmp --------- 1285 
08/11/2009 11:01      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR32.tmp --------- 1342 
07/11/2009 11:56      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR31.tmp --------- 1285 
07/11/2009 11:56      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR30.tmp --------- 1342 
06/11/2009 14:01      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR2F.tmp --------- 1285 
06/11/2009 14:01      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR2E.tmp --------- 1342 
05/11/2009 13:32      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR2D.tmp --------- 1285 
05/11/2009 13:32      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR2C.tmp --------- 1342 
04/11/2009 10:13      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR2B.tmp --------- 1285 
04/11/2009 10:13      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR2A.tmp --------- 1342 
03/11/2009 23:02      C:\DOCUME~1\adm\CONFIG~1\Temp\dd_vcredistUI3D23.txt --------- 11400 
03/11/2009 23:02      C:\DOCUME~1\adm\CONFIG~1\Temp\dd_vcredistMSI3D23.txt --------- 521272 
03/11/2009 20:49      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR29.tmp --------- 1285 
03/11/2009 20:49      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR28.tmp --------- 1342 
03/11/2009 10:32      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR27.tmp --------- 1285 
03/11/2009 10:32      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR26.tmp --------- 1342 
03/11/2009 10:24      C:\DOCUME~1\adm\CONFIG~1\Temp\plugtmp-1 --------- 0 
03/11/2009 09:42      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR25.tmp --------- 1285 
03/11/2009 09:42      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR24.tmp --------- 1342 
02/11/2009 15:27      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR23.tmp --------- 1285 
02/11/2009 15:27      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR22.tmp --------- 1342 
02/11/2009 15:17      C:\DOCUME~1\adm\CONFIG~1\Temp\JWn7_xnx.mp3.part --------- 653555 
02/11/2009 14:28      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR21.tmp --------- 1285 
02/11/2009 14:28      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR20.tmp --------- 1342 
02/11/2009 13:45      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR1F.tmp --------- 1285 
02/11/2009 13:45      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR1E.tmp --------- 1342 
02/11/2009 11:00      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR1D.tmp --------- 1285 
02/11/2009 11:00      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR1C.tmp --------- 1342 
02/11/2009 05:33      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR1B.tmp --------- 1285 
02/11/2009 05:33      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR1A.tmp --------- 1342 
02/11/2009 03:53      C:\DOCUME~1\adm\CONFIG~1\Temp\~DFD780.tmp --------- 512 
02/11/2009 03:53      C:\DOCUME~1\adm\CONFIG~1\Temp\~DF2E9A.tmp --------- 2801664 
02/11/2009 03:53      C:\DOCUME~1\adm\CONFIG~1\Temp\~DF9DCE.tmp --------- 512 
02/11/2009 03:53      C:\DOCUME~1\adm\CONFIG~1\Temp\~DF8868.tmp --------- 2801664 
02/11/2009 03:53      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR19.tmp --------- 1285 
02/11/2009 03:53      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR18.tmp --------- 1342 
01/11/2009 15:26      C:\DOCUME~1\adm\CONFIG~1\Temp\IP5SM37E.htm --------- 88864 
01/11/2009 15:26      C:\DOCUME~1\adm\CONFIG~1\Temp\AXS6NMHU.emf --------- 82040 
01/11/2009 15:26      C:\DOCUME~1\adm\CONFIG~1\Temp\Z4V3AQYG.htm --------- 2374 
01/11/2009 15:26      C:\DOCUME~1\adm\CONFIG~1\Temp\JHB0T9IF.emf --------- 78420 
01/11/2009 15:26      C:\DOCUME~1\adm\CONFIG~1\Temp\D2IWVRG5.htm --------- 2264 
01/11/2009 15:26      C:\DOCUME~1\adm\CONFIG~1\Temp\3QOY8LHQ.emf --------- 117008 
01/11/2009 15:26      C:\DOCUME~1\adm\CONFIG~1\Temp\XU6246LZ.htm --------- 2108 
01/11/2009 15:26      C:\DOCUME~1\adm\CONFIG~1\Temp\SMIA1Q4S.htm --------- 1756 
01/11/2009 15:26      C:\DOCUME~1\adm\CONFIG~1\Temp\KFBKJ47R.emf --------- 225368 
01/11/2009 15:26      C:\DOCUME~1\adm\CONFIG~1\Temp\TH0ZHI9J.htm --------- 5280 
01/11/2009 15:26      C:\DOCUME~1\adm\CONFIG~1\Temp\ZQ6FPKNC.emf --------- 54368 
01/11/2009 15:26      C:\DOCUME~1\adm\CONFIG~1\Temp\6W2JOLTM.htm --------- 10604 
01/11/2009 15:26      C:\DOCUME~1\adm\CONFIG~1\Temp\Q112O9OP.emf --------- 65872 
01/11/2009 15:26      C:\DOCUME~1\adm\CONFIG~1\Temp\QTZVFLJC.emf --------- 23204 
01/11/2009 15:26      C:\DOCUME~1\adm\CONFIG~1\Temp\GOL17CO4.htm --------- 5298 
01/11/2009 15:26      C:\DOCUME~1\adm\CONFIG~1\Temp\36EZNTL2.htm --------- 1752 
01/11/2009 15:26      C:\DOCUME~1\adm\CONFIG~1\Temp\FW7DJ9TX.htm --------- 1398 
01/11/2009 15:26      C:\DOCUME~1\adm\CONFIG~1\Temp\2QW35N5R.htm --------- 9705 
31/10/2009 07:55      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR17.tmp --------- 1285 
31/10/2009 07:55      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR16.tmp --------- 1342 
31/10/2009 02:32      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR15.tmp --------- 1285 
31/10/2009 02:32      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR14.tmp --------- 1342 
30/10/2009 15:15      C:\DOCUME~1\adm\CONFIG~1\Temp\UCDebugger --------- 0 
30/10/2009 14:26      C:\DOCUME~1\adm\CONFIG~1\Temp\AMD --------- 0 
30/10/2009 14:26      C:\DOCUME~1\adm\CONFIG~1\Temp\MSIf3dbb.LOG --------- 146 
30/10/2009 14:26      C:\DOCUME~1\adm\CONFIG~1\Temp\dd_vcredistUI794A.txt --------- 11434 
30/10/2009 14:26      C:\DOCUME~1\adm\CONFIG~1\Temp\dd_vcredistMSI794A.txt --------- 519446 
30/10/2009 14:14      C:\DOCUME~1\adm\CONFIG~1\Temp\set673.tmp --------- 121064 
30/10/2009 12:09      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR13.tmp --------- 1285 
30/10/2009 12:09      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR12.tmp --------- 1342 
30/10/2009 11:57      C:\DOCUME~1\adm\CONFIG~1\Temp\Filme4.wmv --------- 5586101 
30/10/2009 11:56      C:\DOCUME~1\adm\CONFIG~1\Temp\plugtmp --------- 0 
29/10/2009 21:54      C:\DOCUME~1\adm\CONFIG~1\Temp\VBE --------- 0 
29/10/2009 00:35      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR11.tmp --------- 1285 
29/10/2009 00:35      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR10.tmp --------- 1342 
28/10/2009 18:10      C:\DOCUME~1\adm\CONFIG~1\Temp\MARF.tmp --------- 1285 
28/10/2009 18:10      C:\DOCUME~1\adm\CONFIG~1\Temp\MARE.tmp --------- 1342 
28/10/2009 17:57      C:\DOCUME~1\adm\CONFIG~1\Temp\MARD.tmp --------- 1285 
28/10/2009 17:57      C:\DOCUME~1\adm\CONFIG~1\Temp\MARC.tmp --------- 1342 
28/10/2009 03:09      C:\DOCUME~1\adm\CONFIG~1\Temp\MARB.tmp --------- 1285 
28/10/2009 03:09      C:\DOCUME~1\adm\CONFIG~1\Temp\MARA.tmp --------- 1342 
27/10/2009 12:34      C:\DOCUME~1\adm\CONFIG~1\Temp\YC46N92W.htm --------- 732 
27/10/2009 12:34      C:\DOCUME~1\adm\CONFIG~1\Temp\V90M5GXU.htm --------- 120652 
27/10/2009 12:34      C:\DOCUME~1\adm\CONFIG~1\Temp\513QJNLP.emf --------- 356 
27/10/2009 12:34      C:\DOCUME~1\adm\CONFIG~1\Temp\N7WX4H4M.htm --------- 10956 
27/10/2009 12:34      C:\DOCUME~1\adm\CONFIG~1\Temp\HDJOAKJL.emf --------- 356 
27/10/2009 12:34      C:\DOCUME~1\adm\CONFIG~1\Temp\HJ9346SC.htm --------- 1477 
27/10/2009 12:34      C:\DOCUME~1\adm\CONFIG~1\Temp\KCXD3K70.emf --------- 336 
27/10/2009 12:34      C:\DOCUME~1\adm\CONFIG~1\Temp\IWXYG1BP.htm --------- 5082 
27/10/2009 12:34      C:\DOCUME~1\adm\CONFIG~1\Temp\9RL355Z5.htm --------- 664 
27/10/2009 12:34      C:\DOCUME~1\adm\CONFIG~1\Temp\4CUS0P49.emf --------- 81368 
27/10/2009 12:34      C:\DOCUME~1\adm\CONFIG~1\Temp\MHN9DWAR.htm --------- 6323 
27/10/2009 12:34      C:\DOCUME~1\adm\CONFIG~1\Temp\IYM1IAYX.emf --------- 196928 
27/10/2009 12:34      C:\DOCUME~1\adm\CONFIG~1\Temp\VXYE8OCG.htm --------- 732 
27/10/2009 12:34      C:\DOCUME~1\adm\CONFIG~1\Temp\ZJ35IZX7.htm --------- 3432 
27/10/2009 12:34      C:\DOCUME~1\adm\CONFIG~1\Temp\AZUJIJNL.htm --------- 9418 
27/10/2009 12:34      C:\DOCUME~1\adm\CONFIG~1\Temp\BLQCVGG5.htm --------- 732 
27/10/2009 12:34      C:\DOCUME~1\adm\CONFIG~1\Temp\EGNQRT7V.htm --------- 2354 
27/10/2009 12:34      C:\DOCUME~1\adm\CONFIG~1\Temp\OXWA7EW2.htm --------- 29598 
27/10/2009 12:34      C:\DOCUME~1\adm\CONFIG~1\Temp\DAVE1JGB.htm --------- 120652 
27/10/2009 12:34      C:\DOCUME~1\adm\CONFIG~1\Temp\QW4G4AJU.htm --------- 1477 
27/10/2009 12:34      C:\DOCUME~1\adm\CONFIG~1\Temp\C8JJV0A8.htm --------- 10956 
27/10/2009 12:34      C:\DOCUME~1\adm\CONFIG~1\Temp\SH2KRMS6.emf --------- 356 
27/10/2009 12:34      C:\DOCUME~1\adm\CONFIG~1\Temp\ZBPCW4Q7.htm --------- 664 
27/10/2009 12:34      C:\DOCUME~1\adm\CONFIG~1\Temp\WXOWU8HX.emf --------- 356 
27/10/2009 12:34      C:\DOCUME~1\adm\CONFIG~1\Temp\IAFEV89Q.htm --------- 732 
27/10/2009 12:34      C:\DOCUME~1\adm\CONFIG~1\Temp\8B1HZTXF.emf --------- 336 
27/10/2009 12:34      C:\DOCUME~1\adm\CONFIG~1\Temp\FAE296NI.htm --------- 5082 
27/10/2009 12:34      C:\DOCUME~1\adm\CONFIG~1\Temp\RQ052QJG.emf --------- 81368 
27/10/2009 12:34      C:\DOCUME~1\adm\CONFIG~1\Temp\KB5MQ5YL.htm --------- 9418 
27/10/2009 12:34      C:\DOCUME~1\adm\CONFIG~1\Temp\JDEVND5S.htm --------- 6323 
27/10/2009 12:34      C:\DOCUME~1\adm\CONFIG~1\Temp\7ET9Z0M8.emf --------- 196928 
27/10/2009 12:34      C:\DOCUME~1\adm\CONFIG~1\Temp\42L81MN7.htm --------- 3432 
27/10/2009 12:34      C:\DOCUME~1\adm\CONFIG~1\Temp\X0YZZY80.htm --------- 732 
27/10/2009 12:34      C:\DOCUME~1\adm\CONFIG~1\Temp\Q6QH99PW.htm --------- 2354 
27/10/2009 12:34      C:\DOCUME~1\adm\CONFIG~1\Temp\G9EWJI3M.htm --------- 732 
27/10/2009 12:34      C:\DOCUME~1\adm\CONFIG~1\Temp\BB8UKI2S.htm --------- 29598 
27/10/2009 12:33      C:\DOCUME~1\adm\CONFIG~1\Temp\MZDOCAAI.htm --------- 1477 
27/10/2009 12:33      C:\DOCUME~1\adm\CONFIG~1\Temp\A9KHKRTN.htm --------- 120531 
27/10/2009 12:33      C:\DOCUME~1\adm\CONFIG~1\Temp\J8FIPA0R.htm --------- 10956 
27/10/2009 12:33      C:\DOCUME~1\adm\CONFIG~1\Temp\7KPKYN2D.htm --------- 732 
27/10/2009 12:33      C:\DOCUME~1\adm\CONFIG~1\Temp\M94WOH6S.emf --------- 356 
27/10/2009 12:33      C:\DOCUME~1\adm\CONFIG~1\Temp\TGSWQWLT.emf --------- 356 
27/10/2009 12:33      C:\DOCUME~1\adm\CONFIG~1\Temp\X6VUPSH9.htm --------- 5082 
27/10/2009 12:33      C:\DOCUME~1\adm\CONFIG~1\Temp\0DHMFD2X.htm --------- 664 
27/10/2009 12:33      C:\DOCUME~1\adm\CONFIG~1\Temp\YSOCG5IE.emf --------- 336 
27/10/2009 12:33      C:\DOCUME~1\adm\CONFIG~1\Temp\2O99S8NZ.emf --------- 81368 
27/10/2009 12:33      C:\DOCUME~1\adm\CONFIG~1\Temp\A9ZOT48P.htm --------- 6323 
27/10/2009 12:33      C:\DOCUME~1\adm\CONFIG~1\Temp\HYG8PQFC.htm --------- 3432 
27/10/2009 12:33      C:\DOCUME~1\adm\CONFIG~1\Temp\P4MTBRFZ.emf --------- 196928 
27/10/2009 12:33      C:\DOCUME~1\adm\CONFIG~1\Temp\FLQ7OA9S.htm --------- 9418 
27/10/2009 12:33      C:\DOCUME~1\adm\CONFIG~1\Temp\16V3IJLG.htm --------- 732 
27/10/2009 12:33      C:\DOCUME~1\adm\CONFIG~1\Temp\TWGAI7U2.htm --------- 732 
27/10/2009 12:33      C:\DOCUME~1\adm\CONFIG~1\Temp\G36B2D69.htm --------- 2354 
27/10/2009 12:28      C:\DOCUME~1\adm\CONFIG~1\Temp\HL8M64QZ.emf --------- 356 
27/10/2009 12:28      C:\DOCUME~1\adm\CONFIG~1\Temp\76UZVETU.htm --------- 1477 
27/10/2009 12:28      C:\DOCUME~1\adm\CONFIG~1\Temp\BTZIPP3D.htm --------- 122006 
27/10/2009 12:28      C:\DOCUME~1\adm\CONFIG~1\Temp\PB8WQ79T.htm --------- 10956 
27/10/2009 12:28      C:\DOCUME~1\adm\CONFIG~1\Temp\OYQWBQAN.htm --------- 732 
27/10/2009 12:28      C:\DOCUME~1\adm\CONFIG~1\Temp\GVI5O2N3.emf --------- 356 
27/10/2009 12:28      C:\DOCUME~1\adm\CONFIG~1\Temp\U13CF03D.emf --------- 336 
27/10/2009 12:28      C:\DOCUME~1\adm\CONFIG~1\Temp\2DMQ78TN.htm --------- 5082 
27/10/2009 12:28      C:\DOCUME~1\adm\CONFIG~1\Temp\Y28JGDM1.htm --------- 664 
27/10/2009 12:28      C:\DOCUME~1\adm\CONFIG~1\Temp\6Y4CQALQ.htm --------- 6344 
27/10/2009 12:28      C:\DOCUME~1\adm\CONFIG~1\Temp\8MS8BTJ8.emf --------- 81368 
27/10/2009 12:28      C:\DOCUME~1\adm\CONFIG~1\Temp\P9OS6LU9.emf --------- 196928 
27/10/2009 12:28      C:\DOCUME~1\adm\CONFIG~1\Temp\QVZAR9Q5.htm --------- 9448 
27/10/2009 12:28      C:\DOCUME~1\adm\CONFIG~1\Temp\HEO95TO4.htm --------- 3432 
27/10/2009 12:28      C:\DOCUME~1\adm\CONFIG~1\Temp\IPOT6N6V.htm --------- 2354 
27/10/2009 12:28      C:\DOCUME~1\adm\CONFIG~1\Temp\AZ5FXFXV.htm --------- 732 
27/10/2009 12:28      C:\DOCUME~1\adm\CONFIG~1\Temp\E6223L2U.htm --------- 732 
27/10/2009 12:28      C:\DOCUME~1\adm\CONFIG~1\Temp\9BVNHBTC.htm --------- 29581 
27/10/2009 12:28      C:\DOCUME~1\adm\CONFIG~1\Temp\14J8VPUL.htm --------- 122006 
27/10/2009 12:28      C:\DOCUME~1\adm\CONFIG~1\Temp\5QFCGYW0.htm --------- 1477 
27/10/2009 12:28      C:\DOCUME~1\adm\CONFIG~1\Temp\MH2F7AE1.htm --------- 10956 
27/10/2009 12:28      C:\DOCUME~1\adm\CONFIG~1\Temp\94J7E1HX.emf --------- 356 
27/10/2009 12:28      C:\DOCUME~1\adm\CONFIG~1\Temp\5JO8P399.emf --------- 356 
27/10/2009 12:28      C:\DOCUME~1\adm\CONFIG~1\Temp\I1L15AYV.htm --------- 5082 
27/10/2009 12:28      C:\DOCUME~1\adm\CONFIG~1\Temp\JYLUHLO9.emf --------- 336 
27/10/2009 12:28      C:\DOCUME~1\adm\CONFIG~1\Temp\L1T9RYV3.htm --------- 732 
27/10/2009 12:28      C:\DOCUME~1\adm\CONFIG~1\Temp\O3Q15JQ1.htm --------- 664 
27/10/2009 12:28      C:\DOCUME~1\adm\CONFIG~1\Temp\I22MPUIT.emf --------- 81368 
27/10/2009 12:28      C:\DOCUME~1\adm\CONFIG~1\Temp\A3MZIYG6.htm --------- 6344 
27/10/2009 12:28      C:\DOCUME~1\adm\CONFIG~1\Temp\0GN1TIDR.htm --------- 9448 
27/10/2009 12:28      C:\DOCUME~1\adm\CONFIG~1\Temp\56YLQR6V.htm --------- 3432 
27/10/2009 12:28      C:\DOCUME~1\adm\CONFIG~1\Temp\BBX1FHV1.emf --------- 196928 
27/10/2009 12:28      C:\DOCUME~1\adm\CONFIG~1\Temp\JWJFY5DK.htm --------- 2354 
27/10/2009 12:28      C:\DOCUME~1\adm\CONFIG~1\Temp\TD8AYG4V.htm --------- 732 
27/10/2009 12:28      C:\DOCUME~1\adm\CONFIG~1\Temp\ZAZGTJLC.htm --------- 732 
27/10/2009 12:28      C:\DOCUME~1\adm\CONFIG~1\Temp\59X2NK9T.htm --------- 29581 
27/10/2009 12:28      C:\DOCUME~1\adm\CONFIG~1\Temp\HPLocal --------- 0 
27/10/2009 08:27      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR9.tmp --------- 1285 
27/10/2009 08:27      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR6.tmp --------- 1342 
27/10/2009 02:04      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR5.tmp --------- 1285 
27/10/2009 02:04      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR4.tmp --------- 1342 
26/10/2009 20:30      C:\DOCUME~1\adm\CONFIG~1\Temp\~DI7D.tmp --------- 0 
26/10/2009 20:29      C:\DOCUME~1\adm\CONFIG~1\Temp\~DI7C.tmp --------- 0 
26/10/2009 18:13      C:\DOCUME~1\adm\CONFIG~1\Temp\setup0001.log --------- 4665 
26/10/2009 18:12      C:\DOCUME~1\adm\CONFIG~1\Temp\HPZstu003.log --------- 3119 
26/10/2009 18:12      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzset015.log --------- 4439 
26/10/2009 18:12      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzpsl000.log --------- 7427 
26/10/2009 18:12      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzrcn000.log --------- 1873 
26/10/2009 18:00      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzstu002.log --------- 3005 
26/10/2009 18:00      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzset014.log --------- 5070 
26/10/2009 18:00      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzwrp002.log --------- 2067 
26/10/2009 18:00      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzcdl004.log --------- 2640 
26/10/2009 18:00      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzmsi018.log --------- 2030 
26/10/2009 18:00      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzcdl003.log --------- 2654 
26/10/2009 18:00      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzmsi017.log --------- 2977 
26/10/2009 18:00      C:\DOCUME~1\adm\CONFIG~1\Temp\hpz_MSI.D4300_Help_install.log --------- 190 
26/10/2009 18:00      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzcdl002.log --------- 2639 
26/10/2009 18:00      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzmsi016.log --------- 3136 
26/10/2009 18:00      C:\DOCUME~1\adm\CONFIG~1\Temp\hpz_MSI.D4300_install.log --------- 174 
26/10/2009 18:00      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR8.tmp --------- 1285 
26/10/2009 18:00      C:\DOCUME~1\adm\CONFIG~1\Temp\MAR7.tmp --------- 1342 
26/10/2009 17:56      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzstu000.log --------- 2008 
26/10/2009 17:56      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzset006.log --------- 32724 
26/10/2009 17:55      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzrcv007.log --------- 1868 
26/10/2009 17:55      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzmsi015.log --------- 1752 
26/10/2009 17:55      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzfwx000.log --------- 3577 
26/10/2009 17:55      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzpnp005.log --------- 2798 
26/10/2009 17:55      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzdui003.log --------- 2100 
26/10/2009 17:55      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzpnp004.log --------- 2798 
26/10/2009 17:55      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzset013.log --------- 1802 
26/10/2009 17:55      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzarp009.log --------- 2355 
26/10/2009 17:55      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzprl017.log --------- 2223 
26/10/2009 17:55      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzmsi014.log --------- 5765 
26/10/2009 17:55      C:\DOCUME~1\adm\CONFIG~1\Temp\hphvideotoolkit01.log --------- 190 
26/10/2009 17:55      C:\DOCUME~1\adm\CONFIG~1\Temp\hphHPPhotosmartEssential.log --------- 284 
26/10/2009 17:55      C:\DOCUME~1\adm\CONFIG~1\Temp\hphPSSWCore.log --------- 284 
26/10/2009 17:54      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzmsi013.log --------- 2658 
26/10/2009 17:54      C:\DOCUME~1\adm\CONFIG~1\Temp\hphMSI_HPUpdate.log --------- 174 
26/10/2009 17:54      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzset012.log --------- 1802 
26/10/2009 17:54      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzarp008.log --------- 2274 
26/10/2009 17:54      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzprl016.log --------- 2142 
26/10/2009 17:54      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzmsi012.log --------- 3063 
26/10/2009 17:54      C:\DOCUME~1\adm\CONFIG~1\Temp\hphDTSS.log --------- 190 
26/10/2009 17:54      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzset011.log --------- 1802 
26/10/2009 17:54      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzarp007.log --------- 2314 
26/10/2009 17:54      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzprl015.log --------- 2193 
26/10/2009 17:54      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzmsi011.log --------- 3150 
26/10/2009 17:54      C:\DOCUME~1\adm\CONFIG~1\Temp\hphWebPrint.log --------- 190 
26/10/2009 17:54      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzset010.log --------- 1802 
26/10/2009 17:54      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzarp006.log --------- 2352 
26/10/2009 17:54      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzprl014.log --------- 2219 
26/10/2009 17:54      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzmsi010.log --------- 3953 
26/10/2009 17:54      C:\DOCUME~1\adm\CONFIG~1\Temp\hphMSI_Mars.log --------- 190 
26/10/2009 17:54      C:\DOCUME~1\adm\CONFIG~1\Temp\MsiExe000.log --------- 58 
26/10/2009 17:54      C:\DOCUME~1\adm\CONFIG~1\Temp\hphMSI_CustomerResearchQFolder.log --------- 472 
26/10/2009 17:53      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzset009.log --------- 1802 
26/10/2009 17:53      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzarp005.log --------- 2357 
26/10/2009 17:53      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzprl013.log --------- 2223 
26/10/2009 17:53      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzmsi009.log --------- 2216 
26/10/2009 17:53      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzmsi008.log --------- 6929 
26/10/2009 17:53      C:\DOCUME~1\adm\CONFIG~1\Temp\hphMSI_DeviceDiscovery.log --------- 190 
26/10/2009 17:53      C:\DOCUME~1\adm\CONFIG~1\Temp\hphMSI_Status.log --------- 472 
26/10/2009 17:53      C:\DOCUME~1\adm\CONFIG~1\Temp\hphMSI_TrayApp.log --------- 284 
26/10/2009 17:53      C:\DOCUME~1\adm\CONFIG~1\Temp\hphMSI_DeviceManagementQFolder.log --------- 472 
26/10/2009 17:53      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzset008.log --------- 1802 
26/10/2009 17:53      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzarp004.log --------- 2353 
26/10/2009 17:53      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzprl012.log --------- 2157 
26/10/2009 17:53      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzmsi007.log --------- 7740 
26/10/2009 17:53      C:\DOCUME~1\adm\CONFIG~1\Temp\hphMSI_GPBaseService.log --------- 190 
26/10/2009 17:53      C:\DOCUME~1\adm\CONFIG~1\Temp\hphMSI_SolutionCenter.log --------- 774 
26/10/2009 17:52      C:\DOCUME~1\adm\CONFIG~1\Temp\hphMSI_hpproductassistant.log --------- 284 
26/10/2009 17:52      C:\DOCUME~1\adm\CONFIG~1\Temp\hphMSI_eSupportQFolder.log --------- 472 
26/10/2009 17:52      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzrcv006.log --------- 2346 
26/10/2009 17:52      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzrcv005.log --------- 1868 
26/10/2009 17:52      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzset007.log --------- 1802 
26/10/2009 17:52      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzmsi006.log --------- 2448 
26/10/2009 17:52      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzmsi005.log --------- 8855 
26/10/2009 17:52      C:\DOCUME~1\adm\CONFIG~1\Temp\hphMSI_DJ_SF_03_D4300_software_min.log --------- 190 
26/10/2009 17:52      C:\DOCUME~1\adm\CONFIG~1\Temp\hphMSI_DJ_SF_03_D4300_software.log --------- 284 
26/10/2009 17:51      C:\DOCUME~1\adm\CONFIG~1\Temp\hphUnloadSupport.log --------- 284 
26/10/2009 17:51      C:\DOCUME~1\adm\CONFIG~1\Temp\hphMSI_BufferChm.log --------- 284 
26/10/2009 17:51      C:\DOCUME~1\adm\CONFIG~1\Temp\hphMSI_Toolbox.log --------- 284 
26/10/2009 17:51      C:\DOCUME~1\adm\CONFIG~1\Temp\hphMSI_WebReg.log --------- 284 
26/10/2009 17:51      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzprl011.log --------- 2281 
26/10/2009 17:51      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzprl010.log --------- 1893 
26/10/2009 17:51      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzarp003.log --------- 2457 
26/10/2009 17:51      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzcdl001.log --------- 1825 
26/10/2009 17:51      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzshl004.log --------- 1862 
26/10/2009 17:51      C:\DOCUME~1\adm\CONFIG~1\Temp\hpznop004.log --------- 1452 
26/10/2009 17:50      C:\DOCUME~1\adm\CONFIG~1\Temp\hpznop003.log --------- 1450 
26/10/2009 17:50      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzprl009.log --------- 1898 
26/10/2009 17:50      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzprl008.log --------- 2249 
26/10/2009 17:50      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzprl007.log --------- 2289 
26/10/2009 17:50      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzrcv004.log --------- 2193 
26/10/2009 17:50      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzprl006.log --------- 1913 
26/10/2009 17:50      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzshl003.log --------- 142536 
26/10/2009 17:50      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzwrp001.log --------- 1589 
26/10/2009 17:50      C:\DOCUME~1\adm\CONFIG~1\Temp\hpxpschk000.log --------- 2543 
26/10/2009 17:50      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzsui000.log --------- 1933 
26/10/2009 17:50      C:\DOCUME~1\adm\CONFIG~1\Temp\hpqbhp000.log --------- 1473 
26/10/2009 17:50      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzpsc009.log --------- 1917 
26/10/2009 17:50      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzopt000.log --------- 1947 
26/10/2009 17:50      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzchk001.log --------- 8114 
26/10/2009 17:49      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzshl002.log --------- 1786 
26/10/2009 17:49      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzwup000.log --------- 3473 
26/10/2009 17:49      C:\DOCUME~1\adm\CONFIG~1\Temp\hpznop002.log --------- 1811 
26/10/2009 17:49      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzrei003.log --------- 2556 
26/10/2009 17:49      C:\DOCUME~1\adm\CONFIG~1\Temp\HPZIDS000.log --------- 10646 
26/10/2009 17:49      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzstu001.log --------- 1580 
26/10/2009 17:49      C:\DOCUME~1\adm\CONFIG~1\Temp\rundll000.log --------- 622 
26/10/2009 17:43      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzshl001.log --------- 2173 
26/10/2009 17:43      C:\DOCUME~1\adm\CONFIG~1\Temp\hpznop001.log --------- 1665 
26/10/2009 17:43      C:\DOCUME~1\adm\CONFIG~1\Temp\hpznop000.log --------- 1650 
26/10/2009 17:43      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzwrp000.log --------- 1622 
26/10/2009 17:43      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzpsc008.log --------- 2013 
26/10/2009 17:43      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzpnp003.log --------- 1344 
26/10/2009 17:42      C:\DOCUME~1\adm\CONFIG~1\Temp\setup0000.log --------- 4270 
23/10/2009 12:53      C:\DOCUME~1\adm\CONFIG~1\Temp\gsa1E.tmp --------- 0 
21/10/2009 18:22      C:\DOCUME~1\adm\CONFIG~1\Temp\TFRDE.tmp --------- 84343 
21/10/2009 18:22      C:\DOCUME~1\adm\CONFIG~1\Temp\TFRDB.tmp --------- 40950 
21/10/2009 18:22      C:\DOCUME~1\adm\CONFIG~1\Temp\TFRD6.tmp --------- 37885 
21/10/2009 18:22      C:\DOCUME~1\adm\CONFIG~1\Temp\TFRD3.tmp --------- 23262 
21/10/2009 18:22      C:\DOCUME~1\adm\CONFIG~1\Temp\TFRCB.tmp --------- 62753 
21/10/2009 18:22      C:\DOCUME~1\adm\CONFIG~1\Temp\TFRC2.tmp --------- 67994 
21/10/2009 18:22      C:\DOCUME~1\adm\CONFIG~1\Temp\TFRC0.tmp --------- 67560 
21/10/2009 18:22      C:\DOCUME~1\adm\CONFIG~1\Temp\TFRBE.tmp --------- 46021 
19/10/2009 20:01      C:\DOCUME~1\adm\CONFIG~1\Temp\rht1A2.tmp --------- 0 
19/10/2009 18:01      C:\DOCUME~1\adm\CONFIG~1\Temp\bc316F.tmp --------- 0 
18/10/2009 14:13      C:\DOCUME~1\adm\CONFIG~1\Temp\{E83A66EB-F961-4DD5-B14A-D9326ABA9C41} --------- 0 
18/10/2009 00:44      C:\DOCUME~1\adm\CONFIG~1\Temp\BIT8.tmp --------- 0 
13/10/2009 17:00      C:\DOCUME~1\adm\CONFIG~1\Temp\Xl0000002.xls --------- 84480 
13/10/2009 16:51      C:\DOCUME~1\adm\CONFIG~1\Temp\Xl0000001.xls --------- 84480 
13/10/2009 16:37      C:\DOCUME~1\adm\CONFIG~1\Temp\Xl0000000.xls --------- 84480 
08/10/2009 19:36      C:\DOCUME~1\adm\CONFIG~1\Temp\BIT7.tmp --------- 0 
08/10/2009 10:29      C:\DOCUME~1\adm\CONFIG~1\Temp\etilqs_0FD5BF1seDTgEtABajf4-journal --------- 1544 
08/10/2009 09:49      C:\DOCUME~1\adm\CONFIG~1\Temp\etilqs_0FD5BF1seDTgEtABajf4 --------- 4096 
08/10/2009 09:48      C:\DOCUME~1\adm\CONFIG~1\Temp\etilqs_V9XX6v9Y3RBeT9ohN8Mh --------- 0 
06/10/2009 17:40      C:\DOCUME~1\adm\CONFIG~1\Temp\AUTORIZA€ÇO BOSQUE DOS POETAS.jpg --------- 351836 
01/10/2009 20:51      C:\DOCUME~1\adm\CONFIG~1\Temp\etilqs_ufJ4WAsVAOVZ58ohEVMf --------- 0 
24/09/2009 14:39      C:\DOCUME~1\adm\CONFIG~1\Temp\etilqs_GiGXvi0NXQXYwtFV7dzm --------- 0 
23/09/2009 12:24      C:\DOCUME~1\adm\CONFIG~1\Temp\etilqs_Si1hqbxUIAh43ygs4Czc --------- 0 
07/09/2009 11:31      C:\DOCUME~1\adm\CONFIG~1\Temp\BBB-2009.pps --------- 286208 
07/09/2009 11:29      C:\DOCUME~1\adm\CONFIG~1\Temp\DANIEL-Compra&Venda- Contract #3.pdf --------- 1664590 
07/09/2009 11:25      C:\DOCUME~1\adm\CONFIG~1\Temp\Compra e Venda - Contract Copy #1.doc --------- 75776 
06/09/2009 15:25      C:\DOCUME~1\adm\CONFIG~1\Temp\etilqs_7AeFmlZR5RFcRt5BpXEx --------- 0 
12/08/2009 13:57      C:\DOCUME~1\adm\CONFIG~1\Temp\wlsetup-cvr.exe --------- 36452192 
03/08/2009 19:11      C:\DOCUME~1\adm\CONFIG~1\Temp\DW214.tmp --------- 28672 
03/08/2009 19:11      C:\DOCUME~1\adm\CONFIG~1\Temp\DW210.tmp --------- 49152 
03/08/2009 18:14      C:\DOCUME~1\adm\CONFIG~1\Temp\DW29.tmp --------- 28672 
03/08/2009 18:14      C:\DOCUME~1\adm\CONFIG~1\Temp\DW27.tmp --------- 49152 
03/08/2009 18:09      C:\DOCUME~1\adm\CONFIG~1\Temp\DW26F.tmp --------- 28672 
03/08/2009 18:09      C:\DOCUME~1\adm\CONFIG~1\Temp\DW26B.tmp --------- 49152 
03/08/2009 18:08      C:\DOCUME~1\adm\CONFIG~1\Temp\etilqs_4Vcweks4dR3eaRRllKDj --------- 0 
02/08/2009 23:30      C:\DOCUME~1\adm\CONFIG~1\Temp\DW292.tmp --------- 28672 
02/08/2009 23:30      C:\DOCUME~1\adm\CONFIG~1\Temp\DW290.tmp --------- 49152 
02/08/2009 20:44      C:\DOCUME~1\adm\CONFIG~1\Temp\DW267.tmp --------- 28672 
02/08/2009 20:44      C:\DOCUME~1\adm\CONFIG~1\Temp\DW265.tmp --------- 49152 
01/08/2009 05:18      C:\DOCUME~1\adm\CONFIG~1\Temp\DW2179.tmp --------- 28672 
01/08/2009 05:18      C:\DOCUME~1\adm\CONFIG~1\Temp\DW2177.tmp --------- 49152 
31/07/2009 18:19      C:\DOCUME~1\adm\CONFIG~1\Temp\DW2A3.tmp --------- 28672 
31/07/2009 18:19      C:\DOCUME~1\adm\CONFIG~1\Temp\DW2A0.tmp --------- 49152 
31/07/2009 03:39      C:\DOCUME~1\adm\CONFIG~1\Temp\DW2E7.tmp --------- 28672 
31/07/2009 03:39      C:\DOCUME~1\adm\CONFIG~1\Temp\DW2E5.tmp --------- 49152 
31/07/2009 00:16      C:\DOCUME~1\adm\CONFIG~1\Temp\DW2AA.tmp --------- 28672 
31/07/2009 00:16      C:\DOCUME~1\adm\CONFIG~1\Temp\DW2A8.tmp --------- 49152 
30/07/2009 21:24      C:\DOCUME~1\adm\CONFIG~1\Temp\DW277.tmp --------- 28672 
30/07/2009 21:24      C:\DOCUME~1\adm\CONFIG~1\Temp\DW273.tmp --------- 49152 
30/07/2009 21:24      C:\DOCUME~1\adm\CONFIG~1\Temp\DW26E.tmp --------- 28672 
30/07/2009 21:24      C:\DOCUME~1\adm\CONFIG~1\Temp\DW26C.tmp --------- 49152 
30/07/2009 17:22      C:\DOCUME~1\adm\CONFIG~1\Temp\DW28A.tmp --------- 28672 
30/07/2009 17:22      C:\DOCUME~1\adm\CONFIG~1\Temp\DW288.tmp --------- 49152 
30/07/2009 02:38      C:\DOCUME~1\adm\CONFIG~1\Temp\DW2D7.tmp --------- 28672 
30/07/2009 02:38      C:\DOCUME~1\adm\CONFIG~1\Temp\DW2D5.tmp --------- 49152 
29/07/2009 18:42      C:\DOCUME~1\adm\CONFIG~1\Temp\DW233.tmp --------- 28672 
29/07/2009 18:42      C:\DOCUME~1\adm\CONFIG~1\Temp\DW231.tmp --------- 49152 
29/07/2009 01:39      C:\DOCUME~1\adm\CONFIG~1\Temp\DW2DA.tmp --------- 28672 
29/07/2009 01:39      C:\DOCUME~1\adm\CONFIG~1\Temp\DW2D8.tmp --------- 49152 
29/07/2009 01:39      C:\DOCUME~1\adm\CONFIG~1\Temp\DW2D3.tmp --------- 28672 
29/07/2009 01:39      C:\DOCUME~1\adm\CONFIG~1\Temp\DW2CF.tmp --------- 49152 
28/07/2009 19:25      C:\DOCUME~1\adm\CONFIG~1\Temp\DW2D2.tmp --------- 28672 
28/07/2009 19:25      C:\DOCUME~1\adm\CONFIG~1\Temp\DW2D0.tmp --------- 49152 
28/07/2009 17:08      C:\DOCUME~1\adm\CONFIG~1\Temp\DW2A1.tmp --------- 28672 
28/07/2009 17:08      C:\DOCUME~1\adm\CONFIG~1\Temp\DW29F.tmp --------- 49152 
28/07/2009 17:08      C:\DOCUME~1\adm\CONFIG~1\Temp\DW29A.tmp --------- 28672 
28/07/2009 17:08      C:\DOCUME~1\adm\CONFIG~1\Temp\DW298.tmp --------- 49152 
28/07/2009 04:20      C:\DOCUME~1\adm\CONFIG~1\Temp\DW2100.tmp --------- 28672 
28/07/2009 04:20      C:\DOCUME~1\adm\CONFIG~1\Temp\DW2FE.tmp --------- 49152 
28/07/2009 03:03      C:\DOCUME~1\adm\CONFIG~1\Temp\DW2F9.tmp --------- 28672 
28/07/2009 03:03      C:\DOCUME~1\adm\CONFIG~1\Temp\DW2F7.tmp --------- 49152 
27/07/2009 21:32      C:\DOCUME~1\adm\CONFIG~1\Temp\DW2B9.tmp --------- 28672 
27/07/2009 21:32      C:\DOCUME~1\adm\CONFIG~1\Temp\DW2B7.tmp --------- 49152 
27/07/2009 18:26      C:\DOCUME~1\adm\CONFIG~1\Temp\DW25F.tmp --------- 28672 
27/07/2009 18:26      C:\DOCUME~1\adm\CONFIG~1\Temp\DW25D.tmp --------- 49152 
27/07/2009 18:25      C:\DOCUME~1\adm\CONFIG~1\Temp\DW258.tmp --------- 28672 
27/07/2009 18:25      C:\DOCUME~1\adm\CONFIG~1\Temp\DW256.tmp --------- 49152 
27/07/2009 04:35      C:\DOCUME~1\adm\CONFIG~1\Temp\DW21A0.tmp --------- 28672 
27/07/2009 04:35      C:\DOCUME~1\adm\CONFIG~1\Temp\DW219E.tmp --------- 49152 
26/07/2009 23:19      C:\DOCUME~1\adm\CONFIG~1\Temp\DW2F4.tmp --------- 28672 
26/07/2009 23:19      C:\DOCUME~1\adm\CONFIG~1\Temp\DW2F2.tmp --------- 49152 
26/07/2009 08:53      C:\DOCUME~1\adm\CONFIG~1\Temp\DW212B.tmp --------- 28672 
26/07/2009 08:53      C:\DOCUME~1\adm\CONFIG~1\Temp\DW2129.tmp --------- 49152 
24/07/2009 12:56      C:\DOCUME~1\adm\CONFIG~1\Temp\DW23D.tmp --------- 28672 
24/07/2009 12:56      C:\DOCUME~1\adm\CONFIG~1\Temp\DW23B.tmp --------- 49152 
24/07/2009 12:56      C:\DOCUME~1\adm\CONFIG~1\Temp\DW236.tmp --------- 28672 
24/07/2009 12:56      C:\DOCUME~1\adm\CONFIG~1\Temp\DW234.tmp --------- 49152 
23/07/2009 17:13      C:\DOCUME~1\adm\CONFIG~1\Temp\DW213.tmp --------- 28672 
23/07/2009 17:13      C:\DOCUME~1\adm\CONFIG~1\Temp\DW211.tmp --------- 49152 
23/07/2009 17:12      C:\DOCUME~1\adm\CONFIG~1\Temp\DW2C.tmp --------- 28672 
23/07/2009 17:12      C:\DOCUME~1\adm\CONFIG~1\Temp\DW2A.tmp --------- 49152 
20/07/2009 15:00      C:\DOCUME~1\adm\CONFIG~1\Temp\_µreas.ppt --------- 2127872 
19/07/2009 21:54      C:\DOCUME~1\adm\CONFIG~1\Temp\DW276.tmp --------- 28672 
19/07/2009 21:54      C:\DOCUME~1\adm\CONFIG~1\Temp\DW274.tmp --------- 49152 
01/07/2009 14:27      C:\DOCUME~1\adm\CONFIG~1\Temp\etilqs_NwXs5NIHdMpYcENoJL4q --------- 516 
01/07/2009 14:27      C:\DOCUME~1\adm\CONFIG~1\Temp\etilqs_L3uxM1ezwZKiti194R7E --------- 0 
01/07/2009 12:32      C:\DOCUME~1\adm\CONFIG~1\Temp\Curr¡culo.doc --------- 36864 
01/07/2009 12:02      C:\DOCUME~1\adm\CONFIG~1\Temp\etilqs_P7QeMSmUe5LcUwidf0nK --------- 28700 
10/06/2009 15:34      C:\DOCUME~1\adm\CONFIG~1\Temp\etilqs_qI10kSkyBgw2ESO3qe0e --------- 12304 
31/05/2009 09:06      C:\DOCUME~1\adm\CONFIG~1\Temp\o_carro_dos_seus_sonhos.ppt valmir.pps --------- 2050048 
31/05/2009 09:04      C:\DOCUME~1\adm\CONFIG~1\Temp\OhomemEoAVIAO.pps --------- 632320 
13/05/2009 09:27      C:\DOCUME~1\adm\CONFIG~1\Temp\_Gr fico.docx --------- 42895 
08/05/2009 10:12      C:\DOCUME~1\adm\CONFIG~1\Temp\EDIR MACEDO.wmv --------- 1302685 
08/05/2009 10:12      C:\DOCUME~1\adm\CONFIG~1\Temp\_C¢pia.xls --------- 39424 
05/05/2009 14:38      C:\DOCUME~1\adm\CONFIG~1\Temp\Mapa zpa-2-1.doc --------- 1331200 
05/05/2009 14:38      C:\DOCUME~1\adm\CONFIG~1\Temp\Mapa zpa-2.doc --------- 1331200 
05/05/2009 14:37      C:\DOCUME~1\adm\CONFIG~1\Temp\_µreas-1.doc --------- 20480 
05/05/2009 14:36      C:\DOCUME~1\adm\CONFIG~1\Temp\Mapa45-Macrozoneamento_e_ZPA-2.pdf --------- 165963 
05/05/2009 14:35      C:\DOCUME~1\adm\CONFIG~1\Temp\_µreas.doc --------- 20480 
01/05/2009 23:48      C:\DOCUME~1\adm\CONFIG~1\Temp\C¢digo Ambiental do Munic¡pio.doc --------- 311296 
01/05/2009 23:04      C:\DOCUME~1\adm\CONFIG~1\Temp\Takahashi Kyokutyo.pdf --------- 96183 
28/04/2009 12:41      C:\DOCUME~1\adm\CONFIG~1\Temp\etilqs_wjWYEuetGswJRYuqH2U7-journal --------- 1544 
28/04/2009 12:41      C:\DOCUME~1\adm\CONFIG~1\Temp\etilqs_wjWYEuetGswJRYuqH2U7 --------- 0 
28/04/2009 12:22      C:\DOCUME~1\adm\CONFIG~1\Temp\etilqs_s59tuLih7bRAFlUg86zZ --------- 28700 
21/04/2009 15:14      C:\DOCUME~1\adm\CONFIG~1\Temp\Backup.pdf --------- 354973 
15/04/2009 14:08      C:\DOCUME~1\adm\CONFIG~1\Temp\FOTOS RPPN 6.rar --------- 6957212 
15/04/2009 13:55      C:\DOCUME~1\adm\CONFIG~1\Temp\FOTOS RPPN 7.rar --------- 4154701 
15/04/2009 13:48      C:\DOCUME~1\adm\CONFIG~1\Temp\FOTOS RPPN 5.rar --------- 7067135 
15/04/2009 13:41      C:\DOCUME~1\adm\CONFIG~1\Temp\FOTOS RPPN 4.rar --------- 7131479 
15/04/2009 13:37      C:\DOCUME~1\adm\CONFIG~1\Temp\02 - Recursos Econ“micos.bf.doc --------- 75264 
15/04/2009 13:05      C:\DOCUME~1\adm\CONFIG~1\Temp\03 - Com‚rcio e Servi‡os.bf.doc --------- 51200 
15/04/2009 12:55      C:\DOCUME~1\adm\CONFIG~1\Temp\FOTOS RPPN 3.rar --------- 7181696 
15/04/2009 12:48      C:\DOCUME~1\adm\CONFIG~1\Temp\07 - Informa‡äes S¢cioculturais.bf.doc --------- 46080 
15/04/2009 12:48      C:\DOCUME~1\adm\CONFIG~1\Temp\etilqs_DAHK934Bh07lfsjX4pTb --------- 28704 
15/04/2009 12:20      C:\DOCUME~1\adm\CONFIG~1\Temp\FOTOS RPPN 2.rar --------- 7303781 
15/04/2009 12:11      C:\DOCUME~1\adm\CONFIG~1\Temp\etilqs_0rXXFBq3xfpzjVxHmmCu --------- 16400 
15/04/2009 12:11      C:\DOCUME~1\adm\CONFIG~1\Temp\etilqs_r862IkoR69fLgGB7lLLC --------- 4100 
15/04/2009 11:59      C:\DOCUME~1\adm\CONFIG~1\Temp\FOTOS RPPN 1.rar --------- 6906347 
11/04/2009 12:13      C:\DOCUME~1\adm\CONFIG~1\Temp\etilqs_A1TPfqGZGqTGwgJ3kdU9 --------- 28704 
02/04/2009 15:31      C:\DOCUME~1\adm\CONFIG~1\Temp\Digitalizar0001.jpg --------- 1037335 
01/04/2009 15:22      C:\DOCUME~1\adm\CONFIG~1\Temp\etilqs_M81MKbgg1bvRxL7I3xbx --------- 32800 
26/03/2009 06:55      C:\DOCUME~1\adm\CONFIG~1\Temp\DSC06665.JPG --------- 2376546 
09/03/2009 21:04      C:\DOCUME~1\adm\CONFIG~1\Temp\SUBSTABELECIMENTO.doc --------- 59392 
09/03/2009 20:45      C:\DOCUME~1\adm\CONFIG~1\Temp\image001.gif --------- 13145 
09/03/2009 18:30      C:\DOCUME~1\adm\CONFIG~1\Temp\~B3.tmp --------- 243712 
09/03/2009 18:29      C:\DOCUME~1\adm\CONFIG~1\Temp\etilqs_VyEoFQOeR9VW5gVQYICs --------- 36900 
09/03/2009 00:35      C:\DOCUME~1\adm\CONFIG~1\Temp\~C.tmp --------- 243712 
08/03/2009 17:45      C:\DOCUME~1\adm\CONFIG~1\Temp\animal.ppt --------- 53760 
08/03/2009 16:51      C:\DOCUME~1\adm\CONFIG~1\Temp\MOMENTO SAUDE d2810.mp3 --------- 15219464 
08/03/2009 08:41      C:\DOCUME~1\adm\CONFIG~1\Temp\BeQuiet.wmv --------- 4489135 
08/03/2009 08:12      C:\DOCUME~1\adm\CONFIG~1\Temp\pesquisas em animais-2.docx --------- 12352 
08/03/2009 08:11      C:\DOCUME~1\adm\CONFIG~1\Temp\pesquisas em animais-1.docx --------- 12352 
08/03/2009 08:03      C:\DOCUME~1\adm\CONFIG~1\Temp\EXPERIENCIA COM ANIMAIS.doc --------- 31232 
08/03/2009 08:01      C:\DOCUME~1\adm\CONFIG~1\Temp\pesquisas em animais.docx --------- 12352 
08/03/2009 05:50      C:\DOCUME~1\adm\CONFIG~1\Temp\~19E.tmp --------- 243712 
08/03/2009 05:46      C:\DOCUME~1\adm\CONFIG~1\Temp\~198.tmp --------- 243712 
07/03/2009 17:01      C:\DOCUME~1\adm\CONFIG~1\Temp\~20.tmp --------- 243712 
04/03/2009 20:08      C:\DOCUME~1\adm\CONFIG~1\Temp\Portuguese(Brazil).bin --------- 25082 
06/03/2008 15:00      C:\DOCUME~1\adm\CONFIG~1\Temp\_is33.exe --------- 459400 
19/10/2007 18:46      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzPT5mu.hlp --------- 37788 
19/10/2007 18:46      C:\DOCUME~1\adm\CONFIG~1\Temp\hpzPT5mu.chm --------- 195864 
13/11/2005 21:24      C:\DOCUME~1\adm\CONFIG~1\Temp\Set351.tmp --------- 121064 
15/07/2005 12:19      C:\DOCUME~1\adm\CONFIG~1\Temp\_isE2.tmp --------- 253952 
15/07/2005 12:19      C:\DOCUME~1\adm\CONFIG~1\Temp\_isD7.tmp --------- 253952 
22/10/2004 08:16      C:\DOCUME~1\adm\CONFIG~1\Temp\set168.tmp --------- 118736 
08/12/2003 11:01      C:\DOCUME~1\adm\CONFIG~1\Temp\43gcjvgahnu44.ths --------- 487424 
----------------------------------------


C:\Arquivos de programas

----------------------------------------


C:\Documents and Settings\All Users\.. 

adm    
LocalService    
Default User    
NetworkService    
All Users    
----------------------------------------


C:\WINDOWS\system32\drivers\etc\hosts

127.0.0.1       localhost

----------------------------------------



Nome da imagem            Identi Nome da sessÆo    SessÆo# Uso de mem¢r
========================= ====== ================ ======== ============
System Idle Process            0 Console                 0         28 K
System                         4 Console                 0     84.348 K
smss.exe                     656 Console                 0        408 K
csrss.exe                    716 Console                 0      4.684 K
winlogon.exe                 740 Console                 0      4.348 K
services.exe                 784 Console                 0      7.100 K
lsass.exe                    796 Console                 0      1.712 K
nvsvc32.exe                  968 Console                 0      4.752 K
svchost.exe                 1000 Console                 0      4.716 K
svchost.exe                 1072 Console                 0      3.696 K
svchost.exe                 1168 Console                 0     24.908 K
svchost.exe                 1256 Console                 0      2.552 K
svchost.exe                 1336 Console                 0      6.644 K
spoolsv.exe                 1468 Console                 0      5.572 K
explorer.exe                1776 Console                 0     34.248 K
RTHDCPL.EXE                 1856 Console                 0     22.168 K
avgtray.exe                 1888 Console                 0      3.508 K
iTunesHelper.exe            1924 Console                 0      8.496 K
rundll32.exe                1972 Console                 0      4.012 K
jusched.exe                 1992 Console                 0      3.628 K
hpwuSchd2.exe               2008 Console                 0      1.964 K
av_md.exe                    132 Console                 0      1.384 K
ctfmon.exe                   180 Console                 0      3.028 K
NMBgMonitor.exe              200 Console                 0      6.524 K
msnmsgr.exe                  264 Console                 0     10.728 K
NMIndexStoreSvr.exe          476 Console                 0     21.420 K
Steam.exe                    420 Console                 0     31.856 K
daemon.exe                   708 Console                 0      8.932 K
hpqtra08.exe                1820 Console                 0     10.120 K
svchost.exe                  948 Console                 0      3.364 K
AppleMobileDeviceService.   1904 Console                 0      2.552 K
avgwdsvc.exe                1724 Console                 0      2.188 K
mDNSResponder.exe            532 Console                 0      3.484 K
svchost.exe                 1032 Console                 0      7.676 K
jqs.exe                     1160 Console                 0      1.380 K
mdm.exe                     1328 Console                 0      2.916 K
PnkBstrA.exe                 636 Console                 0      2.380 K
PnkBstrB.exe                 484 Console                 0      2.568 K
avgrsx.exe                   684 Console                 0     11.300 K
avgnsx.exe                   992 Console                 0      3.688 K
svchost.exe                 2372 Console                 0      3.916 K
wdfmgr.exe                  2460 Console                 0      1.688 K
winvnc4.exe                 2504 Console                 0      3.188 K
avgemc.exe                  2536 Console                 0        788 K
avgcsrvx.exe                2684 Console                 0      9.208 K
svchost.exe                 3048 Console                 0     11.728 K
svchost.exe                 3080 Console                 0      2.496 K
avgcsrvx.exe                3328 Console                 0      9.208 K
iPodService.exe             2088 Console                 0      3.976 K
alg.exe                     1548 Console                 0      3.456 K
hpqste08.exe                3616 Console                 0      6.844 K
hpqbam08.exe                3996 Console                 0      3.708 K
hpqgpc01.exe                4012 Console                 0      4.480 K
svchost.exe                  692 Console                 0      2.312 K
jucheck.exe                 4428 Console                 0      6.460 K
wlcomm.exe                  4940 Console                 0     43.112 K
firefox.exe                 6128 Console                 0     66.796 K
cmd.exe                     1744 Console                 0      2.116 K
tasklist.exe                2776 Console                 0      4.364 K
wmiprvse.exe                5032 Console                 0      5.620 K


***** Ende des Scans ter 08/12/2009 um 13:05:37,18 ***

wings · Dezembro 8, 2009

Boa tarde josé pimpolho

*Desative temporariamente seu antivírus

Iniciar > Programas > AVG
Abra a Interface do usuário do AVG

Clique duas vezes na Proteção Residente

Desmarque a opção "Proteção Residente ativa"

Salve as alterações

*Baixe o ComboFix e salve-o no desktop

*Duplo-clique no arquivo Combofix.exe

*Aceite o contrato

*Se o console de recuperação do Windows já estiver instalado, o ComboFix irá continuar o processo automaticamente. Caso não esteja uma janela, conforme abaixo, será aberta. Clique em [sIM] para aceitar a instalação do mesmo.

*Após a instalação, clique em [sIM] para continuar.

*Importante: enquanto o ComboFix estiver em execução, não use o mouse nem o teclado!!..... Para interromper o procedimento tecle N ou 2 e depois ENTER.

*O programa será fechado automaticamente

*Cole o relatório criado em C:\combofix.txt

Mário Monteiro · Janeiro 9, 2010

Tópico Arquivado

Como o autor não respondeu por mais de 30 dias, o tópico foi arquivado.

Caso você seja o autor do tópico e quer reabrir, envie uma mensagem privada para um moderador da área juntamente com o link para este tópico e explique o motivo da reabertura.

Arquivado

[Arquivado] Trojan no atapi.sys

Recommended Posts

josé pimpolho 0

Compartilhar este post

Link para o post

Compartilhar em outros sites

wings 22

Compartilhar este post

Link para o post

Compartilhar em outros sites

Fabricio78 0

Compartilhar este post

Link para o post

Compartilhar em outros sites

wings 22

Compartilhar este post

Link para o post

Compartilhar em outros sites

Fabricio78 0

Compartilhar este post

Link para o post

Compartilhar em outros sites

josé pimpolho 0

Compartilhar este post

Link para o post

Compartilhar em outros sites

wings 22

Compartilhar este post

Link para o post

Compartilhar em outros sites

josé pimpolho 0

Compartilhar este post

Link para o post

Compartilhar em outros sites

wings 22

Compartilhar este post

Link para o post

Compartilhar em outros sites

Mário Monteiro 179

Compartilhar este post

Link para o post

Compartilhar em outros sites

PHP+Codeigniter - Teclas para Salvar (atalho)

Javascript - Passar Parâmetros para uma Função.

Tem como JS executar/chamar um programa externo?

Fóruns

Tempo Real

Informação importante